Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/bf2430-32b0-493c-acbe-bebec2336d48/1/Kf49-nfrAgHIVtHh6_AyvMixJNg.mft
File: Kf49-nfrAgHIVtHh6_AyvMixJNg.mft (raw, json)
Hash identifier: +9sUXje1sH/DDXRojYeT9ny4W3O+UGRd6ZcBEu2U22k=
Subject key identifier: AB:AC:F3:11:7E:C1:67:71:AA:63:F4:9B:9A:FE:F6:1D:A3:62:40:56
Authority key identifier: 29:FE:3D:FA:77:EB:02:01:C8:56:D1:E1:EB:F0:32:BC:C8:B1:24:D8
Certificate issuer: /CN=29fe3dfa77eb0201c856d1e1ebf032bcc8b124d8
Certificate serial: 019F9436BB8AC65B4CE9734C26F96988B838
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Kf49-nfrAgHIVtHh6_AyvMixJNg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/bf2430-32b0-493c-acbe-bebec2336d48/1/Kf49-nfrAgHIVtHh6_AyvMixJNg.mft
Manifest number: 195A
Signing time: Fri 24 Jul 2026 13:00:42 +0000
Manifest this update: Fri 24 Jul 2026 13:00:42 +0000
Manifest next update: Sat 25 Jul 2026 13:00:42 +0000
Files and hashes: 1: Kf49-nfrAgHIVtHh6_AyvMixJNg.crl (hash: P2/qHg5awB0TbYElsQ1muSJ5jQgCUeRRpVKug2hbSV4=)
2: Y2m0fP5Z0mEZ1gZ9VvmpaGsDUNo.roa (hash: //uS9crBPxY81P375GDY9/pHivqDAms3WY1PpQ+GqaI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/bf2430-32b0-493c-acbe-bebec2336d48/1/Kf49-nfrAgHIVtHh6_AyvMixJNg.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/bf2430-32b0-493c-acbe-bebec2336d48/1/Kf49-nfrAgHIVtHh6_AyvMixJNg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Kf49-nfrAgHIVtHh6_AyvMixJNg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 13:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:36:bb:8a:c6:5b:4c:e9:73:4c:26:f9:69:88:b8:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29fe3dfa77eb0201c856d1e1ebf032bcc8b124d8
Validity
Not Before: Jul 24 13:00:42 2026 GMT
Not After : Jul 25 13:00:42 2026 GMT
Subject: CN=abacf3117ec16771aa63f49b9afef61da3624056
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:c3:9e:8b:d5:ac:da:1b:9b:0b:d9:c1:03:a0:
92:66:e2:15:2d:7a:d3:6d:f0:e5:21:10:4d:a7:df:
df:60:b0:45:f7:10:e6:5b:1b:9d:04:75:11:60:98:
d0:40:77:3f:08:d9:55:e8:98:30:d4:78:fe:2e:77:
6c:91:2e:67:6f:5a:c2:76:ae:14:be:c7:08:e6:dd:
16:12:ab:c4:55:5c:50:f0:c7:e1:57:c3:a8:bb:32:
72:06:57:98:b8:7a:5a:b9:a0:16:90:5f:98:a6:ee:
66:45:b0:bc:00:0c:e3:a7:89:86:96:0e:dc:38:cf:
9f:ba:e7:39:51:04:1d:5e:a8:4b:36:fc:34:65:41:
7a:f4:1d:24:9b:6b:b0:49:3f:d7:66:2b:04:e5:3a:
4d:9c:ee:e1:3a:71:4e:93:1e:e0:54:55:f1:fc:9c:
8f:24:82:2f:41:5a:72:a0:9b:3e:ec:72:e4:5a:b2:
e1:9d:18:c6:bc:e3:5a:ce:8e:89:95:54:e6:91:69:
16:91:a0:2e:bc:86:4e:ee:7a:64:fa:e2:82:dc:88:
f3:cb:ed:c4:1d:5e:74:b4:14:35:a7:87:94:1e:c8:
32:d5:e8:1e:bc:dd:66:78:18:04:e0:60:05:83:c5:
95:d2:d8:3f:27:91:bd:95:4e:5b:1d:46:7b:6d:ac:
13:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:AC:F3:11:7E:C1:67:71:AA:63:F4:9B:9A:FE:F6:1D:A3:62:40:56
X509v3 Authority Key Identifier:
keyid:29:FE:3D:FA:77:EB:02:01:C8:56:D1:E1:EB:F0:32:BC:C8:B1:24:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kf49-nfrAgHIVtHh6_AyvMixJNg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/bf2430-32b0-493c-acbe-bebec2336d48/1/Kf49-nfrAgHIVtHh6_AyvMixJNg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/bf2430-32b0-493c-acbe-bebec2336d48/1/Kf49-nfrAgHIVtHh6_AyvMixJNg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:1e:9a:9a:08:37:ce:8b:61:b4:02:f2:a7:5a:4c:22:4b:75:
b6:b1:c7:29:07:aa:99:cc:5f:b9:e2:e5:f8:fb:5b:61:56:1f:
64:fd:7a:50:b2:ad:cf:bc:cf:4a:76:6a:73:e2:b8:a4:cd:69:
90:ae:ec:be:f1:24:51:89:5b:c3:d8:e3:07:dc:06:38:0c:91:
bc:15:ce:de:76:ff:8b:f8:bd:09:4c:29:e8:96:06:23:c4:d5:
9a:d9:b7:f1:6d:c2:c4:54:67:3a:94:d4:14:22:df:27:0e:32:
a5:20:46:7f:be:6e:7f:74:db:ce:00:71:e4:17:d0:6f:6b:2f:
ae:0b:3f:c4:07:6e:0b:f1:35:9b:fc:a3:b5:d0:21:b3:d6:8b:
b6:43:bc:fc:ce:f7:8b:7b:5c:9b:b8:dd:d2:89:15:dd:3f:dd:
5e:8c:b7:b7:5c:01:a6:35:76:16:8c:ce:20:99:b9:18:cb:3f:
b9:47:94:2f:2f:0e:e4:20:b6:50:cc:94:ac:1b:dd:ed:9a:6f:
03:44:b8:ec:1f:6d:a8:01:86:2a:30:f7:9a:23:e5:b5:77:4b:
60:4a:41:67:fe:0d:07:b6:78:a2:d2:e1:29:ec:dc:6b:ab:f0:
50:ec:e7:3a:c3:82:a6:26:ed:88:6c:3b:ec:5b:b8:b4:1a:56:
82:d4:bb:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 20:11:49 2026 by rpki-client