Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/bf2430-32b0-493c-acbe-bebec2336d48/1/Kf49-nfrAgHIVtHh6_AyvMixJNg.mft
File: Kf49-nfrAgHIVtHh6_AyvMixJNg.mft (raw, json)
Hash identifier: fyoTufQ48th0udPOXHHiyXILFM7TAbmEl2eeWRD42bM=
Subject key identifier: AA:BD:C2:0F:36:5E:A0:34:A5:15:8C:BA:53:65:30:F5:1A:BB:77:7F
Authority key identifier: 29:FE:3D:FA:77:EB:02:01:C8:56:D1:E1:EB:F0:32:BC:C8:B1:24:D8
Certificate issuer: /CN=29fe3dfa77eb0201c856d1e1ebf032bcc8b124d8
Certificate serial: 019E1F7EC5D957825D964DA11DBAFF11D2AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Kf49-nfrAgHIVtHh6_AyvMixJNg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/bf2430-32b0-493c-acbe-bebec2336d48/1/Kf49-nfrAgHIVtHh6_AyvMixJNg.mft
Manifest number: 1899
Signing time: Wed 13 May 2026 04:01:02 +0000
Manifest this update: Wed 13 May 2026 04:01:02 +0000
Manifest next update: Thu 14 May 2026 04:01:02 +0000
Files and hashes: 1: Kf49-nfrAgHIVtHh6_AyvMixJNg.crl (hash: kyzKSaFtKeKFp2AwyF8B+YlMVywmNICMtOnqmgYnmVI=)
2: Y2m0fP5Z0mEZ1gZ9VvmpaGsDUNo.roa (hash: //uS9crBPxY81P375GDY9/pHivqDAms3WY1PpQ+GqaI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/bf2430-32b0-493c-acbe-bebec2336d48/1/Kf49-nfrAgHIVtHh6_AyvMixJNg.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/bf2430-32b0-493c-acbe-bebec2336d48/1/Kf49-nfrAgHIVtHh6_AyvMixJNg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Kf49-nfrAgHIVtHh6_AyvMixJNg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 04:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:7e:c5:d9:57:82:5d:96:4d:a1:1d:ba:ff:11:d2:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29fe3dfa77eb0201c856d1e1ebf032bcc8b124d8
Validity
Not Before: May 13 04:01:02 2026 GMT
Not After : May 14 04:01:02 2026 GMT
Subject: CN=aabdc20f365ea034a5158cba536530f51abb777f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:61:b6:ee:80:a7:b6:8b:84:f1:b1:4f:8c:1b:
9d:74:a8:ff:e3:9c:83:3c:6e:ad:cf:0e:04:11:90:
2e:bb:c5:39:67:fe:c4:b5:77:20:64:fc:d3:ca:10:
21:fe:eb:8e:0d:fb:04:78:5d:ed:96:27:a8:5c:bc:
3a:2e:5a:6d:0c:51:70:d5:b8:97:f5:7e:c4:49:eb:
34:35:be:3c:2c:09:ee:48:3b:15:c3:f0:7b:6e:43:
72:2c:47:77:8b:95:2a:1a:48:f4:ae:aa:92:7a:c5:
ca:c2:20:95:0e:55:46:90:91:b4:a0:2d:52:40:b8:
04:18:5d:fa:f3:f4:fa:a0:51:6a:f2:4e:1a:16:41:
a0:2b:4e:cb:d1:fe:c8:44:bb:2d:dc:03:06:02:52:
9f:99:ed:cd:5b:78:5a:a4:66:83:26:0b:b4:f1:e9:
86:57:33:ff:7f:e2:c5:aa:6e:5b:4c:b4:8e:54:a6:
2a:74:74:5a:d0:47:13:94:42:7a:80:e3:2c:63:4b:
24:8e:d2:c1:a5:ad:b4:6a:77:bb:22:03:d0:86:5e:
a3:a3:48:4d:a6:4f:fb:43:0a:40:01:ea:81:1c:cf:
c0:af:de:a1:b2:23:82:41:d1:93:17:27:3b:a4:4f:
95:b0:e8:80:fb:33:18:a1:b6:18:bb:4f:fe:3e:f6:
f5:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:BD:C2:0F:36:5E:A0:34:A5:15:8C:BA:53:65:30:F5:1A:BB:77:7F
X509v3 Authority Key Identifier:
keyid:29:FE:3D:FA:77:EB:02:01:C8:56:D1:E1:EB:F0:32:BC:C8:B1:24:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kf49-nfrAgHIVtHh6_AyvMixJNg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/bf2430-32b0-493c-acbe-bebec2336d48/1/Kf49-nfrAgHIVtHh6_AyvMixJNg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/bf2430-32b0-493c-acbe-bebec2336d48/1/Kf49-nfrAgHIVtHh6_AyvMixJNg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:b2:82:1e:3c:8f:0c:e4:38:ed:e6:0b:65:2f:ab:88:e3:c9:
cf:88:c6:61:ed:b8:91:9b:21:1d:1d:d2:34:7e:dc:3b:c1:bd:
bc:bd:5e:66:f8:d3:5f:9e:22:41:22:83:ca:5e:1e:b2:ab:13:
0b:7b:92:98:f7:ea:d0:43:eb:7e:c1:1a:89:49:12:8a:8e:4f:
94:2e:6c:9c:b3:17:f9:df:f7:71:b4:19:be:65:82:6b:5c:84:
04:46:d7:a4:e0:60:39:f6:d1:18:89:ba:b4:2c:48:56:79:b1:
f7:bd:d0:b1:8e:3f:13:22:7f:be:01:f0:0c:8c:72:0a:c8:90:
65:20:19:5e:09:e1:c3:36:80:98:b9:a9:b3:f9:61:02:b0:a5:
18:49:8c:87:0e:ee:89:f1:b6:cd:96:af:e0:9f:95:c8:41:8c:
66:19:99:19:30:8c:e0:26:d8:15:64:7d:58:36:da:5d:2f:92:
bd:de:e2:ab:31:1c:5f:b5:a5:85:bc:c3:57:6b:5d:53:eb:01:
db:3c:ad:40:87:c2:9a:9d:64:12:5e:72:fc:44:c0:22:2f:a2:
c0:37:b3:94:f3:5c:a5:3f:cb:07:be:75:e9:89:13:78:fa:78:
34:13:ec:30:a1:73:02:8b:a6:60:c1:a5:48:04:d9:26:a6:46:
21:5e:88:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:56:34 2026 by rpki-client