Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/64/bf2430-32b0-493c-acbe-bebec2336d48/1/Kf49-nfrAgHIVtHh6_AyvMixJNg.mft
File: Kf49-nfrAgHIVtHh6_AyvMixJNg.mft (raw, json)
Hash identifier: 0FUJWFnq3aabuzwFWlhLqJ3JFR82laRdL7Lxoi2QSgw=
Subject key identifier: B3:9E:1D:A8:8B:40:9E:48:CE:31:8C:76:0D:30:3C:A8:DD:29:C6:D7
Authority key identifier: 29:FE:3D:FA:77:EB:02:01:C8:56:D1:E1:EB:F0:32:BC:C8:B1:24:D8
Certificate issuer: /CN=29fe3dfa77eb0201c856d1e1ebf032bcc8b124d8
Certificate serial: 01A0DE73097EF59173960EDEC21DC83BE889
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Kf49-nfrAgHIVtHh6_AyvMixJNg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/bf2430-32b0-493c-acbe-bebec2336d48/1/Kf49-nfrAgHIVtHh6_AyvMixJNg.mft
Manifest number: 1A05
Signing time: Sat 26 Sep 2026 16:01:15 +0000
Manifest this update: Sat 26 Sep 2026 16:01:15 +0000
Manifest next update: Sun 27 Sep 2026 16:01:15 +0000
Files and hashes: 1: Kf49-nfrAgHIVtHh6_AyvMixJNg.crl (hash: pyrzj75xumP/UwDBdJ6IOOrvUg7ZoWZ2UgdPgXANNxg=)
2: Y2m0fP5Z0mEZ1gZ9VvmpaGsDUNo.roa (hash: //uS9crBPxY81P375GDY9/pHivqDAms3WY1PpQ+GqaI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/bf2430-32b0-493c-acbe-bebec2336d48/1/Kf49-nfrAgHIVtHh6_AyvMixJNg.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/bf2430-32b0-493c-acbe-bebec2336d48/1/Kf49-nfrAgHIVtHh6_AyvMixJNg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Kf49-nfrAgHIVtHh6_AyvMixJNg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 11:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:de:73:09:7e:f5:91:73:96:0e:de:c2:1d:c8:3b:e8:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29fe3dfa77eb0201c856d1e1ebf032bcc8b124d8
Validity
Not Before: Sep 26 16:01:15 2026 GMT
Not After : Sep 27 16:01:15 2026 GMT
Subject: CN=b39e1da88b409e48ce318c760d303ca8dd29c6d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:e8:1b:35:47:bf:71:6d:0c:41:51:e0:b5:99:
89:75:90:c5:16:66:03:7f:46:a2:f6:cd:5a:44:5e:
e6:66:80:fe:60:2a:b6:ed:25:c2:8e:09:85:96:83:
ff:1a:6e:c2:50:a0:7d:62:90:6a:c8:5c:44:09:cd:
76:e1:3f:82:b2:85:8f:55:6d:97:f6:56:fb:fd:90:
78:b5:74:03:7a:61:72:ae:59:83:c8:90:e4:82:b3:
ee:94:cc:07:cf:69:3d:29:55:41:ee:5d:2b:05:3a:
16:6c:5f:22:22:b6:8d:b7:b0:1c:47:0c:b3:ee:42:
68:a3:75:98:2d:b4:37:01:59:0c:d2:04:a7:6a:c2:
6e:66:a2:18:a8:8b:4b:c3:9e:d0:e8:9a:b5:f2:73:
62:da:f8:9c:17:1d:9e:6a:ad:79:c3:3d:5a:40:d8:
b0:12:c1:74:e4:76:3f:26:12:43:3a:8f:86:2f:5c:
51:92:a8:a6:16:50:43:e4:46:a7:69:1f:45:da:a9:
2f:48:59:a0:49:28:6c:95:52:c6:32:85:05:80:2d:
68:03:3f:2a:e3:5c:4c:dd:ec:42:d3:21:1c:dc:d6:
67:9b:42:7e:b9:6e:7d:a7:05:25:40:2a:98:6d:e1:
a2:f4:31:1d:1d:56:9e:07:d9:f2:f6:0d:92:30:b4:
c8:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:9E:1D:A8:8B:40:9E:48:CE:31:8C:76:0D:30:3C:A8:DD:29:C6:D7
X509v3 Authority Key Identifier:
keyid:29:FE:3D:FA:77:EB:02:01:C8:56:D1:E1:EB:F0:32:BC:C8:B1:24:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kf49-nfrAgHIVtHh6_AyvMixJNg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/bf2430-32b0-493c-acbe-bebec2336d48/1/Kf49-nfrAgHIVtHh6_AyvMixJNg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/bf2430-32b0-493c-acbe-bebec2336d48/1/Kf49-nfrAgHIVtHh6_AyvMixJNg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:02:43:50:9d:00:ac:ad:56:0f:cb:88:6f:72:be:49:59:96:
4b:f4:de:e1:82:46:17:80:65:e0:ed:a4:66:f2:d3:83:a7:1c:
0c:b6:e4:f6:81:68:7d:de:89:ae:12:1f:48:1e:5e:78:c2:b8:
ad:43:d9:33:dc:21:98:bd:04:d2:ee:96:be:1f:7a:b6:d6:d8:
30:a1:d9:ec:1f:f6:ac:21:88:74:6b:9b:37:94:25:ae:91:35:
df:39:42:53:dd:be:4e:ad:79:01:c6:0d:99:05:8b:be:e1:5f:
7f:ea:8b:c0:c1:a7:00:b8:9e:81:15:c0:98:54:61:c1:b4:3f:
33:57:b1:dd:6b:86:77:67:48:9e:51:0f:b1:94:11:8f:28:df:
f6:57:b0:7e:7d:eb:e1:d1:ff:70:03:c4:39:a2:42:6f:75:3b:
04:66:34:17:d5:e8:74:a2:27:25:77:82:8e:81:08:c1:aa:bf:
c8:12:f5:95:e3:00:d3:a7:d1:b7:70:ac:66:9a:36:9d:d1:1f:
b9:38:bf:99:6c:9b:09:4c:7e:ef:f6:19:32:d1:02:ea:5f:b5:
39:be:82:17:e3:2f:fa:12:c6:48:32:3f:fe:72:1a:cd:7e:e2:
c1:ee:99:6f:8f:97:d9:f9:1b:f2:a8:83:16:bd:e0:10:3c:0a:
dd:53:b7:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 22:18:40 2026 by rpki-client