Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6b/e25a3c-def6-4228-a10b-c45e949e9cd6/1/KcFw2YteNdfVFTdnHGBApRUYhLw.mft
File: KcFw2YteNdfVFTdnHGBApRUYhLw.mft (raw, json)
Hash identifier: f5mOULF8Yo4mIFD1NFJG4R1BYG51ThDcL2D9Y2EeY00=
Subject key identifier: 90:9D:20:6E:37:72:F5:7E:AB:22:CC:29:9E:8A:AE:57:B3:5B:7E:AD
Authority key identifier: 29:C1:70:D9:8B:5E:35:D7:D5:15:37:67:1C:60:40:A5:15:18:84:BC
Certificate issuer: /CN=29c170d98b5e35d7d51537671c6040a5151884bc
Certificate serial: 01A1DBDD89F3777B8DBFF76C492175F3124B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KcFw2YteNdfVFTdnHGBApRUYhLw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/e25a3c-def6-4228-a10b-c45e949e9cd6/1/KcFw2YteNdfVFTdnHGBApRUYhLw.mft
Manifest number: 1AF6
Signing time: Sat 14 Nov 2026 21:01:31 +0000
Manifest this update: Sat 14 Nov 2026 21:01:31 +0000
Manifest next update: Sun 15 Nov 2026 21:01:31 +0000
Files and hashes: 1: KcFw2YteNdfVFTdnHGBApRUYhLw.crl (hash: zXEmQnYGDtfqMip+geMSpfD2P2HDU1Sp6D7YKfWBj/o=)
2: REbjg5M_8wpI3i_HlGLahpeL73s.roa (hash: Wg9GMppGq5pv2FgNgfdIsx4UTmxfeIHOeiAi7ZSNSIA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/e25a3c-def6-4228-a10b-c45e949e9cd6/1/KcFw2YteNdfVFTdnHGBApRUYhLw.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/e25a3c-def6-4228-a10b-c45e949e9cd6/1/KcFw2YteNdfVFTdnHGBApRUYhLw.mft
rsync://rpki.ripe.net/repository/DEFAULT/KcFw2YteNdfVFTdnHGBApRUYhLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 21:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:db:dd:89:f3:77:7b:8d:bf:f7:6c:49:21:75:f3:12:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29c170d98b5e35d7d51537671c6040a5151884bc
Validity
Not Before: Nov 14 21:01:31 2026 GMT
Not After : Nov 15 21:01:31 2026 GMT
Subject: CN=909d206e3772f57eab22cc299e8aae57b35b7ead
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:ad:29:d8:22:7e:d9:33:ba:48:5d:c4:76:36:
37:ef:28:ec:99:be:c5:62:65:bc:21:ed:4d:40:bd:
0c:3e:1d:55:86:5c:76:2f:c2:83:0b:5e:18:5d:fb:
0f:69:93:de:d2:f5:54:06:11:a6:2a:82:dd:58:42:
8d:6d:10:a3:71:e7:f7:1d:98:14:37:46:04:f1:e4:
96:5f:53:2a:b9:1a:aa:d5:16:ba:36:2c:65:da:0e:
c7:03:fb:58:8a:fa:0c:5e:a0:a3:5a:35:e7:e6:a8:
46:b2:ef:28:53:4c:da:33:6d:9b:ed:91:a9:62:0c:
5c:b6:2e:c1:07:83:4f:df:59:21:49:1e:06:67:ab:
ce:fa:6a:2c:21:7a:4d:30:fc:82:1c:cc:76:0e:82:
c3:50:75:b1:d6:11:79:1f:03:05:b3:c0:3f:d7:be:
5b:cc:8b:bc:1d:a3:a6:bb:67:2e:0f:00:a1:18:a6:
1d:1a:77:6a:28:78:ae:bb:a4:31:bb:c9:ee:87:5f:
13:06:73:67:49:b9:f4:6f:34:31:6e:2d:31:be:d8:
91:2f:a3:1a:b8:5f:f4:23:3d:f6:f4:f7:92:62:91:
cb:b1:5b:d1:c5:9e:7d:8f:b9:ab:0b:31:ff:bf:e0:
11:56:3d:87:3a:5a:1a:9f:86:f6:6a:4b:b7:52:a3:
0d:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:9D:20:6E:37:72:F5:7E:AB:22:CC:29:9E:8A:AE:57:B3:5B:7E:AD
X509v3 Authority Key Identifier:
keyid:29:C1:70:D9:8B:5E:35:D7:D5:15:37:67:1C:60:40:A5:15:18:84:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KcFw2YteNdfVFTdnHGBApRUYhLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/e25a3c-def6-4228-a10b-c45e949e9cd6/1/KcFw2YteNdfVFTdnHGBApRUYhLw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/e25a3c-def6-4228-a10b-c45e949e9cd6/1/KcFw2YteNdfVFTdnHGBApRUYhLw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:08:51:13:16:5c:8c:ec:9a:e6:5e:d9:a7:b2:ce:40:67:9b:
2e:bf:29:7e:af:3e:03:a1:8f:e6:b9:39:7c:c6:e2:e7:dd:73:
e3:7e:88:bb:c7:ce:e4:e5:d8:fc:ac:04:5c:13:47:56:2b:8e:
20:69:7f:3b:89:88:ff:6f:a2:47:a7:4f:2f:bf:2f:f0:57:b5:
d7:24:d1:6c:09:7d:3b:1b:c4:2f:72:59:a9:92:15:f0:c8:2f:
57:86:b7:7b:86:27:ab:8c:22:8b:f3:bf:ee:b0:ac:8e:c6:eb:
ec:56:13:69:48:73:4f:e5:72:39:6f:78:1f:32:d8:78:ee:2c:
b9:e5:45:b2:00:51:c1:5c:15:a1:da:19:90:48:a3:5f:c1:36:
5a:53:dc:9b:ad:c6:b8:b0:13:f1:49:7f:ec:78:15:af:4f:4f:
41:77:fc:b1:09:6a:4a:d5:fc:71:37:b1:d3:d0:77:12:bb:1c:
43:ad:8e:2f:e5:58:b8:7d:fe:0d:fe:94:c5:47:8a:f8:b4:8d:
19:ee:94:4a:e5:c3:3d:9b:57:cd:30:8a:3e:5f:76:bf:39:f5:
bf:00:aa:c8:15:a1:e3:1f:05:b8:09:74:ce:52:ab:8b:88:7b:
3d:17:06:86:fb:81:af:e1:e6:8d:4a:d4:c6:ad:0c:ea:34:98:
2f:0b:e4:e7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaHb3Ynzd3uNv/dsSSF18xJLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI5YzE3MGQ5OGI1ZTM1ZDdkNTE1Mzc2NzFjNjA0MGE1MTUx
ODg0YmMwHhcNMjYxMTE0MjEwMTMxWhcNMjYxMTE1MjEwMTMxWjAzMTEwLwYDVQQD
Eyg5MDlkMjA2ZTM3NzJmNTdlYWIyMmNjMjk5ZThhYWU1N2IzNWI3ZWFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwa0p2CJ+2TO6SF3EdjY37yjsmb7F
YmW8Ie1NQL0MPh1Vhlx2L8KDC14YXfsPaZPe0vVUBhGmKoLdWEKNbRCjcef3HZgU
N0YE8eSWX1MquRqq1Ra6Nixl2g7HA/tYivoMXqCjWjXn5qhGsu8oU0zaM22b7ZGp
Ygxcti7BB4NP31khSR4GZ6vO+mosIXpNMPyCHMx2DoLDUHWx1hF5HwMFs8A/175b
zIu8HaOmu2cuDwChGKYdGndqKHiuu6Qxu8nuh18TBnNnSbn0bzQxbi0xvtiRL6Ma
uF/0Iz329PeSYpHLsVvRxZ59j7mrCzH/v+ARVj2HOloan4b2aku3UqMNxwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJCdIG43cvV+qyLMKZ6KrlezW36tMB8GA1UdIwQY
MBaAFCnBcNmLXjXX1RU3ZxxgQKUVGIS8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS2NGdzJZdGVOZGZWRlRkbkhHQkFwUlVZaEx3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yi9lMjVhM2MtZGVmNi00MjI4LWExMGIt
YzQ1ZTk0OWU5Y2Q2LzEvS2NGdzJZdGVOZGZWRlRkbkhHQkFwUlVZaEx3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yi9lMjVhM2MtZGVmNi00MjI4LWExMGItYzQ1ZTk0OWU5Y2Q2
LzEvS2NGdzJZdGVOZGZWRlRkbkhHQkFwUlVZaEx3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoAhRExZc
jOya5l7Zp7LOQGebLr8pfq8+A6GP5rk5fMbi591z436Iu8fO5OXY/KwEXBNHViuO
IGl/O4mI/2+iR6dPL78v8Fe11yTRbAl9OxvEL3JZqZIV8MgvV4a3e4Ynq4wii/O/
7rCsjsbr7FYTaUhzT+VyOW94HzLYeO4sueVFsgBRwVwVodoZkEijX8E2WlPcm63G
uLAT8Ul/7HgVr09PQXf8sQlqStX8cTex09B3ErscQ62OL+VYuH3+Df6UxUeK+LSN
Ge6USuXDPZtXzTCKPl92vzn1vwCqyBWh4x8FuAl0zlKri4h7PRcGhvuBr+HmjUrU
xq0M6jSYLwvk5w==
-----END CERTIFICATE-----
Generated at Sun Nov 15 08:05:31 2026 by rpki-client