Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/2ff76d-f116-4430-8407-6e29efdfd4e3/1/KflnDuKjDqyMCjncR_96jNJHOwA.mft
File: KflnDuKjDqyMCjncR_96jNJHOwA.mft (raw, json)
Hash identifier: majC4mYEwhRRwwSffXqkc0OYjCX2YA6teF3Ur+ggCwo=
Subject key identifier: C0:A9:F6:88:34:11:BE:58:C0:63:F6:27:D8:29:DD:EE:B9:26:AA:51
Authority key identifier: 29:F9:67:0E:E2:A3:0E:AC:8C:0A:39:DC:47:FF:7A:8C:D2:47:3B:00
Certificate issuer: /CN=29f9670ee2a30eac8c0a39dc47ff7a8cd2473b00
Certificate serial: 019D26287A8E6D4720D599FD02A9092E363E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KflnDuKjDqyMCjncR_96jNJHOwA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/2ff76d-f116-4430-8407-6e29efdfd4e3/1/KflnDuKjDqyMCjncR_96jNJHOwA.mft
Manifest number: 1053
Signing time: Wed 25 Mar 2026 18:01:20 +0000
Manifest this update: Wed 25 Mar 2026 18:01:20 +0000
Manifest next update: Thu 26 Mar 2026 18:01:20 +0000
Files and hashes: 1: Cgz85Eo8qCTDGZkh2eWDWG1TUqs.asa (hash: mRCgdtrJHvfYqHRb7B2p6MSw7jldI362MV9SPdWb6Tg=)
2: KflnDuKjDqyMCjncR_96jNJHOwA.crl (hash: IHmv6ll7HKRix8gSd9yA60njXkh3xOao/ylcFipMMvk=)
3: X_AaoL7Ah4HLoalI2_dxRNVjGT8.roa (hash: LYJu7x3oXzLmoQVYfAqJ6SKMZlnDcjs2nlCx1uJIAu4=)
4: o6jn4pMH4sc0eujptr5xx165q4Q.roa (hash: fEt3SZ1Yy3NPOPzC2NTZohBKbWX72IOAPI3OKkPJrBw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/2ff76d-f116-4430-8407-6e29efdfd4e3/1/KflnDuKjDqyMCjncR_96jNJHOwA.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/2ff76d-f116-4430-8407-6e29efdfd4e3/1/KflnDuKjDqyMCjncR_96jNJHOwA.mft
rsync://rpki.ripe.net/repository/DEFAULT/KflnDuKjDqyMCjncR_96jNJHOwA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:28:7a:8e:6d:47:20:d5:99:fd:02:a9:09:2e:36:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29f9670ee2a30eac8c0a39dc47ff7a8cd2473b00
Validity
Not Before: Mar 25 18:01:20 2026 GMT
Not After : Mar 26 18:01:20 2026 GMT
Subject: CN=c0a9f6883411be58c063f627d829ddeeb926aa51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:5a:a1:b9:16:68:6d:a5:3c:49:30:a3:4d:44:
72:57:8c:93:b5:d9:63:74:4d:92:dd:37:37:e2:6a:
fb:c7:82:75:fd:cc:30:8a:2f:1d:24:0d:bf:49:da:
7b:3a:c6:62:dd:c8:97:69:17:67:12:ee:66:f9:42:
d3:11:63:6a:03:a8:bc:00:c6:62:ce:86:29:1c:2f:
e3:b0:f9:52:e5:c2:07:a7:b7:59:91:df:e7:45:bd:
e9:a5:a1:33:21:09:a7:25:a8:16:3b:e0:ff:91:8a:
42:0f:66:c6:67:b9:e8:56:71:bb:7b:08:ef:e1:81:
fc:0f:ae:88:71:8d:fe:98:8e:3b:93:36:51:af:ab:
f8:ff:78:68:7d:ba:fe:fd:26:ae:5f:87:49:86:45:
0e:77:03:ef:04:13:8b:80:80:89:ab:99:97:bb:88:
7e:c0:fb:88:ca:33:66:db:42:e5:6b:f7:13:3a:8f:
3f:b3:ca:be:e9:b7:e6:2a:92:c7:5b:0f:72:a7:b0:
f5:92:9e:f9:ed:51:c9:b2:50:60:be:de:0f:32:1a:
1b:23:49:ea:41:c5:82:7a:69:cd:1d:db:8b:20:48:
4d:a9:f8:30:74:cb:61:96:2c:11:37:5a:eb:82:0a:
fe:a3:4c:0b:1c:ca:90:1c:14:fc:32:00:af:77:5e:
8c:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:A9:F6:88:34:11:BE:58:C0:63:F6:27:D8:29:DD:EE:B9:26:AA:51
X509v3 Authority Key Identifier:
keyid:29:F9:67:0E:E2:A3:0E:AC:8C:0A:39:DC:47:FF:7A:8C:D2:47:3B:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KflnDuKjDqyMCjncR_96jNJHOwA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/2ff76d-f116-4430-8407-6e29efdfd4e3/1/KflnDuKjDqyMCjncR_96jNJHOwA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/2ff76d-f116-4430-8407-6e29efdfd4e3/1/KflnDuKjDqyMCjncR_96jNJHOwA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:56:20:89:ad:9d:29:87:7d:21:0c:2a:b3:df:fe:fb:3c:ff:
45:00:a1:5e:59:66:ba:c2:73:e2:01:b9:17:8c:0a:f0:00:29:
14:e1:42:65:97:05:c4:1b:e5:de:12:c8:62:80:2d:83:31:bb:
77:87:9c:5e:07:a9:6c:a0:82:5a:0a:93:d3:d1:08:28:60:af:
c1:06:05:99:7b:3d:ca:05:89:f4:29:4b:bb:c7:e4:83:4d:42:
ba:61:8e:75:73:5f:2b:d6:bf:25:b9:5c:a8:7c:fe:02:ba:0a:
af:bb:e8:11:f2:55:15:a1:f0:70:9f:d1:ea:df:d0:e0:ec:b2:
bc:3e:97:3a:7c:db:11:56:54:17:b7:39:4e:6e:4b:d2:10:13:
18:81:bb:f7:23:34:bc:c6:70:00:0c:f2:db:a0:f3:6b:a5:0d:
fd:7f:32:00:60:0f:6c:b7:1e:07:b4:24:45:52:2b:b3:f3:47:
9d:57:0a:15:40:9a:f7:86:5a:f3:dc:28:16:08:64:fe:90:77:
48:16:d6:1f:12:ae:2b:10:76:03:72:d0:8f:77:ea:a1:b5:fa:
f5:7e:9f:70:cd:03:d2:a2:c7:a1:70:4c:4e:df:16:6c:c5:49:
f9:7b:00:cd:b2:70:ed:85:ac:f3:43:6d:51:72:8d:89:d4:d9:
5b:88:22:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 01:19:30 2026 by rpki-client