Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/2ff76d-f116-4430-8407-6e29efdfd4e3/1/KflnDuKjDqyMCjncR_96jNJHOwA.mft
File: KflnDuKjDqyMCjncR_96jNJHOwA.mft (raw, json)
Hash identifier: HjGBPAeF/KfGYl5e6TGw0A3yGw+Oi6P7wS68vOVGq/U=
Subject key identifier: FA:6E:F0:28:D7:4B:9C:B3:2F:32:0F:92:9D:95:B2:3F:41:C7:F3:65
Authority key identifier: 29:F9:67:0E:E2:A3:0E:AC:8C:0A:39:DC:47:FF:7A:8C:D2:47:3B:00
Certificate issuer: /CN=29f9670ee2a30eac8c0a39dc47ff7a8cd2473b00
Certificate serial: 019E1D59B1BEC58EFA083E78E073A7F2594B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KflnDuKjDqyMCjncR_96jNJHOwA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/2ff76d-f116-4430-8407-6e29efdfd4e3/1/KflnDuKjDqyMCjncR_96jNJHOwA.mft
Manifest number: 10D3
Signing time: Tue 12 May 2026 18:01:17 +0000
Manifest this update: Tue 12 May 2026 18:01:17 +0000
Manifest next update: Wed 13 May 2026 18:01:17 +0000
Files and hashes: 1: Cgz85Eo8qCTDGZkh2eWDWG1TUqs.asa (hash: mRCgdtrJHvfYqHRb7B2p6MSw7jldI362MV9SPdWb6Tg=)
2: KflnDuKjDqyMCjncR_96jNJHOwA.crl (hash: L4Bj9cA/a4K7SC67VLw9crGgFTL1Gl2gvfiYHNwT8f8=)
3: X_AaoL7Ah4HLoalI2_dxRNVjGT8.roa (hash: LYJu7x3oXzLmoQVYfAqJ6SKMZlnDcjs2nlCx1uJIAu4=)
4: o6jn4pMH4sc0eujptr5xx165q4Q.roa (hash: fEt3SZ1Yy3NPOPzC2NTZohBKbWX72IOAPI3OKkPJrBw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/2ff76d-f116-4430-8407-6e29efdfd4e3/1/KflnDuKjDqyMCjncR_96jNJHOwA.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/2ff76d-f116-4430-8407-6e29efdfd4e3/1/KflnDuKjDqyMCjncR_96jNJHOwA.mft
rsync://rpki.ripe.net/repository/DEFAULT/KflnDuKjDqyMCjncR_96jNJHOwA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 18:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:59:b1:be:c5:8e:fa:08:3e:78:e0:73:a7:f2:59:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29f9670ee2a30eac8c0a39dc47ff7a8cd2473b00
Validity
Not Before: May 12 18:01:17 2026 GMT
Not After : May 13 18:01:17 2026 GMT
Subject: CN=fa6ef028d74b9cb32f320f929d95b23f41c7f365
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:5f:39:e9:8b:e7:6b:e1:48:f6:dc:3c:25:32:
e8:c8:f0:b0:dd:a2:05:e1:c0:16:8a:2e:9e:9a:2d:
44:a4:3f:2a:b6:83:02:6b:83:1d:ff:4e:7b:e7:33:
17:3d:31:83:8e:3c:1f:df:29:84:30:ea:fd:0b:3f:
61:9d:95:fd:5d:dc:60:77:c4:5c:51:56:c9:be:56:
db:de:80:6b:b2:11:8b:be:e9:9f:32:fd:a0:27:e4:
71:69:c9:c6:26:33:67:d0:7b:e0:22:c2:cd:f3:13:
a8:da:45:8f:fa:8b:24:4f:a4:74:6a:82:3e:48:de:
1f:9d:7c:4a:11:09:76:1c:21:39:60:8e:44:28:3e:
64:fd:01:54:a0:d6:63:8c:22:89:ea:e8:4f:6c:36:
2c:c6:97:9f:fa:fc:0a:5c:1f:5c:6c:d6:43:3b:6c:
ec:8c:e5:0e:a7:88:cf:f4:03:30:00:a5:47:be:14:
f3:01:d4:ee:7b:c6:e3:0f:73:15:22:e1:0e:d4:dc:
48:83:94:dc:40:1e:84:68:24:a2:ae:b9:ff:76:30:
36:f8:3f:5f:13:b5:97:e3:ab:0c:94:1e:4b:e4:b2:
6a:4e:61:78:91:5b:74:a3:ef:d0:1a:f0:85:a4:d5:
03:89:be:d5:34:58:cb:21:9e:8f:20:b0:7d:76:dd:
1e:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:6E:F0:28:D7:4B:9C:B3:2F:32:0F:92:9D:95:B2:3F:41:C7:F3:65
X509v3 Authority Key Identifier:
keyid:29:F9:67:0E:E2:A3:0E:AC:8C:0A:39:DC:47:FF:7A:8C:D2:47:3B:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KflnDuKjDqyMCjncR_96jNJHOwA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/2ff76d-f116-4430-8407-6e29efdfd4e3/1/KflnDuKjDqyMCjncR_96jNJHOwA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/2ff76d-f116-4430-8407-6e29efdfd4e3/1/KflnDuKjDqyMCjncR_96jNJHOwA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:49:be:95:f9:6c:89:c6:01:b3:bd:48:4d:2e:25:41:ee:89:
95:03:55:e3:7d:c8:99:22:9a:07:1f:58:ed:10:d2:e8:5c:95:
0d:eb:99:49:57:db:70:e8:03:7f:3d:64:86:cf:82:84:77:4f:
86:d8:44:60:4f:be:cf:e1:0e:24:47:b0:f5:bd:ff:bf:72:d3:
67:63:9c:54:a7:5b:4c:0a:ac:09:e0:2a:e9:76:89:d8:89:60:
d3:68:fb:ef:20:45:10:7f:44:34:45:5f:52:37:85:18:04:f4:
ff:b9:a4:72:07:56:73:7a:6f:c8:32:88:d8:2c:8b:e9:8b:a5:
4c:75:a5:be:a7:5d:44:10:bb:c6:36:62:d6:78:19:5d:78:dd:
8a:4a:ab:9a:9b:9c:1b:2d:ca:b1:07:9f:aa:2f:69:a2:51:94:
e6:bf:8f:98:77:38:47:5c:45:05:02:1b:af:27:da:76:92:9e:
48:84:cd:8c:a3:51:e6:23:ad:2f:ab:0f:23:56:57:b7:ce:5a:
ae:36:a0:d2:1b:7b:05:a6:ab:63:d1:53:9b:e8:08:b3:66:88:
00:d2:a0:bb:4b:83:f3:b0:a3:f7:2f:a8:08:56:8c:43:7c:3b:
b1:33:da:6b:1e:ee:aa:24:40:a8:61:e2:26:b7:58:43:d9:e3:
0c:fa:c5:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:39:21 2026 by rpki-client