Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/2ff76d-f116-4430-8407-6e29efdfd4e3/1/KflnDuKjDqyMCjncR_96jNJHOwA.mft
File: KflnDuKjDqyMCjncR_96jNJHOwA.mft (raw, json)
Hash identifier: NFBb/TPM0CksAWEmao3Jlk0rmMqtnUNQLmS9Px1TyVo=
Subject key identifier: 59:27:44:C5:0B:4B:2E:C1:1F:9B:6C:72:5B:DF:6B:E2:33:FC:76:67
Authority key identifier: 29:F9:67:0E:E2:A3:0E:AC:8C:0A:39:DC:47:FF:7A:8C:D2:47:3B:00
Certificate issuer: /CN=29f9670ee2a30eac8c0a39dc47ff7a8cd2473b00
Certificate serial: 019D31BEE3DDB3318463E83F782B7741A4C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KflnDuKjDqyMCjncR_96jNJHOwA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/2ff76d-f116-4430-8407-6e29efdfd4e3/1/KflnDuKjDqyMCjncR_96jNJHOwA.mft
Manifest number: 1059
Signing time: Sat 28 Mar 2026 00:01:26 +0000
Manifest this update: Sat 28 Mar 2026 00:01:26 +0000
Manifest next update: Sun 29 Mar 2026 00:01:26 +0000
Files and hashes: 1: Cgz85Eo8qCTDGZkh2eWDWG1TUqs.asa (hash: mRCgdtrJHvfYqHRb7B2p6MSw7jldI362MV9SPdWb6Tg=)
2: KflnDuKjDqyMCjncR_96jNJHOwA.crl (hash: WuxpRb3kZcd2EilQswrYBWkDlTAQo5U7kK2mpKNEmMs=)
3: X_AaoL7Ah4HLoalI2_dxRNVjGT8.roa (hash: LYJu7x3oXzLmoQVYfAqJ6SKMZlnDcjs2nlCx1uJIAu4=)
4: o6jn4pMH4sc0eujptr5xx165q4Q.roa (hash: fEt3SZ1Yy3NPOPzC2NTZohBKbWX72IOAPI3OKkPJrBw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/2ff76d-f116-4430-8407-6e29efdfd4e3/1/KflnDuKjDqyMCjncR_96jNJHOwA.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/2ff76d-f116-4430-8407-6e29efdfd4e3/1/KflnDuKjDqyMCjncR_96jNJHOwA.mft
rsync://rpki.ripe.net/repository/DEFAULT/KflnDuKjDqyMCjncR_96jNJHOwA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 00:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:31:be:e3:dd:b3:31:84:63:e8:3f:78:2b:77:41:a4:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29f9670ee2a30eac8c0a39dc47ff7a8cd2473b00
Validity
Not Before: Mar 28 00:01:26 2026 GMT
Not After : Mar 29 00:01:26 2026 GMT
Subject: CN=592744c50b4b2ec11f9b6c725bdf6be233fc7667
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:16:4e:0e:ad:b8:7b:ce:65:27:6d:a0:5a:ac:
1e:9d:8b:ba:61:55:4c:f6:e7:fb:a6:fa:c5:8a:b0:
e7:de:8c:58:ab:f5:d5:73:ef:4e:66:82:4e:f3:f1:
2e:01:ec:3e:89:86:87:bb:ee:d6:9d:71:e2:15:05:
bd:56:d0:71:a1:69:36:87:60:59:a3:58:2e:62:75:
af:1e:a4:0e:fd:8b:57:ed:6b:4e:0d:ee:13:d5:1d:
54:0b:56:86:fa:ca:47:ef:1d:df:4d:49:f1:7a:6f:
eb:55:ed:02:fb:9c:5d:64:6c:7f:2f:02:f5:6e:91:
0c:1d:cb:40:17:cc:06:7f:b1:91:62:0e:ef:eb:2f:
77:63:6e:f2:2e:e1:e5:aa:8b:f0:a1:64:a9:5d:ce:
78:5d:3f:80:24:f6:20:e1:e3:ae:90:6e:74:fb:d9:
85:1b:7e:c8:f7:15:cc:be:db:18:70:f4:df:5a:8e:
a0:ea:d1:7e:59:22:70:e6:7d:06:7f:6b:61:c6:aa:
1a:06:65:fa:4d:04:df:92:78:58:64:08:3f:f6:6c:
0f:9d:27:79:d3:cd:cd:5a:a0:bc:62:4b:8a:ee:55:
61:9f:7c:b6:6b:be:fd:24:3b:9b:c9:11:eb:13:d6:
90:56:43:eb:07:b3:5e:8d:88:9e:d2:09:63:21:ce:
a4:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:27:44:C5:0B:4B:2E:C1:1F:9B:6C:72:5B:DF:6B:E2:33:FC:76:67
X509v3 Authority Key Identifier:
keyid:29:F9:67:0E:E2:A3:0E:AC:8C:0A:39:DC:47:FF:7A:8C:D2:47:3B:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KflnDuKjDqyMCjncR_96jNJHOwA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/2ff76d-f116-4430-8407-6e29efdfd4e3/1/KflnDuKjDqyMCjncR_96jNJHOwA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/2ff76d-f116-4430-8407-6e29efdfd4e3/1/KflnDuKjDqyMCjncR_96jNJHOwA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:09:73:88:ff:16:08:76:d5:b3:b9:94:9f:27:e1:ef:7b:89:
be:70:ab:da:96:76:78:ad:44:ab:ca:39:b2:af:9f:be:0f:12:
8e:02:f7:06:55:59:4b:0b:1a:9a:2a:ad:d9:1e:f2:f7:01:31:
72:fe:dc:90:62:c4:f8:cf:8d:4b:e3:2b:b1:07:43:93:76:26:
ca:94:84:9e:62:43:91:5b:6f:72:2c:0b:cf:1f:7a:1c:66:d1:
21:ac:f2:81:0f:3b:fc:63:f4:32:08:15:84:de:29:04:1f:c0:
44:36:56:60:1e:3e:3c:a6:90:f2:4f:84:fe:e2:58:09:ed:76:
41:66:58:29:f9:93:7b:ed:87:b0:08:9c:38:04:cf:a3:69:e2:
d8:ae:88:6b:02:0d:11:79:df:7f:db:54:38:6f:a3:73:0b:a3:
07:5e:35:ed:a7:ac:ce:f0:88:43:5c:b5:ad:3e:df:86:b7:c8:
16:f1:4e:72:6d:cf:f5:f7:57:9c:eb:b7:31:b9:d7:e8:4a:1a:
17:4f:bf:03:93:70:b7:8e:d8:d1:99:ee:8d:8d:87:d8:b3:52:
e5:0f:d2:27:2f:85:21:6b:b2:93:e5:c3:86:65:43:ed:2e:3a:
09:dd:08:db:10:8e:a7:f1:4d:51:bd:aa:c4:fa:0e:47:76:12:
b5:49:bc:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 10:41:15 2026 by rpki-client