Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/86/2ff76d-f116-4430-8407-6e29efdfd4e3/1/KflnDuKjDqyMCjncR_96jNJHOwA.mft
File: KflnDuKjDqyMCjncR_96jNJHOwA.mft (raw, json)
Hash identifier: LJolC5fOWzNHG9aznwiq9eN69dZQDHrvj3py3SJ4tRY=
Subject key identifier: 6D:BF:20:FB:E7:7B:02:2E:C1:B7:33:36:CA:4D:B5:F0:01:63:9E:B5
Authority key identifier: 29:F9:67:0E:E2:A3:0E:AC:8C:0A:39:DC:47:FF:7A:8C:D2:47:3B:00
Certificate issuer: /CN=29f9670ee2a30eac8c0a39dc47ff7a8cd2473b00
Certificate serial: 01A0CC359836DFFDCEB5373EE58C0DDBCB5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KflnDuKjDqyMCjncR_96jNJHOwA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/2ff76d-f116-4430-8407-6e29efdfd4e3/1/KflnDuKjDqyMCjncR_96jNJHOwA.mft
Manifest number: 1237
Signing time: Wed 23 Sep 2026 03:00:59 +0000
Manifest this update: Wed 23 Sep 2026 03:00:59 +0000
Manifest next update: Thu 24 Sep 2026 03:00:59 +0000
Files and hashes: 1: 5Y-YmReP3TmRtjJS9YVlIuI8nG4.roa (hash: de+X/aDoTaxuRv3aSiiQGOlpPaCXL5cRb2HmerHKNMs=)
2: Cgz85Eo8qCTDGZkh2eWDWG1TUqs.asa (hash: mRCgdtrJHvfYqHRb7B2p6MSw7jldI362MV9SPdWb6Tg=)
3: KflnDuKjDqyMCjncR_96jNJHOwA.crl (hash: WGsx6qqr4NyuzMQffGuoWPC31Goou/JzejPdWbBXK+I=)
4: RGBq2FSn0FisiLY5hbUPkKxjdTo.roa (hash: gRY4dTWZk/MRAor8xvglsLTFZW7lcmxrSq+zim8k20s=)
5: X_AaoL7Ah4HLoalI2_dxRNVjGT8.roa (hash: LYJu7x3oXzLmoQVYfAqJ6SKMZlnDcjs2nlCx1uJIAu4=)
6: o6jn4pMH4sc0eujptr5xx165q4Q.roa (hash: fEt3SZ1Yy3NPOPzC2NTZohBKbWX72IOAPI3OKkPJrBw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/2ff76d-f116-4430-8407-6e29efdfd4e3/1/KflnDuKjDqyMCjncR_96jNJHOwA.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/2ff76d-f116-4430-8407-6e29efdfd4e3/1/KflnDuKjDqyMCjncR_96jNJHOwA.mft
rsync://rpki.ripe.net/repository/DEFAULT/KflnDuKjDqyMCjncR_96jNJHOwA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 03:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cc:35:98:36:df:fd:ce:b5:37:3e:e5:8c:0d:db:cb:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29f9670ee2a30eac8c0a39dc47ff7a8cd2473b00
Validity
Not Before: Sep 23 03:00:59 2026 GMT
Not After : Sep 24 03:00:59 2026 GMT
Subject: CN=6dbf20fbe77b022ec1b73336ca4db5f001639eb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:0b:17:80:f0:80:c3:36:69:ec:b7:2d:15:48:
4d:b8:d0:3d:0e:3a:f8:7a:e2:cb:c0:3e:95:30:e7:
2d:02:d4:59:ff:d5:89:e4:2c:c7:66:73:c1:6a:33:
7a:d8:fb:f8:ea:e1:59:7b:fe:23:6a:af:21:66:19:
80:a5:11:dc:27:ea:65:16:2b:70:52:33:c5:6c:82:
3d:c5:18:71:36:93:77:56:92:ee:86:d0:dd:0a:84:
a8:2c:4a:2c:4b:7b:ca:e3:03:03:85:11:df:1a:5f:
9c:1c:04:62:0a:91:4b:ff:50:f9:27:ac:58:51:ad:
66:0a:1d:40:37:f1:e5:46:cc:79:af:18:12:bd:0d:
2e:0a:3d:4d:dc:7d:8e:3a:84:3c:ad:41:2f:d3:0b:
1d:7e:5f:fd:d7:82:9a:b5:15:0d:75:d6:42:21:63:
da:04:07:f9:f8:ba:5c:70:b4:09:ed:0e:5b:98:f7:
db:61:4b:67:4b:ed:0e:a7:5f:1f:30:45:c8:a1:f8:
21:a1:b9:d8:c7:a1:ab:d2:b9:a9:3c:a3:a7:39:22:
dd:1a:7c:9b:32:f7:9c:8d:2c:0e:80:dd:9e:58:b5:
dc:d4:a6:79:6a:14:e4:3b:be:a7:39:35:2a:bb:d0:
b4:91:14:15:4e:4e:2f:39:1a:e4:cf:b0:e8:0f:c9:
a0:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:BF:20:FB:E7:7B:02:2E:C1:B7:33:36:CA:4D:B5:F0:01:63:9E:B5
X509v3 Authority Key Identifier:
keyid:29:F9:67:0E:E2:A3:0E:AC:8C:0A:39:DC:47:FF:7A:8C:D2:47:3B:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KflnDuKjDqyMCjncR_96jNJHOwA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/2ff76d-f116-4430-8407-6e29efdfd4e3/1/KflnDuKjDqyMCjncR_96jNJHOwA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/2ff76d-f116-4430-8407-6e29efdfd4e3/1/KflnDuKjDqyMCjncR_96jNJHOwA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:43:06:38:69:46:ae:e3:8a:be:5f:6a:06:ed:31:2d:39:7b:
2c:f0:5c:88:aa:01:95:a1:bb:1b:6f:4b:d5:92:c7:95:84:a3:
76:ed:ce:e3:0c:82:5e:30:7f:2b:4e:38:46:b7:e5:9a:83:96:
11:d3:44:b3:7b:08:20:c3:7a:c0:85:b8:51:5b:85:08:a6:c5:
18:d8:88:88:6d:ed:31:f6:5a:20:9a:5f:f6:67:6a:90:7c:9d:
da:ac:d3:db:8b:b2:61:2e:85:65:52:9e:25:c0:26:90:78:2a:
a3:6c:a2:6e:db:3e:cf:e2:ed:13:92:49:24:3d:c4:98:99:bd:
e7:00:54:ff:6f:3a:0e:39:c1:56:dc:c3:43:c9:2c:5b:e2:2e:
25:b0:81:f0:d9:89:95:ed:75:f8:66:f5:37:de:4e:e5:4d:5b:
a6:a0:c5:6b:c1:de:54:74:e1:da:ae:2e:29:37:51:e8:a6:b2:
c6:7c:b3:54:6c:aa:0c:4a:32:ca:1f:a0:bc:89:9a:5a:28:c3:
eb:ee:9d:e6:fb:c7:7c:3f:e7:34:38:8c:32:21:84:0f:8d:cf:
55:3a:90:dd:b0:05:23:cf:be:45:f9:1a:fb:42:64:81:0b:d1:
93:20:a1:53:b4:f8:f1:7a:d5:3f:03:08:13:13:71:2d:66:3f:
da:be:e2:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 13:23:42 2026 by rpki-client