Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/86/2ff76d-f116-4430-8407-6e29efdfd4e3/1/KflnDuKjDqyMCjncR_96jNJHOwA.mft
File: KflnDuKjDqyMCjncR_96jNJHOwA.mft (raw, json)
Hash identifier: m49j+8u13seyeSEVj3iDXY6CdTI6b9h3lu2Ihfj9gVE=
Subject key identifier: AA:FB:4E:84:1F:F1:7A:CB:B3:39:9A:D2:71:56:DF:25:08:52:11:93
Authority key identifier: 29:F9:67:0E:E2:A3:0E:AC:8C:0A:39:DC:47:FF:7A:8C:D2:47:3B:00
Certificate issuer: /CN=29f9670ee2a30eac8c0a39dc47ff7a8cd2473b00
Certificate serial: 01A1DA5CF78A3BEDF46F13C6711F8DADEDCA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KflnDuKjDqyMCjncR_96jNJHOwA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/2ff76d-f116-4430-8407-6e29efdfd4e3/1/KflnDuKjDqyMCjncR_96jNJHOwA.mft
Manifest number: 12C3
Signing time: Sat 14 Nov 2026 14:01:28 +0000
Manifest this update: Sat 14 Nov 2026 14:01:28 +0000
Manifest next update: Sun 15 Nov 2026 14:01:28 +0000
Files and hashes: 1: 1-pz4vWUQN5VuEayLLuvkRkpzgvo.asa (hash: kDRwZuSG1Z5nVSc8x2uGLHIhNW522iGedA3PqeDVm/M=)
2: 5Y-YmReP3TmRtjJS9YVlIuI8nG4.roa (hash: de+X/aDoTaxuRv3aSiiQGOlpPaCXL5cRb2HmerHKNMs=)
3: KflnDuKjDqyMCjncR_96jNJHOwA.crl (hash: Cja/5piDnQe+jUUFJFnfEWUiCnfmN9NJLmDttpR1HBY=)
4: RGBq2FSn0FisiLY5hbUPkKxjdTo.roa (hash: gRY4dTWZk/MRAor8xvglsLTFZW7lcmxrSq+zim8k20s=)
5: X_AaoL7Ah4HLoalI2_dxRNVjGT8.roa (hash: LYJu7x3oXzLmoQVYfAqJ6SKMZlnDcjs2nlCx1uJIAu4=)
6: o6jn4pMH4sc0eujptr5xx165q4Q.roa (hash: fEt3SZ1Yy3NPOPzC2NTZohBKbWX72IOAPI3OKkPJrBw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/2ff76d-f116-4430-8407-6e29efdfd4e3/1/KflnDuKjDqyMCjncR_96jNJHOwA.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/2ff76d-f116-4430-8407-6e29efdfd4e3/1/KflnDuKjDqyMCjncR_96jNJHOwA.mft
rsync://rpki.ripe.net/repository/DEFAULT/KflnDuKjDqyMCjncR_96jNJHOwA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 12:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:da:5c:f7:8a:3b:ed:f4:6f:13:c6:71:1f:8d:ad:ed:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29f9670ee2a30eac8c0a39dc47ff7a8cd2473b00
Validity
Not Before: Nov 14 14:01:28 2026 GMT
Not After : Nov 15 14:01:28 2026 GMT
Subject: CN=aafb4e841ff17acbb3399ad27156df2508521193
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:aa:dd:9c:7e:ca:67:34:4a:6a:09:97:be:e4:
48:7c:36:50:4e:bd:dd:ab:60:2b:19:a4:49:4a:8b:
11:1d:25:d4:21:bc:05:b0:52:49:08:2c:e4:00:de:
79:e8:4d:aa:e7:d4:68:63:0f:77:70:29:cc:d2:58:
f0:18:53:3b:a9:b7:8c:3f:29:ee:7c:a2:0e:aa:79:
42:55:6a:39:b8:e1:ad:dc:72:e2:1b:13:6a:4b:31:
75:8e:d3:ad:26:45:72:eb:3a:41:5c:ea:e1:d5:b4:
04:e9:27:05:8e:08:c4:3d:90:e6:99:1b:27:6e:b9:
b9:95:2e:b1:44:5b:f6:1e:26:ff:d7:ad:6e:fe:42:
8d:47:9e:5b:dc:a4:fc:bb:b9:6f:17:4a:30:a5:5a:
c0:34:2b:03:b7:05:8d:b2:a8:80:98:62:71:a9:6b:
07:fc:a2:f4:0a:8b:e4:76:fb:21:9b:fd:36:df:1b:
2d:4e:4d:3e:fb:a5:a0:1a:94:1d:2e:e4:72:53:8e:
b6:bb:24:28:6f:c6:31:b2:9c:1c:41:ad:b7:5e:25:
3f:e4:5d:e0:1d:09:73:3e:a0:99:17:7d:3b:e8:fb:
7c:97:63:6c:ff:b5:f2:1f:82:02:a7:12:af:43:02:
cd:4f:18:6f:64:0b:cc:9b:c2:c3:8e:48:2a:bb:8e:
99:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:FB:4E:84:1F:F1:7A:CB:B3:39:9A:D2:71:56:DF:25:08:52:11:93
X509v3 Authority Key Identifier:
keyid:29:F9:67:0E:E2:A3:0E:AC:8C:0A:39:DC:47:FF:7A:8C:D2:47:3B:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KflnDuKjDqyMCjncR_96jNJHOwA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/2ff76d-f116-4430-8407-6e29efdfd4e3/1/KflnDuKjDqyMCjncR_96jNJHOwA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/2ff76d-f116-4430-8407-6e29efdfd4e3/1/KflnDuKjDqyMCjncR_96jNJHOwA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:23:a1:bd:59:0b:3c:01:19:65:83:37:b2:bf:e2:b9:77:1f:
59:70:7e:d3:2d:cf:3c:92:eb:c7:55:92:f7:a6:bb:06:18:cf:
64:62:de:ba:d2:cf:76:6f:7f:5f:6b:88:8e:c3:79:ca:f5:0d:
67:06:af:db:5d:78:03:9f:f1:84:65:2d:b2:7f:81:2e:df:11:
c7:0a:93:7a:b9:21:c7:d8:c7:7f:b8:a2:3b:dc:e7:f2:e8:e9:
f4:74:21:81:df:bc:7b:32:76:e5:14:f8:a7:04:59:dc:18:e0:
2f:14:27:de:7b:91:ea:1a:1f:48:96:fa:6a:1e:7b:66:82:ad:
98:0a:e0:1b:ce:fb:93:ad:2d:ad:ac:87:17:25:27:08:63:99:
e1:af:76:fe:f1:32:5a:ee:be:18:d5:b7:18:ce:a4:56:e0:69:
6f:9e:cb:a3:1d:10:1c:e3:3f:b5:66:48:0e:9d:ff:bc:a7:14:
75:a1:e9:c2:d2:24:53:ec:4c:18:9d:ee:fb:03:bd:b3:77:e3:
0d:66:2d:1e:c6:c1:6b:b8:d6:dd:a9:2a:e2:31:24:85:71:77:
73:51:d9:fe:52:5d:66:a3:90:b6:e3:1c:3d:29:1b:11:b8:af:
f7:90:c0:b4:15:84:01:17:b8:49:fb:fa:27:d6:08:e6:62:a4:
3b:44:8c:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 14 22:43:30 2026 by rpki-client