Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/1298e1-a1e4-4abc-ab1f-649d25a95907/1/KfNCRmRyXVgguqeCcTFDozB2kfM.mft
File: KfNCRmRyXVgguqeCcTFDozB2kfM.mft (raw, json)
Hash identifier: War7z4KyYwFMBCwlho4jvSsDz2fJpm9b6dL5gJdOcIA=
Subject key identifier: 1E:A1:E7:A3:A7:34:C1:C5:09:1E:00:1D:88:C5:0B:57:BC:90:4B:49
Authority key identifier: 29:F3:42:46:64:72:5D:58:20:BA:A7:82:71:31:43:A3:30:76:91:F3
Certificate issuer: /CN=29f3424664725d5820baa782713143a3307691f3
Certificate serial: 019D299788A23F10E10F16B774200B5C14BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KfNCRmRyXVgguqeCcTFDozB2kfM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/1298e1-a1e4-4abc-ab1f-649d25a95907/1/KfNCRmRyXVgguqeCcTFDozB2kfM.mft
Manifest number: 02E2
Signing time: Thu 26 Mar 2026 10:01:29 +0000
Manifest this update: Thu 26 Mar 2026 10:01:29 +0000
Manifest next update: Fri 27 Mar 2026 10:01:29 +0000
Files and hashes: 1: KfNCRmRyXVgguqeCcTFDozB2kfM.crl (hash: xBDqvyO792aki3iFl+3s9fnDRROjirgDsVJZhOlUdBI=)
2: kNl2FH2h1RUbk8aiFoOzXqbZfiE.roa (hash: 75YFC9si8AQdOYzNPqXE8Vynriw8AkUBVZlHIzni5SA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/1298e1-a1e4-4abc-ab1f-649d25a95907/1/KfNCRmRyXVgguqeCcTFDozB2kfM.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/1298e1-a1e4-4abc-ab1f-649d25a95907/1/KfNCRmRyXVgguqeCcTFDozB2kfM.mft
rsync://rpki.ripe.net/repository/DEFAULT/KfNCRmRyXVgguqeCcTFDozB2kfM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:97:88:a2:3f:10:e1:0f:16:b7:74:20:0b:5c:14:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29f3424664725d5820baa782713143a3307691f3
Validity
Not Before: Mar 26 10:01:29 2026 GMT
Not After : Mar 27 10:01:29 2026 GMT
Subject: CN=1ea1e7a3a734c1c5091e001d88c50b57bc904b49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:21:55:d5:17:1a:c9:1d:37:6e:a5:d2:35:c8:
fa:9a:bf:89:5f:a9:93:a2:de:89:7d:7f:97:9b:55:
60:12:5a:e0:da:30:e3:d7:bf:be:3f:21:d9:29:87:
dd:73:a4:96:b0:e0:ef:01:49:c1:0a:14:87:4d:bd:
7c:f2:ee:5f:3d:99:60:b3:77:84:6b:1d:22:f2:a0:
b2:cb:91:dd:90:54:1b:6d:af:8f:21:b6:3a:21:08:
12:a5:fd:19:c1:cc:19:6f:05:22:56:31:93:fe:70:
0b:15:f3:8b:e0:d9:40:4e:fd:5a:59:4d:0c:7b:b7:
75:fb:e3:5b:69:4d:dd:1a:47:49:3d:26:fc:99:89:
4b:15:53:16:bc:ac:a9:d1:30:2a:a1:d3:bf:2a:65:
d5:d0:b7:c1:05:b5:64:13:9f:71:08:4c:5d:9e:8d:
d0:cc:bc:ab:74:9d:06:d8:82:15:bf:70:05:33:cd:
a5:01:cd:14:0a:06:88:cc:35:29:f7:c8:b2:31:54:
5a:92:aa:00:67:32:0f:12:6d:c5:d4:3a:31:60:55:
e8:5a:d8:c5:de:e8:2e:c8:5c:4b:42:e4:cd:d0:82:
41:fe:ab:3e:13:aa:e4:cc:10:95:12:8a:2c:33:73:
cb:3a:0d:c6:27:5a:f7:c5:99:f9:e5:7c:c4:d1:0a:
9d:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:A1:E7:A3:A7:34:C1:C5:09:1E:00:1D:88:C5:0B:57:BC:90:4B:49
X509v3 Authority Key Identifier:
keyid:29:F3:42:46:64:72:5D:58:20:BA:A7:82:71:31:43:A3:30:76:91:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KfNCRmRyXVgguqeCcTFDozB2kfM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/1298e1-a1e4-4abc-ab1f-649d25a95907/1/KfNCRmRyXVgguqeCcTFDozB2kfM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/1298e1-a1e4-4abc-ab1f-649d25a95907/1/KfNCRmRyXVgguqeCcTFDozB2kfM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:81:f6:6e:38:25:30:1e:ab:ca:53:0f:05:fe:9a:a3:21:bd:
5d:fa:76:03:66:d8:16:53:33:95:4f:a8:ea:0f:dd:ef:5f:be:
c2:4f:c8:43:f0:d0:f2:18:d0:62:00:e2:4a:ff:31:ed:d9:87:
b3:87:a1:fd:8b:d6:6e:6e:03:18:31:30:96:9b:33:68:ab:aa:
3f:c8:92:d7:d6:cd:6a:23:6f:8b:d7:35:39:ff:0e:50:c5:da:
3e:1c:62:2a:8c:5c:cf:c2:97:5c:c9:4e:a6:d7:cf:c1:da:36:
64:40:cb:10:8d:bd:7e:f5:1a:7e:4c:58:94:81:50:ff:88:ad:
4f:e5:99:bb:0f:bf:25:12:6e:a6:a5:68:d4:3f:d8:04:4c:93:
87:15:bc:71:99:66:c3:7b:ca:4e:85:90:46:66:c9:5a:c5:d4:
a0:e9:91:4f:ff:e4:08:be:67:84:c2:0d:bc:14:99:38:07:ce:
fb:b4:78:7b:a1:3f:8e:7e:2c:a5:d8:a2:b5:cf:b8:87:56:37:
7d:12:82:1a:ff:3c:b6:be:68:e2:e8:03:ea:cc:3e:e0:28:25:
a5:8d:d2:a0:77:ca:69:98:4f:85:35:b0:ac:1c:46:e9:88:f8:
99:53:20:80:a6:41:b1:89:e8:ee:34:79:05:78:27:1c:4c:84:
11:10:b3:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:25:51 2026 by rpki-client