Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cf/1298e1-a1e4-4abc-ab1f-649d25a95907/1/KfNCRmRyXVgguqeCcTFDozB2kfM.mft
File: KfNCRmRyXVgguqeCcTFDozB2kfM.mft (raw, json)
Hash identifier: +vZOVRzj/MvpSJIdLlhMyHN/Gb5s05ghudH7Iu/fKSg=
Subject key identifier: 4F:74:35:13:D8:90:CF:5F:21:E3:20:D2:40:F8:10:EF:B2:0C:99:AE
Authority key identifier: 29:F3:42:46:64:72:5D:58:20:BA:A7:82:71:31:43:A3:30:76:91:F3
Certificate issuer: /CN=29f3424664725d5820baa782713143a3307691f3
Certificate serial: 01A1065CD174C523EFF596A99DBFF99776D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KfNCRmRyXVgguqeCcTFDozB2kfM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/1298e1-a1e4-4abc-ab1f-649d25a95907/1/KfNCRmRyXVgguqeCcTFDozB2kfM.mft
Manifest number: 04E2
Signing time: Sun 04 Oct 2026 10:01:48 +0000
Manifest this update: Sun 04 Oct 2026 10:01:48 +0000
Manifest next update: Mon 05 Oct 2026 10:01:48 +0000
Files and hashes: 1: KfNCRmRyXVgguqeCcTFDozB2kfM.crl (hash: HA8c6SbSKhHdKLCNj0AbdwCJtAfTyMy47HF7uQ29Jag=)
2: kNl2FH2h1RUbk8aiFoOzXqbZfiE.roa (hash: 75YFC9si8AQdOYzNPqXE8Vynriw8AkUBVZlHIzni5SA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/1298e1-a1e4-4abc-ab1f-649d25a95907/1/KfNCRmRyXVgguqeCcTFDozB2kfM.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/1298e1-a1e4-4abc-ab1f-649d25a95907/1/KfNCRmRyXVgguqeCcTFDozB2kfM.mft
rsync://rpki.ripe.net/repository/DEFAULT/KfNCRmRyXVgguqeCcTFDozB2kfM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 05:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:06:5c:d1:74:c5:23:ef:f5:96:a9:9d:bf:f9:97:76:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29f3424664725d5820baa782713143a3307691f3
Validity
Not Before: Oct 4 10:01:48 2026 GMT
Not After : Oct 5 10:01:48 2026 GMT
Subject: CN=4f743513d890cf5f21e320d240f810efb20c99ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:b5:cd:38:1f:df:64:06:36:ad:21:72:eb:79:
a2:27:3b:d2:93:ac:f7:18:33:6c:68:ee:73:cf:86:
98:c2:4d:c9:b8:fc:6e:fd:3c:10:ff:48:21:1d:7e:
d7:c0:4f:3f:ca:46:e7:53:ea:12:7a:23:78:2e:23:
1b:23:1e:63:eb:6a:13:87:86:01:41:d2:61:9c:03:
3b:aa:90:1b:e3:e8:b3:b3:e4:4c:cb:8b:de:28:86:
b1:fa:d0:19:d7:7b:5a:d2:da:e1:a4:a2:22:0f:68:
e6:f8:c0:db:96:70:eb:2c:ef:fd:31:94:0d:9a:e5:
00:03:25:70:91:a5:55:2d:2b:0a:c3:42:ba:24:b0:
74:4c:a6:94:f0:c2:0c:3a:31:2c:2b:3f:07:30:1d:
ab:e1:a0:59:ce:84:c9:5d:9e:9a:a1:7a:7d:e8:29:
35:d0:40:4c:6d:5d:6e:d2:9e:00:4e:fd:f0:2a:1b:
b1:31:1a:e8:a8:1d:6f:4e:c8:19:ba:3f:aa:53:a0:
74:e9:23:3c:a1:21:0c:bd:69:ca:d3:e6:4f:20:63:
ed:9a:15:7b:42:64:37:1a:d6:71:10:65:ec:c3:16:
e9:1b:b8:59:0f:d0:70:ef:45:60:f9:3d:e1:2e:16:
ad:0e:48:39:cb:10:d5:1f:f0:73:98:86:74:ed:7d:
2c:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:74:35:13:D8:90:CF:5F:21:E3:20:D2:40:F8:10:EF:B2:0C:99:AE
X509v3 Authority Key Identifier:
keyid:29:F3:42:46:64:72:5D:58:20:BA:A7:82:71:31:43:A3:30:76:91:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KfNCRmRyXVgguqeCcTFDozB2kfM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/1298e1-a1e4-4abc-ab1f-649d25a95907/1/KfNCRmRyXVgguqeCcTFDozB2kfM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/1298e1-a1e4-4abc-ab1f-649d25a95907/1/KfNCRmRyXVgguqeCcTFDozB2kfM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:38:1d:c7:1b:4a:80:11:0d:5e:7c:61:ad:16:e6:79:b6:24:
d1:2f:92:e2:ec:2a:b4:f5:bb:8b:c2:17:9a:cb:0a:be:fb:aa:
67:df:0b:c7:ae:25:5e:29:49:2f:e3:6c:8f:3c:d7:f8:34:4c:
e2:5a:6a:a0:f1:c5:95:cc:fb:6f:73:8a:a5:e5:52:62:cf:3b:
c0:f6:78:1f:2a:3e:ef:2a:2f:70:99:06:61:c5:83:92:35:60:
76:c5:69:2e:c6:8c:e0:f5:2b:da:f0:10:64:9e:d8:02:50:78:
43:b5:5d:8a:94:17:1a:8c:68:22:2d:1c:8d:4f:92:f2:55:81:
43:f3:f4:b7:f1:78:9e:41:46:47:20:08:de:e1:88:b2:c5:91:
18:52:ea:24:20:8a:b9:d7:44:9e:9a:97:a8:46:f9:db:1f:24:
96:ed:e6:3e:17:4b:96:8c:46:68:7d:fb:6f:5f:d3:66:a0:c7:
20:2f:4d:35:5a:35:9d:03:e6:19:2d:08:52:aa:e7:9b:d4:9f:
1d:f1:f7:c4:95:d2:45:64:06:f3:f3:d9:2f:4c:31:1e:c0:5f:
74:e1:29:bc:26:04:9e:08:42:5d:77:f2:cf:7a:df:0f:17:32:
e7:fa:3e:65:b4:69:ee:07:d7:b6:98:c8:65:33:9e:df:07:77:
a7:ba:29:3f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEGXNF0xSPv9Zapnb/5l3bTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI5ZjM0MjQ2NjQ3MjVkNTgyMGJhYTc4MjcxMzE0M2EzMzA3
NjkxZjMwHhcNMjYxMDA0MTAwMTQ4WhcNMjYxMDA1MTAwMTQ4WjAzMTEwLwYDVQQD
Eyg0Zjc0MzUxM2Q4OTBjZjVmMjFlMzIwZDI0MGY4MTBlZmIyMGM5OWFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw7XNOB/fZAY2rSFy63miJzvSk6z3
GDNsaO5zz4aYwk3JuPxu/TwQ/0ghHX7XwE8/ykbnU+oSeiN4LiMbIx5j62oTh4YB
QdJhnAM7qpAb4+izs+RMy4veKIax+tAZ13ta0trhpKIiD2jm+MDblnDrLO/9MZQN
muUAAyVwkaVVLSsKw0K6JLB0TKaU8MIMOjEsKz8HMB2r4aBZzoTJXZ6aoXp96Ck1
0EBMbV1u0p4ATv3wKhuxMRroqB1vTsgZuj+qU6B06SM8oSEMvWnK0+ZPIGPtmhV7
QmQ3GtZxEGXswxbpG7hZD9Bw70Vg+T3hLhatDkg5yxDVH/BzmIZ07X0sDwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE90NRPYkM9fIeMg0kD4EO+yDJmuMB8GA1UdIwQY
MBaAFCnzQkZkcl1YILqngnExQ6MwdpHzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS2ZOQ1JtUnlYVmdndXFlQ2NURkRvekIya2ZNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi8xMjk4ZTEtYTFlNC00YWJjLWFiMWYt
NjQ5ZDI1YTk1OTA3LzEvS2ZOQ1JtUnlYVmdndXFlQ2NURkRvekIya2ZNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZi8xMjk4ZTEtYTFlNC00YWJjLWFiMWYtNjQ5ZDI1YTk1OTA3
LzEvS2ZOQ1JtUnlYVmdndXFlQ2NURkRvekIya2ZNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmzgdxxtK
gBENXnxhrRbmebYk0S+S4uwqtPW7i8IXmssKvvuqZ98Lx64lXilJL+NsjzzX+DRM
4lpqoPHFlcz7b3OKpeVSYs87wPZ4Hyo+7yovcJkGYcWDkjVgdsVpLsaM4PUr2vAQ
ZJ7YAlB4Q7VdipQXGoxoIi0cjU+S8lWBQ/P0t/F4nkFGRyAI3uGIssWRGFLqJCCK
uddEnpqXqEb52x8klu3mPhdLloxGaH37b1/TZqDHIC9NNVo1nQPmGS0IUqrnm9Sf
HfH3xJXSRWQG8/PZL0wxHsBfdOEpvCYEnghCXXfyz3rfDxcy5/o+ZbRp7gfXtpjI
ZTOe3wd3p7opPw==
-----END CERTIFICATE-----
Generated at Sun Oct 4 16:58:13 2026 by rpki-client