Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/1298e1-a1e4-4abc-ab1f-649d25a95907/1/KfNCRmRyXVgguqeCcTFDozB2kfM.mft
File: KfNCRmRyXVgguqeCcTFDozB2kfM.mft (raw, json)
Hash identifier: OEWNaztVlH7zdE+a0s9CB1OLa8T+zgIhRwtoZK23BTk=
Subject key identifier: B8:F2:0C:DC:66:E1:DF:35:DB:31:50:57:B8:3A:09:21:36:B9:84:AC
Authority key identifier: 29:F3:42:46:64:72:5D:58:20:BA:A7:82:71:31:43:A3:30:76:91:F3
Certificate issuer: /CN=29f3424664725d5820baa782713143a3307691f3
Certificate serial: 019E20C812BBEA670ECDE595A18F4C53899E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KfNCRmRyXVgguqeCcTFDozB2kfM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/1298e1-a1e4-4abc-ab1f-649d25a95907/1/KfNCRmRyXVgguqeCcTFDozB2kfM.mft
Manifest number: 0362
Signing time: Wed 13 May 2026 10:00:43 +0000
Manifest this update: Wed 13 May 2026 10:00:43 +0000
Manifest next update: Thu 14 May 2026 10:00:43 +0000
Files and hashes: 1: KfNCRmRyXVgguqeCcTFDozB2kfM.crl (hash: r/KaX9yTAzX5Sg/NoezkGXIGE+IgNmVAZ78nijIPLi4=)
2: kNl2FH2h1RUbk8aiFoOzXqbZfiE.roa (hash: 75YFC9si8AQdOYzNPqXE8Vynriw8AkUBVZlHIzni5SA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/1298e1-a1e4-4abc-ab1f-649d25a95907/1/KfNCRmRyXVgguqeCcTFDozB2kfM.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/1298e1-a1e4-4abc-ab1f-649d25a95907/1/KfNCRmRyXVgguqeCcTFDozB2kfM.mft
rsync://rpki.ripe.net/repository/DEFAULT/KfNCRmRyXVgguqeCcTFDozB2kfM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:c8:12:bb:ea:67:0e:cd:e5:95:a1:8f:4c:53:89:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29f3424664725d5820baa782713143a3307691f3
Validity
Not Before: May 13 10:00:43 2026 GMT
Not After : May 14 10:00:43 2026 GMT
Subject: CN=b8f20cdc66e1df35db315057b83a092136b984ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:45:24:e2:cb:51:fd:16:f8:c9:b1:e9:73:9b:
ad:70:5c:78:fd:6d:d1:38:0d:04:4d:03:93:c9:3e:
39:1f:37:53:18:2c:cb:6e:fc:3d:6d:fd:ca:4d:78:
09:14:25:58:45:c7:6e:1d:d9:fa:16:53:80:2a:50:
ef:9b:2d:77:9a:80:d7:17:95:79:ca:52:8d:36:5a:
3d:df:fa:f3:aa:f2:e6:43:ca:07:4d:11:49:3c:db:
74:c7:20:94:20:64:3a:92:13:c4:86:de:60:c7:64:
00:d2:f8:4f:12:a5:13:c4:86:49:81:41:eb:a9:6f:
ae:5c:f4:a2:fd:8b:12:00:a5:05:f5:b1:b7:e0:f7:
f9:47:f7:29:0a:bc:49:d6:48:ee:ac:54:1b:ba:b6:
ea:88:2b:4a:5f:05:90:d7:60:4e:83:13:dc:1d:c4:
78:3e:ca:64:c3:26:e4:5c:fa:3d:91:04:42:7e:58:
20:ae:1c:36:0d:f9:20:10:49:25:0b:65:27:f1:2a:
c2:45:04:90:99:8a:26:af:66:8b:53:ec:d9:cd:9a:
ab:cc:0f:bf:b4:12:6a:3d:62:bb:1f:68:b2:89:d8:
e8:a7:bc:d1:3e:f6:03:ed:86:e8:fe:e9:9f:8e:51:
86:f2:b1:93:18:4d:26:0f:cf:d1:0a:bd:a1:e9:c1:
a5:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:F2:0C:DC:66:E1:DF:35:DB:31:50:57:B8:3A:09:21:36:B9:84:AC
X509v3 Authority Key Identifier:
keyid:29:F3:42:46:64:72:5D:58:20:BA:A7:82:71:31:43:A3:30:76:91:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KfNCRmRyXVgguqeCcTFDozB2kfM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/1298e1-a1e4-4abc-ab1f-649d25a95907/1/KfNCRmRyXVgguqeCcTFDozB2kfM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/1298e1-a1e4-4abc-ab1f-649d25a95907/1/KfNCRmRyXVgguqeCcTFDozB2kfM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:08:a3:d6:f5:4f:99:fa:65:7d:ce:cb:fc:29:0b:20:22:89:
7b:a9:aa:a4:8b:22:fd:d3:3a:41:ed:6c:97:c0:f4:8d:f0:b0:
98:69:a2:92:95:12:16:fb:58:a1:da:b1:f4:f2:80:f3:90:72:
4b:d4:1e:db:98:54:42:e0:fd:0a:32:30:32:6e:9e:a2:6c:cb:
fd:50:92:d3:1a:c7:24:72:d2:c5:f0:bd:9e:6a:f8:b0:cb:5b:
d7:69:4a:d4:aa:d0:aa:26:44:47:60:16:52:a2:56:d1:74:dd:
c6:3d:f8:43:f9:37:11:22:03:18:47:ec:20:62:78:ba:93:0b:
9c:a2:6e:f6:97:b7:25:12:a8:1b:33:5f:b5:3b:d6:4c:d5:7a:
f3:d6:39:82:86:81:c3:a6:da:05:1e:bf:ce:1e:ef:ca:a7:c1:
89:30:59:ae:13:38:be:14:79:dd:6a:37:43:8c:48:a4:92:01:
d3:b2:86:21:42:11:fa:96:0c:97:d0:0c:85:eb:81:2a:f8:ce:
25:02:8f:bc:20:ea:33:9d:4e:38:22:72:88:4f:18:fa:65:ed:
9b:c9:bb:0e:64:cd:d8:0e:16:9a:de:dc:a1:be:28:4e:8e:68:
7f:c8:c6:d8:2f:c8:e5:8f:3b:4d:20:f4:c4:16:4f:c5:b9:71:
dc:f5:92:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:12:16 2026 by rpki-client