Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/1298e1-a1e4-4abc-ab1f-649d25a95907/1/KfNCRmRyXVgguqeCcTFDozB2kfM.mft
File: KfNCRmRyXVgguqeCcTFDozB2kfM.mft (raw, json)
Hash identifier: a7UBmucNQZ9dWXoowckLDCRTDLMe+8m0C3veRYqog18=
Subject key identifier: FF:F4:4B:27:A0:E7:DB:EA:A9:96:FE:48:DF:45:CB:6D:B3:7D:A5:D2
Authority key identifier: 29:F3:42:46:64:72:5D:58:20:BA:A7:82:71:31:43:A3:30:76:91:F3
Certificate issuer: /CN=29f3424664725d5820baa782713143a3307691f3
Certificate serial: 019F9391C37C3A5DA449BA55E833F16C3B67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KfNCRmRyXVgguqeCcTFDozB2kfM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/1298e1-a1e4-4abc-ab1f-649d25a95907/1/KfNCRmRyXVgguqeCcTFDozB2kfM.mft
Manifest number: 0422
Signing time: Fri 24 Jul 2026 10:00:31 +0000
Manifest this update: Fri 24 Jul 2026 10:00:31 +0000
Manifest next update: Sat 25 Jul 2026 10:00:31 +0000
Files and hashes: 1: KfNCRmRyXVgguqeCcTFDozB2kfM.crl (hash: 1rlQ2flEMMNmASJVUoQ7t883Njy9wM+nic1JzPD2A4c=)
2: kNl2FH2h1RUbk8aiFoOzXqbZfiE.roa (hash: 75YFC9si8AQdOYzNPqXE8Vynriw8AkUBVZlHIzni5SA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/1298e1-a1e4-4abc-ab1f-649d25a95907/1/KfNCRmRyXVgguqeCcTFDozB2kfM.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/1298e1-a1e4-4abc-ab1f-649d25a95907/1/KfNCRmRyXVgguqeCcTFDozB2kfM.mft
rsync://rpki.ripe.net/repository/DEFAULT/KfNCRmRyXVgguqeCcTFDozB2kfM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 10:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:91:c3:7c:3a:5d:a4:49:ba:55:e8:33:f1:6c:3b:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29f3424664725d5820baa782713143a3307691f3
Validity
Not Before: Jul 24 10:00:31 2026 GMT
Not After : Jul 25 10:00:31 2026 GMT
Subject: CN=fff44b27a0e7dbeaa996fe48df45cb6db37da5d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:d2:24:65:4f:b8:b8:a1:0f:47:89:28:c1:01:
93:c9:ee:b8:9a:0a:94:94:73:20:cf:15:fc:85:99:
de:2e:90:f8:c0:99:77:c4:c2:6a:70:4d:63:e2:4e:
fc:63:28:df:9f:42:3d:5f:88:ce:b7:ac:83:80:ad:
08:5b:32:b7:44:ca:cf:04:4b:50:44:ff:63:59:e3:
ee:51:3b:8d:68:0c:47:fa:a3:07:1e:13:51:c0:09:
4f:92:95:fc:c1:47:a5:75:70:69:da:14:77:0a:13:
97:59:48:18:06:f4:cb:9e:75:a3:98:c9:9d:f9:1a:
d2:05:45:5b:a0:b2:1d:1d:98:6b:fd:aa:fa:24:62:
b1:50:ce:d5:a3:ca:41:03:09:87:83:0e:b0:97:63:
07:d2:d4:eb:15:f4:00:c7:e8:16:85:16:d6:bd:68:
f9:ff:8c:b3:70:97:ce:43:ea:4b:5a:a4:d5:ab:41:
a4:05:3d:82:f3:4f:06:a6:b0:c1:c5:d7:35:31:6a:
08:6f:25:91:fe:1d:69:14:0f:0c:15:1e:92:c4:81:
f2:ac:45:ff:de:09:d0:8b:b2:e3:59:6a:8e:d3:bd:
4d:46:85:18:56:d6:aa:37:50:40:41:b2:13:ad:d2:
97:83:bd:fd:71:22:d6:df:e3:1a:2e:1b:6a:d0:a3:
4b:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:F4:4B:27:A0:E7:DB:EA:A9:96:FE:48:DF:45:CB:6D:B3:7D:A5:D2
X509v3 Authority Key Identifier:
keyid:29:F3:42:46:64:72:5D:58:20:BA:A7:82:71:31:43:A3:30:76:91:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KfNCRmRyXVgguqeCcTFDozB2kfM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/1298e1-a1e4-4abc-ab1f-649d25a95907/1/KfNCRmRyXVgguqeCcTFDozB2kfM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/1298e1-a1e4-4abc-ab1f-649d25a95907/1/KfNCRmRyXVgguqeCcTFDozB2kfM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:76:35:e7:e4:a8:f8:82:b8:7a:46:f3:dc:37:21:59:94:9e:
e0:04:c1:08:47:ec:bc:c2:2d:e5:80:72:73:76:7c:e7:ba:e7:
8e:79:5d:f3:df:15:42:60:12:8b:70:a7:49:c4:bc:42:fe:fb:
9c:86:83:d2:07:00:4c:3b:f3:20:bf:96:c2:79:9f:eb:48:2c:
93:dc:b3:85:03:dd:8e:3e:2c:f6:c0:f1:19:8c:8e:28:31:a8:
e9:e7:c1:6b:a0:e0:56:5d:53:b0:72:3a:29:55:d7:dc:7f:03:
de:b9:73:ee:32:c0:e4:5f:11:ae:17:01:0a:c4:c7:c7:b5:f5:
88:a5:e5:aa:68:f9:03:96:f4:05:a7:91:02:52:1a:6f:62:26:
b1:c3:7e:43:18:d7:51:f0:20:74:9e:26:e5:56:b0:54:59:67:
8f:dc:17:12:55:25:07:10:f8:37:b7:c1:24:d7:5a:72:d6:2d:
6d:94:86:40:6b:ea:ff:1a:16:2e:1f:60:00:e9:16:e8:8a:da:
dd:79:a6:f9:f2:e6:de:09:7b:2e:46:de:19:6a:7d:ab:b2:a5:
20:51:77:db:f5:7f:a5:e0:e5:e0:0e:d9:e9:f8:a8:83:96:fa:
de:eb:8a:d0:33:1b:78:8c:7c:28:1d:2e:b0:70:6f:68:73:40:
ac:c0:96:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:48:42 2026 by rpki-client