Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/aaf49c-83dd-46aa-8ce7-b84c413dfaa4/1/KfajAL99QLf41hgcW4p9vHG30SM.mft
File: KfajAL99QLf41hgcW4p9vHG30SM.mft (raw, json)
Hash identifier: eXNr7fdPmxKnuRuGO+1E5b2msBDSK4iGSrrvxkxDJNo=
Subject key identifier: AF:35:9D:19:D9:BE:EE:90:04:E0:E3:87:EA:F4:51:40:D5:1D:9E:04
Authority key identifier: 29:F6:A3:00:BF:7D:40:B7:F8:D6:18:1C:5B:8A:7D:BC:71:B7:D1:23
Certificate issuer: /CN=29f6a300bf7d40b7f8d6181c5b8a7dbc71b7d123
Certificate serial: 019F90C848C085E6ADDC2184F329411BD56A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KfajAL99QLf41hgcW4p9vHG30SM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/aaf49c-83dd-46aa-8ce7-b84c413dfaa4/1/KfajAL99QLf41hgcW4p9vHG30SM.mft
Manifest number: 0DAB
Signing time: Thu 23 Jul 2026 21:01:12 +0000
Manifest this update: Thu 23 Jul 2026 21:01:12 +0000
Manifest next update: Fri 24 Jul 2026 21:01:12 +0000
Files and hashes: 1: KfajAL99QLf41hgcW4p9vHG30SM.crl (hash: 3xV0JDh6mEB/aY4+yCTtApTbZAyrzNES6PGgMYCEGVg=)
2: Kh4bW6-_s3_aiIv78ENw1EtU9qw.roa (hash: LByHcl5paKi4+lGJdAvzPijsfuoC7StCNhGpNyc/Ie4=)
3: PRcnKHrqlJcrd4HqtNpbJQskQ6A.roa (hash: aiGpWQ3cJ5Y8dalcsV9/+PGb+c10COEmzHR9vf++QS8=)
4: UlilGon0YKDf0xdX5d2N-ep_o1o.roa (hash: kcQzP6cGo7ynAzpkGcfKXnwKfZQwJn7rzspiaXGt8Ao=)
5: dtQ0vYUQe2hHFQXjgaPmdf2Qluw.roa (hash: XpIwnHaIKagXIHTB+uSCxfd4HTE9KgbBojxCDTnpYN4=)
6: gt6O10M70oZpClO9a6i6El8hrUo.roa (hash: eGC6/RzGV3nXmQHjfKro3h+k1W53IQpH+vbs4ORuu8Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/aaf49c-83dd-46aa-8ce7-b84c413dfaa4/1/KfajAL99QLf41hgcW4p9vHG30SM.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/aaf49c-83dd-46aa-8ce7-b84c413dfaa4/1/KfajAL99QLf41hgcW4p9vHG30SM.mft
rsync://rpki.ripe.net/repository/DEFAULT/KfajAL99QLf41hgcW4p9vHG30SM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 21:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:c8:48:c0:85:e6:ad:dc:21:84:f3:29:41:1b:d5:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29f6a300bf7d40b7f8d6181c5b8a7dbc71b7d123
Validity
Not Before: Jul 23 21:01:12 2026 GMT
Not After : Jul 24 21:01:12 2026 GMT
Subject: CN=af359d19d9beee9004e0e387eaf45140d51d9e04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:ff:ac:92:d1:52:93:f2:e6:68:e7:0d:3b:a1:
fe:03:30:c1:fb:7d:90:58:eb:4d:ef:38:39:9e:24:
3c:90:c5:b1:5a:0b:8e:5d:9f:55:1a:f9:1c:bb:c7:
5d:a6:38:e0:3a:5d:59:41:e7:dd:be:9f:4d:84:2f:
5b:0e:f5:b3:8b:bd:9a:6c:c7:b3:59:49:9b:cf:7f:
1d:99:3f:74:ef:c4:30:fb:5e:19:63:37:e4:3a:e0:
c1:cd:58:56:f6:31:3f:e7:4d:e8:c9:89:c3:10:fb:
50:a6:39:c5:a3:c5:e5:89:36:2d:37:6e:fd:29:55:
fe:9d:78:b6:ab:fa:93:4e:70:ab:78:31:e6:4f:53:
f4:aa:eb:18:0b:41:a6:f1:e8:13:c9:1e:ad:cf:f7:
b2:5b:48:f1:ba:4e:5e:1a:a1:f4:f2:ff:d1:ed:76:
71:54:b9:11:72:81:02:a1:cd:23:7d:95:23:73:9e:
25:52:bc:1e:9b:10:00:62:d4:00:68:87:4c:a5:ad:
a4:3f:d0:9f:b3:08:69:87:05:27:3a:33:ff:0f:cc:
84:f6:85:18:aa:07:23:f3:55:71:51:82:a7:36:a4:
a5:c3:80:fb:3b:e0:b3:66:09:6a:9d:cd:dc:47:96:
0a:bd:23:7d:ac:4e:4f:d3:51:96:a1:29:29:0e:2f:
85:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:35:9D:19:D9:BE:EE:90:04:E0:E3:87:EA:F4:51:40:D5:1D:9E:04
X509v3 Authority Key Identifier:
keyid:29:F6:A3:00:BF:7D:40:B7:F8:D6:18:1C:5B:8A:7D:BC:71:B7:D1:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KfajAL99QLf41hgcW4p9vHG30SM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/aaf49c-83dd-46aa-8ce7-b84c413dfaa4/1/KfajAL99QLf41hgcW4p9vHG30SM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/aaf49c-83dd-46aa-8ce7-b84c413dfaa4/1/KfajAL99QLf41hgcW4p9vHG30SM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:78:cd:df:0d:5e:fb:5f:40:7d:3e:4a:84:d3:b1:49:e6:a3:
9c:af:60:b6:dd:f9:42:9e:54:d2:fe:b7:af:7e:2a:42:e1:60:
d2:8c:7b:5b:89:40:88:dd:74:63:33:a2:96:e5:10:0d:40:81:
28:6b:48:ae:33:10:be:34:4d:39:d2:de:b3:be:2a:1c:0f:04:
78:a4:2b:d0:86:8c:df:e0:72:7a:ff:36:cc:27:da:f9:79:d5:
9e:a7:7a:ac:29:66:a0:b6:ba:80:6f:e4:77:3f:77:1b:1d:44:
9d:12:3a:d2:90:b5:84:f5:5b:96:8b:51:4f:b0:ed:10:18:df:
0d:84:fa:a5:6d:d8:6a:36:a7:2f:b0:2b:33:c7:e9:1b:58:94:
6c:c0:f5:43:0f:ba:40:af:9b:2a:f5:35:06:17:4e:dc:7c:50:
6d:59:bb:82:28:d0:59:05:8c:ea:34:57:aa:0b:ab:a3:91:41:
ae:5e:9f:05:85:af:3a:fb:04:f0:ea:f3:7e:97:30:f3:14:9c:
71:7a:3d:ae:6b:79:cf:52:95:23:73:be:c7:b5:42:53:c5:d6:
a1:65:3a:12:18:6d:45:4f:fa:2f:1c:70:73:72:f7:d2:e7:63:
b7:30:96:8b:a7:68:5a:a8:55:20:4c:f1:d7:06:85:da:13:73:
56:58:29:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 06:56:34 2026 by rpki-client