Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/aaf49c-83dd-46aa-8ce7-b84c413dfaa4/1/KfajAL99QLf41hgcW4p9vHG30SM.mft
File: KfajAL99QLf41hgcW4p9vHG30SM.mft (raw, json)
Hash identifier: 9fhnRwaeKl8KDCMDsGhM8gRkMpIXoidG8Nyu37GOMGA=
Subject key identifier: F1:2A:86:8D:A8:12:B3:D7:65:FE:2F:B9:9B:29:AF:33:DA:38:A2:D7
Authority key identifier: 29:F6:A3:00:BF:7D:40:B7:F8:D6:18:1C:5B:8A:7D:BC:71:B7:D1:23
Certificate issuer: /CN=29f6a300bf7d40b7f8d6181c5b8a7dbc71b7d123
Certificate serial: 019D2A04946AB3CBEA68C5C86E364EE6B072
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KfajAL99QLf41hgcW4p9vHG30SM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/aaf49c-83dd-46aa-8ce7-b84c413dfaa4/1/KfajAL99QLf41hgcW4p9vHG30SM.mft
Manifest number: 0C6B
Signing time: Thu 26 Mar 2026 12:00:36 +0000
Manifest this update: Thu 26 Mar 2026 12:00:36 +0000
Manifest next update: Fri 27 Mar 2026 12:00:36 +0000
Files and hashes: 1: KfajAL99QLf41hgcW4p9vHG30SM.crl (hash: C/RLtmdHcyy/wfsXMe5qm2tcrUdaVZeuvOZmvaxud6o=)
2: Kh4bW6-_s3_aiIv78ENw1EtU9qw.roa (hash: LByHcl5paKi4+lGJdAvzPijsfuoC7StCNhGpNyc/Ie4=)
3: UlilGon0YKDf0xdX5d2N-ep_o1o.roa (hash: kcQzP6cGo7ynAzpkGcfKXnwKfZQwJn7rzspiaXGt8Ao=)
4: dtQ0vYUQe2hHFQXjgaPmdf2Qluw.roa (hash: XpIwnHaIKagXIHTB+uSCxfd4HTE9KgbBojxCDTnpYN4=)
5: tg0TgMF_mOcJrDdgBYL-290G2-M.roa (hash: UjyXgWR1IlQdcA1RR5ThsgsI4c2xfE45PbnBDC6Sn6o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/aaf49c-83dd-46aa-8ce7-b84c413dfaa4/1/KfajAL99QLf41hgcW4p9vHG30SM.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/aaf49c-83dd-46aa-8ce7-b84c413dfaa4/1/KfajAL99QLf41hgcW4p9vHG30SM.mft
rsync://rpki.ripe.net/repository/DEFAULT/KfajAL99QLf41hgcW4p9vHG30SM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:04:94:6a:b3:cb:ea:68:c5:c8:6e:36:4e:e6:b0:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29f6a300bf7d40b7f8d6181c5b8a7dbc71b7d123
Validity
Not Before: Mar 26 12:00:36 2026 GMT
Not After : Mar 27 12:00:36 2026 GMT
Subject: CN=f12a868da812b3d765fe2fb99b29af33da38a2d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:16:26:3a:28:4c:e8:43:7c:6a:84:2a:24:1c:
2f:ea:a6:95:cd:1a:e5:b6:34:f5:38:a6:85:be:f4:
d4:67:38:25:ca:76:45:b8:53:50:a5:d7:79:fc:ec:
da:83:11:e3:e5:e0:1b:fb:24:b1:b5:6a:2a:1b:b7:
91:27:99:3b:ae:09:5e:ce:a9:08:f1:87:6c:3c:3d:
2c:6d:07:bc:df:b5:d3:54:81:d6:a7:da:93:4c:56:
d8:40:8f:17:a1:75:5b:98:ce:51:46:5f:dd:59:6b:
05:9c:f1:fe:5d:b8:97:57:be:bf:fa:6d:ca:e8:9c:
ad:98:2e:2b:74:34:7d:be:ea:e3:4e:95:19:8e:da:
9c:a6:73:d6:78:42:e3:85:5f:5c:b7:07:ad:ae:05:
1d:47:f4:d4:24:93:a9:06:80:83:79:9c:bb:3b:a3:
72:b1:5c:69:65:74:0e:b7:43:db:97:9c:a7:06:49:
1f:59:af:c2:3e:6a:c5:7c:ad:47:c5:30:31:99:a4:
2f:af:72:01:bf:eb:f3:01:4c:2e:f9:76:1b:50:5d:
9c:56:1a:20:6d:2f:64:bb:f7:62:46:3c:db:e9:fa:
da:83:14:7d:fb:ce:b3:5f:9f:6a:a2:7a:14:b7:de:
4f:39:aa:d0:b0:1b:3b:22:d5:11:6e:5f:9f:38:d6:
0c:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:2A:86:8D:A8:12:B3:D7:65:FE:2F:B9:9B:29:AF:33:DA:38:A2:D7
X509v3 Authority Key Identifier:
keyid:29:F6:A3:00:BF:7D:40:B7:F8:D6:18:1C:5B:8A:7D:BC:71:B7:D1:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KfajAL99QLf41hgcW4p9vHG30SM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/aaf49c-83dd-46aa-8ce7-b84c413dfaa4/1/KfajAL99QLf41hgcW4p9vHG30SM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/aaf49c-83dd-46aa-8ce7-b84c413dfaa4/1/KfajAL99QLf41hgcW4p9vHG30SM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:a0:ce:a7:a6:ba:f9:42:ce:f2:3c:04:de:15:04:45:21:1d:
28:c3:52:f3:fd:e3:46:24:0f:6c:64:8f:1d:85:cc:ac:f8:ec:
60:27:f6:48:96:52:15:b2:ba:8b:56:b1:8a:49:5a:1c:e8:0e:
58:6c:69:55:0d:2f:10:5c:b0:f2:bc:13:fd:d8:c0:d4:d8:87:
05:33:a7:df:d3:1c:9c:7f:f5:81:c8:7e:5a:4f:fe:85:0c:10:
16:4a:31:ea:95:06:f8:de:49:bb:72:0b:b1:65:cc:6d:9b:04:
f5:8e:ab:6a:8b:aa:83:30:82:f9:3d:fd:ef:28:74:d1:dc:69:
1d:ad:24:3b:20:89:2a:54:9d:d4:d1:1c:83:b6:bc:ac:97:60:
c7:d1:de:82:93:dd:72:f3:b4:0d:46:91:0e:ef:3a:b9:2e:9c:
7d:ea:c9:dc:b0:d5:a8:72:63:8d:97:3c:6e:a2:d2:68:31:3f:
95:cb:85:74:49:5b:28:b5:2f:9e:eb:d1:17:8f:7c:39:2e:37:
1d:70:7e:04:e2:22:2b:ca:f2:71:a5:bf:85:67:a6:a8:07:cb:
7c:37:c3:03:47:a6:34:cb:0b:dd:ca:a0:45:83:d9:fe:45:70:
ef:df:9a:04:08:48:5c:57:93:f1:67:5c:95:26:15:5d:3d:23:
7b:2b:9b:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:15:44 2026 by rpki-client