Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fa/aaf49c-83dd-46aa-8ce7-b84c413dfaa4/1/KfajAL99QLf41hgcW4p9vHG30SM.mft
File: KfajAL99QLf41hgcW4p9vHG30SM.mft (raw, json)
Hash identifier: w2lRfhCbAm8t7DVllt0qpbafVWK9RXjs2aUeemizgRc=
Subject key identifier: AF:1B:4D:82:5C:62:4F:18:15:E3:41:27:90:7F:35:F5:E0:2E:09:FA
Authority key identifier: 29:F6:A3:00:BF:7D:40:B7:F8:D6:18:1C:5B:8A:7D:BC:71:B7:D1:23
Certificate issuer: /CN=29f6a300bf7d40b7f8d6181c5b8a7dbc71b7d123
Certificate serial: 01A0D34AF3B60D9DF8483260E37E0B8E04DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KfajAL99QLf41hgcW4p9vHG30SM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/aaf49c-83dd-46aa-8ce7-b84c413dfaa4/1/KfajAL99QLf41hgcW4p9vHG30SM.mft
Manifest number: 0E52
Signing time: Thu 24 Sep 2026 12:01:39 +0000
Manifest this update: Thu 24 Sep 2026 12:01:39 +0000
Manifest next update: Fri 25 Sep 2026 12:01:39 +0000
Files and hashes: 1: KfajAL99QLf41hgcW4p9vHG30SM.crl (hash: Bz1tmbQHdKhpOTjHjdZQ1xuuKl+d3L1qxEql/0F+Sf8=)
2: Kh4bW6-_s3_aiIv78ENw1EtU9qw.roa (hash: LByHcl5paKi4+lGJdAvzPijsfuoC7StCNhGpNyc/Ie4=)
3: PRcnKHrqlJcrd4HqtNpbJQskQ6A.roa (hash: aiGpWQ3cJ5Y8dalcsV9/+PGb+c10COEmzHR9vf++QS8=)
4: UlilGon0YKDf0xdX5d2N-ep_o1o.roa (hash: kcQzP6cGo7ynAzpkGcfKXnwKfZQwJn7rzspiaXGt8Ao=)
5: dtQ0vYUQe2hHFQXjgaPmdf2Qluw.roa (hash: XpIwnHaIKagXIHTB+uSCxfd4HTE9KgbBojxCDTnpYN4=)
6: gt6O10M70oZpClO9a6i6El8hrUo.roa (hash: eGC6/RzGV3nXmQHjfKro3h+k1W53IQpH+vbs4ORuu8Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/aaf49c-83dd-46aa-8ce7-b84c413dfaa4/1/KfajAL99QLf41hgcW4p9vHG30SM.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/aaf49c-83dd-46aa-8ce7-b84c413dfaa4/1/KfajAL99QLf41hgcW4p9vHG30SM.mft
rsync://rpki.ripe.net/repository/DEFAULT/KfajAL99QLf41hgcW4p9vHG30SM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 12:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d3:4a:f3:b6:0d:9d:f8:48:32:60:e3:7e:0b:8e:04:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29f6a300bf7d40b7f8d6181c5b8a7dbc71b7d123
Validity
Not Before: Sep 24 12:01:39 2026 GMT
Not After : Sep 25 12:01:39 2026 GMT
Subject: CN=af1b4d825c624f1815e34127907f35f5e02e09fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:0b:a8:67:8b:88:dd:8f:07:f6:a7:cb:8c:83:
d7:05:7a:34:58:fb:da:27:62:ee:e5:ea:1e:1e:81:
5c:03:67:68:ab:fa:5e:57:65:0c:64:3e:f7:a8:40:
17:ca:8f:c0:bd:4e:b4:8f:e5:f1:5a:1a:a2:15:34:
a8:c7:8b:13:3d:bc:74:4a:8e:fb:9d:ae:d2:94:f1:
37:6a:c1:03:47:73:52:2a:4a:5f:8d:15:80:4d:79:
da:fd:32:a8:42:f0:00:81:e5:7f:7a:b8:d5:fe:83:
7c:cc:82:91:2b:40:0c:47:c9:b9:f6:0d:11:65:b0:
b6:e5:7a:44:9e:9d:6b:3c:5d:22:fa:03:05:72:b8:
e7:fd:bc:ce:f1:ea:8f:21:6a:53:65:5b:34:d3:4a:
6b:25:b6:ed:04:53:b4:2e:4a:16:ec:b1:24:3c:84:
62:9c:b3:13:57:5f:4b:ac:f0:05:d3:d0:72:94:bd:
5c:7c:c4:d8:e3:04:ac:6c:e5:22:35:18:b8:fc:ec:
06:c6:77:e6:49:fa:e0:41:0a:6f:7f:30:9b:1c:7d:
05:87:90:ee:bd:78:07:95:38:3c:1f:fc:32:a8:9d:
a7:ad:7e:f4:6c:e6:cf:39:ac:10:08:cd:50:bb:87:
22:54:05:ee:f1:f7:1c:42:12:37:6a:78:86:e3:70:
15:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:1B:4D:82:5C:62:4F:18:15:E3:41:27:90:7F:35:F5:E0:2E:09:FA
X509v3 Authority Key Identifier:
keyid:29:F6:A3:00:BF:7D:40:B7:F8:D6:18:1C:5B:8A:7D:BC:71:B7:D1:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KfajAL99QLf41hgcW4p9vHG30SM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/aaf49c-83dd-46aa-8ce7-b84c413dfaa4/1/KfajAL99QLf41hgcW4p9vHG30SM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/aaf49c-83dd-46aa-8ce7-b84c413dfaa4/1/KfajAL99QLf41hgcW4p9vHG30SM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:b2:6e:f5:3c:a0:9d:ec:2e:f6:48:0e:43:a7:27:ab:d2:55:
0c:c5:2d:6b:db:83:74:47:2d:a7:aa:17:19:eb:90:b7:2a:05:
f9:f2:18:7b:a7:08:7e:e5:4d:7c:4b:89:06:9f:85:07:41:e7:
a5:33:fb:7d:91:ac:6b:d9:a1:98:1e:98:f3:f5:e7:81:7c:7e:
c6:ac:e0:d0:90:70:cc:ba:af:f2:04:98:54:03:a9:47:8b:e1:
ee:45:0a:f7:90:4d:8a:3d:b5:35:bb:1e:27:5a:fc:02:12:df:
45:9a:09:d9:e3:b4:45:0e:0b:b3:d8:9d:a1:c8:2c:60:8a:ba:
60:82:31:f3:ea:f4:35:6b:80:c1:36:20:41:8d:46:84:b2:7d:
fc:f6:f9:ff:77:aa:f6:d7:25:ec:64:6c:e8:f1:7a:e0:08:c9:
bd:42:b0:13:9c:6f:80:90:4e:df:10:03:0f:f3:64:82:50:8a:
e1:ee:ca:7a:00:72:9f:1f:b9:0b:c8:24:47:25:43:ae:d6:35:
26:75:ad:14:d9:9b:13:f8:40:80:51:f7:8a:89:9e:f6:fa:cb:
2c:ff:05:3a:43:13:84:07:0a:77:1d:6e:66:00:8a:9b:e9:8d:
73:7e:71:6c:3c:c4:c8:b5:41:07:4f:8f:3b:fa:18:c7:ec:bc:
90:2d:5a:4c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDTSvO2DZ34SDJg434LjgTaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI5ZjZhMzAwYmY3ZDQwYjdmOGQ2MTgxYzViOGE3ZGJjNzFi
N2QxMjMwHhcNMjYwOTI0MTIwMTM5WhcNMjYwOTI1MTIwMTM5WjAzMTEwLwYDVQQD
EyhhZjFiNGQ4MjVjNjI0ZjE4MTVlMzQxMjc5MDdmMzVmNWUwMmUwOWZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAowuoZ4uI3Y8H9qfLjIPXBXo0WPva
J2Lu5eoeHoFcA2doq/peV2UMZD73qEAXyo/AvU60j+XxWhqiFTSox4sTPbx0So77
na7SlPE3asEDR3NSKkpfjRWATXna/TKoQvAAgeV/erjV/oN8zIKRK0AMR8m59g0R
ZbC25XpEnp1rPF0i+gMFcrjn/bzO8eqPIWpTZVs000prJbbtBFO0LkoW7LEkPIRi
nLMTV19LrPAF09BylL1cfMTY4wSsbOUiNRi4/OwGxnfmSfrgQQpvfzCbHH0Fh5Du
vXgHlTg8H/wyqJ2nrX70bObPOawQCM1Qu4ciVAXu8fccQhI3aniG43AVhQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK8bTYJcYk8YFeNBJ5B/NfXgLgn6MB8GA1UdIwQY
MBaAFCn2owC/fUC3+NYYHFuKfbxxt9EjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS2ZhakFMOTlRTGY0MWhnY1c0cDl2SEczMFNNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS9hYWY0OWMtODNkZC00NmFhLThjZTct
Yjg0YzQxM2RmYWE0LzEvS2ZhakFMOTlRTGY0MWhnY1c0cDl2SEczMFNNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYS9hYWY0OWMtODNkZC00NmFhLThjZTctYjg0YzQxM2RmYWE0
LzEvS2ZhakFMOTlRTGY0MWhnY1c0cDl2SEczMFNNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKbJu9Tyg
newu9kgOQ6cnq9JVDMUta9uDdEctp6oXGeuQtyoF+fIYe6cIfuVNfEuJBp+FB0Hn
pTP7fZGsa9mhmB6Y8/XngXx+xqzg0JBwzLqv8gSYVAOpR4vh7kUK95BNij21Nbse
J1r8AhLfRZoJ2eO0RQ4Ls9idocgsYIq6YIIx8+r0NWuAwTYgQY1GhLJ9/Pb5/3eq
9tcl7GRs6PF64AjJvUKwE5xvgJBO3xADD/NkglCK4e7KegBynx+5C8gkRyVDrtY1
JnWtFNmbE/hAgFH3iome9vrLLP8FOkMThAcKdx1uZgCKm+mNc35xbDzEyLVBB0+P
O/oYx+y8kC1aTA==
-----END CERTIFICATE-----
Generated at Thu Sep 24 15:55:22 2026 by rpki-client