Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/35a19e-edab-44c9-916a-16b5ebdd2040/1/KAWFe6e9XcggxhYmxjNJ47f6p9M.mft
File: KAWFe6e9XcggxhYmxjNJ47f6p9M.mft (raw, json)
Hash identifier: 604tHEdpfvdCTCkBVFoCiGxbY4zZu2YIw9x2i4LFKbs=
Subject key identifier: 1F:40:FE:C2:4D:38:6C:7C:29:6D:E3:EF:BE:75:D3:1E:8E:7C:89:5B
Authority key identifier: 28:05:85:7B:A7:BD:5D:C8:20:C6:16:26:C6:33:49:E3:B7:FA:A7:D3
Certificate issuer: /CN=2805857ba7bd5dc820c61626c63349e3b7faa7d3
Certificate serial: 019D3AC17F77A8D3C5242A7A8A9A38887B64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KAWFe6e9XcggxhYmxjNJ47f6p9M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/35a19e-edab-44c9-916a-16b5ebdd2040/1/KAWFe6e9XcggxhYmxjNJ47f6p9M.mft
Manifest number: 1124
Signing time: Sun 29 Mar 2026 18:00:52 +0000
Manifest this update: Sun 29 Mar 2026 18:00:52 +0000
Manifest next update: Mon 30 Mar 2026 18:00:52 +0000
Files and hashes: 1: KAWFe6e9XcggxhYmxjNJ47f6p9M.crl (hash: fCr1XhYdxJU6SwtRyUDYrPHsg3tXrH8pAw1tLUyF0JU=)
2: O1rNzvRwKl6vTU_ykriXJLKMTfE.roa (hash: cMg6CgAQOaopNdwApex1GmDSfWpvN+uvDUY++vWUD+o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/35a19e-edab-44c9-916a-16b5ebdd2040/1/KAWFe6e9XcggxhYmxjNJ47f6p9M.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/35a19e-edab-44c9-916a-16b5ebdd2040/1/KAWFe6e9XcggxhYmxjNJ47f6p9M.mft
rsync://rpki.ripe.net/repository/DEFAULT/KAWFe6e9XcggxhYmxjNJ47f6p9M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 16:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:c1:7f:77:a8:d3:c5:24:2a:7a:8a:9a:38:88:7b:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2805857ba7bd5dc820c61626c63349e3b7faa7d3
Validity
Not Before: Mar 29 18:00:52 2026 GMT
Not After : Mar 30 18:00:52 2026 GMT
Subject: CN=1f40fec24d386c7c296de3efbe75d31e8e7c895b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:a9:b6:88:92:5b:59:a8:14:d5:42:ac:a1:84:
71:37:dd:c7:1c:86:a1:f7:34:f0:88:25:9e:ed:13:
f7:fd:9b:26:17:70:3a:18:65:ce:2d:be:5e:fe:7f:
94:f1:e9:82:97:55:9b:45:ca:20:50:2a:74:b9:01:
f9:9d:ec:a7:f6:2e:1d:33:22:e7:89:15:a4:92:b9:
02:2d:c3:14:12:ad:bb:39:74:f9:14:a8:22:85:98:
7f:fa:2d:f8:19:c4:4a:f8:ec:e1:a6:20:f2:03:0c:
d1:f7:7e:60:98:9f:12:42:26:a7:6c:25:ef:17:c8:
4d:91:58:6f:84:11:35:7f:10:a5:69:97:b0:51:51:
2b:de:f6:a4:46:92:ab:cb:b5:dd:80:20:8c:6d:b8:
44:7e:39:85:2a:62:f7:13:31:c6:5c:97:e8:f8:fe:
1d:4a:50:66:24:06:d9:24:72:57:aa:c4:57:e9:cd:
60:8e:3f:cb:be:1a:0a:51:b2:3e:03:1b:6b:59:33:
93:6c:6b:da:76:8e:54:44:0f:54:ee:cd:14:df:ee:
16:65:70:81:a7:99:c1:4f:17:fb:b3:78:1a:c0:21:
d3:47:68:fc:53:5e:63:b1:50:dc:c3:b8:e2:53:df:
dd:b1:90:64:f7:53:67:d4:a6:7c:b6:ad:3d:ad:4c:
e9:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:40:FE:C2:4D:38:6C:7C:29:6D:E3:EF:BE:75:D3:1E:8E:7C:89:5B
X509v3 Authority Key Identifier:
keyid:28:05:85:7B:A7:BD:5D:C8:20:C6:16:26:C6:33:49:E3:B7:FA:A7:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KAWFe6e9XcggxhYmxjNJ47f6p9M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/35a19e-edab-44c9-916a-16b5ebdd2040/1/KAWFe6e9XcggxhYmxjNJ47f6p9M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/35a19e-edab-44c9-916a-16b5ebdd2040/1/KAWFe6e9XcggxhYmxjNJ47f6p9M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:95:e4:40:00:d8:71:1f:20:5c:a5:29:de:56:0c:96:44:8a:
fa:e0:5a:5c:e8:27:3f:c9:fa:f5:e5:6e:15:dc:c8:5a:71:13:
2b:1f:e6:c8:55:96:35:cc:7c:29:fa:89:e9:37:a1:ef:b2:f8:
2e:7e:c4:b5:3a:71:86:91:3f:d5:ca:74:46:87:08:9d:86:b9:
03:76:91:ce:ae:08:80:c9:b4:8b:66:53:bf:cd:5c:a0:06:89:
96:da:d2:dc:03:ca:ce:4e:7f:67:24:b2:af:35:de:0f:64:6c:
06:1a:74:8a:11:b9:33:02:39:ff:2a:5d:80:50:9a:2d:e2:65:
24:e8:50:ae:a6:02:36:96:d2:c0:3b:5a:cd:12:7c:7e:c1:09:
fa:d0:b2:68:7a:37:3a:31:e8:eb:a4:f8:80:dc:52:12:63:ce:
14:9f:45:5c:ee:85:aa:5c:42:5f:bd:4b:39:66:26:a8:d6:24:
14:4c:70:b5:1a:e8:f4:10:ba:4d:1a:de:a8:7a:60:25:ac:04:
ba:29:ac:ea:ea:5c:a9:50:d8:66:8e:fe:9d:50:a6:01:6b:19:
ee:57:d3:45:5a:bc:f2:22:ac:14:a9:1b:0f:e4:41:75:30:e5:
5a:84:3e:8b:aa:83:f4:ef:f1:7f:d3:dd:bf:79:17:64:dd:2f:
2b:ad:7d:18
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ06wX93qNPFJCp6ipo4iHtkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI4MDU4NTdiYTdiZDVkYzgyMGM2MTYyNmM2MzM0OWUzYjdm
YWE3ZDMwHhcNMjYwMzI5MTgwMDUyWhcNMjYwMzMwMTgwMDUyWjAzMTEwLwYDVQQD
EygxZjQwZmVjMjRkMzg2YzdjMjk2ZGUzZWZiZTc1ZDMxZThlN2M4OTViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9am2iJJbWagU1UKsoYRxN93HHIah
9zTwiCWe7RP3/ZsmF3A6GGXOLb5e/n+U8emCl1WbRcogUCp0uQH5neyn9i4dMyLn
iRWkkrkCLcMUEq27OXT5FKgihZh/+i34GcRK+OzhpiDyAwzR935gmJ8SQianbCXv
F8hNkVhvhBE1fxClaZewUVEr3vakRpKry7XdgCCMbbhEfjmFKmL3EzHGXJfo+P4d
SlBmJAbZJHJXqsRX6c1gjj/LvhoKUbI+AxtrWTOTbGvado5URA9U7s0U3+4WZXCB
p5nBTxf7s3gawCHTR2j8U15jsVDcw7jiU9/dsZBk91Nn1KZ8tq09rUzp9QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB9A/sJNOGx8KW3j77510x6OfIlbMB8GA1UdIwQY
MBaAFCgFhXunvV3IIMYWJsYzSeO3+qfTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS0FXRmU2ZTlYY2dneGhZbXhqTko0N2Y2cDlNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS8zNWExOWUtZWRhYi00NGM5LTkxNmEt
MTZiNWViZGQyMDQwLzEvS0FXRmU2ZTlYY2dneGhZbXhqTko0N2Y2cDlNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNS8zNWExOWUtZWRhYi00NGM5LTkxNmEtMTZiNWViZGQyMDQw
LzEvS0FXRmU2ZTlYY2dneGhZbXhqTko0N2Y2cDlNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAZXkQADY
cR8gXKUp3lYMlkSK+uBaXOgnP8n69eVuFdzIWnETKx/myFWWNcx8KfqJ6Teh77L4
Ln7EtTpxhpE/1cp0RocInYa5A3aRzq4IgMm0i2ZTv81coAaJltrS3APKzk5/ZySy
rzXeD2RsBhp0ihG5MwI5/ypdgFCaLeJlJOhQrqYCNpbSwDtazRJ8fsEJ+tCyaHo3
OjHo66T4gNxSEmPOFJ9FXO6FqlxCX71LOWYmqNYkFExwtRro9BC6TRreqHpgJawE
uims6upcqVDYZo7+nVCmAWsZ7lfTRVq88iKsFKkbD+RBdTDlWoQ+i6qD9O/xf9Pd
v3kXZN0vK619GA==
-----END CERTIFICATE-----
Generated at Sun Mar 29 21:15:43 2026 by rpki-client