Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/8d9ac1-d35d-4e32-b83f-c10cc953bd1b/1/kW-Aw18gLrAnZkGb-30oISX_4Vg.mft
File: kW-Aw18gLrAnZkGb-30oISX_4Vg.mft (raw, json)
Hash identifier: edXbB2yqK215SFCRHxQQQGzn5QzsL6s4uF/JS8aFeZ8=
Subject key identifier: 00:BA:CE:A6:14:44:A8:53:AF:42:89:0E:B7:27:05:C3:02:9D:E6:5D
Authority key identifier: 91:6F:80:C3:5F:20:2E:B0:27:66:41:9B:FB:7D:28:21:25:FF:E1:58
Certificate issuer: /CN=916f80c35f202eb02766419bfb7d282125ffe158
Certificate serial: 019D389BBD3A50052B367A843465DA46E8A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kW-Aw18gLrAnZkGb-30oISX_4Vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/8d9ac1-d35d-4e32-b83f-c10cc953bd1b/1/kW-Aw18gLrAnZkGb-30oISX_4Vg.mft
Manifest number: 1895
Signing time: Sun 29 Mar 2026 08:00:23 +0000
Manifest this update: Sun 29 Mar 2026 08:00:23 +0000
Manifest next update: Mon 30 Mar 2026 08:00:23 +0000
Files and hashes: 1: FtTJzPkf-_88xIHu--X3c9IY9io.roa (hash: +RLOecQj9Ebpgf8gHXNoECBgbn6HhMEJfLnzjcBP8tQ=)
2: kW-Aw18gLrAnZkGb-30oISX_4Vg.crl (hash: X4Jv7m3d53EvbnWT6vby7RxzhmdAnnmS1wtCWbfPCvQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/8d9ac1-d35d-4e32-b83f-c10cc953bd1b/1/kW-Aw18gLrAnZkGb-30oISX_4Vg.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/8d9ac1-d35d-4e32-b83f-c10cc953bd1b/1/kW-Aw18gLrAnZkGb-30oISX_4Vg.mft
rsync://rpki.ripe.net/repository/DEFAULT/kW-Aw18gLrAnZkGb-30oISX_4Vg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9b:bd:3a:50:05:2b:36:7a:84:34:65:da:46:e8:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=916f80c35f202eb02766419bfb7d282125ffe158
Validity
Not Before: Mar 29 08:00:23 2026 GMT
Not After : Mar 30 08:00:23 2026 GMT
Subject: CN=00bacea61444a853af42890eb72705c3029de65d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:f6:c2:17:b3:1f:f4:f4:06:6c:74:a0:f6:1f:
7e:25:a0:4f:67:27:91:80:f3:88:a4:04:4e:91:5a:
30:02:05:91:88:d3:cc:cc:b0:7d:2f:fb:21:7b:d7:
d8:fb:bf:53:9f:39:8b:00:7f:41:26:f4:99:63:1f:
b1:86:4d:ce:ee:12:dd:3c:5b:af:67:bc:b4:62:73:
a9:a4:be:5c:2b:e0:5f:0f:70:3a:bd:07:ad:3d:41:
d3:cf:37:11:32:ec:d4:ac:fe:54:d7:c3:22:7c:45:
3d:cb:32:82:18:de:0c:e7:b3:33:ca:15:99:f8:8a:
6b:27:21:56:8a:1c:e6:33:d7:6e:3d:8d:b8:84:1f:
c1:75:f7:42:d9:76:42:ac:17:9e:41:12:c1:f5:29:
a4:5b:41:25:4f:21:51:5d:b7:18:b5:c5:c7:8f:f3:
7c:1c:21:b5:80:2f:e7:77:e0:b6:56:4e:69:39:34:
cc:4c:e2:9d:cc:b0:f3:ef:90:85:9d:6a:6b:e8:c7:
c1:c2:94:02:10:64:f4:90:7f:e4:25:26:7a:70:0e:
b7:c3:4e:04:4d:ad:23:02:81:57:02:fa:27:23:14:
16:48:e9:f3:0b:c1:fb:cc:52:ee:1d:31:dc:db:2a:
fc:fb:7c:8a:a8:b0:7d:5a:0f:b2:65:e6:2f:79:91:
4f:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:BA:CE:A6:14:44:A8:53:AF:42:89:0E:B7:27:05:C3:02:9D:E6:5D
X509v3 Authority Key Identifier:
keyid:91:6F:80:C3:5F:20:2E:B0:27:66:41:9B:FB:7D:28:21:25:FF:E1:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kW-Aw18gLrAnZkGb-30oISX_4Vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/8d9ac1-d35d-4e32-b83f-c10cc953bd1b/1/kW-Aw18gLrAnZkGb-30oISX_4Vg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/8d9ac1-d35d-4e32-b83f-c10cc953bd1b/1/kW-Aw18gLrAnZkGb-30oISX_4Vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:7b:36:18:0c:de:b8:17:3d:02:7e:ba:31:85:8a:47:9d:df:
51:ef:85:be:84:97:03:51:68:e7:c2:8e:b5:ae:b0:18:21:71:
74:d7:18:b3:cd:47:51:62:bd:c1:46:79:6a:bf:43:c3:44:42:
ea:34:54:da:47:27:66:59:cb:7e:88:8c:1c:c7:b4:2f:ed:f1:
e8:6f:af:98:3c:a1:00:4e:a8:61:1c:16:84:41:5b:1a:e2:18:
95:f2:de:e6:c1:eb:50:b8:24:d3:d8:63:bc:11:c3:17:57:d2:
ef:8d:60:8f:62:e3:70:65:37:e9:ce:f2:40:51:7c:29:2d:98:
58:da:52:74:b9:dd:c5:54:0f:94:cd:92:d0:d3:7d:d1:dd:9f:
2a:b5:92:de:84:71:5c:29:7d:f3:b7:15:74:9e:94:82:6c:09:
f6:9f:56:e9:07:2d:9b:b7:14:a1:ed:8d:5b:c9:44:c1:90:01:
da:48:9e:a6:06:82:61:88:f2:5d:37:28:cb:5f:6d:4f:bc:7f:
ca:90:78:a3:c9:fe:f5:2b:c9:98:67:48:bc:8f:3a:fd:00:cc:
27:74:08:c6:78:89:62:91:1c:b2:71:a9:b5:05:96:60:cd:60:
b3:43:94:16:77:f5:0d:a8:13:62:6e:bb:ee:d6:90:cb:7d:83:
e3:53:32:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:13:18 2026 by rpki-client