Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/254995-4c39-4f37-9e3b-b2f0541afacf/1/KWMrEVG5T_zt9AqK02quGvshYlc.mft
File: KWMrEVG5T_zt9AqK02quGvshYlc.mft (raw, json)
Hash identifier: RXR6Jsm3KACjfhuVVrGwT6N3cF+7sTa8I3jlbJzcowg=
Subject key identifier: B4:60:7A:83:DD:DF:13:F9:19:A8:CA:1A:94:90:4D:B2:B1:53:B0:26
Authority key identifier: 29:63:2B:11:51:B9:4F:FC:ED:F4:0A:8A:D3:6A:AE:1A:FB:21:62:57
Certificate issuer: /CN=29632b1151b94ffcedf40a8ad36aae1afb216257
Certificate serial: 019D38D3CD8CCA74A6463CEB843EBC0344FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KWMrEVG5T_zt9AqK02quGvshYlc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/254995-4c39-4f37-9e3b-b2f0541afacf/1/KWMrEVG5T_zt9AqK02quGvshYlc.mft
Manifest number: A7
Signing time: Sun 29 Mar 2026 09:01:37 +0000
Manifest this update: Sun 29 Mar 2026 09:01:37 +0000
Manifest next update: Mon 30 Mar 2026 09:01:37 +0000
Files and hashes: 1: KWMrEVG5T_zt9AqK02quGvshYlc.crl (hash: /X7IE4Q22s/WNc5ITfT3pVxFb349Hxy6tREv0NOSA0Q=)
2: R04uk59tL-FqUHxfWd8Y5B17azg.roa (hash: 5f566Fl0rgtpysFtLbApUeRuQVHAZSsSCcfDuYmn3cU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/254995-4c39-4f37-9e3b-b2f0541afacf/1/KWMrEVG5T_zt9AqK02quGvshYlc.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/254995-4c39-4f37-9e3b-b2f0541afacf/1/KWMrEVG5T_zt9AqK02quGvshYlc.mft
rsync://rpki.ripe.net/repository/DEFAULT/KWMrEVG5T_zt9AqK02quGvshYlc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:cd:8c:ca:74:a6:46:3c:eb:84:3e:bc:03:44:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29632b1151b94ffcedf40a8ad36aae1afb216257
Validity
Not Before: Mar 29 09:01:37 2026 GMT
Not After : Mar 30 09:01:37 2026 GMT
Subject: CN=b4607a83dddf13f919a8ca1a94904db2b153b026
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:de:69:93:84:dc:f4:0f:fd:be:3f:ee:f5:6a:
e0:9c:c0:a3:ca:00:71:ee:cc:85:85:e1:96:56:e1:
29:84:99:a9:b8:43:72:4d:24:a1:0f:89:41:07:e5:
7d:c7:38:22:0a:31:4f:31:0c:76:12:aa:4e:28:e2:
30:14:ae:8f:fd:c4:ad:c6:97:60:44:66:67:1c:9c:
98:a8:22:bc:9d:ca:97:b1:89:47:19:bc:9a:33:d4:
58:90:7e:b6:e1:6a:91:91:8a:a2:4e:26:09:8d:42:
95:02:a4:f4:54:d0:06:3b:9d:9d:4b:b0:98:a6:3f:
ad:3d:30:16:2b:fe:b1:75:79:25:69:30:ff:8a:32:
e8:be:50:3a:7f:10:8a:c7:6b:b2:a0:2e:ec:b2:b7:
69:2a:5c:95:32:46:29:92:f2:87:55:7c:d2:2a:2e:
14:b7:75:24:6d:df:e7:2d:0e:19:12:30:c2:8a:a8:
e3:b4:42:e1:f9:c1:68:61:b4:3d:13:b5:3f:f0:4d:
7a:c3:a9:25:72:8f:03:9e:f6:a3:44:8f:44:6f:f0:
2d:b8:36:88:8e:4f:40:4e:66:b2:6d:6b:81:59:0a:
af:39:5a:ca:a1:6d:6a:9e:fd:b9:40:32:ae:a2:dd:
a2:fc:f4:6b:af:c2:c9:4b:a8:0b:a5:be:a3:1b:f1:
71:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:60:7A:83:DD:DF:13:F9:19:A8:CA:1A:94:90:4D:B2:B1:53:B0:26
X509v3 Authority Key Identifier:
keyid:29:63:2B:11:51:B9:4F:FC:ED:F4:0A:8A:D3:6A:AE:1A:FB:21:62:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KWMrEVG5T_zt9AqK02quGvshYlc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/254995-4c39-4f37-9e3b-b2f0541afacf/1/KWMrEVG5T_zt9AqK02quGvshYlc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/254995-4c39-4f37-9e3b-b2f0541afacf/1/KWMrEVG5T_zt9AqK02quGvshYlc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:0b:00:ad:4e:bf:24:1f:10:6a:44:06:cb:25:69:b9:f9:1b:
40:de:3a:32:18:a0:3d:6f:a3:d4:28:43:f9:e2:22:f8:7c:22:
5e:bd:e9:67:f2:29:80:be:02:e3:8d:4c:32:9f:fa:84:05:50:
e8:3f:cb:5e:9a:ec:f1:28:12:c1:c6:d8:c3:96:e8:c2:22:55:
ee:4f:33:37:32:89:0b:28:c1:97:21:67:57:53:d7:62:31:99:
47:ba:bd:7b:5d:89:87:12:b1:ad:61:e0:0c:4b:09:a8:c7:e4:
ce:21:fc:93:fa:98:08:ad:a1:70:9f:2a:ee:81:d8:7a:8b:2e:
c5:58:59:96:e7:b7:12:8b:83:f2:9f:a0:e1:f8:09:59:7e:13:
b3:e2:eb:6c:f2:6f:95:10:dc:7c:9b:16:2b:d9:cd:a0:f9:8b:
ec:47:e1:75:55:e7:78:89:6a:91:00:70:cc:e0:ce:07:99:99:
44:13:a9:33:11:a8:f6:40:1f:e4:5e:82:27:dc:d7:c4:76:43:
a0:a9:f7:10:65:42:5b:f2:5e:83:60:cf:16:fc:fa:f4:8c:30:
63:78:6f:89:13:22:26:9f:69:e4:f8:a0:e9:fa:28:d1:1c:5f:
86:81:c2:d6:62:18:23:fc:1c:1c:1e:ea:2e:82:ab:6f:ac:a9:
0c:9d:56:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:56:50 2026 by rpki-client