Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/254995-4c39-4f37-9e3b-b2f0541afacf/1/KWMrEVG5T_zt9AqK02quGvshYlc.mft
File: KWMrEVG5T_zt9AqK02quGvshYlc.mft (raw, json)
Hash identifier: ID0Rw3K45RmJLdUYhnY/qtamchKoFO+CyZbVgmeO4kU=
Subject key identifier: F4:1D:0B:6A:A2:71:94:A8:A0:F7:36:32:0B:80:2F:85:E2:38:5F:E4
Authority key identifier: 29:63:2B:11:51:B9:4F:FC:ED:F4:0A:8A:D3:6A:AE:1A:FB:21:62:57
Certificate issuer: /CN=29632b1151b94ffcedf40a8ad36aae1afb216257
Certificate serial: 019E8EA530BF27A4BDB0D245201CF9EB449C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KWMrEVG5T_zt9AqK02quGvshYlc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/254995-4c39-4f37-9e3b-b2f0541afacf/1/KWMrEVG5T_zt9AqK02quGvshYlc.mft
Manifest number: 0158
Signing time: Wed 03 Jun 2026 18:00:50 +0000
Manifest this update: Wed 03 Jun 2026 18:00:50 +0000
Manifest next update: Thu 04 Jun 2026 18:00:50 +0000
Files and hashes: 1: KWMrEVG5T_zt9AqK02quGvshYlc.crl (hash: Etf19o9xFdRFEZTJ6DYVP0ehpzTTnuXN9oyydvuKKiU=)
2: R04uk59tL-FqUHxfWd8Y5B17azg.roa (hash: 5f566Fl0rgtpysFtLbApUeRuQVHAZSsSCcfDuYmn3cU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/254995-4c39-4f37-9e3b-b2f0541afacf/1/KWMrEVG5T_zt9AqK02quGvshYlc.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/254995-4c39-4f37-9e3b-b2f0541afacf/1/KWMrEVG5T_zt9AqK02quGvshYlc.mft
rsync://rpki.ripe.net/repository/DEFAULT/KWMrEVG5T_zt9AqK02quGvshYlc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 04 Jun 2026 18:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:8e:a5:30:bf:27:a4:bd:b0:d2:45:20:1c:f9:eb:44:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29632b1151b94ffcedf40a8ad36aae1afb216257
Validity
Not Before: Jun 3 18:00:50 2026 GMT
Not After : Jun 4 18:00:50 2026 GMT
Subject: CN=f41d0b6aa27194a8a0f736320b802f85e2385fe4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:c2:f2:ef:12:64:75:c2:0f:51:26:fc:29:04:
3a:81:75:0e:79:f2:ff:52:3c:d3:37:76:1f:e2:79:
ba:36:50:2c:da:f9:a4:bd:9e:41:e6:0b:5d:02:7a:
e5:11:7a:fd:06:c2:a8:45:63:18:56:6c:d9:83:91:
0c:81:20:fb:71:24:f6:f7:7d:dd:62:f5:74:26:20:
34:aa:cb:9f:2a:1f:52:5a:83:ac:2a:ab:5d:9b:53:
d9:de:5f:5f:a1:32:47:de:df:4b:1d:b9:c8:f7:cc:
86:26:5e:04:7d:9b:b0:35:e9:ce:df:ab:d0:20:b3:
8a:38:a6:ec:55:e1:43:1b:e3:9e:1e:99:54:73:0b:
02:b8:ad:bc:5d:bb:8f:ee:00:aa:ea:b6:b7:90:18:
7e:45:32:51:43:ba:1f:5c:6c:07:4d:15:0f:8e:06:
15:19:b6:10:22:3c:3c:97:69:fd:17:74:9d:cc:fa:
e7:07:ca:64:0d:13:3a:8a:f8:5c:78:d6:28:af:5e:
6f:77:4b:b2:55:8d:44:2f:2b:e6:6a:26:1c:40:05:
43:ff:76:82:03:0d:2e:de:1c:16:f5:a2:de:fe:a5:
ac:36:d7:e0:7c:42:f2:97:1d:49:5f:72:9d:56:22:
44:50:45:eb:6d:1e:5a:3c:59:e9:d2:69:9c:af:06:
89:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:1D:0B:6A:A2:71:94:A8:A0:F7:36:32:0B:80:2F:85:E2:38:5F:E4
X509v3 Authority Key Identifier:
keyid:29:63:2B:11:51:B9:4F:FC:ED:F4:0A:8A:D3:6A:AE:1A:FB:21:62:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KWMrEVG5T_zt9AqK02quGvshYlc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/254995-4c39-4f37-9e3b-b2f0541afacf/1/KWMrEVG5T_zt9AqK02quGvshYlc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/254995-4c39-4f37-9e3b-b2f0541afacf/1/KWMrEVG5T_zt9AqK02quGvshYlc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:2a:ca:bd:51:4c:43:ba:fe:da:bf:8c:38:06:b6:ae:96:1e:
02:cb:b8:97:ab:44:21:93:a3:e2:e0:3b:2e:47:87:45:ab:76:
ec:33:aa:4d:aa:bb:d6:cc:d0:13:36:49:13:ca:b2:ea:e7:70:
f2:5f:00:fd:ab:6a:aa:2d:5d:d2:b6:50:25:c4:71:09:75:b9:
7d:ae:62:02:a3:06:82:c7:1c:32:2a:8f:5e:33:2a:ab:b6:d0:
fa:03:e1:d6:e0:b9:6a:77:63:7d:53:0e:cf:0d:9a:a3:f8:0d:
74:90:f4:cd:83:7e:8a:e7:b5:8c:7b:2c:3e:db:5d:52:60:c9:
b8:1a:c2:e0:cf:80:c4:81:7d:ea:5c:d4:10:8e:2b:17:d3:a1:
fe:7e:4c:61:2d:d6:25:41:f9:91:5f:61:7d:01:22:f1:04:12:
93:7a:83:6e:4b:d9:95:00:00:79:4a:ed:0b:17:f4:87:03:1f:
60:1c:60:5c:8a:e6:3c:fb:c3:05:e9:69:cb:49:52:71:7d:5c:
61:a2:36:17:59:b4:02:fa:94:ca:31:74:7a:ea:71:80:d2:f9:
fc:18:df:c6:a1:bd:84:8d:b8:f3:8a:f4:8e:64:fd:98:a7:61:
ea:25:9b:65:70:26:8f:65:96:41:2a:cf:29:b3:bf:de:5f:85:
49:22:db:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 04:19:34 2026 by rpki-client