Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/46/254995-4c39-4f37-9e3b-b2f0541afacf/1/KWMrEVG5T_zt9AqK02quGvshYlc.mft
File: KWMrEVG5T_zt9AqK02quGvshYlc.mft (raw, json)
Hash identifier: gam/ekneddMI6sJhP7FZrQzWKuGpgf/XM/c+hMjmX+w=
Subject key identifier: 4E:E2:F9:74:F4:50:65:00:7A:BD:21:F6:14:60:DC:A2:7B:E7:2A:61
Authority key identifier: 29:63:2B:11:51:B9:4F:FC:ED:F4:0A:8A:D3:6A:AE:1A:FB:21:62:57
Certificate issuer: /CN=29632b1151b94ffcedf40a8ad36aae1afb216257
Certificate serial: 01A17BF2066750CBA00995ACC771180D577D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KWMrEVG5T_zt9AqK02quGvshYlc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/254995-4c39-4f37-9e3b-b2f0541afacf/1/KWMrEVG5T_zt9AqK02quGvshYlc.mft
Manifest number: 02DC
Signing time: Tue 27 Oct 2026 06:00:21 +0000
Manifest this update: Tue 27 Oct 2026 06:00:21 +0000
Manifest next update: Wed 28 Oct 2026 06:00:21 +0000
Files and hashes: 1: KWMrEVG5T_zt9AqK02quGvshYlc.crl (hash: 1lGb19O7WB08mVcjBUeUTSmPBbZyfadgm45VVQWRzjY=)
2: R04uk59tL-FqUHxfWd8Y5B17azg.roa (hash: 5f566Fl0rgtpysFtLbApUeRuQVHAZSsSCcfDuYmn3cU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/254995-4c39-4f37-9e3b-b2f0541afacf/1/KWMrEVG5T_zt9AqK02quGvshYlc.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/254995-4c39-4f37-9e3b-b2f0541afacf/1/KWMrEVG5T_zt9AqK02quGvshYlc.mft
rsync://rpki.ripe.net/repository/DEFAULT/KWMrEVG5T_zt9AqK02quGvshYlc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7b:f2:06:67:50:cb:a0:09:95:ac:c7:71:18:0d:57:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29632b1151b94ffcedf40a8ad36aae1afb216257
Validity
Not Before: Oct 27 06:00:21 2026 GMT
Not After : Oct 28 06:00:21 2026 GMT
Subject: CN=4ee2f974f45065007abd21f61460dca27be72a61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:ef:85:d5:2d:e7:c5:1c:b3:4f:9c:f4:a1:27:
bc:7b:9d:3e:52:c1:9b:72:b8:f7:af:a5:cf:63:2e:
03:16:3e:7d:54:8d:26:c5:b1:14:51:d2:65:b0:83:
10:da:26:34:03:38:61:70:7d:54:44:ec:7a:3b:53:
ee:9f:11:dc:05:ec:14:c1:b1:40:83:03:55:04:2c:
27:45:01:45:7b:e5:c4:34:54:35:ed:d0:51:37:69:
64:dd:e2:8f:91:d1:97:6d:cc:0c:b0:a3:ed:67:9f:
6f:f2:26:12:f5:09:e3:eb:bd:b5:9c:d5:b8:c8:72:
58:81:4d:83:af:4c:60:07:13:4f:f9:11:88:28:90:
c2:8b:a9:84:f9:5b:d6:e6:78:e0:f7:08:de:02:00:
e9:de:79:9a:1c:e7:dc:9e:83:00:a8:bc:10:e0:1b:
45:32:37:94:1d:f8:7b:19:ab:bf:5f:e6:cd:da:b2:
1b:90:d0:59:2c:ec:f8:75:2e:23:61:10:86:61:22:
e0:f4:d0:2e:97:fd:a5:2c:08:6e:ed:09:4c:ef:79:
ad:d7:4e:86:a8:96:44:f8:23:f4:0b:77:71:b6:3c:
de:9b:7c:12:f0:26:71:e5:17:21:71:76:bb:53:e2:
da:a9:8d:06:23:af:ac:37:5a:4d:16:93:fe:7f:db:
87:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:E2:F9:74:F4:50:65:00:7A:BD:21:F6:14:60:DC:A2:7B:E7:2A:61
X509v3 Authority Key Identifier:
keyid:29:63:2B:11:51:B9:4F:FC:ED:F4:0A:8A:D3:6A:AE:1A:FB:21:62:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KWMrEVG5T_zt9AqK02quGvshYlc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/254995-4c39-4f37-9e3b-b2f0541afacf/1/KWMrEVG5T_zt9AqK02quGvshYlc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/254995-4c39-4f37-9e3b-b2f0541afacf/1/KWMrEVG5T_zt9AqK02quGvshYlc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:e2:31:9e:99:16:59:03:8d:d6:68:81:f9:d3:c8:34:84:2e:
06:d5:91:3f:86:a7:d8:58:e9:7a:05:d0:b9:ab:86:ef:13:a2:
4c:97:fb:32:32:b3:62:8b:da:36:3d:71:10:c4:02:1d:40:94:
8c:bb:a2:d8:06:c7:fc:b2:b7:79:24:3d:eb:f1:94:95:49:3d:
78:b5:f2:7c:9f:87:2b:6d:a3:f3:5c:32:6e:f6:37:90:80:ca:
84:33:ba:7c:b8:fa:0a:e1:cb:89:56:5a:ca:3d:b4:05:54:1e:
a8:4a:e3:9d:ed:9c:a4:b1:01:36:5a:58:21:dc:f6:e5:32:d4:
54:f9:44:09:b0:5d:62:98:91:c5:cb:1b:9e:bb:aa:f5:cf:ff:
bf:50:e4:25:60:01:a4:a7:77:b0:90:69:f0:d9:2e:4c:79:5f:
d3:c9:1f:d7:00:9f:6e:73:ce:ff:39:90:d8:54:37:f6:e6:e0:
fb:65:25:e0:c5:92:35:ae:1f:9a:18:35:9c:2a:5a:1b:cd:04:
e8:43:34:0c:5d:d0:d3:0e:ae:2d:ca:88:4e:93:d5:cb:de:04:
cd:5e:70:9f:5d:e0:ff:25:6a:f8:a4:f5:80:16:d7:cf:ac:fe:
c8:9d:a4:70:ec:9d:8a:c3:2d:26:9d:6e:08:e9:13:e8:e8:8f:
89:a7:5a:68
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaF78gZnUMugCZWsx3EYDVd9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI5NjMyYjExNTFiOTRmZmNlZGY0MGE4YWQzNmFhZTFhZmIy
MTYyNTcwHhcNMjYxMDI3MDYwMDIxWhcNMjYxMDI4MDYwMDIxWjAzMTEwLwYDVQQD
Eyg0ZWUyZjk3NGY0NTA2NTAwN2FiZDIxZjYxNDYwZGNhMjdiZTcyYTYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz++F1S3nxRyzT5z0oSe8e50+UsGb
crj3r6XPYy4DFj59VI0mxbEUUdJlsIMQ2iY0AzhhcH1UROx6O1PunxHcBewUwbFA
gwNVBCwnRQFFe+XENFQ17dBRN2lk3eKPkdGXbcwMsKPtZ59v8iYS9Qnj6721nNW4
yHJYgU2Dr0xgBxNP+RGIKJDCi6mE+VvW5njg9wjeAgDp3nmaHOfcnoMAqLwQ4BtF
MjeUHfh7Gau/X+bN2rIbkNBZLOz4dS4jYRCGYSLg9NAul/2lLAhu7QlM73mt106G
qJZE+CP0C3dxtjzem3wS8CZx5RchcXa7U+LaqY0GI6+sN1pNFpP+f9uHmQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE7i+XT0UGUAer0h9hRg3KJ75yphMB8GA1UdIwQY
MBaAFCljKxFRuU/87fQKitNqrhr7IWJXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS1dNckVWRzVUX3p0OUFxSzAycXVHdnNoWWxjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni8yNTQ5OTUtNGMzOS00ZjM3LTllM2It
YjJmMDU0MWFmYWNmLzEvS1dNckVWRzVUX3p0OUFxSzAycXVHdnNoWWxjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ni8yNTQ5OTUtNGMzOS00ZjM3LTllM2ItYjJmMDU0MWFmYWNm
LzEvS1dNckVWRzVUX3p0OUFxSzAycXVHdnNoWWxjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABuIxnpkW
WQON1miB+dPINIQuBtWRP4an2FjpegXQuauG7xOiTJf7MjKzYovaNj1xEMQCHUCU
jLui2AbH/LK3eSQ96/GUlUk9eLXyfJ+HK22j81wybvY3kIDKhDO6fLj6CuHLiVZa
yj20BVQeqErjne2cpLEBNlpYIdz25TLUVPlECbBdYpiRxcsbnruq9c//v1DkJWAB
pKd3sJBp8NkuTHlf08kf1wCfbnPO/zmQ2FQ39ubg+2Ul4MWSNa4fmhg1nCpaG80E
6EM0DF3Q0w6uLcqITpPVy94EzV5wn13g/yVq+KT1gBbXz6z+yJ2kcOydisMtJp1u
COkT6OiPiadaaA==
-----END CERTIFICATE-----
Generated at Tue Oct 27 17:36:11 2026 by rpki-client