Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/46/254995-4c39-4f37-9e3b-b2f0541afacf/1/KWMrEVG5T_zt9AqK02quGvshYlc.mft
File: KWMrEVG5T_zt9AqK02quGvshYlc.mft (raw, json)
Hash identifier: AmYyfOv2cgdOeVY7vmhtr5wYnVY/k6q8RBwB/KSBHkY=
Subject key identifier: 1E:AE:26:D1:F5:E2:D3:32:8D:BD:D7:BC:38:39:3A:4F:85:7A:65:27
Authority key identifier: 29:63:2B:11:51:B9:4F:FC:ED:F4:0A:8A:D3:6A:AE:1A:FB:21:62:57
Certificate issuer: /CN=29632b1151b94ffcedf40a8ad36aae1afb216257
Certificate serial: 01A17A03A3A42CA6DF64BB1BE03C88C7C4E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KWMrEVG5T_zt9AqK02quGvshYlc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/254995-4c39-4f37-9e3b-b2f0541afacf/1/KWMrEVG5T_zt9AqK02quGvshYlc.mft
Manifest number: 02DB
Signing time: Mon 26 Oct 2026 21:00:21 +0000
Manifest this update: Mon 26 Oct 2026 21:00:21 +0000
Manifest next update: Tue 27 Oct 2026 21:00:21 +0000
Files and hashes: 1: KWMrEVG5T_zt9AqK02quGvshYlc.crl (hash: spAybuAVaWqf/nY1GnSFPJ4o26RuUN2nhPEKdpA/Srg=)
2: R04uk59tL-FqUHxfWd8Y5B17azg.roa (hash: 5f566Fl0rgtpysFtLbApUeRuQVHAZSsSCcfDuYmn3cU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/254995-4c39-4f37-9e3b-b2f0541afacf/1/KWMrEVG5T_zt9AqK02quGvshYlc.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/254995-4c39-4f37-9e3b-b2f0541afacf/1/KWMrEVG5T_zt9AqK02quGvshYlc.mft
rsync://rpki.ripe.net/repository/DEFAULT/KWMrEVG5T_zt9AqK02quGvshYlc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7a:03:a3:a4:2c:a6:df:64:bb:1b:e0:3c:88:c7:c4:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29632b1151b94ffcedf40a8ad36aae1afb216257
Validity
Not Before: Oct 26 21:00:21 2026 GMT
Not After : Oct 27 21:00:21 2026 GMT
Subject: CN=1eae26d1f5e2d3328dbdd7bc38393a4f857a6527
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:e2:a6:b2:3e:f7:5d:ad:86:cb:4c:b8:2b:9c:
ee:72:ac:1b:73:54:ed:f6:a7:de:57:73:84:f2:a1:
46:d6:66:ef:b5:91:ab:8b:6e:4c:63:43:49:ab:e0:
9f:33:72:02:29:1a:f2:f9:06:12:5d:50:eb:a2:ae:
44:5e:25:74:64:71:11:bf:bc:e9:13:5e:20:72:fc:
96:96:c7:e9:69:0f:19:ae:72:e8:ba:6e:0c:0e:ae:
27:e2:fa:df:13:52:30:3e:6f:4c:13:fd:8f:0f:06:
5a:c3:2e:e0:ac:2a:23:f0:1b:1e:7f:d0:97:16:12:
e3:f5:be:09:c4:5e:b3:f7:48:70:bc:c5:64:0a:51:
5c:44:bf:4f:16:c3:3b:6d:84:26:f0:53:79:82:6b:
ad:4a:34:02:50:67:16:50:29:86:c6:71:cb:81:c1:
d4:28:8d:d7:dc:93:43:2d:12:ae:26:91:e8:ec:ca:
a3:ed:db:34:65:6d:6c:d3:10:b3:6e:d8:90:78:27:
94:6f:3f:13:d0:f2:7e:db:ef:28:10:2a:d3:a1:f8:
0f:bb:36:47:17:db:89:8c:86:36:c1:60:b4:c2:0f:
43:c6:48:a8:b0:b1:a9:ec:d6:11:18:cf:3b:a7:6d:
c7:67:a8:5a:65:7c:d4:c3:c8:e0:d1:6d:32:aa:58:
49:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:AE:26:D1:F5:E2:D3:32:8D:BD:D7:BC:38:39:3A:4F:85:7A:65:27
X509v3 Authority Key Identifier:
keyid:29:63:2B:11:51:B9:4F:FC:ED:F4:0A:8A:D3:6A:AE:1A:FB:21:62:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KWMrEVG5T_zt9AqK02quGvshYlc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/254995-4c39-4f37-9e3b-b2f0541afacf/1/KWMrEVG5T_zt9AqK02quGvshYlc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/254995-4c39-4f37-9e3b-b2f0541afacf/1/KWMrEVG5T_zt9AqK02quGvshYlc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:ab:f9:44:be:a5:71:61:ee:cc:99:04:48:da:d3:05:fb:56:
6f:28:81:26:26:24:37:37:b9:af:1d:e7:f0:bd:7f:7d:a2:c5:
75:67:24:58:97:f1:7c:77:00:d9:d9:16:89:dd:a3:36:6f:57:
98:a5:3d:86:f4:fe:a1:de:c6:49:ab:55:83:97:5f:a8:9a:18:
21:c9:9f:d5:fd:20:7e:a9:85:b0:5f:ed:a4:1c:0a:f5:95:ee:
f9:d3:bb:0a:83:65:c0:88:75:5a:03:f9:dc:83:e5:9d:25:32:
dd:f0:1c:af:5f:38:44:70:d9:d0:32:38:ed:ed:0e:94:c4:cf:
01:24:9c:a2:3b:92:c2:52:d8:db:87:56:c4:3a:65:3c:71:70:
8d:95:10:f0:65:d3:a9:26:1a:16:cb:5b:d0:36:86:0d:31:43:
0e:64:5c:40:34:5d:70:b5:6d:3b:c6:46:be:1b:9e:6f:72:2f:
73:36:23:23:e5:d7:45:93:83:e1:c3:52:61:f0:69:30:d9:24:
28:5d:a6:d8:2d:52:ba:da:4c:45:b4:50:67:ee:4c:68:e5:2d:
5f:54:11:4c:a9:ba:e4:54:d1:17:10:79:84:25:1a:c1:e6:58:
22:2d:0f:fe:f0:1e:8f:66:66:73:26:9f:48:38:5b:41:5e:5f:
fa:ca:6c:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 01:54:24 2026 by rpki-client