Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/254995-4c39-4f37-9e3b-b2f0541afacf/1/KWMrEVG5T_zt9AqK02quGvshYlc.mft
File: KWMrEVG5T_zt9AqK02quGvshYlc.mft (raw, json)
Hash identifier: jHEbbuf0C12yK21P+m96ayjoMhkzeiK+xtsZsyHEjzc=
Subject key identifier: D8:72:85:DA:CF:5A:76:2D:01:7A:99:B0:4F:E8:62:1F:7C:4F:82:97
Authority key identifier: 29:63:2B:11:51:B9:4F:FC:ED:F4:0A:8A:D3:6A:AE:1A:FB:21:62:57
Certificate issuer: /CN=29632b1151b94ffcedf40a8ad36aae1afb216257
Certificate serial: 019F81FA126332ED8F86AD9FC43810FBE762
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KWMrEVG5T_zt9AqK02quGvshYlc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/254995-4c39-4f37-9e3b-b2f0541afacf/1/KWMrEVG5T_zt9AqK02quGvshYlc.mft
Manifest number: 01D6
Signing time: Tue 21 Jul 2026 00:01:17 +0000
Manifest this update: Tue 21 Jul 2026 00:01:17 +0000
Manifest next update: Wed 22 Jul 2026 00:01:17 +0000
Files and hashes: 1: KWMrEVG5T_zt9AqK02quGvshYlc.crl (hash: hnb//C0i8CxuX3r6J8dXYSh1QauGF47FNV4kMz4hZL4=)
2: R04uk59tL-FqUHxfWd8Y5B17azg.roa (hash: 5f566Fl0rgtpysFtLbApUeRuQVHAZSsSCcfDuYmn3cU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/254995-4c39-4f37-9e3b-b2f0541afacf/1/KWMrEVG5T_zt9AqK02quGvshYlc.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/254995-4c39-4f37-9e3b-b2f0541afacf/1/KWMrEVG5T_zt9AqK02quGvshYlc.mft
rsync://rpki.ripe.net/repository/DEFAULT/KWMrEVG5T_zt9AqK02quGvshYlc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:81:fa:12:63:32:ed:8f:86:ad:9f:c4:38:10:fb:e7:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29632b1151b94ffcedf40a8ad36aae1afb216257
Validity
Not Before: Jul 21 00:01:17 2026 GMT
Not After : Jul 22 00:01:17 2026 GMT
Subject: CN=d87285dacf5a762d017a99b04fe8621f7c4f8297
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:73:0f:34:e1:8c:4d:ac:fa:1b:85:4b:68:92:
2c:f9:5e:6c:0c:cc:56:ff:a2:bc:d0:92:f7:4d:0b:
69:5a:35:0d:e7:b1:73:a4:ff:0c:ef:cc:0c:c2:ae:
7f:ab:2b:b1:b2:0d:83:b1:d7:1a:31:9a:90:57:92:
93:b1:09:f4:d8:38:25:20:0b:42:ef:52:bf:49:3d:
2c:2b:c7:97:36:fb:90:2e:23:2f:19:0f:34:21:70:
88:25:83:dc:51:af:e6:59:28:fc:2d:0e:9e:c5:2c:
34:0e:f2:95:17:8c:18:8b:0b:a1:09:c3:3c:7a:cc:
1f:83:35:e9:0c:24:0b:4a:27:4c:79:68:d2:6f:f9:
53:c7:a5:10:96:b7:cd:0c:04:89:03:9b:1a:33:d7:
dc:3f:49:b5:7c:30:b1:a4:49:a1:a0:d8:56:15:ef:
81:cd:53:b4:4d:79:58:04:6e:68:28:dd:ca:d3:3f:
d0:e0:95:4c:e6:b2:f7:6c:3d:dd:98:7c:1e:0d:f6:
86:53:67:f9:b7:99:bd:8f:e4:42:0e:f0:78:e7:ad:
c2:52:3e:3d:70:24:7f:dd:9b:03:57:4f:16:25:c1:
c6:67:05:7a:6d:f7:44:44:14:4f:7d:ff:38:32:54:
8b:62:2e:a0:da:f8:07:59:ed:b9:67:0d:51:9c:80:
64:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:72:85:DA:CF:5A:76:2D:01:7A:99:B0:4F:E8:62:1F:7C:4F:82:97
X509v3 Authority Key Identifier:
keyid:29:63:2B:11:51:B9:4F:FC:ED:F4:0A:8A:D3:6A:AE:1A:FB:21:62:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KWMrEVG5T_zt9AqK02quGvshYlc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/254995-4c39-4f37-9e3b-b2f0541afacf/1/KWMrEVG5T_zt9AqK02quGvshYlc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/254995-4c39-4f37-9e3b-b2f0541afacf/1/KWMrEVG5T_zt9AqK02quGvshYlc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:33:eb:38:f5:45:fa:dc:7a:35:0e:79:33:5a:cb:24:32:a7:
76:d8:b8:7f:21:8c:48:b0:da:d7:5b:96:75:9e:a4:19:8c:2d:
89:4a:4e:36:b4:7a:9b:54:93:de:18:89:81:0a:3e:dd:1f:14:
db:3b:e8:83:d5:0d:6b:d6:ad:a5:a1:13:77:4b:41:aa:af:6d:
e6:d2:32:f2:3b:76:a2:8e:c1:82:a2:cf:61:05:f9:90:6d:fc:
80:ef:8c:1f:9d:fb:a1:90:c5:1c:6b:17:22:a3:25:05:41:42:
5d:80:14:c4:18:19:ca:f6:82:4a:26:c1:f8:b2:7f:43:68:58:
ef:2e:ab:1b:16:57:b9:2c:25:db:11:85:db:54:ca:62:2c:7d:
bc:f6:ba:fe:c8:93:9a:91:e5:01:b2:01:8a:9c:31:2f:0b:3c:
09:6b:25:39:98:4d:11:70:66:ab:53:63:2a:43:a1:a7:68:f2:
8f:73:f5:2b:39:33:57:68:ef:12:80:a1:a8:1c:47:95:2e:5c:
57:ca:98:4e:ef:15:1e:1c:cd:c4:e3:a9:d4:59:af:41:4f:1f:
ca:8b:6f:ad:58:13:fd:e1:74:db:95:6d:4d:ae:4a:61:90:b9:
8c:ef:fd:10:44:c9:0a:b6:c5:89:4a:07:a2:67:7a:df:17:73:
33:93:81:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 09:03:24 2026 by rpki-client