
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/KWWTt0fnalZJJRG7NhLk1eTL5-w.mft
File: KWWTt0fnalZJJRG7NhLk1eTL5-w.mft (raw, json)
Hash identifier: LKa/E8b/Xj3U1L7I3GZkqUrQJA4ZlT/Fkox3b0BM6Hg=
Subject key identifier: 4A:57:92:41:D2:72:DD:C0:33:01:84:7F:6B:97:09:33:DC:54:DB:7C
Authority key identifier: 29:65:93:B7:47:E7:6A:56:49:25:11:BB:36:12:E4:D5:E4:CB:E7:EC
Certificate issuer: /CN=296593b747e76a56492511bb3612e4d5e4cbe7ec
Certificate serial: 019DB20FEB51000507C372A4CC26B96ECA8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KWWTt0fnalZJJRG7NhLk1eTL5-w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/KWWTt0fnalZJJRG7NhLk1eTL5-w.mft
Manifest number: 1931
Signing time: Tue 21 Apr 2026 22:01:20 +0000
Manifest this update: Tue 21 Apr 2026 22:01:20 +0000
Manifest next update: Wed 22 Apr 2026 22:01:20 +0000
Files and hashes: 1: 1-jurUBuvQ1yZwU9729jbGVH_Dqc.roa (hash: NmPNOCnlOq4J9jRPSVe9AqahPbi72yXv6vfuK53ObQM=)
2: BqAUWEEEynRAHsyw8vXlJOPtoko.roa (hash: fRUb8UeVdZCw52nD6tz43yTIJk+lOvp55J1+ztgjww8=)
3: EiyPYGJUCaKyLhDbDbPOkYPeFdg.roa (hash: +VRrZJlK+58yebvWqB6g7vqkLfWkY0a7+iXy3NJ3xEA=)
4: HqzX4EklzjztmxQHcTQSLToHBQo.roa (hash: 0C/Lc4jGp8PVv3g8+j/yiQ53pvc2GRhFcYHGJMXCY4s=)
5: IKjez_Jm_DroxNL6eA8oXbFCAr0.roa (hash: mQpdrbrtX9b+4ISzQxTZgRdXAFDBgRhT/V1RvJ33ORU=)
6: IjEclqq9aZVHP-1pPKHauFgerso.roa (hash: Uuc4FOdMforWzk+OMtEZAMLMegin8YdnOU2GgixhPDY=)
7: JXqXZhRMyYLEhxzVh3Gj36s_Ph0.roa (hash: pjrfkngpXTbXlOemB2zK4PxTtGivr+ki34ZUor3sLNE=)
8: JsnBQ-d6HlJ1IQj1cCRf-BvuxJY.roa (hash: MvWPx/XVlwEwn/CUfqwpxVOvbOK59XZKMZoYvkiq7pg=)
9: KWWTt0fnalZJJRG7NhLk1eTL5-w.crl (hash: 3xGs1L2B6RvjcXeKVR2aVARF9gYx53E66cWHQz+6QKs=)
10: LbIBxCm3zc4zW15g4xohoJX9qic.roa (hash: 6wgCSs5mGVTM6aHPm61i10v74wejjqjW11LjQknpJBs=)
11: Q0My9AMCGjxZ0npORFZ4Tvx3C54.roa (hash: wu0aq49AqLS5xqmMACLQlP9eC2ugRqQQAybYzzqc3fE=)
12: XHlnD811u3em9JVJklrQN7J3cm0.roa (hash: u0+XGjhQ3bXTODeSfwve+tcBoDp30OCy9deDRC9QRYE=)
13: XZGlyG2IPt3742FE82Tkz8mGyq4.roa (hash: v8XatKoIXBXuIzaIEHcax1FamZrLl2OwB/RHFgt/lSU=)
14: ZUTPmES_I92lge3VqoMKVsiadL8.roa (hash: EYCn+DNcKMqEruiNAkvCDVx9dzY2G8BAuiKbjATbTdE=)
15: bhiGtzF7RuIEDHlSsVtceIRxH38.roa (hash: akX2koLtc0Hj8AOQToNc3k0ORycX0LTS6PyoFdzhc4U=)
16: cmuS_wFKhe7wwbr6EPdnbQmyZXo.roa (hash: LWlpo3v+x70PYDVy1B035O4VkZRBTo/qhBO9cRkrJH8=)
17: dAAgbpptLSU0Vrmk2iT4sKGu6bI.roa (hash: hLII+38WbV+tc1ZpNKlU1+REUXlmuvngdatwvZdVzBw=)
18: eFDPwahAIiaqNqf51zTx5lDvrZo.roa (hash: kr9w8Xld1i6+vsqQh/FD6WhZ+7q4oP80iULOMOz1iZ4=)
19: gDUrBxB6wNpkw1auAIeXKcxfpjk.roa (hash: MmMgI7BZHSBDbxCR5wftqfrkAJEiDMDH3YAVO82UluY=)
20: gPMjhhmemxpOq_6aVVCJVdiEiCw.roa (hash: Awi0lJMvPZIsKzXkRn4khXQRzuK6j9oUkbHUvDLJIPw=)
21: hegEslKsgUN8EfSljeWho5LH9AA.roa (hash: 7FUVQSpJvZtjHYpEYQtMbItOT8EfPhZLjylSV3d45Mk=)
22: iY5AUZ3oRD8enxE2YfRVgLOVchA.roa (hash: qdLguy24Q8ECPU9WacB+CHbkQyPvE/BjpYZ7lL8qnf4=)
23: j1LnzihLWpEHbVivIKleh48juQY.roa (hash: lSBEl6VaQ8BKt1Y/BfkhK36reElNLrWjumdNs9QCL94=)
24: roUgq1WWF-4-EBD-mSjF2FqhNuM.roa (hash: O7LaxZ0YLI1xv3D+p2716Dcd2hVN4y4qQfPRDb1TsUg=)
25: rtCZvcnDjssgDm1M5Mw6U_MuaQk.roa (hash: R1fOJZ69TZqTYVrK6Gl8R5/LkM043G84eXV/p0wdc3o=)
26: uNRqwpIiIZEsgTyrEkw7uhF314Y.roa (hash: nuf882yOK7Gm1Xhr7tFICsJpWAnlPOnwhndnq27u30w=)
27: vSREg_6m_MabpC6JhPX3QzIHx78.roa (hash: Mx3Adg5UoxiR8yhy3TEKj54l/CCfjvWb1t/HSvBKpE0=)
28: yDXd_AbeSk2V33waKgA8v3F-94A.roa (hash: xPpNioqtvkgaxveXzWANtmkRIznkEJ/Yx8p+E6Od7EM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/KWWTt0fnalZJJRG7NhLk1eTL5-w.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/KWWTt0fnalZJJRG7NhLk1eTL5-w.mft
rsync://rpki.ripe.net/repository/DEFAULT/KWWTt0fnalZJJRG7NhLk1eTL5-w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Apr 2026 21:56:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:b2:0f:eb:51:00:05:07:c3:72:a4:cc:26:b9:6e:ca:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=296593b747e76a56492511bb3612e4d5e4cbe7ec
Validity
Not Before: Apr 21 22:01:20 2026 GMT
Not After : Apr 22 22:01:20 2026 GMT
Subject: CN=4a579241d272ddc03301847f6b970933dc54db7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:89:0a:3b:d6:1d:8a:4b:ca:52:a3:a6:83:a2:
90:c5:2b:80:89:dd:ed:9a:f5:6a:ce:17:80:29:65:
e7:97:bb:99:bc:97:df:ff:2b:75:10:1a:06:bf:b6:
90:c8:c4:b5:17:d5:ee:83:75:59:42:c2:5b:31:2a:
9a:0e:1d:98:85:9f:e3:6b:94:4b:3d:e1:d3:0b:60:
a8:cc:92:c7:3b:54:e2:6c:42:df:30:0c:1f:9e:fb:
a0:ac:5d:6a:52:8e:fd:b9:10:b0:20:88:34:2a:21:
7b:94:fa:d0:4c:63:f0:f3:eb:b6:ad:4d:f1:79:93:
6a:36:98:b1:b6:b4:47:d9:74:37:9a:cf:d3:89:52:
0e:0d:d6:31:e0:9c:c5:27:a9:43:91:dd:ca:4d:d1:
d4:23:27:26:d3:53:e6:9a:78:3c:f9:12:b9:c4:b4:
21:95:30:3d:b0:00:f9:3d:52:10:fa:cf:d1:d3:d4:
51:7c:ee:78:3d:df:f4:78:16:d1:df:39:79:cd:cf:
a3:c8:f4:c0:ca:d8:81:db:57:4e:da:dc:ae:15:28:
41:07:51:d1:32:ff:77:35:4f:9b:b6:c4:42:4d:f2:
f1:45:d4:c4:d7:3b:6c:35:67:3d:82:6e:f7:04:d4:
ca:bd:81:ee:fa:92:ed:89:d0:a8:92:ed:49:eb:a1:
c1:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:57:92:41:D2:72:DD:C0:33:01:84:7F:6B:97:09:33:DC:54:DB:7C
X509v3 Authority Key Identifier:
keyid:29:65:93:B7:47:E7:6A:56:49:25:11:BB:36:12:E4:D5:E4:CB:E7:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KWWTt0fnalZJJRG7NhLk1eTL5-w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/KWWTt0fnalZJJRG7NhLk1eTL5-w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/KWWTt0fnalZJJRG7NhLk1eTL5-w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:9d:dc:b2:c3:5e:88:7c:5c:80:72:c0:c9:69:b9:d4:04:a8:
fd:00:00:32:36:59:a0:ad:30:7b:d3:2e:da:a7:d4:09:e3:ea:
84:20:37:43:0b:89:bc:34:43:b1:be:0d:1d:42:6b:19:bd:c7:
59:45:6c:4e:ee:15:67:ba:a9:7e:64:51:18:67:2a:bd:55:ec:
96:f8:5f:cd:59:64:67:5f:d4:5c:e0:5a:3b:1e:74:55:6b:a4:
98:37:34:81:43:57:29:af:4c:1e:19:c3:67:b8:d7:a6:69:f0:
ad:71:79:aa:43:af:db:6c:85:ba:7f:1a:a6:d0:ec:cf:f9:64:
47:f0:d4:f1:e0:c7:6f:6b:23:3f:9d:52:37:a9:b3:3e:24:9e:
6c:e8:e3:70:f6:22:a0:62:53:5c:44:f6:20:d2:9d:6a:1a:e4:
7b:ca:ce:cb:1d:19:b5:f3:ea:57:5d:9a:94:92:c8:99:f5:2d:
19:24:12:86:30:b0:35:dc:9a:a7:22:21:fa:bf:db:28:aa:2f:
06:53:1b:2b:2f:d9:1b:f5:86:a6:71:34:61:76:fb:2c:13:f7:
ca:a3:c8:fb:94:ab:10:8e:30:53:f8:e2:a0:42:4b:34:2c:49:
52:58:d2:68:f7:c0:10:df:ad:54:f9:04:47:cb:7e:e3:3d:3a:
31:66:60:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 22 01:41:51 2026 by rpki-client