
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/KWWTt0fnalZJJRG7NhLk1eTL5-w.mft
File: KWWTt0fnalZJJRG7NhLk1eTL5-w.mft (raw, json)
Hash identifier: 6bmcML+CKI14YZSs0noMe8jE5PlC0ZejqCOSyaN9Nas=
Subject key identifier: B7:E6:67:09:D9:19:3C:3B:75:40:AB:A6:24:DA:B9:28:6F:61:0F:81
Authority key identifier: 29:65:93:B7:47:E7:6A:56:49:25:11:BB:36:12:E4:D5:E4:CB:E7:EC
Certificate issuer: /CN=296593b747e76a56492511bb3612e4d5e4cbe7ec
Certificate serial: 019F837A1082E2F4EF873D245C29C7FECB0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KWWTt0fnalZJJRG7NhLk1eTL5-w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/KWWTt0fnalZJJRG7NhLk1eTL5-w.mft
Manifest number: 1A22
Signing time: Tue 21 Jul 2026 07:00:42 +0000
Manifest this update: Tue 21 Jul 2026 07:00:42 +0000
Manifest next update: Wed 22 Jul 2026 07:00:42 +0000
Files and hashes: 1: 1-jurUBuvQ1yZwU9729jbGVH_Dqc.roa (hash: NmPNOCnlOq4J9jRPSVe9AqahPbi72yXv6vfuK53ObQM=)
2: BqAUWEEEynRAHsyw8vXlJOPtoko.roa (hash: fRUb8UeVdZCw52nD6tz43yTIJk+lOvp55J1+ztgjww8=)
3: EiyPYGJUCaKyLhDbDbPOkYPeFdg.roa (hash: +VRrZJlK+58yebvWqB6g7vqkLfWkY0a7+iXy3NJ3xEA=)
4: HqzX4EklzjztmxQHcTQSLToHBQo.roa (hash: 0C/Lc4jGp8PVv3g8+j/yiQ53pvc2GRhFcYHGJMXCY4s=)
5: IKjez_Jm_DroxNL6eA8oXbFCAr0.roa (hash: mQpdrbrtX9b+4ISzQxTZgRdXAFDBgRhT/V1RvJ33ORU=)
6: IjEclqq9aZVHP-1pPKHauFgerso.roa (hash: Uuc4FOdMforWzk+OMtEZAMLMegin8YdnOU2GgixhPDY=)
7: JXqXZhRMyYLEhxzVh3Gj36s_Ph0.roa (hash: pjrfkngpXTbXlOemB2zK4PxTtGivr+ki34ZUor3sLNE=)
8: JsnBQ-d6HlJ1IQj1cCRf-BvuxJY.roa (hash: MvWPx/XVlwEwn/CUfqwpxVOvbOK59XZKMZoYvkiq7pg=)
9: KWWTt0fnalZJJRG7NhLk1eTL5-w.crl (hash: X62w2YrfwoxIZLOARo5DHOm3cDxz7Dy7h69rbl7deDI=)
10: LbIBxCm3zc4zW15g4xohoJX9qic.roa (hash: 6wgCSs5mGVTM6aHPm61i10v74wejjqjW11LjQknpJBs=)
11: Q0My9AMCGjxZ0npORFZ4Tvx3C54.roa (hash: wu0aq49AqLS5xqmMACLQlP9eC2ugRqQQAybYzzqc3fE=)
12: XHlnD811u3em9JVJklrQN7J3cm0.roa (hash: u0+XGjhQ3bXTODeSfwve+tcBoDp30OCy9deDRC9QRYE=)
13: XZGlyG2IPt3742FE82Tkz8mGyq4.roa (hash: v8XatKoIXBXuIzaIEHcax1FamZrLl2OwB/RHFgt/lSU=)
14: ZUTPmES_I92lge3VqoMKVsiadL8.roa (hash: EYCn+DNcKMqEruiNAkvCDVx9dzY2G8BAuiKbjATbTdE=)
15: bhiGtzF7RuIEDHlSsVtceIRxH38.roa (hash: akX2koLtc0Hj8AOQToNc3k0ORycX0LTS6PyoFdzhc4U=)
16: cmuS_wFKhe7wwbr6EPdnbQmyZXo.roa (hash: LWlpo3v+x70PYDVy1B035O4VkZRBTo/qhBO9cRkrJH8=)
17: dAAgbpptLSU0Vrmk2iT4sKGu6bI.roa (hash: hLII+38WbV+tc1ZpNKlU1+REUXlmuvngdatwvZdVzBw=)
18: eFDPwahAIiaqNqf51zTx5lDvrZo.roa (hash: kr9w8Xld1i6+vsqQh/FD6WhZ+7q4oP80iULOMOz1iZ4=)
19: gDUrBxB6wNpkw1auAIeXKcxfpjk.roa (hash: MmMgI7BZHSBDbxCR5wftqfrkAJEiDMDH3YAVO82UluY=)
20: gPMjhhmemxpOq_6aVVCJVdiEiCw.roa (hash: Awi0lJMvPZIsKzXkRn4khXQRzuK6j9oUkbHUvDLJIPw=)
21: hegEslKsgUN8EfSljeWho5LH9AA.roa (hash: 7FUVQSpJvZtjHYpEYQtMbItOT8EfPhZLjylSV3d45Mk=)
22: iY5AUZ3oRD8enxE2YfRVgLOVchA.roa (hash: qdLguy24Q8ECPU9WacB+CHbkQyPvE/BjpYZ7lL8qnf4=)
23: j1LnzihLWpEHbVivIKleh48juQY.roa (hash: lSBEl6VaQ8BKt1Y/BfkhK36reElNLrWjumdNs9QCL94=)
24: roUgq1WWF-4-EBD-mSjF2FqhNuM.roa (hash: O7LaxZ0YLI1xv3D+p2716Dcd2hVN4y4qQfPRDb1TsUg=)
25: rtCZvcnDjssgDm1M5Mw6U_MuaQk.roa (hash: R1fOJZ69TZqTYVrK6Gl8R5/LkM043G84eXV/p0wdc3o=)
26: uNRqwpIiIZEsgTyrEkw7uhF314Y.roa (hash: nuf882yOK7Gm1Xhr7tFICsJpWAnlPOnwhndnq27u30w=)
27: vSREg_6m_MabpC6JhPX3QzIHx78.roa (hash: Mx3Adg5UoxiR8yhy3TEKj54l/CCfjvWb1t/HSvBKpE0=)
28: yDXd_AbeSk2V33waKgA8v3F-94A.roa (hash: xPpNioqtvkgaxveXzWANtmkRIznkEJ/Yx8p+E6Od7EM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/KWWTt0fnalZJJRG7NhLk1eTL5-w.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/KWWTt0fnalZJJRG7NhLk1eTL5-w.mft
rsync://rpki.ripe.net/repository/DEFAULT/KWWTt0fnalZJJRG7NhLk1eTL5-w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 07:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:83:7a:10:82:e2:f4:ef:87:3d:24:5c:29:c7:fe:cb:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=296593b747e76a56492511bb3612e4d5e4cbe7ec
Validity
Not Before: Jul 21 07:00:42 2026 GMT
Not After : Jul 22 07:00:42 2026 GMT
Subject: CN=b7e66709d9193c3b7540aba624dab9286f610f81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:90:c9:6f:eb:14:14:c6:98:da:84:4f:d9:0d:
73:78:9e:bd:bf:0c:7e:d1:be:bf:3c:92:ec:c8:34:
88:0f:d9:49:29:e5:57:a6:68:23:86:4c:ea:27:2d:
ba:a5:9f:11:11:f6:73:dc:a1:7d:cb:fc:11:30:2c:
34:52:bd:90:3c:d5:66:67:f4:67:e7:d5:2a:61:a5:
23:b5:a5:bd:25:16:ea:64:ad:c3:cc:2c:c6:6a:04:
1f:29:0d:23:e9:ee:00:82:d2:e4:9f:c4:2a:ae:cb:
4f:0e:c5:f2:89:cd:0c:0f:14:a5:c3:f3:80:01:c0:
03:d4:78:4d:2a:a8:be:3d:90:06:56:80:22:1c:28:
ae:0c:5b:f8:88:37:df:2b:6e:ad:78:4e:99:8d:85:
27:20:e3:be:2a:38:06:cf:45:44:af:61:4a:3c:ec:
b2:11:ba:86:ef:34:52:5f:69:72:e9:27:4f:69:d9:
94:fe:f9:56:15:37:8e:ca:ae:13:32:fd:86:21:a5:
0a:77:b9:8d:b3:0a:8c:0e:77:76:65:e7:6d:0a:d0:
56:4e:0f:40:02:c0:b9:05:a6:a3:a3:65:1b:98:6b:
1e:f0:d3:bb:3d:3b:c4:72:c7:54:cd:5d:e6:3d:ce:
04:18:81:f0:98:4c:5e:d9:17:3d:cf:b3:6c:82:07:
2a:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:E6:67:09:D9:19:3C:3B:75:40:AB:A6:24:DA:B9:28:6F:61:0F:81
X509v3 Authority Key Identifier:
keyid:29:65:93:B7:47:E7:6A:56:49:25:11:BB:36:12:E4:D5:E4:CB:E7:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KWWTt0fnalZJJRG7NhLk1eTL5-w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/KWWTt0fnalZJJRG7NhLk1eTL5-w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/KWWTt0fnalZJJRG7NhLk1eTL5-w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:40:da:c6:42:d9:4e:03:2e:9c:d6:b7:ba:e8:c2:c9:07:fd:
bf:23:61:dd:07:de:24:86:4a:b9:53:9e:18:de:8d:1a:7b:1d:
1b:dc:f0:88:3d:51:cd:78:1c:da:dc:89:4f:b2:4f:90:81:fa:
9d:df:a9:d9:31:44:68:61:22:21:f9:5f:c7:e6:f2:ba:c0:06:
f5:c1:e1:73:0a:bb:33:c9:3d:3d:1d:d5:d8:5a:3c:1c:1b:09:
17:93:24:f3:ec:5e:14:5e:a4:b4:56:60:85:6a:d4:8b:f6:c3:
19:45:5d:5d:a2:de:e8:22:82:92:03:19:2a:8e:49:15:ca:df:
56:e3:fc:ee:12:33:92:4d:a9:6a:15:d6:b9:8a:12:2a:ad:27:
2e:4c:cb:7c:4e:61:be:48:53:d3:c1:ab:56:b8:9f:8a:1d:f8:
df:d0:fe:a5:af:48:4c:5c:3e:1a:40:51:e1:ac:b2:95:31:74:
f5:b3:2a:af:17:45:bc:a9:35:5f:fb:35:a5:7b:df:c2:2f:56:
62:0e:cc:11:4b:ee:f5:63:01:32:49:05:62:72:ed:1b:b3:94:
ca:0a:fc:c4:fa:a8:4b:69:50:d9:8d:d2:0c:b5:ad:23:aa:cf:
d4:6c:60:7d:07:9e:8c:10:92:9c:21:4b:58:11:57:52:4e:c0:
03:dd:f8:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 09:57:56 2026 by rpki-client