
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/KWWTt0fnalZJJRG7NhLk1eTL5-w.mft
File: KWWTt0fnalZJJRG7NhLk1eTL5-w.mft (raw, json)
Hash identifier: MISdBZmFpmZGd+Z8Ezp9f7YrdtJgVFbDRaVumIVPt5E=
Subject key identifier: EF:57:43:6E:B0:D0:66:FD:9B:43:A3:62:7C:E2:AC:B2:9D:F9:56:76
Authority key identifier: 29:65:93:B7:47:E7:6A:56:49:25:11:BB:36:12:E4:D5:E4:CB:E7:EC
Certificate issuer: /CN=296593b747e76a56492511bb3612e4d5e4cbe7ec
Certificate serial: 01A06D270BCA0C8A89C566FBCD7894D21394
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KWWTt0fnalZJJRG7NhLk1eTL5-w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/KWWTt0fnalZJJRG7NhLk1eTL5-w.mft
Manifest number: 1A9B
Signing time: Fri 04 Sep 2026 16:01:10 +0000
Manifest this update: Fri 04 Sep 2026 16:01:10 +0000
Manifest next update: Sat 05 Sep 2026 16:01:10 +0000
Files and hashes: 1: 1-jurUBuvQ1yZwU9729jbGVH_Dqc.roa (hash: NmPNOCnlOq4J9jRPSVe9AqahPbi72yXv6vfuK53ObQM=)
2: BqAUWEEEynRAHsyw8vXlJOPtoko.roa (hash: fRUb8UeVdZCw52nD6tz43yTIJk+lOvp55J1+ztgjww8=)
3: EiyPYGJUCaKyLhDbDbPOkYPeFdg.roa (hash: +VRrZJlK+58yebvWqB6g7vqkLfWkY0a7+iXy3NJ3xEA=)
4: HqzX4EklzjztmxQHcTQSLToHBQo.roa (hash: 0C/Lc4jGp8PVv3g8+j/yiQ53pvc2GRhFcYHGJMXCY4s=)
5: IKjez_Jm_DroxNL6eA8oXbFCAr0.roa (hash: mQpdrbrtX9b+4ISzQxTZgRdXAFDBgRhT/V1RvJ33ORU=)
6: IjEclqq9aZVHP-1pPKHauFgerso.roa (hash: Uuc4FOdMforWzk+OMtEZAMLMegin8YdnOU2GgixhPDY=)
7: JXqXZhRMyYLEhxzVh3Gj36s_Ph0.roa (hash: pjrfkngpXTbXlOemB2zK4PxTtGivr+ki34ZUor3sLNE=)
8: JsnBQ-d6HlJ1IQj1cCRf-BvuxJY.roa (hash: MvWPx/XVlwEwn/CUfqwpxVOvbOK59XZKMZoYvkiq7pg=)
9: KWWTt0fnalZJJRG7NhLk1eTL5-w.crl (hash: gEgupf+qGO+Ezk/gqRygMiSD5lonDZ+uHVOg6JBCeqQ=)
10: LbIBxCm3zc4zW15g4xohoJX9qic.roa (hash: 6wgCSs5mGVTM6aHPm61i10v74wejjqjW11LjQknpJBs=)
11: Q0My9AMCGjxZ0npORFZ4Tvx3C54.roa (hash: wu0aq49AqLS5xqmMACLQlP9eC2ugRqQQAybYzzqc3fE=)
12: XHlnD811u3em9JVJklrQN7J3cm0.roa (hash: u0+XGjhQ3bXTODeSfwve+tcBoDp30OCy9deDRC9QRYE=)
13: XZGlyG2IPt3742FE82Tkz8mGyq4.roa (hash: v8XatKoIXBXuIzaIEHcax1FamZrLl2OwB/RHFgt/lSU=)
14: ZUTPmES_I92lge3VqoMKVsiadL8.roa (hash: EYCn+DNcKMqEruiNAkvCDVx9dzY2G8BAuiKbjATbTdE=)
15: bhiGtzF7RuIEDHlSsVtceIRxH38.roa (hash: akX2koLtc0Hj8AOQToNc3k0ORycX0LTS6PyoFdzhc4U=)
16: cmuS_wFKhe7wwbr6EPdnbQmyZXo.roa (hash: LWlpo3v+x70PYDVy1B035O4VkZRBTo/qhBO9cRkrJH8=)
17: dAAgbpptLSU0Vrmk2iT4sKGu6bI.roa (hash: hLII+38WbV+tc1ZpNKlU1+REUXlmuvngdatwvZdVzBw=)
18: eFDPwahAIiaqNqf51zTx5lDvrZo.roa (hash: kr9w8Xld1i6+vsqQh/FD6WhZ+7q4oP80iULOMOz1iZ4=)
19: gDUrBxB6wNpkw1auAIeXKcxfpjk.roa (hash: MmMgI7BZHSBDbxCR5wftqfrkAJEiDMDH3YAVO82UluY=)
20: gPMjhhmemxpOq_6aVVCJVdiEiCw.roa (hash: Awi0lJMvPZIsKzXkRn4khXQRzuK6j9oUkbHUvDLJIPw=)
21: hegEslKsgUN8EfSljeWho5LH9AA.roa (hash: 7FUVQSpJvZtjHYpEYQtMbItOT8EfPhZLjylSV3d45Mk=)
22: iY5AUZ3oRD8enxE2YfRVgLOVchA.roa (hash: qdLguy24Q8ECPU9WacB+CHbkQyPvE/BjpYZ7lL8qnf4=)
23: j1LnzihLWpEHbVivIKleh48juQY.roa (hash: lSBEl6VaQ8BKt1Y/BfkhK36reElNLrWjumdNs9QCL94=)
24: roUgq1WWF-4-EBD-mSjF2FqhNuM.roa (hash: O7LaxZ0YLI1xv3D+p2716Dcd2hVN4y4qQfPRDb1TsUg=)
25: rtCZvcnDjssgDm1M5Mw6U_MuaQk.roa (hash: R1fOJZ69TZqTYVrK6Gl8R5/LkM043G84eXV/p0wdc3o=)
26: uNRqwpIiIZEsgTyrEkw7uhF314Y.roa (hash: nuf882yOK7Gm1Xhr7tFICsJpWAnlPOnwhndnq27u30w=)
27: vSREg_6m_MabpC6JhPX3QzIHx78.roa (hash: Mx3Adg5UoxiR8yhy3TEKj54l/CCfjvWb1t/HSvBKpE0=)
28: yDXd_AbeSk2V33waKgA8v3F-94A.roa (hash: xPpNioqtvkgaxveXzWANtmkRIznkEJ/Yx8p+E6Od7EM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/KWWTt0fnalZJJRG7NhLk1eTL5-w.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/KWWTt0fnalZJJRG7NhLk1eTL5-w.mft
rsync://rpki.ripe.net/repository/DEFAULT/KWWTt0fnalZJJRG7NhLk1eTL5-w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6d:27:0b:ca:0c:8a:89:c5:66:fb:cd:78:94:d2:13:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=296593b747e76a56492511bb3612e4d5e4cbe7ec
Validity
Not Before: Sep 4 16:01:10 2026 GMT
Not After : Sep 5 16:01:10 2026 GMT
Subject: CN=ef57436eb0d066fd9b43a3627ce2acb29df95676
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:25:f0:b5:c8:08:ba:67:82:93:ce:ec:22:66:
b2:91:92:32:50:09:dd:b5:d4:93:1a:d7:b6:1b:f2:
76:77:f5:52:17:19:f7:70:17:24:47:94:06:0a:b4:
46:f5:23:ae:01:28:cd:2b:6f:d7:73:f5:e1:67:ce:
d4:37:04:d1:29:bc:cf:f2:42:ff:42:dc:30:6a:7b:
75:13:16:ad:9d:1a:1e:80:f0:51:89:61:17:c1:b2:
68:bf:e6:01:ed:55:26:52:03:7e:a7:73:b4:4f:f8:
4a:1d:ff:03:21:16:81:81:90:20:a4:8d:05:7a:05:
2a:9a:54:51:06:38:54:ea:84:92:ec:90:28:6c:9a:
47:41:b1:f6:53:38:da:6f:aa:03:96:20:34:b5:f0:
13:d8:f8:76:de:d3:82:ef:30:5a:8b:8f:99:e4:82:
a2:36:6b:bd:9f:9b:4b:34:aa:58:10:7f:2c:eb:6d:
b4:78:d6:f0:e1:f2:79:21:28:43:6f:13:7b:40:9c:
d0:f8:48:db:8c:89:57:27:b4:5a:ae:06:6a:28:8e:
93:d8:e2:a9:45:68:1e:ad:22:39:3f:5e:ba:6a:82:
03:d0:0e:a6:fc:a3:aa:66:0a:87:ca:04:2b:64:e7:
c0:8c:e7:b2:60:9e:44:80:aa:85:d0:28:87:d1:09:
8b:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:57:43:6E:B0:D0:66:FD:9B:43:A3:62:7C:E2:AC:B2:9D:F9:56:76
X509v3 Authority Key Identifier:
keyid:29:65:93:B7:47:E7:6A:56:49:25:11:BB:36:12:E4:D5:E4:CB:E7:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KWWTt0fnalZJJRG7NhLk1eTL5-w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/KWWTt0fnalZJJRG7NhLk1eTL5-w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/KWWTt0fnalZJJRG7NhLk1eTL5-w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:cb:c4:ef:99:9f:a6:a5:5c:3c:d7:78:60:58:47:12:51:69:
70:22:e2:9d:37:f2:d1:c2:c3:f7:2c:c8:be:c9:f4:00:bb:b4:
c8:4c:15:67:73:22:83:ef:96:2b:6a:63:42:04:3c:6b:69:31:
6b:41:0a:35:bd:8b:2d:5d:f4:3c:2b:2d:c1:8f:ea:62:fa:8a:
09:ec:5b:4f:42:7d:f0:0f:91:72:8c:f9:e2:6a:38:0e:3d:e4:
5a:f9:f4:c3:2a:5b:fb:e2:f2:ca:83:23:5d:a9:e4:4a:49:fb:
45:92:46:c4:fb:3f:07:2e:51:80:81:e6:03:6d:bd:1d:c2:ca:
b9:31:19:57:ce:7d:12:1a:1b:87:15:74:12:67:f3:16:f8:d7:
35:d6:04:0b:9b:d8:0d:5c:90:1a:c6:61:7e:e0:63:b9:30:bf:
67:b3:87:70:1d:41:e5:8f:d5:61:9f:e0:62:70:cb:68:67:41:
2c:f8:b0:26:64:e6:39:18:57:f9:e5:da:47:66:f1:57:5f:e0:
3d:b2:18:ed:83:6f:0b:6b:93:1e:d4:a2:2c:b9:f8:58:06:f4:
85:62:15:c3:f4:dd:5b:63:d2:35:67:cd:36:51:81:0e:9a:66:
50:62:71:c0:33:46:3c:75:5f:f4:b7:7a:3d:a8:23:d1:9d:bf:
18:94:52:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 20:18:03 2026 by rpki-client