Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/1bac01-212c-4f4c-8d3a-65257b1fec6d/1/kwd6mXyVvQGmTUCK_PVU2ItNteU.mft
File: kwd6mXyVvQGmTUCK_PVU2ItNteU.mft (raw, json)
Hash identifier: aenzoq4pWDcVKffNeyG3eBUk9gSXdh21a7Ij9kQb1Tc=
Subject key identifier: E7:AC:B2:6F:65:EC:C1:3E:51:29:15:FB:C6:99:34:55:2D:AD:9F:02
Authority key identifier: 93:07:7A:99:7C:95:BD:01:A6:4D:40:8A:FC:F5:54:D8:8B:4D:B5:E5
Certificate issuer: /CN=93077a997c95bd01a64d408afcf554d88b4db5e5
Certificate serial: 019DCDF572BBE7A3B049045BFA6556145813
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kwd6mXyVvQGmTUCK_PVU2ItNteU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/1bac01-212c-4f4c-8d3a-65257b1fec6d/1/kwd6mXyVvQGmTUCK_PVU2ItNteU.mft
Manifest number: 07C7
Signing time: Mon 27 Apr 2026 08:01:48 +0000
Manifest this update: Mon 27 Apr 2026 08:01:48 +0000
Manifest next update: Tue 28 Apr 2026 08:01:48 +0000
Files and hashes: 1: kwd6mXyVvQGmTUCK_PVU2ItNteU.crl (hash: 21y8m5XN98skUQxNWwWLWu5Geq7i2JxtHnP3MWcTMZ4=)
2: xCA0Tyr9gAJcBb_aRk9f4_-65Hw.roa (hash: vLJiM8h1yXdHJ3CZa6/nqFa+H4CdzM6jrN7A815VTRI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/1bac01-212c-4f4c-8d3a-65257b1fec6d/1/kwd6mXyVvQGmTUCK_PVU2ItNteU.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/1bac01-212c-4f4c-8d3a-65257b1fec6d/1/kwd6mXyVvQGmTUCK_PVU2ItNteU.mft
rsync://rpki.ripe.net/repository/DEFAULT/kwd6mXyVvQGmTUCK_PVU2ItNteU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 08:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cd:f5:72:bb:e7:a3:b0:49:04:5b:fa:65:56:14:58:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93077a997c95bd01a64d408afcf554d88b4db5e5
Validity
Not Before: Apr 27 08:01:48 2026 GMT
Not After : Apr 28 08:01:48 2026 GMT
Subject: CN=e7acb26f65ecc13e512915fbc69934552dad9f02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:5c:21:84:50:46:e5:da:c4:be:41:20:eb:03:
76:f7:ae:11:a0:9a:ca:80:03:5b:ec:f6:3f:c4:b9:
fe:be:b2:f8:9c:a4:8a:6b:56:ef:3f:01:3a:5b:bb:
10:41:6d:5c:17:0b:96:e2:98:82:58:5a:c4:60:1c:
dd:0d:de:26:ce:e6:38:0b:a9:53:5d:ce:c9:cf:a9:
c3:7c:21:09:e8:73:21:78:df:32:c8:c5:b4:6d:43:
96:60:73:c2:85:a8:bd:c3:f7:c2:15:7c:9d:36:8e:
50:a2:67:73:da:42:a8:2a:3a:09:f1:6e:96:51:c5:
4e:de:9e:1d:0b:be:0a:32:a1:0d:21:b4:d7:fd:2c:
39:93:96:5f:33:f0:aa:5a:50:80:72:15:14:ca:89:
89:d8:76:30:54:6a:c9:e2:22:b9:3e:fb:56:b7:5e:
d9:80:e9:56:db:9a:90:44:a1:8e:e9:8f:e3:8f:7c:
44:ea:11:a7:ad:d3:8d:c5:33:fb:f5:e3:86:6c:53:
53:6a:9c:cb:73:37:e4:22:53:68:ac:4f:c6:36:c5:
95:21:06:86:81:11:b3:76:c1:42:88:d7:06:b2:89:
b0:11:b5:e8:a4:f6:00:12:7f:a2:5c:34:f3:14:34:
b1:0f:d8:21:67:67:5e:20:0d:7c:ef:74:91:aa:be:
7d:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:AC:B2:6F:65:EC:C1:3E:51:29:15:FB:C6:99:34:55:2D:AD:9F:02
X509v3 Authority Key Identifier:
keyid:93:07:7A:99:7C:95:BD:01:A6:4D:40:8A:FC:F5:54:D8:8B:4D:B5:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kwd6mXyVvQGmTUCK_PVU2ItNteU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/1bac01-212c-4f4c-8d3a-65257b1fec6d/1/kwd6mXyVvQGmTUCK_PVU2ItNteU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/1bac01-212c-4f4c-8d3a-65257b1fec6d/1/kwd6mXyVvQGmTUCK_PVU2ItNteU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:ed:3f:cf:fa:16:b1:c8:a5:5a:ac:70:ce:bb:1b:93:bb:d3:
74:e2:9f:5f:26:82:4c:2f:e1:ad:3b:cc:9e:9c:80:71:2d:11:
03:f0:69:81:74:6f:2c:b7:3f:4a:99:65:1a:f1:ca:fa:40:41:
76:ef:b2:1d:d4:75:ed:0a:89:f0:84:c6:38:cd:29:13:ab:fc:
4e:e3:c5:40:c6:23:40:dc:c0:bd:f4:a8:52:af:32:8c:e4:f4:
d0:4a:80:4b:c0:b5:89:82:c7:95:60:3c:36:7e:77:0e:d4:48:
49:f1:f3:9d:db:68:a6:dd:e2:bf:96:f3:84:5c:22:9b:6a:3a:
45:d2:fe:61:d8:6e:c7:93:d1:3b:d4:4f:67:b3:03:b2:bd:92:
4a:73:c4:2d:9a:e8:de:25:ae:cf:2a:01:0e:cf:6e:40:3c:c9:
04:35:03:5c:67:6a:36:52:2b:40:bd:40:69:4f:89:1d:3f:87:
5a:75:aa:5c:56:51:6a:87:d4:ec:17:ef:08:e6:8c:dc:97:3e:
dd:3e:40:db:91:78:1a:a1:57:45:64:4c:c5:14:d0:72:64:51:
7a:e4:8f:83:aa:e0:a1:f6:26:76:53:a9:d7:2f:70:63:61:6b:
68:c2:0f:90:8d:20:a3:29:c5:b1:22:4b:bc:f4:38:53:da:a0:
0f:11:ae:d8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ3N9XK756OwSQRb+mVWFFgTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkzMDc3YTk5N2M5NWJkMDFhNjRkNDA4YWZjZjU1NGQ4OGI0
ZGI1ZTUwHhcNMjYwNDI3MDgwMTQ4WhcNMjYwNDI4MDgwMTQ4WjAzMTEwLwYDVQQD
EyhlN2FjYjI2ZjY1ZWNjMTNlNTEyOTE1ZmJjNjk5MzQ1NTJkYWQ5ZjAyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvVwhhFBG5drEvkEg6wN2964RoJrK
gANb7PY/xLn+vrL4nKSKa1bvPwE6W7sQQW1cFwuW4piCWFrEYBzdDd4mzuY4C6lT
Xc7Jz6nDfCEJ6HMheN8yyMW0bUOWYHPChai9w/fCFXydNo5Qomdz2kKoKjoJ8W6W
UcVO3p4dC74KMqENIbTX/Sw5k5ZfM/CqWlCAchUUyomJ2HYwVGrJ4iK5PvtWt17Z
gOlW25qQRKGO6Y/jj3xE6hGnrdONxTP79eOGbFNTapzLczfkIlNorE/GNsWVIQaG
gRGzdsFCiNcGsomwEbXopPYAEn+iXDTzFDSxD9ghZ2deIA1873SRqr59hQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOessm9l7ME+USkV+8aZNFUtrZ8CMB8GA1UdIwQY
MBaAFJMHepl8lb0Bpk1Aivz1VNiLTbXlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva3dkNm1YeVZ2UUdtVFVDS19QVlUySXROdGVVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy8xYmFjMDEtMjEyYy00ZjRjLThkM2Et
NjUyNTdiMWZlYzZkLzEva3dkNm1YeVZ2UUdtVFVDS19QVlUySXROdGVVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yy8xYmFjMDEtMjEyYy00ZjRjLThkM2EtNjUyNTdiMWZlYzZk
LzEva3dkNm1YeVZ2UUdtVFVDS19QVlUySXROdGVVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKe0/z/oW
scilWqxwzrsbk7vTdOKfXyaCTC/hrTvMnpyAcS0RA/BpgXRvLLc/SpllGvHK+kBB
du+yHdR17QqJ8ITGOM0pE6v8TuPFQMYjQNzAvfSoUq8yjOT00EqAS8C1iYLHlWA8
Nn53DtRISfHzndtopt3iv5bzhFwim2o6RdL+Ydhux5PRO9RPZ7MDsr2SSnPELZro
3iWuzyoBDs9uQDzJBDUDXGdqNlIrQL1AaU+JHT+HWnWqXFZRaofU7BfvCOaM3Jc+
3T5A25F4GqFXRWRMxRTQcmRReuSPg6rgofYmdlOp1y9wY2FraMIPkI0goynFsSJL
vPQ4U9qgDxGu2A==
-----END CERTIFICATE-----
Generated at Mon Apr 27 14:35:23 2026 by rpki-client