Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5c/1bac01-212c-4f4c-8d3a-65257b1fec6d/1/kwd6mXyVvQGmTUCK_PVU2ItNteU.mft
File: kwd6mXyVvQGmTUCK_PVU2ItNteU.mft (raw, json)
Hash identifier: uvToEE8zAvYzHOM8zqcLNfzKB8CiONA4TYToRD3Q1ns=
Subject key identifier: BA:E9:00:84:AA:5C:BE:D7:5A:69:CF:52:5E:1D:C8:FC:A3:16:39:C7
Authority key identifier: 93:07:7A:99:7C:95:BD:01:A6:4D:40:8A:FC:F5:54:D8:8B:4D:B5:E5
Certificate issuer: /CN=93077a997c95bd01a64d408afcf554d88b4db5e5
Certificate serial: 01A17C60379196492EC7BCD27C86BCC0BA76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kwd6mXyVvQGmTUCK_PVU2ItNteU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/1bac01-212c-4f4c-8d3a-65257b1fec6d/1/kwd6mXyVvQGmTUCK_PVU2ItNteU.mft
Manifest number: 09AF
Signing time: Tue 27 Oct 2026 08:00:42 +0000
Manifest this update: Tue 27 Oct 2026 08:00:42 +0000
Manifest next update: Wed 28 Oct 2026 08:00:42 +0000
Files and hashes: 1: kwd6mXyVvQGmTUCK_PVU2ItNteU.crl (hash: br0EULJtTtk5rO/Iepahp+Mmvl/Wvr5GvHvgEpRhN9g=)
2: xCA0Tyr9gAJcBb_aRk9f4_-65Hw.roa (hash: vLJiM8h1yXdHJ3CZa6/nqFa+H4CdzM6jrN7A815VTRI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/1bac01-212c-4f4c-8d3a-65257b1fec6d/1/kwd6mXyVvQGmTUCK_PVU2ItNteU.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/1bac01-212c-4f4c-8d3a-65257b1fec6d/1/kwd6mXyVvQGmTUCK_PVU2ItNteU.mft
rsync://rpki.ripe.net/repository/DEFAULT/kwd6mXyVvQGmTUCK_PVU2ItNteU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7c:60:37:91:96:49:2e:c7:bc:d2:7c:86:bc:c0:ba:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93077a997c95bd01a64d408afcf554d88b4db5e5
Validity
Not Before: Oct 27 08:00:42 2026 GMT
Not After : Oct 28 08:00:42 2026 GMT
Subject: CN=bae90084aa5cbed75a69cf525e1dc8fca31639c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:34:7b:32:55:4f:2d:d1:67:ac:58:54:79:9c:
a2:16:70:60:f2:94:f4:27:86:7d:79:ea:1a:cd:26:
d6:7f:1e:44:01:3b:78:98:2a:97:6a:1f:b0:68:10:
be:11:76:d5:6e:98:a3:8d:b1:3a:ae:2e:b7:cf:cc:
02:5e:4c:fd:ab:6f:d5:c9:35:a6:be:42:54:3e:74:
57:38:6f:ef:5c:c3:42:a1:a2:d1:76:54:cb:97:1a:
18:c5:59:75:c8:7c:d8:54:c6:af:74:2b:13:98:bb:
2d:6c:8b:b9:db:56:07:a6:85:d7:92:08:06:f9:f3:
31:43:0c:f8:55:65:13:17:10:93:eb:5b:87:8a:7a:
ec:da:1b:31:84:7a:e6:9a:1c:5e:86:b0:d5:6c:e4:
2a:9e:29:7f:91:0c:88:7d:22:d5:b5:01:33:4a:89:
01:5d:4d:83:df:c3:b1:c2:4c:a3:06:2c:f8:b5:67:
e0:e7:6a:38:91:e9:6f:a6:fd:a4:a5:dc:65:f0:a2:
62:0f:5c:36:c5:46:18:a4:26:24:72:c0:98:ef:77:
2b:14:cf:a2:81:fc:b8:e9:6f:e9:23:f2:14:42:23:
be:c0:6e:f2:1f:ed:29:ba:4d:07:f8:a6:e6:6f:ca:
5c:1e:4c:fe:b5:d3:69:3c:f6:bb:15:b7:b7:3b:84:
c3:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:E9:00:84:AA:5C:BE:D7:5A:69:CF:52:5E:1D:C8:FC:A3:16:39:C7
X509v3 Authority Key Identifier:
keyid:93:07:7A:99:7C:95:BD:01:A6:4D:40:8A:FC:F5:54:D8:8B:4D:B5:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kwd6mXyVvQGmTUCK_PVU2ItNteU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/1bac01-212c-4f4c-8d3a-65257b1fec6d/1/kwd6mXyVvQGmTUCK_PVU2ItNteU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/1bac01-212c-4f4c-8d3a-65257b1fec6d/1/kwd6mXyVvQGmTUCK_PVU2ItNteU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:30:f2:8d:19:ae:c1:43:02:3c:a9:a5:99:00:9f:2c:0c:57:
c3:cb:b9:fb:b6:d0:12:3f:f5:f8:eb:d8:17:2e:74:61:2e:bc:
3f:37:b3:83:32:22:36:77:96:42:61:56:7a:61:79:cb:25:e7:
ad:a3:f9:a4:d4:d3:0d:0e:14:89:0b:7f:7c:b1:1d:34:18:2d:
68:e2:46:f2:65:7d:87:c7:3f:34:4c:6a:ee:18:98:4d:b4:35:
29:c9:54:59:d2:e3:12:47:32:7f:71:75:5e:2e:15:33:86:0c:
ab:a9:8d:e1:61:1e:16:8a:0f:de:67:4f:b0:1e:49:c8:c7:69:
3c:fb:ed:07:29:7f:51:22:13:29:5b:3b:20:81:9b:9c:37:df:
8e:ae:6e:d9:75:54:4a:c2:07:68:d8:18:7e:3c:2e:69:43:2b:
9a:79:8a:66:0c:25:46:16:d2:49:b4:c1:22:71:6f:d2:8b:df:
83:99:ec:ab:59:73:f0:8b:3b:a5:0d:ff:0c:27:b8:16:26:b7:
8e:17:b8:c8:11:e9:71:ab:1b:64:1a:22:87:fe:a7:b4:55:94:
6c:b9:2b:7f:98:aa:fa:77:99:13:17:ef:27:97:4f:e3:ee:d1:
50:e7:4c:1c:dd:c6:8f:0e:36:47:5e:10:af:d5:0b:99:c4:06:
6c:3e:63:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 15:43:20 2026 by rpki-client