Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/1bac01-212c-4f4c-8d3a-65257b1fec6d/1/kwd6mXyVvQGmTUCK_PVU2ItNteU.mft
File: kwd6mXyVvQGmTUCK_PVU2ItNteU.mft (raw, json)
Hash identifier: Umvu9W+EL8WUPfjjgxbIZZBeeC+ao3pGhuCP3au9qX8=
Subject key identifier: AF:2A:28:3F:7D:D6:3C:01:91:8B:15:BD:A7:C0:5D:E1:5D:85:B0:31
Authority key identifier: 93:07:7A:99:7C:95:BD:01:A6:4D:40:8A:FC:F5:54:D8:8B:4D:B5:E5
Certificate issuer: /CN=93077a997c95bd01a64d408afcf554d88b4db5e5
Certificate serial: 019F9F5F8A5BD7D97FA3D86E41D967DB658C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kwd6mXyVvQGmTUCK_PVU2ItNteU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/1bac01-212c-4f4c-8d3a-65257b1fec6d/1/kwd6mXyVvQGmTUCK_PVU2ItNteU.mft
Manifest number: 08B8
Signing time: Sun 26 Jul 2026 17:01:06 +0000
Manifest this update: Sun 26 Jul 2026 17:01:06 +0000
Manifest next update: Mon 27 Jul 2026 17:01:06 +0000
Files and hashes: 1: kwd6mXyVvQGmTUCK_PVU2ItNteU.crl (hash: Osays6ET/OT8zmquAZbDRMg2xrdRjeFw7S/nk2bRbT4=)
2: xCA0Tyr9gAJcBb_aRk9f4_-65Hw.roa (hash: vLJiM8h1yXdHJ3CZa6/nqFa+H4CdzM6jrN7A815VTRI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/1bac01-212c-4f4c-8d3a-65257b1fec6d/1/kwd6mXyVvQGmTUCK_PVU2ItNteU.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/1bac01-212c-4f4c-8d3a-65257b1fec6d/1/kwd6mXyVvQGmTUCK_PVU2ItNteU.mft
rsync://rpki.ripe.net/repository/DEFAULT/kwd6mXyVvQGmTUCK_PVU2ItNteU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 17:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:9f:5f:8a:5b:d7:d9:7f:a3:d8:6e:41:d9:67:db:65:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93077a997c95bd01a64d408afcf554d88b4db5e5
Validity
Not Before: Jul 26 17:01:06 2026 GMT
Not After : Jul 27 17:01:06 2026 GMT
Subject: CN=af2a283f7dd63c01918b15bda7c05de15d85b031
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:9a:c6:d5:51:d3:58:60:17:b2:1c:e9:33:80:
47:55:5c:af:7b:fb:e1:d0:4a:17:b5:0c:9e:16:b6:
80:e7:8c:4c:a2:5b:db:c8:cd:69:bd:02:10:c2:f5:
3a:33:5e:67:5f:30:b9:58:12:b8:b5:65:bf:a3:7f:
fb:9c:21:01:2d:94:d3:e9:09:ce:ea:14:a2:a8:0c:
ba:b0:7c:5c:80:fa:ee:0f:c1:71:a3:17:f9:98:ff:
13:af:06:57:5d:c9:5f:7d:31:0e:0b:f6:58:0c:10:
3c:da:5f:79:90:71:fd:7a:e9:23:3e:b6:9b:4e:1e:
12:fe:26:cc:39:d6:bf:10:cf:bf:22:6d:a8:aa:56:
aa:ef:8a:09:39:a8:47:7a:e2:fb:1c:69:d8:0b:e8:
e5:3a:98:ed:a4:8d:a7:d9:4f:a4:08:bb:35:2d:36:
85:6a:2a:39:e1:f4:f7:05:2d:9b:0b:2f:41:27:c8:
8a:25:3e:f7:4e:54:f4:14:f1:9d:51:f1:d8:e3:20:
71:c1:eb:79:d0:55:9c:7b:0f:d9:83:07:8d:a5:c5:
c3:b4:79:e9:ba:c8:21:80:71:66:94:71:41:a1:aa:
ea:40:13:f6:b2:a6:e9:a3:f1:3a:c6:09:36:e3:21:
d3:d5:ae:4c:2f:cb:b4:ea:35:5c:5a:21:91:7f:10:
9b:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:2A:28:3F:7D:D6:3C:01:91:8B:15:BD:A7:C0:5D:E1:5D:85:B0:31
X509v3 Authority Key Identifier:
keyid:93:07:7A:99:7C:95:BD:01:A6:4D:40:8A:FC:F5:54:D8:8B:4D:B5:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kwd6mXyVvQGmTUCK_PVU2ItNteU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/1bac01-212c-4f4c-8d3a-65257b1fec6d/1/kwd6mXyVvQGmTUCK_PVU2ItNteU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/1bac01-212c-4f4c-8d3a-65257b1fec6d/1/kwd6mXyVvQGmTUCK_PVU2ItNteU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:d9:b8:dc:8f:de:49:ff:60:24:08:3b:04:bd:5d:e3:6e:00:
35:b4:36:ad:b2:17:1a:17:4f:10:88:85:0d:19:08:f3:63:63:
8b:e7:2b:79:03:7a:13:50:99:64:72:25:10:63:cd:e2:29:f6:
6b:fc:93:3d:4f:72:6e:47:0d:fb:88:68:88:c8:88:c2:c1:40:
47:47:3d:c1:af:ea:db:a3:c0:22:84:a1:ad:f5:b5:3f:4a:1e:
3f:aa:c9:87:8f:46:52:65:17:22:77:11:9b:7f:72:79:b8:fe:
41:b6:6d:b6:15:43:17:a5:e9:a2:a7:12:51:46:db:58:7b:06:
82:55:6d:54:f2:43:c5:e4:e4:80:54:b5:3d:93:50:ea:c7:5b:
af:0e:f9:01:66:de:19:cc:47:48:db:d7:4b:0b:88:40:4c:69:
c9:79:60:b6:51:e8:19:fe:31:79:50:36:16:a6:a2:dc:a4:2b:
28:b6:a3:03:14:10:84:5c:cf:51:19:6e:f0:65:92:9d:ee:d8:
89:36:c1:9c:e8:a7:04:cb:dc:b2:1c:bf:2a:f5:15:f5:cb:5b:
42:24:9d:42:bd:f2:af:17:14:e5:78:57:ba:1e:8d:cb:6f:3f:
2a:b4:03:09:0b:a0:70:a4:a5:84:71:64:34:af:2b:c6:52:a0:
a4:8d:94:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 02:04:06 2026 by rpki-client