Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5d/077a50-45b6-4a38-9db9-950c7e73245c/1/kwNiKzxU5F9BZvMBeY-G27pHGAw.mft
File: kwNiKzxU5F9BZvMBeY-G27pHGAw.mft (raw, json)
Hash identifier: kB5YlukYREZSgegynJZ/aBTRGU3CCkiS2W9b6I9cik8=
Subject key identifier: 59:73:CE:5B:95:41:54:48:12:8E:6C:BE:52:41:F5:78:94:9D:72:FA
Authority key identifier: 93:03:62:2B:3C:54:E4:5F:41:66:F3:01:79:8F:86:DB:BA:47:18:0C
Certificate issuer: /CN=9303622b3c54e45f4166f301798f86dbba47180c
Certificate serial: 01A1829A17AFB44D2851E0E36010366390F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kwNiKzxU5F9BZvMBeY-G27pHGAw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/077a50-45b6-4a38-9db9-950c7e73245c/1/kwNiKzxU5F9BZvMBeY-G27pHGAw.mft
Manifest number: 0C62
Signing time: Wed 28 Oct 2026 13:01:39 +0000
Manifest this update: Wed 28 Oct 2026 13:01:39 +0000
Manifest next update: Thu 29 Oct 2026 13:01:39 +0000
Files and hashes: 1: kwNiKzxU5F9BZvMBeY-G27pHGAw.crl (hash: YOYXNp7Ki2G+pVT2fZExkucHfAAaMHF6+L6W/36NhTs=)
2: oEI10F1yOzZXTlBBBvzIeX5OXog.roa (hash: QNwI0l8coi9XbWot/ryVzcBU4wEtxZkGadr7asLldw8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/077a50-45b6-4a38-9db9-950c7e73245c/1/kwNiKzxU5F9BZvMBeY-G27pHGAw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/077a50-45b6-4a38-9db9-950c7e73245c/1/kwNiKzxU5F9BZvMBeY-G27pHGAw.mft
rsync://rpki.ripe.net/repository/DEFAULT/kwNiKzxU5F9BZvMBeY-G27pHGAw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 13:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:82:9a:17:af:b4:4d:28:51:e0:e3:60:10:36:63:90:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9303622b3c54e45f4166f301798f86dbba47180c
Validity
Not Before: Oct 28 13:01:39 2026 GMT
Not After : Oct 29 13:01:39 2026 GMT
Subject: CN=5973ce5b95415448128e6cbe5241f578949d72fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:ed:3f:6f:0e:e9:06:36:61:16:56:98:8c:fe:
4d:44:21:03:d7:a0:fa:75:a3:96:20:52:a9:d8:4f:
d4:7a:96:19:7e:6b:09:63:f4:88:c2:ee:f0:31:3e:
e8:c0:ca:1f:a8:23:3c:54:e9:d8:2c:69:4b:fd:0a:
b4:c0:9c:d8:4d:3b:06:8f:68:87:f4:7c:d0:48:d3:
51:77:67:54:bc:5c:3f:f9:b5:d5:7a:70:1e:ff:e1:
84:17:cf:dc:cd:83:18:87:a6:6a:7d:f2:37:10:df:
c8:34:78:5d:e6:d5:3c:e3:22:f0:06:81:8b:99:1f:
f6:21:d1:2d:ac:14:12:5e:09:d7:4b:ea:20:72:21:
e9:68:3f:80:93:f3:19:2a:c8:ba:10:61:10:30:6b:
10:fd:41:04:f3:62:92:a7:db:a9:fa:be:6f:06:67:
d5:07:8e:05:86:79:5f:1b:e0:f3:1f:74:23:d1:0b:
35:76:f1:99:3c:c4:8f:b7:dc:31:ee:cf:04:7d:1d:
c9:1b:89:99:45:9b:7e:eb:32:2e:7f:d8:d7:ae:ba:
70:24:b4:46:6b:04:5e:5a:e2:62:93:f5:70:8e:9d:
6b:81:9d:11:af:a2:35:c5:ec:c5:5d:c2:15:2f:0c:
47:1b:0c:83:6b:5c:f0:ef:76:d1:3e:e6:9b:a1:a9:
a4:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:73:CE:5B:95:41:54:48:12:8E:6C:BE:52:41:F5:78:94:9D:72:FA
X509v3 Authority Key Identifier:
keyid:93:03:62:2B:3C:54:E4:5F:41:66:F3:01:79:8F:86:DB:BA:47:18:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kwNiKzxU5F9BZvMBeY-G27pHGAw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/077a50-45b6-4a38-9db9-950c7e73245c/1/kwNiKzxU5F9BZvMBeY-G27pHGAw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/077a50-45b6-4a38-9db9-950c7e73245c/1/kwNiKzxU5F9BZvMBeY-G27pHGAw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:df:02:34:66:49:91:7e:3f:9b:05:23:5d:d6:40:c2:1d:d7:
82:98:7e:d2:d6:6e:02:41:f5:66:c2:1a:ba:6f:b1:6c:7e:b9:
42:4e:a5:89:41:76:ea:bc:18:33:45:27:81:b1:38:4a:17:5d:
40:ff:6a:b5:98:1e:2a:80:9c:27:0a:1d:b9:58:17:a2:e7:d8:
33:9c:62:02:6b:cf:20:a3:fa:37:e7:2b:45:c3:22:16:0f:05:
83:77:ac:3c:d5:5f:65:7d:1d:65:63:6f:dc:78:42:92:e4:54:
31:86:05:73:78:7c:01:ea:b5:9a:84:35:22:c1:bb:d6:dc:5c:
9a:09:ef:62:de:0a:e6:05:7e:30:99:62:ff:5b:3f:ba:d5:96:
93:fd:0a:f2:28:36:18:c9:c3:63:f2:87:1d:ce:bf:64:7a:44:
aa:8f:1d:58:ab:8e:2f:71:f2:a2:9b:e7:a6:fd:be:8b:ea:a4:
5a:34:c7:00:09:29:f5:fe:a9:f1:4f:57:48:34:bb:70:96:c8:
10:57:05:c3:ad:36:7e:74:5b:7b:23:dd:73:06:96:40:e6:fe:
0e:71:b1:fb:5c:30:17:9c:1d:5c:1d:43:ce:14:07:dd:34:01:
35:7f:82:e6:e3:3b:61:39:2c:9f:d0:71:3a:14:8d:9a:a5:0a:
7b:4e:47:93
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaGCmhevtE0oUeDjYBA2Y5D4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkzMDM2MjJiM2M1NGU0NWY0MTY2ZjMwMTc5OGY4NmRiYmE0
NzE4MGMwHhcNMjYxMDI4MTMwMTM5WhcNMjYxMDI5MTMwMTM5WjAzMTEwLwYDVQQD
Eyg1OTczY2U1Yjk1NDE1NDQ4MTI4ZTZjYmU1MjQxZjU3ODk0OWQ3MmZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo+0/bw7pBjZhFlaYjP5NRCED16D6
daOWIFKp2E/UepYZfmsJY/SIwu7wMT7owMofqCM8VOnYLGlL/Qq0wJzYTTsGj2iH
9HzQSNNRd2dUvFw/+bXVenAe/+GEF8/czYMYh6ZqffI3EN/INHhd5tU84yLwBoGL
mR/2IdEtrBQSXgnXS+ogciHpaD+Ak/MZKsi6EGEQMGsQ/UEE82KSp9up+r5vBmfV
B44FhnlfG+DzH3Qj0Qs1dvGZPMSPt9wx7s8EfR3JG4mZRZt+6zIuf9jXrrpwJLRG
awReWuJik/Vwjp1rgZ0Rr6I1xezFXcIVLwxHGwyDa1zw73bRPuaboamkAQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFlzzluVQVRIEo5svlJB9XiUnXL6MB8GA1UdIwQY
MBaAFJMDYis8VORfQWbzAXmPhtu6RxgMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva3dOaUt6eFU1RjlCWnZNQmVZLUcyN3BIR0F3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC8wNzdhNTAtNDViNi00YTM4LTlkYjkt
OTUwYzdlNzMyNDVjLzEva3dOaUt6eFU1RjlCWnZNQmVZLUcyN3BIR0F3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZC8wNzdhNTAtNDViNi00YTM4LTlkYjktOTUwYzdlNzMyNDVj
LzEva3dOaUt6eFU1RjlCWnZNQmVZLUcyN3BIR0F3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqN8CNGZJ
kX4/mwUjXdZAwh3Xgph+0tZuAkH1ZsIaum+xbH65Qk6liUF26rwYM0UngbE4Shdd
QP9qtZgeKoCcJwoduVgXoufYM5xiAmvPIKP6N+crRcMiFg8Fg3esPNVfZX0dZWNv
3HhCkuRUMYYFc3h8Aeq1moQ1IsG71txcmgnvYt4K5gV+MJli/1s/utWWk/0K8ig2
GMnDY/KHHc6/ZHpEqo8dWKuOL3Hyopvnpv2+i+qkWjTHAAkp9f6p8U9XSDS7cJbI
EFcFw602fnRbeyPdcwaWQOb+DnGx+1wwF5wdXB1DzhQH3TQBNX+C5uM7YTksn9Bx
OhSNmqUKe05Hkw==
-----END CERTIFICATE-----
Generated at Wed Oct 28 21:50:23 2026 by rpki-client