Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5d/077a50-45b6-4a38-9db9-950c7e73245c/1/kwNiKzxU5F9BZvMBeY-G27pHGAw.mft
File: kwNiKzxU5F9BZvMBeY-G27pHGAw.mft (raw, json)
Hash identifier: IU4Bc0Rh09dABdyvZHVJlqi14WCsRDTlgyL/L5L30IY=
Subject key identifier: 9B:64:1F:C1:49:AC:8C:D7:56:DF:6A:1A:DA:78:4A:0E:18:BA:7D:03
Authority key identifier: 93:03:62:2B:3C:54:E4:5F:41:66:F3:01:79:8F:86:DB:BA:47:18:0C
Certificate issuer: /CN=9303622b3c54e45f4166f301798f86dbba47180c
Certificate serial: 01A184882B66B10F131FD994A8065165B5CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kwNiKzxU5F9BZvMBeY-G27pHGAw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/077a50-45b6-4a38-9db9-950c7e73245c/1/kwNiKzxU5F9BZvMBeY-G27pHGAw.mft
Manifest number: 0C63
Signing time: Wed 28 Oct 2026 22:01:18 +0000
Manifest this update: Wed 28 Oct 2026 22:01:18 +0000
Manifest next update: Thu 29 Oct 2026 22:01:18 +0000
Files and hashes: 1: kwNiKzxU5F9BZvMBeY-G27pHGAw.crl (hash: X5M+Z/v+B4yNsN/dFOw7UDStvEt99baKE3S+w/m2JTE=)
2: oEI10F1yOzZXTlBBBvzIeX5OXog.roa (hash: QNwI0l8coi9XbWot/ryVzcBU4wEtxZkGadr7asLldw8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/077a50-45b6-4a38-9db9-950c7e73245c/1/kwNiKzxU5F9BZvMBeY-G27pHGAw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/077a50-45b6-4a38-9db9-950c7e73245c/1/kwNiKzxU5F9BZvMBeY-G27pHGAw.mft
rsync://rpki.ripe.net/repository/DEFAULT/kwNiKzxU5F9BZvMBeY-G27pHGAw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 14:14:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:84:88:2b:66:b1:0f:13:1f:d9:94:a8:06:51:65:b5:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9303622b3c54e45f4166f301798f86dbba47180c
Validity
Not Before: Oct 28 22:01:18 2026 GMT
Not After : Oct 29 22:01:18 2026 GMT
Subject: CN=9b641fc149ac8cd756df6a1ada784a0e18ba7d03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:86:a5:db:eb:31:77:fa:c3:27:4e:fe:22:35:
2c:45:fc:34:2f:07:d6:bf:8f:5b:dd:72:19:03:0c:
9d:40:42:0a:48:2b:09:2f:46:6a:30:8c:84:5c:5a:
e9:d5:3d:5c:5b:49:4d:46:26:90:e3:b1:08:55:8b:
46:fd:6f:5a:0d:9c:27:db:8e:33:21:f2:93:ee:36:
1f:dd:68:b7:fd:ea:04:56:32:f0:d1:38:74:fc:61:
33:61:c8:70:79:09:8f:3a:aa:c9:df:6c:8b:9e:18:
c1:58:2a:2b:19:7e:bd:dd:c8:ba:d0:36:2a:f7:ae:
5d:a0:e4:e7:8b:0c:56:aa:e7:50:c9:81:3d:16:d3:
99:38:95:16:bd:a5:b3:86:d8:1a:05:74:80:d7:b1:
fb:d3:60:13:dc:87:03:1f:db:e5:8b:ff:16:e7:da:
24:19:fb:78:fd:37:4e:38:09:5d:4d:bc:d7:29:91:
de:da:ea:2a:2a:c9:c7:9a:32:80:05:55:3b:f6:c4:
8e:da:29:bc:2b:6d:cc:11:47:d7:76:e2:6c:b3:21:
da:f8:91:f3:a1:84:f6:46:05:62:52:a8:e7:ef:94:
e9:56:f4:5d:20:7d:f3:11:23:9d:e4:21:5c:a3:40:
ac:97:a7:d6:15:00:1e:d6:1c:1c:54:fc:eb:f6:99:
46:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:64:1F:C1:49:AC:8C:D7:56:DF:6A:1A:DA:78:4A:0E:18:BA:7D:03
X509v3 Authority Key Identifier:
keyid:93:03:62:2B:3C:54:E4:5F:41:66:F3:01:79:8F:86:DB:BA:47:18:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kwNiKzxU5F9BZvMBeY-G27pHGAw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/077a50-45b6-4a38-9db9-950c7e73245c/1/kwNiKzxU5F9BZvMBeY-G27pHGAw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/077a50-45b6-4a38-9db9-950c7e73245c/1/kwNiKzxU5F9BZvMBeY-G27pHGAw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:7b:e2:9e:57:61:c2:9c:6a:44:8e:a3:16:e1:98:f4:48:65:
3c:db:b8:f8:0b:0b:6f:b8:6e:d0:56:3f:ca:97:ae:f2:21:fd:
53:23:63:a8:ba:32:ec:5c:2e:16:ba:7c:29:66:6d:38:77:3a:
80:de:72:f5:43:bb:ae:de:e5:ad:85:ec:3f:55:be:22:59:1a:
74:ee:60:f9:dd:b7:1d:b1:c1:c7:b9:88:8a:b5:7a:79:2e:42:
e8:72:89:60:49:5d:6a:4c:a0:17:bf:0a:81:76:a0:81:f8:c4:
46:ec:5d:d9:6c:6b:99:1b:31:c7:ee:9a:4e:3b:4a:6c:88:b3:
1c:94:94:42:12:ba:de:3a:68:9c:85:2c:20:08:d4:a8:d7:6c:
19:48:8a:d5:ab:7d:e4:fe:ac:58:af:b6:e8:be:fb:fd:9b:1b:
ba:29:52:ee:d9:f4:54:bd:75:8e:8e:77:c0:3e:16:00:c8:75:
68:5a:fa:25:d0:ff:8d:90:1d:cd:7a:dc:0c:26:53:86:5a:61:
99:8d:53:b8:73:e7:b2:33:49:fa:2b:a5:07:2c:12:e0:48:f4:
1b:3e:74:a4:c3:42:61:2e:c1:5d:7c:28:fa:f8:cb:7b:43:c7:
d7:0b:57:dc:29:b4:97:d9:9d:03:ec:23:9d:9e:1c:cf:82:f3:
e6:e5:36:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 00:48:31 2026 by rpki-client