Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5d/077a50-45b6-4a38-9db9-950c7e73245c/1/kwNiKzxU5F9BZvMBeY-G27pHGAw.mft
File: kwNiKzxU5F9BZvMBeY-G27pHGAw.mft (raw, json)
Hash identifier: tRia/J+661vOMa8NtzQQs3kEoR0MS6pq3WaWUHzeAZs=
Subject key identifier: 62:60:89:67:8C:F8:4B:86:7F:59:45:E9:F2:C2:A0:5C:3D:BD:E8:A3
Authority key identifier: 93:03:62:2B:3C:54:E4:5F:41:66:F3:01:79:8F:86:DB:BA:47:18:0C
Certificate issuer: /CN=9303622b3c54e45f4166f301798f86dbba47180c
Certificate serial: 01A08B68E050A564E387297112B0BCB035A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kwNiKzxU5F9BZvMBeY-G27pHGAw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/077a50-45b6-4a38-9db9-950c7e73245c/1/kwNiKzxU5F9BZvMBeY-G27pHGAw.mft
Manifest number: 0BE2
Signing time: Thu 10 Sep 2026 13:01:41 +0000
Manifest this update: Thu 10 Sep 2026 13:01:41 +0000
Manifest next update: Fri 11 Sep 2026 13:01:41 +0000
Files and hashes: 1: kwNiKzxU5F9BZvMBeY-G27pHGAw.crl (hash: Y5hve6EME1H/i+4MWldQUqMMWZJH6A7/miSdJZ2fijw=)
2: oEI10F1yOzZXTlBBBvzIeX5OXog.roa (hash: QNwI0l8coi9XbWot/ryVzcBU4wEtxZkGadr7asLldw8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/077a50-45b6-4a38-9db9-950c7e73245c/1/kwNiKzxU5F9BZvMBeY-G27pHGAw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/077a50-45b6-4a38-9db9-950c7e73245c/1/kwNiKzxU5F9BZvMBeY-G27pHGAw.mft
rsync://rpki.ripe.net/repository/DEFAULT/kwNiKzxU5F9BZvMBeY-G27pHGAw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 13:01:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8b:68:e0:50:a5:64:e3:87:29:71:12:b0:bc:b0:35:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9303622b3c54e45f4166f301798f86dbba47180c
Validity
Not Before: Sep 10 13:01:41 2026 GMT
Not After : Sep 11 13:01:41 2026 GMT
Subject: CN=626089678cf84b867f5945e9f2c2a05c3dbde8a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:8f:5b:b6:b5:b2:22:f0:17:c0:0a:c1:1d:bd:
3b:05:de:87:75:23:f9:c5:b3:e8:ff:19:21:ef:fa:
3a:2c:ba:21:9e:97:f1:90:37:f5:f4:37:bb:4d:79:
42:aa:8d:68:5c:ed:fe:e1:8f:a0:c7:eb:02:bd:4d:
ca:ab:b9:35:c4:90:72:16:aa:e0:d1:73:aa:bd:77:
be:cc:87:3e:e6:c3:98:b4:5e:74:7f:ba:af:df:fc:
18:a6:50:d7:e4:07:46:41:b3:6c:92:24:32:ea:09:
69:05:f1:80:dc:c1:c0:68:b8:9f:49:30:96:3a:e9:
54:15:9c:bc:8d:6a:37:2f:fc:11:49:d4:25:75:0b:
4d:69:d6:4d:5a:aa:96:ce:21:cb:97:e5:c8:20:43:
1b:2b:5b:5f:1f:50:44:f3:0a:9c:f9:28:6f:f5:5c:
bf:03:71:f6:4b:42:db:23:c7:8b:b6:e0:8c:1a:8a:
5b:0c:0d:74:a5:30:92:b2:b0:a6:3b:32:0e:b7:c3:
4f:34:36:7d:0c:7c:f4:32:8e:3d:3b:77:b4:b9:b2:
be:f7:ef:9a:ba:68:49:85:31:0a:94:66:90:2e:4c:
c1:f2:e4:ee:4b:52:11:08:aa:11:84:54:22:7a:95:
90:22:29:d5:a4:d8:05:e5:f9:f0:10:ef:2c:6e:7f:
15:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:60:89:67:8C:F8:4B:86:7F:59:45:E9:F2:C2:A0:5C:3D:BD:E8:A3
X509v3 Authority Key Identifier:
keyid:93:03:62:2B:3C:54:E4:5F:41:66:F3:01:79:8F:86:DB:BA:47:18:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kwNiKzxU5F9BZvMBeY-G27pHGAw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/077a50-45b6-4a38-9db9-950c7e73245c/1/kwNiKzxU5F9BZvMBeY-G27pHGAw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/077a50-45b6-4a38-9db9-950c7e73245c/1/kwNiKzxU5F9BZvMBeY-G27pHGAw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cf:39:b5:2a:12:eb:d0:95:ec:ae:7f:ae:0b:1f:c2:fa:b5:ad:
01:9f:1d:be:0b:2f:38:be:a8:04:14:55:e4:53:90:90:0c:47:
a8:71:60:03:e0:6d:b8:07:85:4f:de:6f:34:be:64:bc:b0:09:
e1:ef:9a:55:30:9c:d5:83:55:54:76:02:c5:e1:54:fb:b3:43:
1e:30:81:33:a5:ea:e7:aa:d2:ea:09:03:2d:2b:55:84:30:23:
3e:c3:21:b1:33:77:c9:a8:ca:4b:ef:8d:0c:74:7b:41:2c:ff:
3b:c1:44:9c:01:c0:b8:f6:ff:53:31:a6:7a:f8:f8:97:68:82:
30:53:29:66:26:03:e9:bd:5c:dc:39:94:1b:6c:4d:29:51:cf:
f2:a6:0a:53:fd:3e:09:3d:48:97:bd:03:c1:86:5a:b7:bb:e0:
0d:a3:00:e3:d7:0a:ac:dd:40:27:3c:e2:23:dc:86:d4:5e:eb:
53:10:ed:72:ea:44:61:66:43:d6:e4:09:cd:a5:fe:4a:e5:17:
9f:3a:7d:e7:68:4b:72:68:b0:47:3d:08:23:28:21:4f:9c:5f:
c0:9b:6d:9f:91:36:07:f4:20:13:a9:59:b7:48:38:d3:93:a6:
0b:d3:d1:40:23:76:dd:5e:a6:ea:1c:29:50:5e:39:e2:26:62:
64:e6:1a:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 18:42:29 2026 by rpki-client