Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/66/85b169-8dad-4b16-baba-0f09b16fdaac/1/KMWu-Y8hlLSzfyWF0rMh0s0FG2o.mft
File: KMWu-Y8hlLSzfyWF0rMh0s0FG2o.mft (raw, json)
Hash identifier: gwJLjV4vI9W9iDeOaCLPYo/ZtwJkAjeXBCid3EIj1OY=
Subject key identifier: 49:AD:91:FC:50:1F:66:EE:D8:42:18:46:0E:6A:12:3C:CF:DE:BE:8D
Authority key identifier: 28:C5:AE:F9:8F:21:94:B4:B3:7F:25:85:D2:B3:21:D2:CD:05:1B:6A
Certificate issuer: /CN=28c5aef98f2194b4b37f2585d2b321d2cd051b6a
Certificate serial: 01A16421C91F11BCFFDD0D33466BA988C96D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KMWu-Y8hlLSzfyWF0rMh0s0FG2o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/85b169-8dad-4b16-baba-0f09b16fdaac/1/KMWu-Y8hlLSzfyWF0rMh0s0FG2o.mft
Manifest number: 01A7
Signing time: Thu 22 Oct 2026 15:01:38 +0000
Manifest this update: Thu 22 Oct 2026 15:01:38 +0000
Manifest next update: Fri 23 Oct 2026 15:01:38 +0000
Files and hashes: 1: JJ3Jrlo4EfsF8fxfWN1mWDQydjo.roa (hash: hVX8HYf1U+V3FnobfFS2BDs1NBWEvAMPu9hWuZ6QxQc=)
2: KMWu-Y8hlLSzfyWF0rMh0s0FG2o.crl (hash: AHl6zxvqBrnvM0fwSL2TrlgcTYrw110SD0/JzybboHM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/85b169-8dad-4b16-baba-0f09b16fdaac/1/KMWu-Y8hlLSzfyWF0rMh0s0FG2o.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/85b169-8dad-4b16-baba-0f09b16fdaac/1/KMWu-Y8hlLSzfyWF0rMh0s0FG2o.mft
rsync://rpki.ripe.net/repository/DEFAULT/KMWu-Y8hlLSzfyWF0rMh0s0FG2o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 23 Oct 2026 15:01:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:64:21:c9:1f:11:bc:ff:dd:0d:33:46:6b:a9:88:c9:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28c5aef98f2194b4b37f2585d2b321d2cd051b6a
Validity
Not Before: Oct 22 15:01:38 2026 GMT
Not After : Oct 23 15:01:38 2026 GMT
Subject: CN=49ad91fc501f66eed84218460e6a123ccfdebe8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:25:77:9e:1a:c4:f2:57:24:d4:cc:80:b6:b7:
0b:35:e6:f5:fd:13:1c:32:08:98:c7:33:dc:61:67:
7c:ea:83:e4:95:58:e5:f4:69:be:df:2d:da:26:d5:
1c:c8:82:1f:34:c9:aa:91:6c:fc:a4:6a:b6:67:df:
b6:06:0a:e2:21:c1:4e:98:df:6e:03:d7:c5:87:29:
c7:99:fc:7b:fe:22:18:43:c8:c2:e0:96:42:05:1a:
34:f7:47:60:94:d8:2b:45:8f:5a:d5:ff:b2:78:1d:
5b:45:ee:1b:8d:8f:48:90:6b:d0:84:75:df:c4:2f:
6f:da:1d:32:fc:92:89:8d:ea:93:be:3e:49:e2:9c:
b4:50:fc:25:67:64:28:1c:0e:21:45:3d:d7:70:c0:
92:d6:a0:a3:16:f0:61:a8:14:08:7b:b7:7f:b7:e5:
d8:9e:56:6d:f7:7c:d2:fd:6f:3b:31:70:77:1b:b3:
b3:23:64:1c:42:67:7d:c4:bd:0c:36:dd:cf:cd:f3:
a4:91:54:65:5e:9d:f3:dd:76:d9:ca:96:e5:0a:ee:
69:2b:8d:29:1c:45:97:d6:b8:84:d5:90:e9:61:cb:
9f:71:aa:c2:fc:bd:37:1f:08:b8:d8:34:a1:f1:1c:
f4:11:5a:f8:0e:2d:d6:00:58:9b:b2:80:b0:6f:79:
fe:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:AD:91:FC:50:1F:66:EE:D8:42:18:46:0E:6A:12:3C:CF:DE:BE:8D
X509v3 Authority Key Identifier:
keyid:28:C5:AE:F9:8F:21:94:B4:B3:7F:25:85:D2:B3:21:D2:CD:05:1B:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KMWu-Y8hlLSzfyWF0rMh0s0FG2o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/85b169-8dad-4b16-baba-0f09b16fdaac/1/KMWu-Y8hlLSzfyWF0rMh0s0FG2o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/85b169-8dad-4b16-baba-0f09b16fdaac/1/KMWu-Y8hlLSzfyWF0rMh0s0FG2o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:98:2c:ce:2b:97:74:00:21:45:83:75:29:9e:7e:da:6c:95:
fd:aa:46:7d:cf:11:fe:46:94:a5:2c:4a:97:d5:d0:53:f9:c5:
74:23:68:ac:81:77:bb:bd:9f:b7:36:4b:55:c4:36:0d:79:0b:
07:2b:c3:d0:fa:70:b4:36:0d:ab:98:13:0e:af:66:f7:96:fa:
e4:bd:b9:8b:31:58:a9:35:07:9e:b7:bb:83:05:a4:47:4f:02:
4a:47:04:51:f5:27:e4:03:08:95:7a:2a:40:79:c9:04:ee:d9:
99:82:35:90:9d:5f:ae:f8:6e:b9:85:fa:d0:77:09:83:d4:f1:
c2:86:22:40:71:55:6a:60:98:9d:ca:b5:34:02:d1:5c:c4:92:
50:cb:d6:cd:33:61:69:72:91:b7:2d:e5:c8:32:70:6c:76:cf:
32:da:d8:af:a4:59:1e:ae:20:7a:db:52:41:24:81:96:bd:f3:
63:7c:27:1b:27:4b:6e:0e:58:ab:8c:1d:8f:34:71:af:84:fc:
ce:55:ee:eb:b2:29:e8:d4:3a:7d:d5:47:7f:8e:69:68:b9:4d:
f2:f8:64:6f:e7:49:b1:4b:f7:2f:ce:28:24:52:dd:53:90:45:
82:79:36:20:ed:67:3c:62:f5:0e:5e:3c:45:2b:9b:90:52:6c:
53:30:04:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 22 21:25:47 2026 by rpki-client