Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7c/5950c9-97ec-40dc-9b11-0295a1c11feb/1/kw4KO7COSsZzY-MLqDsHFjLQqkM.mft
File: kw4KO7COSsZzY-MLqDsHFjLQqkM.mft (raw, json)
Hash identifier: tfLpwOlgbO/Zk2Ce9iu1il9HUYKpgjs+2fwflvX6RWo=
Subject key identifier: 33:11:7C:AE:4F:2C:BF:13:D1:5E:7C:6C:FC:F6:5B:8D:3D:0B:7C:CB
Authority key identifier: 93:0E:0A:3B:B0:8E:4A:C6:73:63:E3:0B:A8:3B:07:16:32:D0:AA:43
Certificate issuer: /CN=930e0a3bb08e4ac67363e30ba83b071632d0aa43
Certificate serial: 01A0889E4B6910C44D8D8D83382A5B9D1DA7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kw4KO7COSsZzY-MLqDsHFjLQqkM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/5950c9-97ec-40dc-9b11-0295a1c11feb/1/kw4KO7COSsZzY-MLqDsHFjLQqkM.mft
Manifest number: 074F
Signing time: Thu 10 Sep 2026 00:01:10 +0000
Manifest this update: Thu 10 Sep 2026 00:01:10 +0000
Manifest next update: Fri 11 Sep 2026 00:01:10 +0000
Files and hashes: 1: i15V9-c2PXcAQ6Lawcpbt-GL_iw.roa (hash: GlpJvGhZVuGz4aIWr1fluB9fbXXAkmsasT3KRZg6g4Y=)
2: kw4KO7COSsZzY-MLqDsHFjLQqkM.crl (hash: TxayIlWJbuz1B4Xi6sa2NnuvGvzjPywX8zslt73tZ2s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/5950c9-97ec-40dc-9b11-0295a1c11feb/1/kw4KO7COSsZzY-MLqDsHFjLQqkM.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/5950c9-97ec-40dc-9b11-0295a1c11feb/1/kw4KO7COSsZzY-MLqDsHFjLQqkM.mft
rsync://rpki.ripe.net/repository/DEFAULT/kw4KO7COSsZzY-MLqDsHFjLQqkM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Sep 2026 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:88:9e:4b:69:10:c4:4d:8d:8d:83:38:2a:5b:9d:1d:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=930e0a3bb08e4ac67363e30ba83b071632d0aa43
Validity
Not Before: Sep 10 00:01:10 2026 GMT
Not After : Sep 11 00:01:10 2026 GMT
Subject: CN=33117cae4f2cbf13d15e7c6cfcf65b8d3d0b7ccb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:dd:ff:24:d0:81:08:48:fc:b9:56:81:cb:44:
25:21:7f:96:42:1e:e5:e2:44:3f:97:b9:52:3c:f0:
c2:28:10:15:f9:f1:3f:e2:90:c9:7d:d4:c1:78:e0:
48:e3:bc:d8:76:d7:bf:01:dd:c0:d9:0d:11:91:ac:
9f:0a:48:47:54:9b:42:a1:d4:a7:c5:16:80:a1:e6:
13:dd:cc:08:3c:e4:6c:7b:db:55:ac:d5:e2:24:94:
57:14:d4:f6:e3:6e:3b:02:58:3e:fc:c8:b1:7e:16:
e5:4a:b7:4a:89:ed:3f:6c:8b:61:e8:73:a2:87:b0:
38:fb:bc:11:40:34:4b:fe:c5:0b:a2:5a:12:10:f8:
cb:84:7b:c0:ba:41:bf:99:f0:a1:4c:c3:4f:da:97:
9b:e2:df:da:a8:3b:d9:a8:b5:22:0d:0b:aa:f2:a9:
ad:71:26:2d:dc:c7:c2:2d:d6:7f:05:3f:d3:96:1e:
b4:ba:f6:6c:79:d4:c7:fc:da:83:61:41:c8:97:45:
c4:b5:33:6e:25:e1:e7:f5:98:7d:f3:31:d3:4c:d2:
b1:3a:54:d1:ea:54:7c:00:74:1a:66:7d:e2:74:a1:
cf:c8:a2:e2:ce:66:d7:65:46:97:88:1a:29:62:e1:
c4:2e:3e:d2:19:69:8d:81:03:1c:d0:51:db:4b:d4:
b5:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:11:7C:AE:4F:2C:BF:13:D1:5E:7C:6C:FC:F6:5B:8D:3D:0B:7C:CB
X509v3 Authority Key Identifier:
keyid:93:0E:0A:3B:B0:8E:4A:C6:73:63:E3:0B:A8:3B:07:16:32:D0:AA:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kw4KO7COSsZzY-MLqDsHFjLQqkM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/5950c9-97ec-40dc-9b11-0295a1c11feb/1/kw4KO7COSsZzY-MLqDsHFjLQqkM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/5950c9-97ec-40dc-9b11-0295a1c11feb/1/kw4KO7COSsZzY-MLqDsHFjLQqkM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:fe:18:7f:d2:d9:5b:ab:25:b6:02:e8:f8:7a:eb:de:b0:68:
80:40:a3:2a:ca:6a:6e:6c:5a:06:25:6e:37:37:3c:54:fb:ed:
b9:ff:89:26:0f:48:13:d6:db:a2:1e:11:80:b9:6f:d2:92:bc:
70:16:0a:35:3f:f0:af:36:90:8e:3d:a4:d9:50:79:44:75:3b:
e1:2a:31:a1:b6:14:b7:7f:f2:6d:37:fa:71:79:70:1a:b1:8e:
aa:1c:22:ed:f4:c6:66:56:27:c7:95:81:fa:94:4d:75:9c:f4:
af:fa:ed:cd:4c:18:e6:c4:a4:d7:87:8b:69:24:cb:5c:4f:e8:
1c:7e:4c:3e:48:dd:1c:04:2c:f7:c1:ad:1d:e7:16:27:6d:6d:
c4:dc:f6:c0:3a:ba:62:3d:39:99:47:c6:a8:df:6a:75:ae:d0:
22:35:4d:9b:b3:b1:19:37:67:31:48:f7:2e:0b:85:99:39:a6:
4d:1c:ca:b7:19:89:96:3f:1e:25:81:31:65:8a:81:88:14:1f:
df:87:83:d8:66:6f:a9:5a:6f:e6:88:60:4a:6f:6d:c8:fc:af:
1a:32:f9:a8:ca:78:1a:14:00:64:03:c3:36:92:24:7e:88:3a:
68:3f:c1:c0:87:47:ac:c4:c8:25:51:6a:17:ba:99:3c:1d:d8:
4c:f3:dc:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 08:14:33 2026 by rpki-client