Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/5950c9-97ec-40dc-9b11-0295a1c11feb/1/kw4KO7COSsZzY-MLqDsHFjLQqkM.mft
File: kw4KO7COSsZzY-MLqDsHFjLQqkM.mft (raw, json)
Hash identifier: rg5iNQYlKDnLbKUPpDfRQY64DwXHlQdOYfPIScF9mP0=
Subject key identifier: 42:B1:FC:D3:81:E8:67:19:E6:5C:99:49:F2:74:BC:50:27:21:F4:8C
Authority key identifier: 93:0E:0A:3B:B0:8E:4A:C6:73:63:E3:0B:A8:3B:07:16:32:D0:AA:43
Certificate issuer: /CN=930e0a3bb08e4ac67363e30ba83b071632d0aa43
Certificate serial: 019D38D2E20122CA5D05E08955EC24298893
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kw4KO7COSsZzY-MLqDsHFjLQqkM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/5950c9-97ec-40dc-9b11-0295a1c11feb/1/kw4KO7COSsZzY-MLqDsHFjLQqkM.mft
Manifest number: 0598
Signing time: Sun 29 Mar 2026 09:00:37 +0000
Manifest this update: Sun 29 Mar 2026 09:00:37 +0000
Manifest next update: Mon 30 Mar 2026 09:00:37 +0000
Files and hashes: 1: i15V9-c2PXcAQ6Lawcpbt-GL_iw.roa (hash: GlpJvGhZVuGz4aIWr1fluB9fbXXAkmsasT3KRZg6g4Y=)
2: kw4KO7COSsZzY-MLqDsHFjLQqkM.crl (hash: 7xYRMGQ9XOmBeLlw9anpEg34ntcbmMOch5buU6ZeGDQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/5950c9-97ec-40dc-9b11-0295a1c11feb/1/kw4KO7COSsZzY-MLqDsHFjLQqkM.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/5950c9-97ec-40dc-9b11-0295a1c11feb/1/kw4KO7COSsZzY-MLqDsHFjLQqkM.mft
rsync://rpki.ripe.net/repository/DEFAULT/kw4KO7COSsZzY-MLqDsHFjLQqkM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d2:e2:01:22:ca:5d:05:e0:89:55:ec:24:29:88:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=930e0a3bb08e4ac67363e30ba83b071632d0aa43
Validity
Not Before: Mar 29 09:00:37 2026 GMT
Not After : Mar 30 09:00:37 2026 GMT
Subject: CN=42b1fcd381e86719e65c9949f274bc502721f48c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:a7:d1:4e:bd:d3:ef:49:94:7c:46:9f:d6:fd:
2b:50:bb:b4:7a:ac:22:f5:2c:ea:d0:c3:8c:25:91:
ed:77:63:42:c1:c4:b9:0f:64:86:60:08:3a:4c:30:
42:3c:af:be:28:2f:cb:46:89:5b:e1:fc:21:3e:6f:
92:ec:e5:31:37:dd:dc:02:0c:d7:80:27:ed:4f:35:
ed:46:57:44:6b:85:37:0b:d3:00:eb:9a:81:1e:ec:
3e:52:0e:67:49:64:d4:17:c5:c8:26:4a:17:11:27:
07:ce:d5:ec:1f:5c:12:39:4e:f2:c9:6d:2d:b8:3d:
01:8f:3a:f0:4c:87:5c:01:7f:8e:c5:9b:57:78:dc:
8f:18:1a:7b:bc:c0:d8:8b:bd:a8:0b:17:b5:9f:65:
19:d9:d5:86:f7:30:b8:4f:9d:1a:f6:39:31:be:13:
6c:9e:d0:4a:50:dc:83:cc:f1:6c:df:61:ea:15:eb:
1a:63:88:77:13:3d:31:4c:f8:f9:ea:48:55:32:6c:
31:67:ca:17:d3:33:7a:42:cb:a2:1f:f3:dc:5e:91:
0e:9e:f3:3a:d3:0d:a1:28:63:2f:19:f4:ac:67:87:
84:17:79:53:3b:a6:f5:c1:c7:c0:b0:f8:c0:12:de:
9c:9a:12:a1:0f:91:22:89:2d:8b:59:cd:8a:8e:d0:
09:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:B1:FC:D3:81:E8:67:19:E6:5C:99:49:F2:74:BC:50:27:21:F4:8C
X509v3 Authority Key Identifier:
keyid:93:0E:0A:3B:B0:8E:4A:C6:73:63:E3:0B:A8:3B:07:16:32:D0:AA:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kw4KO7COSsZzY-MLqDsHFjLQqkM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/5950c9-97ec-40dc-9b11-0295a1c11feb/1/kw4KO7COSsZzY-MLqDsHFjLQqkM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/5950c9-97ec-40dc-9b11-0295a1c11feb/1/kw4KO7COSsZzY-MLqDsHFjLQqkM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:7c:f5:da:7a:bc:82:64:eb:17:ff:c6:57:91:ef:72:90:f0:
3f:4c:6e:f4:7b:9d:be:4d:79:09:6a:71:11:05:bf:cd:27:17:
6f:47:cf:73:eb:79:e9:73:ff:86:08:dc:5e:25:05:6f:73:e8:
88:c5:df:56:6e:af:76:cc:ea:73:61:85:68:f3:ef:a7:4c:da:
d2:90:fc:3b:bc:3b:60:13:19:83:66:37:15:b4:e1:dc:0a:b3:
25:ed:b1:d4:db:dc:4a:1d:88:8e:26:d5:05:c2:f3:c7:e4:d5:
4c:54:25:e1:ba:b3:5c:ba:86:e5:37:7f:6d:23:27:f6:6d:01:
ea:7c:f1:05:59:3c:7a:74:7a:f9:fd:b0:e6:05:bf:98:40:81:
52:dd:4c:97:c7:e4:62:7c:92:10:33:90:61:dc:cb:5f:0a:95:
33:2f:95:fe:15:1d:ad:7a:6c:5d:bd:01:e4:9d:8e:9f:8d:d1:
ec:74:ab:db:fc:51:e2:32:17:ed:3e:27:2c:24:73:0b:d5:86:
8f:66:1c:51:c4:b5:d6:a7:3f:7e:32:9c:31:20:d6:c4:d7:e2:
ad:1c:d8:41:dc:d4:b6:bf:97:07:67:cb:48:33:0d:63:f3:cd:
e2:8f:a3:3c:f2:36:3d:ea:2d:a2:25:13:0d:12:18:4b:8f:2f:
31:97:42:8a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ040uIBIspdBeCJVewkKYiTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkzMGUwYTNiYjA4ZTRhYzY3MzYzZTMwYmE4M2IwNzE2MzJk
MGFhNDMwHhcNMjYwMzI5MDkwMDM3WhcNMjYwMzMwMDkwMDM3WjAzMTEwLwYDVQQD
Eyg0MmIxZmNkMzgxZTg2NzE5ZTY1Yzk5NDlmMjc0YmM1MDI3MjFmNDhjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzqfRTr3T70mUfEaf1v0rULu0eqwi
9Szq0MOMJZHtd2NCwcS5D2SGYAg6TDBCPK++KC/LRolb4fwhPm+S7OUxN93cAgzX
gCftTzXtRldEa4U3C9MA65qBHuw+Ug5nSWTUF8XIJkoXEScHztXsH1wSOU7yyW0t
uD0BjzrwTIdcAX+OxZtXeNyPGBp7vMDYi72oCxe1n2UZ2dWG9zC4T50a9jkxvhNs
ntBKUNyDzPFs32HqFesaY4h3Ez0xTPj56khVMmwxZ8oX0zN6QsuiH/PcXpEOnvM6
0w2hKGMvGfSsZ4eEF3lTO6b1wcfAsPjAEt6cmhKhD5EiiS2LWc2KjtAJlQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEKx/NOB6GcZ5lyZSfJ0vFAnIfSMMB8GA1UdIwQY
MBaAFJMOCjuwjkrGc2PjC6g7BxYy0KpDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva3c0S083Q09Tc1p6WS1NTHFEc0hGakxRcWtNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy81OTUwYzktOTdlYy00MGRjLTliMTEt
MDI5NWExYzExZmViLzEva3c0S083Q09Tc1p6WS1NTHFEc0hGakxRcWtNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yy81OTUwYzktOTdlYy00MGRjLTliMTEtMDI5NWExYzExZmVi
LzEva3c0S083Q09Tc1p6WS1NTHFEc0hGakxRcWtNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmnz12nq8
gmTrF//GV5HvcpDwP0xu9Hudvk15CWpxEQW/zScXb0fPc+t56XP/hgjcXiUFb3Po
iMXfVm6vdszqc2GFaPPvp0za0pD8O7w7YBMZg2Y3FbTh3AqzJe2x1NvcSh2IjibV
BcLzx+TVTFQl4bqzXLqG5Td/bSMn9m0B6nzxBVk8enR6+f2w5gW/mECBUt1Ml8fk
YnySEDOQYdzLXwqVMy+V/hUdrXpsXb0B5J2On43R7HSr2/xR4jIX7T4nLCRzC9WG
j2YcUcS11qc/fjKcMSDWxNfirRzYQdzUtr+XB2fLSDMNY/PN4o+jPPI2PeotoiUT
DRIYS48vMZdCig==
-----END CERTIFICATE-----
Generated at Sun Mar 29 13:44:08 2026 by rpki-client