Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/4eca3f-4f41-4598-aa1b-eedb1698c21a/1/kwy6S0MwS1HEvd-9QzF4KtkRAso.mft
File: kwy6S0MwS1HEvd-9QzF4KtkRAso.mft (raw, json)
Hash identifier: gwDRyyelbBJc9rNrD0Mc81KWd1xppVRd5JKpsIYrc8M=
Subject key identifier: 24:F6:E9:E9:19:DD:7D:5D:1D:01:38:ED:92:43:30:EB:E1:A7:A4:00
Authority key identifier: 93:0C:BA:4B:43:30:4B:51:C4:BD:DF:BD:43:31:78:2A:D9:11:02:CA
Certificate issuer: /CN=930cba4b43304b51c4bddfbd4331782ad91102ca
Certificate serial: 019E3184C6A7AE5CDC1A35BBAA2A3303FF06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kwy6S0MwS1HEvd-9QzF4KtkRAso.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/4eca3f-4f41-4598-aa1b-eedb1698c21a/1/kwy6S0MwS1HEvd-9QzF4KtkRAso.mft
Manifest number: 0629
Signing time: Sat 16 May 2026 16:00:45 +0000
Manifest this update: Sat 16 May 2026 16:00:45 +0000
Manifest next update: Sun 17 May 2026 16:00:45 +0000
Files and hashes: 1: kwy6S0MwS1HEvd-9QzF4KtkRAso.crl (hash: 2AgAXcn94FLI2i7LZY93H7ZHI1EyzA+7HPhp0sfXCVA=)
2: oL9_-G_BE3Ib7OwngyyeN305t6g.roa (hash: bC+XZTw3+M3qUxRZBZ3OzKSTrnOKvMY+D1VuNWxrnR8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/4eca3f-4f41-4598-aa1b-eedb1698c21a/1/kwy6S0MwS1HEvd-9QzF4KtkRAso.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/4eca3f-4f41-4598-aa1b-eedb1698c21a/1/kwy6S0MwS1HEvd-9QzF4KtkRAso.mft
rsync://rpki.ripe.net/repository/DEFAULT/kwy6S0MwS1HEvd-9QzF4KtkRAso.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 12:40:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:31:84:c6:a7:ae:5c:dc:1a:35:bb:aa:2a:33:03:ff:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=930cba4b43304b51c4bddfbd4331782ad91102ca
Validity
Not Before: May 16 16:00:45 2026 GMT
Not After : May 17 16:00:45 2026 GMT
Subject: CN=24f6e9e919dd7d5d1d0138ed924330ebe1a7a400
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:42:ee:24:0a:be:08:de:8c:75:c4:42:ec:e6:
e5:08:e0:ea:b3:1a:c2:4e:1f:d0:fd:21:a3:fe:2f:
e9:11:f7:a2:80:f2:b7:5f:d3:f8:83:57:8f:8f:fa:
4c:a4:9f:f8:bb:c1:35:23:77:2b:40:3c:41:25:9d:
1e:5d:bb:03:d5:11:84:f4:f5:9b:93:b0:5d:39:63:
2e:2b:9f:a5:df:1b:bc:f6:55:1a:cb:6e:d4:ed:3a:
8f:4e:2c:49:8c:f8:2d:31:fc:05:4d:51:29:91:17:
92:e0:1b:c1:56:a4:cc:41:02:9c:90:9b:6c:79:dd:
20:3f:45:ab:0a:d2:f9:46:ec:ef:e7:e7:18:3d:7b:
f0:f9:d4:3e:0e:ec:b0:1e:50:69:15:fd:6d:5d:71:
b6:40:23:18:30:3d:a1:ff:ae:27:5b:8e:e1:78:17:
3f:ff:2d:28:d4:55:94:03:9c:72:02:63:03:1f:e0:
26:35:a4:ef:3c:95:35:d1:49:c7:6e:77:c0:cc:fb:
3f:e1:17:7e:15:8a:51:84:bb:49:53:4c:aa:8a:6c:
d0:9f:c4:dd:31:1c:fe:c3:c4:7d:30:71:0c:1b:18:
a5:7d:8e:a0:49:00:fe:a1:1b:d3:a1:33:9e:12:ff:
74:40:42:62:2c:bd:45:85:6a:73:8d:3c:12:2a:71:
b8:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:F6:E9:E9:19:DD:7D:5D:1D:01:38:ED:92:43:30:EB:E1:A7:A4:00
X509v3 Authority Key Identifier:
keyid:93:0C:BA:4B:43:30:4B:51:C4:BD:DF:BD:43:31:78:2A:D9:11:02:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kwy6S0MwS1HEvd-9QzF4KtkRAso.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/4eca3f-4f41-4598-aa1b-eedb1698c21a/1/kwy6S0MwS1HEvd-9QzF4KtkRAso.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/4eca3f-4f41-4598-aa1b-eedb1698c21a/1/kwy6S0MwS1HEvd-9QzF4KtkRAso.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:4e:a5:6d:45:6f:fb:c2:0b:af:d8:0b:49:27:42:db:3e:61:
cb:64:d0:74:0f:86:c7:10:48:11:59:1e:79:d2:a9:92:3c:15:
63:a9:e3:9e:f9:c5:26:f8:71:7a:65:13:86:b6:c2:a2:3b:3b:
9e:a0:27:36:d4:55:f2:ed:bb:a3:ee:5d:d6:88:3f:5e:04:aa:
49:88:9e:bc:94:af:c8:3f:94:3f:97:d3:40:3f:84:5d:24:5f:
c9:cf:a2:23:63:5a:e4:98:59:35:73:54:87:44:ac:2b:41:44:
d4:c6:20:28:9f:cc:36:6d:ab:4c:ec:a1:4d:ef:26:94:0c:4c:
92:59:a2:20:6c:8c:85:f1:11:d4:9c:2f:47:91:f9:1c:6b:35:
a0:2e:10:f2:4a:dd:66:9d:b8:e7:9c:8a:3e:3b:10:43:bc:80:
3a:f0:8f:c8:8c:b5:1a:7d:7d:4a:57:50:70:9e:09:11:bb:a8:
16:78:06:db:b5:62:2b:33:29:f7:55:f3:21:91:9a:80:92:65:
17:e7:c0:de:db:c8:3f:0c:db:3b:76:bd:14:e9:37:91:b3:89:
34:54:a6:94:5b:14:eb:0f:87:0b:82:10:c5:17:b7:d0:ec:66:
f5:e0:64:31:d1:18:d2:1c:fe:0d:96:92:a7:3e:57:ca:26:18:
14:56:5b:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 22:01:31 2026 by rpki-client