Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/e13112-5758-4552-b2ad-ed1b9b8e6470/1/KS-wn35or-lfI5ExFObApqpyb90.mft
File: KS-wn35or-lfI5ExFObApqpyb90.mft (raw, json)
Hash identifier: Da1Q48mzy11vI6a7v0qFCj/EI9I3OY3ZnEfZM3f5Ces=
Subject key identifier: BA:7C:57:00:3D:C4:3C:F5:1A:59:4B:48:23:FE:77:15:B9:86:36:30
Authority key identifier: 29:2F:B0:9F:7E:68:AF:E9:5F:23:91:31:14:E6:C0:A6:AA:72:6F:DD
Certificate issuer: /CN=292fb09f7e68afe95f23913114e6c0a6aa726fdd
Certificate serial: 019EB8455F153C072EC7FFA470C18E9136F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KS-wn35or-lfI5ExFObApqpyb90.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/e13112-5758-4552-b2ad-ed1b9b8e6470/1/KS-wn35or-lfI5ExFObApqpyb90.mft
Manifest number: 066C
Signing time: Thu 11 Jun 2026 20:00:14 +0000
Manifest this update: Thu 11 Jun 2026 20:00:14 +0000
Manifest next update: Fri 12 Jun 2026 20:00:14 +0000
Files and hashes: 1: KS-wn35or-lfI5ExFObApqpyb90.crl (hash: nNj31Cd7LnbDN9+MXFnCOUOvlfr6v9p+f1pA3qbEOLQ=)
2: NBei4LdBsHZ6BQheCZXzva3D_io.roa (hash: Ao2IxiAhOOXCtUZ4UAP36ctfXjHHxfB4rqAgfIlvuRg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/e13112-5758-4552-b2ad-ed1b9b8e6470/1/KS-wn35or-lfI5ExFObApqpyb90.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/e13112-5758-4552-b2ad-ed1b9b8e6470/1/KS-wn35or-lfI5ExFObApqpyb90.mft
rsync://rpki.ripe.net/repository/DEFAULT/KS-wn35or-lfI5ExFObApqpyb90.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 20:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b8:45:5f:15:3c:07:2e:c7:ff:a4:70:c1:8e:91:36:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=292fb09f7e68afe95f23913114e6c0a6aa726fdd
Validity
Not Before: Jun 11 20:00:14 2026 GMT
Not After : Jun 12 20:00:14 2026 GMT
Subject: CN=ba7c57003dc43cf51a594b4823fe7715b9863630
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:80:83:d5:ba:0c:12:cb:95:0d:09:ca:35:f6:
b0:b0:76:3a:28:82:9d:77:60:f1:9a:dc:68:5d:59:
be:54:4e:0b:32:b6:d0:eb:fd:9f:2c:dc:5b:15:59:
85:42:f3:5e:06:9f:d1:cd:c3:c6:6f:81:f5:ec:d0:
a8:a6:de:20:18:e6:cc:61:54:66:0c:5f:2d:f7:ab:
dd:15:ff:63:aa:26:0c:0e:44:29:6f:ce:70:09:53:
f8:e7:ad:aa:7b:d6:32:9d:74:0a:3a:26:af:a6:a1:
5e:65:dd:b3:81:76:78:ef:68:cf:58:fb:7b:e1:a2:
70:8d:50:92:1a:ef:8b:39:19:4b:73:5a:e2:31:e7:
8a:86:a0:19:31:88:25:a2:d6:f4:9b:ca:77:0d:de:
41:eb:8e:bb:17:c4:b5:92:97:1c:70:29:8d:0b:5e:
bf:72:d1:8f:03:ca:67:ab:d1:3d:79:d4:0c:c0:d8:
d3:bb:68:7d:22:f9:d1:56:50:1a:a4:8a:fb:e7:70:
c1:34:2b:88:82:c9:24:33:01:0c:ff:c2:00:65:54:
ed:98:52:b0:56:b4:c3:a7:bb:f3:4b:5b:3c:5d:84:
d8:40:02:07:68:58:57:a0:32:f9:18:fc:cd:a6:ea:
8b:f3:ba:5d:f3:c4:16:e6:71:c5:36:c8:41:59:07:
be:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:7C:57:00:3D:C4:3C:F5:1A:59:4B:48:23:FE:77:15:B9:86:36:30
X509v3 Authority Key Identifier:
keyid:29:2F:B0:9F:7E:68:AF:E9:5F:23:91:31:14:E6:C0:A6:AA:72:6F:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KS-wn35or-lfI5ExFObApqpyb90.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/e13112-5758-4552-b2ad-ed1b9b8e6470/1/KS-wn35or-lfI5ExFObApqpyb90.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/e13112-5758-4552-b2ad-ed1b9b8e6470/1/KS-wn35or-lfI5ExFObApqpyb90.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:b3:8c:1b:32:e9:a4:ee:a8:8f:0a:6b:a8:fa:25:ac:a9:f0:
f3:a5:dd:87:91:f0:eb:24:76:15:f3:8d:61:86:66:c3:cb:05:
4d:14:87:f4:c7:5c:37:db:f3:3e:93:75:84:8d:ed:3f:1a:60:
e6:ea:e5:a1:6c:42:80:9f:d7:73:53:a1:0f:1f:af:72:45:f9:
09:37:7a:df:4e:f6:6a:51:31:5d:56:65:2a:67:45:a4:dc:aa:
ca:23:be:16:7a:a1:c2:04:25:98:6e:ed:51:9d:33:7d:2a:b2:
55:31:79:8e:5f:ca:a4:36:a7:8d:84:6e:e1:1b:97:3b:ca:0e:
19:de:43:92:46:2a:d1:f1:7e:68:1f:d4:09:49:01:aa:68:22:
b5:96:ae:be:35:c4:1b:7c:da:46:30:2b:93:45:7d:5b:77:66:
84:d6:86:0c:e7:c9:22:9a:5a:5b:4f:5d:90:f1:73:7a:e1:8b:
75:08:a5:94:91:20:10:39:64:97:e0:18:47:3c:c4:28:c6:4c:
93:64:43:e1:52:63:6d:29:85:b4:ac:35:49:dc:60:6a:d9:93:
22:10:f5:cd:13:9c:15:4f:b9:7b:13:df:1a:c1:31:53:1c:44:
56:09:b1:65:04:89:ef:ea:aa:f6:b5:a1:77:7f:21:b6:0e:0f:
0f:6f:37:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 03:37:50 2026 by rpki-client