Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a3/89c3e4-b613-49ec-ae25-2e75228f9261/1/KwFArTlBTE6rAqxVQitEFj7TSw8.mft
File: KwFArTlBTE6rAqxVQitEFj7TSw8.mft (raw, json)
Hash identifier: pdLng4/IKAn5UkkwHWC7GvyvE9Dbk25152qTZDyVU50=
Subject key identifier: 82:A4:4A:E1:7E:41:79:31:F4:A7:12:ED:75:3D:07:CC:B9:6D:80:A6
Authority key identifier: 2B:01:40:AD:39:41:4C:4E:AB:02:AC:55:42:2B:44:16:3E:D3:4B:0F
Certificate issuer: /CN=2b0140ad39414c4eab02ac55422b44163ed34b0f
Certificate serial: 01A148E0A53F8B50C0A2D6BC799723FE487D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KwFArTlBTE6rAqxVQitEFj7TSw8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/89c3e4-b613-49ec-ae25-2e75228f9261/1/KwFArTlBTE6rAqxVQitEFj7TSw8.mft
Manifest number: 0801
Signing time: Sat 17 Oct 2026 08:00:44 +0000
Manifest this update: Sat 17 Oct 2026 08:00:44 +0000
Manifest next update: Sun 18 Oct 2026 08:00:44 +0000
Files and hashes: 1: KwFArTlBTE6rAqxVQitEFj7TSw8.crl (hash: SJTiD8dgjLCnT9FA5cnqWzgpRN6JtqRRB1pB2B0D8Yg=)
2: ir9SuLduq8J9bIwWBVKAyAFiwvk.roa (hash: LeNR5QQthmrMSFvWNxLjb0RXrLTd6w9z7OeC3M8gneo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/89c3e4-b613-49ec-ae25-2e75228f9261/1/KwFArTlBTE6rAqxVQitEFj7TSw8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/89c3e4-b613-49ec-ae25-2e75228f9261/1/KwFArTlBTE6rAqxVQitEFj7TSw8.mft
rsync://rpki.ripe.net/repository/DEFAULT/KwFArTlBTE6rAqxVQitEFj7TSw8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 18 Oct 2026 05:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:48:e0:a5:3f:8b:50:c0:a2:d6:bc:79:97:23:fe:48:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b0140ad39414c4eab02ac55422b44163ed34b0f
Validity
Not Before: Oct 17 08:00:44 2026 GMT
Not After : Oct 18 08:00:44 2026 GMT
Subject: CN=82a44ae17e417931f4a712ed753d07ccb96d80a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:f9:28:d0:ee:f7:90:ba:02:33:68:7e:32:52:
a2:dd:ee:5e:35:5d:d6:ed:21:f7:22:31:a1:0a:78:
7a:b8:b5:63:bf:37:bd:f8:20:02:ee:60:b4:2f:06:
01:e4:57:64:45:cc:41:3e:8e:11:6a:a6:80:9d:3d:
4f:82:81:b6:e2:d3:8c:05:f5:cb:d2:58:07:d0:be:
b8:61:3b:fb:0f:a0:bb:1f:c8:9e:88:2c:71:a9:c7:
23:33:16:f9:5f:8e:77:2a:cf:2a:4c:2a:0c:90:e4:
36:42:91:86:03:34:d2:8c:96:c2:f9:03:b3:fe:71:
42:a7:d5:63:fc:58:5d:01:70:17:d9:84:88:41:46:
a2:a5:1f:48:8a:c7:c0:68:a8:6a:3d:aa:a0:8b:8a:
b5:e4:46:b4:2a:d8:29:24:b1:2b:ee:75:ff:34:fe:
85:84:66:d2:25:b9:1c:52:2f:55:4e:79:bc:2a:94:
5a:f3:f5:85:1a:92:5e:90:13:8e:0d:64:cd:97:06:
5a:19:7d:7c:51:a2:00:bb:28:6e:a7:8f:54:f2:21:
78:8d:35:39:27:6e:26:54:32:2c:9b:5e:3d:dc:d2:
ca:12:e1:ea:6a:91:62:f6:f2:29:a3:30:65:f2:5b:
87:d0:3c:5d:0a:2b:05:f3:95:1a:b8:ba:dc:88:0d:
e5:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:A4:4A:E1:7E:41:79:31:F4:A7:12:ED:75:3D:07:CC:B9:6D:80:A6
X509v3 Authority Key Identifier:
keyid:2B:01:40:AD:39:41:4C:4E:AB:02:AC:55:42:2B:44:16:3E:D3:4B:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KwFArTlBTE6rAqxVQitEFj7TSw8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/89c3e4-b613-49ec-ae25-2e75228f9261/1/KwFArTlBTE6rAqxVQitEFj7TSw8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/89c3e4-b613-49ec-ae25-2e75228f9261/1/KwFArTlBTE6rAqxVQitEFj7TSw8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:09:92:83:88:d5:b5:a5:00:e9:49:99:fb:df:80:71:09:18:
26:bf:c0:3b:18:a7:ea:5b:18:8d:13:78:20:10:59:fe:83:09:
48:b7:af:8f:33:1e:fb:9f:a7:69:7a:06:64:dc:f6:1e:26:28:
a5:d7:67:c9:a4:eb:bf:8c:07:a6:ed:a2:47:7e:f8:72:f3:6f:
4d:6c:ef:ab:84:df:cf:4b:6b:61:71:8d:af:95:bd:0b:55:1c:
c5:5d:4f:74:3f:6c:ed:de:6f:d7:1f:c3:19:ff:28:6e:0d:af:
fe:b6:9f:74:f5:02:3f:c7:78:b9:c7:bc:a6:24:9b:13:3a:d4:
16:5a:78:ae:de:6e:58:de:a5:b7:d6:92:28:55:8a:67:58:6a:
c3:98:60:05:c9:44:b1:55:e9:cf:57:b6:f1:3f:dc:24:8f:9a:
7b:81:f9:db:19:63:d3:ac:09:34:42:93:17:c5:17:68:34:4e:
b9:b7:11:1b:1f:86:45:d1:bd:01:ee:38:25:8f:10:25:8c:db:
87:89:00:c8:71:48:19:28:ea:60:fd:5c:6c:21:86:27:ee:31:
a5:2e:ac:5c:9b:96:d6:e8:05:ad:2b:72:34:39:6f:bc:73:f3:
55:ae:89:62:d0:02:f3:ad:ca:81:3c:8f:7b:5f:16:9c:7b:92:
9f:7b:5f:e7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaFI4KU/i1DAota8eZcj/kh9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJiMDE0MGFkMzk0MTRjNGVhYjAyYWM1NTQyMmI0NDE2M2Vk
MzRiMGYwHhcNMjYxMDE3MDgwMDQ0WhcNMjYxMDE4MDgwMDQ0WjAzMTEwLwYDVQQD
Eyg4MmE0NGFlMTdlNDE3OTMxZjRhNzEyZWQ3NTNkMDdjY2I5NmQ4MGE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlPko0O73kLoCM2h+MlKi3e5eNV3W
7SH3IjGhCnh6uLVjvze9+CAC7mC0LwYB5FdkRcxBPo4RaqaAnT1PgoG24tOMBfXL
0lgH0L64YTv7D6C7H8ieiCxxqccjMxb5X453Ks8qTCoMkOQ2QpGGAzTSjJbC+QOz
/nFCp9Vj/FhdAXAX2YSIQUaipR9IisfAaKhqPaqgi4q15Ea0KtgpJLEr7nX/NP6F
hGbSJbkcUi9VTnm8KpRa8/WFGpJekBOODWTNlwZaGX18UaIAuyhup49U8iF4jTU5
J24mVDIsm1493NLKEuHqapFi9vIpozBl8luH0DxdCisF85UauLrciA3lbwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIKkSuF+QXkx9KcS7XU9B8y5bYCmMB8GA1UdIwQY
MBaAFCsBQK05QUxOqwKsVUIrRBY+00sPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS3dGQXJUbEJURTZyQXF4VlFpdEVGajdUU3c4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy84OWMzZTQtYjYxMy00OWVjLWFlMjUt
MmU3NTIyOGY5MjYxLzEvS3dGQXJUbEJURTZyQXF4VlFpdEVGajdUU3c4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMy84OWMzZTQtYjYxMy00OWVjLWFlMjUtMmU3NTIyOGY5MjYx
LzEvS3dGQXJUbEJURTZyQXF4VlFpdEVGajdUU3c4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPQmSg4jV
taUA6UmZ+9+AcQkYJr/AOxin6lsYjRN4IBBZ/oMJSLevjzMe+5+naXoGZNz2HiYo
pddnyaTrv4wHpu2iR374cvNvTWzvq4Tfz0trYXGNr5W9C1UcxV1PdD9s7d5v1x/D
Gf8obg2v/rafdPUCP8d4uce8piSbEzrUFlp4rt5uWN6lt9aSKFWKZ1hqw5hgBclE
sVXpz1e28T/cJI+ae4H52xlj06wJNEKTF8UXaDROubcRGx+GRdG9Ae44JY8QJYzb
h4kAyHFIGSjqYP1cbCGGJ+4xpS6sXJuW1ugFrStyNDlvvHPzVa6JYtAC863KgTyP
e18WnHuSn3tf5w==
-----END CERTIFICATE-----
Generated at Sat Oct 17 15:22:36 2026 by rpki-client