
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/481637-6c1c-45e8-8fbd-44f8ed5d61d7/1/KWi04O-BBvDhKrjlAdKqTja3g8I.mft
File: KWi04O-BBvDhKrjlAdKqTja3g8I.mft (raw, json)
Hash identifier: 5B8SQvNzEvRyDA8aTujxWaCMhdcmopQJvBXecTP2sdQ=
Subject key identifier: 6C:3F:4A:DD:81:32:1A:76:3B:BE:4A:DC:F9:17:A3:F8:52:7C:C6:85
Authority key identifier: 29:68:B4:E0:EF:81:06:F0:E1:2A:B8:E5:01:D2:AA:4E:36:B7:83:C2
Certificate issuer: /CN=2968b4e0ef8106f0e12ab8e501d2aa4e36b783c2
Certificate serial: 019CE523606F2F369B5737D88CF239E561D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KWi04O-BBvDhKrjlAdKqTja3g8I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/481637-6c1c-45e8-8fbd-44f8ed5d61d7/1/KWi04O-BBvDhKrjlAdKqTja3g8I.mft
Manifest number: 061B
Signing time: Fri 13 Mar 2026 03:00:26 +0000
Manifest this update: Fri 13 Mar 2026 03:00:26 +0000
Manifest next update: Sat 14 Mar 2026 03:00:26 +0000
Files and hashes: 1: 0hpieyXYpLMjxyT6mWgC5hB6md0.roa (hash: kAt+7z9pm070nauT+nqQ0kqKEN21nUOuAvbTxD+QIxY=)
2: 1-BeXqPwf4wGqQf8BMkvATSMUSvg.roa (hash: sHCQTjP4DGWRR+9EwPFQEYOJ1YUo6fNUrBWZXp0K9lU=)
3: 1npgJu3da2DJY-gYNC0mp_D7cA8.roa (hash: hTdQzo7dggejXQGIdEULc8F5CFOgeJzoVvTDCzsb0Pw=)
4: 1nu_yHaz4a9cC9ZPSse62hEV7z4.roa (hash: JbDziZ7Tgxvff3ssi+tWGZ4dDDxpjWqXNx9DdzoeJIs=)
5: 4J-3un-Yz1yl1SRrxlOCEySqXvc.asa (hash: sWD+AvZgpViJHkE0RVHOakA+EiK/FgLRtqxvsse3Zp0=)
6: 6FnJdPGW5pvMSXpTXx-nurrcFJ0.roa (hash: Neuse6+sPgHinhaJ6KBCDHKqQY1zJXc/3mtpYtYxBEE=)
7: 7urWinFGpaQwu4q2NACNc33Uqc0.roa (hash: /0y45l7uncJz+6g4k7MjIHbXj2ToXe8FU4Al2yYxxrk=)
8: AGIcyv6akkuecB-WP_iweJslK-o.roa (hash: kZrndDnlcrxedsLlgmQqLvVG/016dDI5arID3t6+DWA=)
9: B8H6VmxfJXD2bVcz9lqwmFV8ya0.roa (hash: NunX4yChBXH4mlq5nGv56BR4PCufDfN3zLv9ymhyXpc=)
10: KWi04O-BBvDhKrjlAdKqTja3g8I.crl (hash: x/fZmx4xjrqQlpS0iQywslM6v0bfPnToajuh5xhiU5I=)
11: OqFJQmWIWlUgwt4wauu6KZcowmw.roa (hash: 5cgutzLvwloFkAKb42SaluRwnKatUxb+LuqQKWj5zbk=)
12: PJdBUbgKBhgSdoiiMeIPTyM59kM.roa (hash: +cAcRGvopCgB6nUW8hVTRtRILfXgI80D1d6TR///UD8=)
13: S-PfT7x9rr1Key3l24FiMn_GM3M.roa (hash: 69f7peYT5HVTCqDrHMvYQn0aPJJ6z/N2GfKv65UX+FI=)
14: S0f4eJQFFpAJU7gBmRif1cCdYzE.roa (hash: dMXse4/XYRfPD3fvc6eTVZmcZ4FGksUwnohMDVBgvc0=)
15: X9PkKl2cefOx63qVtTaYdrkzxd0.roa (hash: giM5kvZJx533XVrawIuRkLj+sL+9hAPHNii8Ak6qshk=)
16: YUks2Od0XGVs_0qy4zM64qK2ilc.roa (hash: fOJKj898k6XkbbvQ0FoOeL9v44eRzqi39qmYuSLOEko=)
17: dJLZ82woz9osVRfBLK_-niCyNj8.roa (hash: gbJMkN3Qke1KrYB5jhYzib+ht/WJlZL8orB4ISUMuEE=)
18: eU8i6nPKMWqCsVdPFp89hHhQ_hs.roa (hash: rNMI3gPO9pm+cF0NT/diCkjrM2NOj9L9A6LND/aPFyw=)
19: fnpBuXApf2KSN0_I10e4uBBef4I.roa (hash: mg7y4ym55PhF1uqywLWBK6bXIQO52AVjtO1tHb0Miig=)
20: mHSeWUrjc6YX-rsHgTi0XW2FRBg.roa (hash: t5nE21qjW3DJQIzH2j04n4MZU2wBAB1tTQYoPBXsr7U=)
21: mscT-yjpefQxwhiAkQBK5LU9YNI.roa (hash: AFKqRZpefBn2UqJLZfz5iAvOxe4M4XZCr9/bNjwQOC4=)
22: oq1t9a6_NvskvBAPm9-FRhVY4b8.roa (hash: Qrnl/t8muiKf2rVgb3xH0a4B7FWa64wS6nhiWVd6iLY=)
23: pc6siy3_DxYAwddcJOSIg7X07Yc.roa (hash: 2HJWbABktGThGQHpV8qMPjcUrVEey5pJp9pmV+aft3c=)
24: phIldGr0t0uwTW-BuSAmzN6XhjE.roa (hash: raVegt7yKtN8ZFOUbeTVHlJ8PtEpgoSSdoNKxRXXN5Y=)
25: q5OHsMnoclPtZxTfFFLO8V7xM_A.roa (hash: kRnxJnfbBG687+x3M5t+/g6fKT4I4zdzsfRk/nUF+bo=)
26: rq7JejW5a3_irbw_aBIqgmSBTqc.roa (hash: wxuzzzOzEBqdMOCvC7XteOmfCNZ5CNJjs+MU2tOaWDY=)
27: vZNbnCQJNucOJmHvAwRz35uFqM4.roa (hash: qlxRyQlm7/P4XD2LyXkJPHShRipWPQgw8VPLfmMcrGE=)
28: wnxy5V-1cEegaxJtKVAMut3benM.roa (hash: sUdU5a1rnsEdOVKYhJDEO/xTx4mzMBYqk5k2KepP1tw=)
29: wwaY0WuQZFQx_lqyW2jSnUb7Uno.roa (hash: hC+e2pC0Y+hwrr9gw3/mXUJ159/dSRXVbIamUE8ySl8=)
30: xdd7SEG9mLRxhUdaoUG1DLRpkPI.roa (hash: GW2iR1Svx+wKk5VPTDs/4jldiJuhITkDvE5OyBpw0WA=)
31: y_hFsBFw5TnwZzUPUVeY_JDobJw.roa (hash: Yw4KTjxopDUyK/440NIIBj8AANnYLxlC6/L3kGPhoos=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/481637-6c1c-45e8-8fbd-44f8ed5d61d7/1/KWi04O-BBvDhKrjlAdKqTja3g8I.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/481637-6c1c-45e8-8fbd-44f8ed5d61d7/1/KWi04O-BBvDhKrjlAdKqTja3g8I.mft
rsync://rpki.ripe.net/repository/DEFAULT/KWi04O-BBvDhKrjlAdKqTja3g8I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e5:23:60:6f:2f:36:9b:57:37:d8:8c:f2:39:e5:61:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2968b4e0ef8106f0e12ab8e501d2aa4e36b783c2
Validity
Not Before: Mar 13 03:00:26 2026 GMT
Not After : Mar 14 03:00:26 2026 GMT
Subject: CN=6c3f4add81321a763bbe4adcf917a3f8527cc685
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:b0:db:49:75:e9:84:2a:4b:e5:b1:05:c2:c7:
07:4f:14:20:50:38:43:96:7c:6c:2d:b0:79:db:40:
92:05:45:35:90:d1:bd:8c:3a:4a:66:b6:14:e6:8f:
13:02:50:2a:f9:b6:60:0a:fb:c1:ad:06:5e:f4:8c:
eb:bf:4a:a7:77:2f:77:38:c2:be:d0:55:6d:b1:54:
3c:44:56:c0:bc:0c:f8:8b:41:a5:d9:5e:e2:06:53:
f6:e6:be:bd:38:80:30:4c:e2:6d:fb:3c:04:fe:b2:
37:51:49:53:04:0b:8e:43:bb:ed:e6:8d:2a:fa:62:
14:34:12:89:b6:69:3c:51:3c:99:d0:4b:3b:01:71:
77:05:0f:52:e3:04:f1:25:3e:48:44:2a:fb:f3:9a:
da:e4:ff:f6:32:25:99:c7:2e:9b:00:cc:4b:ac:3d:
3f:87:42:59:0d:de:22:f4:ed:8b:be:74:42:59:d5:
e3:90:0f:50:8d:6c:e5:01:0f:43:29:d4:b5:bd:f7:
17:3c:d9:ca:a0:1d:e8:27:ea:10:cf:b5:10:70:d9:
08:b1:de:5e:74:af:b9:1c:ab:97:05:61:39:f2:c4:
18:2e:cd:90:2c:34:a0:4c:a0:f8:34:de:0d:8f:d0:
f9:90:f6:51:84:a3:a9:e4:8b:8d:2a:6b:85:3b:78:
d4:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:3F:4A:DD:81:32:1A:76:3B:BE:4A:DC:F9:17:A3:F8:52:7C:C6:85
X509v3 Authority Key Identifier:
keyid:29:68:B4:E0:EF:81:06:F0:E1:2A:B8:E5:01:D2:AA:4E:36:B7:83:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KWi04O-BBvDhKrjlAdKqTja3g8I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/481637-6c1c-45e8-8fbd-44f8ed5d61d7/1/KWi04O-BBvDhKrjlAdKqTja3g8I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/481637-6c1c-45e8-8fbd-44f8ed5d61d7/1/KWi04O-BBvDhKrjlAdKqTja3g8I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:c4:dd:ba:d6:dd:a8:90:6c:e9:cb:4a:61:fd:c2:50:72:07:
6b:b8:b5:51:29:b0:b0:6c:dc:af:5b:af:40:8f:0c:40:84:cc:
91:ec:90:6d:1f:fc:f1:cc:f5:17:ab:dd:02:c9:8a:d5:e4:49:
38:92:5e:30:b6:30:d3:0e:f3:db:25:a7:2f:ac:d6:e5:07:92:
ec:15:f1:26:5d:b8:b1:fb:63:64:4a:5a:17:72:fe:e7:67:9d:
e3:c4:83:f0:9a:77:40:90:c1:36:59:11:8b:3c:17:fd:17:91:
dc:e7:e9:03:50:d3:12:a2:d2:20:71:47:66:44:55:c6:65:ed:
13:4f:f3:db:cc:17:94:46:43:8b:8a:99:45:01:c2:69:e5:b9:
0c:ed:b3:64:52:e8:44:35:ac:37:af:6e:e1:7c:2d:60:b0:7f:
ae:07:f9:2e:83:eb:16:4d:94:1a:62:73:11:c2:cf:fe:3d:00:
0a:59:3e:1b:3d:9b:d2:47:81:ed:af:76:25:97:d8:49:70:62:
86:38:18:ec:9b:2e:ef:89:d5:45:d9:44:27:84:4b:f6:2a:73:
3f:44:5e:f7:56:0e:0f:9d:a8:8e:76:72:9c:7f:d4:a7:a2:1f:
da:d1:42:9d:98:d7:a6:33:bb:23:49:83:f9:17:52:53:ff:fb:
6a:54:77:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 09:46:33 2026 by rpki-client