
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a7/481637-6c1c-45e8-8fbd-44f8ed5d61d7/1/KWi04O-BBvDhKrjlAdKqTja3g8I.mft
File: KWi04O-BBvDhKrjlAdKqTja3g8I.mft (raw, json)
Hash identifier: duKRe9qCpcJWaIFtQ0hqasmDoVzrGvNDWGZTw6c3yYQ=
Subject key identifier: EB:07:59:DB:01:31:DC:CA:ED:26:41:37:80:A6:E7:56:AB:85:F8:8E
Authority key identifier: 29:68:B4:E0:EF:81:06:F0:E1:2A:B8:E5:01:D2:AA:4E:36:B7:83:C2
Certificate issuer: /CN=2968b4e0ef8106f0e12ab8e501d2aa4e36b783c2
Certificate serial: 01A186E3FF28C202F188179FD3DB8C3D29C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KWi04O-BBvDhKrjlAdKqTja3g8I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/481637-6c1c-45e8-8fbd-44f8ed5d61d7/1/KWi04O-BBvDhKrjlAdKqTja3g8I.mft
Manifest number: 0885
Signing time: Thu 29 Oct 2026 09:00:51 +0000
Manifest this update: Thu 29 Oct 2026 09:00:51 +0000
Manifest next update: Fri 30 Oct 2026 09:00:51 +0000
Files and hashes: 1: 0hpieyXYpLMjxyT6mWgC5hB6md0.roa (hash: kAt+7z9pm070nauT+nqQ0kqKEN21nUOuAvbTxD+QIxY=)
2: 1-BeXqPwf4wGqQf8BMkvATSMUSvg.roa (hash: sHCQTjP4DGWRR+9EwPFQEYOJ1YUo6fNUrBWZXp0K9lU=)
3: 1npgJu3da2DJY-gYNC0mp_D7cA8.roa (hash: hTdQzo7dggejXQGIdEULc8F5CFOgeJzoVvTDCzsb0Pw=)
4: 1nu_yHaz4a9cC9ZPSse62hEV7z4.roa (hash: JbDziZ7Tgxvff3ssi+tWGZ4dDDxpjWqXNx9DdzoeJIs=)
5: 4J-3un-Yz1yl1SRrxlOCEySqXvc.asa (hash: sWD+AvZgpViJHkE0RVHOakA+EiK/FgLRtqxvsse3Zp0=)
6: 6FnJdPGW5pvMSXpTXx-nurrcFJ0.roa (hash: Neuse6+sPgHinhaJ6KBCDHKqQY1zJXc/3mtpYtYxBEE=)
7: 7urWinFGpaQwu4q2NACNc33Uqc0.roa (hash: /0y45l7uncJz+6g4k7MjIHbXj2ToXe8FU4Al2yYxxrk=)
8: 9SPUZscn5UHUz0KxWadlqmWkzEI.roa (hash: +z80uBDmEaW37+3/F4siP80+51S8q+6clFxeAIILT5U=)
9: AGIcyv6akkuecB-WP_iweJslK-o.roa (hash: kZrndDnlcrxedsLlgmQqLvVG/016dDI5arID3t6+DWA=)
10: B8H6VmxfJXD2bVcz9lqwmFV8ya0.roa (hash: NunX4yChBXH4mlq5nGv56BR4PCufDfN3zLv9ymhyXpc=)
11: KWi04O-BBvDhKrjlAdKqTja3g8I.crl (hash: kc1VC+wnfV/GbcekZyGGhLi60wjKczJRb1HxpI1950c=)
12: OqFJQmWIWlUgwt4wauu6KZcowmw.roa (hash: 5cgutzLvwloFkAKb42SaluRwnKatUxb+LuqQKWj5zbk=)
13: PJdBUbgKBhgSdoiiMeIPTyM59kM.roa (hash: +cAcRGvopCgB6nUW8hVTRtRILfXgI80D1d6TR///UD8=)
14: S-PfT7x9rr1Key3l24FiMn_GM3M.roa (hash: 69f7peYT5HVTCqDrHMvYQn0aPJJ6z/N2GfKv65UX+FI=)
15: S0f4eJQFFpAJU7gBmRif1cCdYzE.roa (hash: dMXse4/XYRfPD3fvc6eTVZmcZ4FGksUwnohMDVBgvc0=)
16: X9PkKl2cefOx63qVtTaYdrkzxd0.roa (hash: giM5kvZJx533XVrawIuRkLj+sL+9hAPHNii8Ak6qshk=)
17: YUks2Od0XGVs_0qy4zM64qK2ilc.roa (hash: fOJKj898k6XkbbvQ0FoOeL9v44eRzqi39qmYuSLOEko=)
18: d09V5eWhYv9aykbhDD8PZZhSkDY.roa (hash: eCHaD+x218KDcdTbF1dK/1E4f55+dTQp2/AUHsT1heU=)
19: dJLZ82woz9osVRfBLK_-niCyNj8.roa (hash: gbJMkN3Qke1KrYB5jhYzib+ht/WJlZL8orB4ISUMuEE=)
20: eU8i6nPKMWqCsVdPFp89hHhQ_hs.roa (hash: rNMI3gPO9pm+cF0NT/diCkjrM2NOj9L9A6LND/aPFyw=)
21: fnpBuXApf2KSN0_I10e4uBBef4I.roa (hash: mg7y4ym55PhF1uqywLWBK6bXIQO52AVjtO1tHb0Miig=)
22: mHSeWUrjc6YX-rsHgTi0XW2FRBg.roa (hash: t5nE21qjW3DJQIzH2j04n4MZU2wBAB1tTQYoPBXsr7U=)
23: mscT-yjpefQxwhiAkQBK5LU9YNI.roa (hash: AFKqRZpefBn2UqJLZfz5iAvOxe4M4XZCr9/bNjwQOC4=)
24: oq1t9a6_NvskvBAPm9-FRhVY4b8.roa (hash: Qrnl/t8muiKf2rVgb3xH0a4B7FWa64wS6nhiWVd6iLY=)
25: pc6siy3_DxYAwddcJOSIg7X07Yc.roa (hash: 2HJWbABktGThGQHpV8qMPjcUrVEey5pJp9pmV+aft3c=)
26: q5OHsMnoclPtZxTfFFLO8V7xM_A.roa (hash: kRnxJnfbBG687+x3M5t+/g6fKT4I4zdzsfRk/nUF+bo=)
27: rq7JejW5a3_irbw_aBIqgmSBTqc.roa (hash: wxuzzzOzEBqdMOCvC7XteOmfCNZ5CNJjs+MU2tOaWDY=)
28: vZNbnCQJNucOJmHvAwRz35uFqM4.roa (hash: qlxRyQlm7/P4XD2LyXkJPHShRipWPQgw8VPLfmMcrGE=)
29: wnxy5V-1cEegaxJtKVAMut3benM.roa (hash: sUdU5a1rnsEdOVKYhJDEO/xTx4mzMBYqk5k2KepP1tw=)
30: wwaY0WuQZFQx_lqyW2jSnUb7Uno.roa (hash: hC+e2pC0Y+hwrr9gw3/mXUJ159/dSRXVbIamUE8ySl8=)
31: y_hFsBFw5TnwZzUPUVeY_JDobJw.roa (hash: Yw4KTjxopDUyK/440NIIBj8AANnYLxlC6/L3kGPhoos=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/481637-6c1c-45e8-8fbd-44f8ed5d61d7/1/KWi04O-BBvDhKrjlAdKqTja3g8I.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/481637-6c1c-45e8-8fbd-44f8ed5d61d7/1/KWi04O-BBvDhKrjlAdKqTja3g8I.mft
rsync://rpki.ripe.net/repository/DEFAULT/KWi04O-BBvDhKrjlAdKqTja3g8I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 30 Oct 2026 08:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:86:e3:ff:28:c2:02:f1:88:17:9f:d3:db:8c:3d:29:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2968b4e0ef8106f0e12ab8e501d2aa4e36b783c2
Validity
Not Before: Oct 29 09:00:51 2026 GMT
Not After : Oct 30 09:00:51 2026 GMT
Subject: CN=eb0759db0131dccaed26413780a6e756ab85f88e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:53:73:6b:5d:63:0f:19:71:71:b9:7b:5f:bf:
04:7f:e1:54:e3:55:f1:ea:c5:b4:f7:0f:50:8f:70:
be:33:ad:a9:98:39:d3:a5:f8:e9:c7:ac:56:79:44:
9e:47:16:f7:36:c8:a4:c6:2e:35:cd:51:db:1f:41:
a3:59:e2:46:40:f5:17:d3:06:3e:31:3a:1f:70:5a:
e5:3e:a0:8d:61:e7:89:ce:71:04:c4:0a:38:34:25:
de:88:8f:6e:87:a8:61:1a:e0:da:c5:26:80:dd:30:
1c:6b:e9:f2:2e:86:0f:4e:7c:7d:3e:fe:93:78:c9:
aa:a4:57:13:67:76:44:a2:e9:5c:89:ed:42:0a:c0:
f3:ad:25:43:ba:ab:8c:65:49:63:86:18:cd:34:e2:
00:c8:01:2d:98:27:0e:d2:25:45:63:c6:7c:9a:bf:
2f:11:ad:42:0c:b7:89:ec:97:e2:5d:0b:33:2e:4c:
4f:2a:2d:e2:47:7c:db:77:8d:62:7d:c2:b1:2b:84:
04:01:3e:aa:85:e6:fb:49:ea:84:96:8e:70:6e:9b:
c5:7d:37:51:77:f6:16:71:27:84:45:5c:92:9d:08:
c8:90:ec:33:39:4b:21:06:68:ec:3e:bb:81:6a:48:
67:d2:66:21:fa:26:99:57:52:52:24:06:54:07:b2:
ac:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:07:59:DB:01:31:DC:CA:ED:26:41:37:80:A6:E7:56:AB:85:F8:8E
X509v3 Authority Key Identifier:
keyid:29:68:B4:E0:EF:81:06:F0:E1:2A:B8:E5:01:D2:AA:4E:36:B7:83:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KWi04O-BBvDhKrjlAdKqTja3g8I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/481637-6c1c-45e8-8fbd-44f8ed5d61d7/1/KWi04O-BBvDhKrjlAdKqTja3g8I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/481637-6c1c-45e8-8fbd-44f8ed5d61d7/1/KWi04O-BBvDhKrjlAdKqTja3g8I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:f5:2b:87:0d:43:13:98:66:7e:c7:02:9c:7f:38:cf:b4:c1:
85:6e:7a:57:f4:eb:03:e9:35:a0:a3:ed:ec:be:4c:cf:65:4b:
7c:10:22:53:52:2d:a0:9b:70:c3:a8:6f:dd:6d:c9:88:e0:52:
86:3f:f5:bd:38:d6:69:fc:df:15:b5:53:a0:13:ec:54:2f:35:
01:fe:0c:69:2a:1e:04:81:02:17:16:f1:a9:3b:bc:4a:8e:46:
61:a3:f8:0b:12:65:38:7b:55:8f:98:af:15:e3:b8:42:8e:87:
de:31:17:60:49:81:df:84:52:4e:38:48:65:7a:d9:04:8a:62:
1a:c1:53:89:79:a6:0e:87:c3:6b:1e:2d:83:0e:79:9f:9b:9c:
8e:8c:1a:45:76:98:ef:88:e5:3d:05:ab:c4:09:38:b6:9f:37:
d6:fe:6b:22:44:74:f5:e9:8e:05:83:97:7d:cf:51:e3:71:ca:
a0:c7:18:f5:fa:e5:47:9d:18:8d:43:55:c7:8e:95:3b:4e:ed:
53:e6:45:e5:74:65:5c:d3:ce:12:9c:3e:49:fe:28:06:96:24:
66:39:f4:1f:3d:f7:32:9c:3a:41:1c:b9:ba:50:39:75:c1:6b:
9a:70:a3:b2:11:99:38:41:0c:41:9a:dc:b6:95:d4:f2:f9:3f:
7a:ec:11:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 13:55:41 2026 by rpki-client