
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/481637-6c1c-45e8-8fbd-44f8ed5d61d7/1/KWi04O-BBvDhKrjlAdKqTja3g8I.mft
File: KWi04O-BBvDhKrjlAdKqTja3g8I.mft (raw, json)
Hash identifier: pwOUqNBN0YSPOS+0sk4OWJSbzHkKzyPuPUYNjOaznsY=
Subject key identifier: F6:9B:CC:9A:34:57:74:E3:40:C0:CD:1C:E4:22:83:4C:B4:D5:1A:E8
Authority key identifier: 29:68:B4:E0:EF:81:06:F0:E1:2A:B8:E5:01:D2:AA:4E:36:B7:83:C2
Certificate issuer: /CN=2968b4e0ef8106f0e12ab8e501d2aa4e36b783c2
Certificate serial: 019DCD86F4110F565AF6AFAE15344E382CFB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KWi04O-BBvDhKrjlAdKqTja3g8I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/481637-6c1c-45e8-8fbd-44f8ed5d61d7/1/KWi04O-BBvDhKrjlAdKqTja3g8I.mft
Manifest number: 0694
Signing time: Mon 27 Apr 2026 06:01:06 +0000
Manifest this update: Mon 27 Apr 2026 06:01:06 +0000
Manifest next update: Tue 28 Apr 2026 06:01:06 +0000
Files and hashes: 1: 0hpieyXYpLMjxyT6mWgC5hB6md0.roa (hash: kAt+7z9pm070nauT+nqQ0kqKEN21nUOuAvbTxD+QIxY=)
2: 1-BeXqPwf4wGqQf8BMkvATSMUSvg.roa (hash: sHCQTjP4DGWRR+9EwPFQEYOJ1YUo6fNUrBWZXp0K9lU=)
3: 1npgJu3da2DJY-gYNC0mp_D7cA8.roa (hash: hTdQzo7dggejXQGIdEULc8F5CFOgeJzoVvTDCzsb0Pw=)
4: 1nu_yHaz4a9cC9ZPSse62hEV7z4.roa (hash: JbDziZ7Tgxvff3ssi+tWGZ4dDDxpjWqXNx9DdzoeJIs=)
5: 4J-3un-Yz1yl1SRrxlOCEySqXvc.asa (hash: sWD+AvZgpViJHkE0RVHOakA+EiK/FgLRtqxvsse3Zp0=)
6: 6FnJdPGW5pvMSXpTXx-nurrcFJ0.roa (hash: Neuse6+sPgHinhaJ6KBCDHKqQY1zJXc/3mtpYtYxBEE=)
7: 7urWinFGpaQwu4q2NACNc33Uqc0.roa (hash: /0y45l7uncJz+6g4k7MjIHbXj2ToXe8FU4Al2yYxxrk=)
8: AAf-UhAAKKoX99e1y-clL2vF5MI.roa (hash: CvmT5xM2HshaiNzJabgceSJQyGF24/yyH24K3t935zc=)
9: AGIcyv6akkuecB-WP_iweJslK-o.roa (hash: kZrndDnlcrxedsLlgmQqLvVG/016dDI5arID3t6+DWA=)
10: B8H6VmxfJXD2bVcz9lqwmFV8ya0.roa (hash: NunX4yChBXH4mlq5nGv56BR4PCufDfN3zLv9ymhyXpc=)
11: KWi04O-BBvDhKrjlAdKqTja3g8I.crl (hash: rniNvOp6Hl9HbSThpAWPhMqahH+a3gOJ5J/naVZdNg4=)
12: OqFJQmWIWlUgwt4wauu6KZcowmw.roa (hash: 5cgutzLvwloFkAKb42SaluRwnKatUxb+LuqQKWj5zbk=)
13: PJdBUbgKBhgSdoiiMeIPTyM59kM.roa (hash: +cAcRGvopCgB6nUW8hVTRtRILfXgI80D1d6TR///UD8=)
14: S-PfT7x9rr1Key3l24FiMn_GM3M.roa (hash: 69f7peYT5HVTCqDrHMvYQn0aPJJ6z/N2GfKv65UX+FI=)
15: S0f4eJQFFpAJU7gBmRif1cCdYzE.roa (hash: dMXse4/XYRfPD3fvc6eTVZmcZ4FGksUwnohMDVBgvc0=)
16: X9PkKl2cefOx63qVtTaYdrkzxd0.roa (hash: giM5kvZJx533XVrawIuRkLj+sL+9hAPHNii8Ak6qshk=)
17: YUks2Od0XGVs_0qy4zM64qK2ilc.roa (hash: fOJKj898k6XkbbvQ0FoOeL9v44eRzqi39qmYuSLOEko=)
18: dJLZ82woz9osVRfBLK_-niCyNj8.roa (hash: gbJMkN3Qke1KrYB5jhYzib+ht/WJlZL8orB4ISUMuEE=)
19: eU8i6nPKMWqCsVdPFp89hHhQ_hs.roa (hash: rNMI3gPO9pm+cF0NT/diCkjrM2NOj9L9A6LND/aPFyw=)
20: fnpBuXApf2KSN0_I10e4uBBef4I.roa (hash: mg7y4ym55PhF1uqywLWBK6bXIQO52AVjtO1tHb0Miig=)
21: mHSeWUrjc6YX-rsHgTi0XW2FRBg.roa (hash: t5nE21qjW3DJQIzH2j04n4MZU2wBAB1tTQYoPBXsr7U=)
22: mscT-yjpefQxwhiAkQBK5LU9YNI.roa (hash: AFKqRZpefBn2UqJLZfz5iAvOxe4M4XZCr9/bNjwQOC4=)
23: oq1t9a6_NvskvBAPm9-FRhVY4b8.roa (hash: Qrnl/t8muiKf2rVgb3xH0a4B7FWa64wS6nhiWVd6iLY=)
24: pc6siy3_DxYAwddcJOSIg7X07Yc.roa (hash: 2HJWbABktGThGQHpV8qMPjcUrVEey5pJp9pmV+aft3c=)
25: q5OHsMnoclPtZxTfFFLO8V7xM_A.roa (hash: kRnxJnfbBG687+x3M5t+/g6fKT4I4zdzsfRk/nUF+bo=)
26: rq7JejW5a3_irbw_aBIqgmSBTqc.roa (hash: wxuzzzOzEBqdMOCvC7XteOmfCNZ5CNJjs+MU2tOaWDY=)
27: vZNbnCQJNucOJmHvAwRz35uFqM4.roa (hash: qlxRyQlm7/P4XD2LyXkJPHShRipWPQgw8VPLfmMcrGE=)
28: wnxy5V-1cEegaxJtKVAMut3benM.roa (hash: sUdU5a1rnsEdOVKYhJDEO/xTx4mzMBYqk5k2KepP1tw=)
29: wwaY0WuQZFQx_lqyW2jSnUb7Uno.roa (hash: hC+e2pC0Y+hwrr9gw3/mXUJ159/dSRXVbIamUE8ySl8=)
30: xdd7SEG9mLRxhUdaoUG1DLRpkPI.roa (hash: GW2iR1Svx+wKk5VPTDs/4jldiJuhITkDvE5OyBpw0WA=)
31: y_hFsBFw5TnwZzUPUVeY_JDobJw.roa (hash: Yw4KTjxopDUyK/440NIIBj8AANnYLxlC6/L3kGPhoos=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/481637-6c1c-45e8-8fbd-44f8ed5d61d7/1/KWi04O-BBvDhKrjlAdKqTja3g8I.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/481637-6c1c-45e8-8fbd-44f8ed5d61d7/1/KWi04O-BBvDhKrjlAdKqTja3g8I.mft
rsync://rpki.ripe.net/repository/DEFAULT/KWi04O-BBvDhKrjlAdKqTja3g8I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 06:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cd:86:f4:11:0f:56:5a:f6:af:ae:15:34:4e:38:2c:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2968b4e0ef8106f0e12ab8e501d2aa4e36b783c2
Validity
Not Before: Apr 27 06:01:06 2026 GMT
Not After : Apr 28 06:01:06 2026 GMT
Subject: CN=f69bcc9a345774e340c0cd1ce422834cb4d51ae8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:3e:f3:d6:33:15:2a:8e:fe:ae:05:b8:26:87:
3f:56:a8:6a:45:2a:c9:97:4d:d8:9c:02:1f:23:41:
8b:4e:f8:90:9f:46:80:e6:56:d7:c6:d6:0b:e8:fc:
93:6f:12:87:0f:38:2d:f1:7f:48:0b:f5:29:1b:50:
2c:b0:64:0c:2d:aa:cf:bd:9b:ce:7a:f4:dc:ae:1a:
07:a3:29:9c:1b:23:63:d1:a0:75:70:8c:aa:f1:5c:
a2:34:d9:30:ad:2a:41:2e:77:f3:83:f5:35:8a:1c:
7c:18:e3:bd:af:9c:38:79:dd:31:9e:8b:0f:12:fc:
0a:06:ca:66:cb:b2:2f:20:5d:e8:8f:8a:e0:ef:3a:
f8:dd:c3:69:e7:51:e3:5d:b1:7d:82:24:d5:6d:2c:
2b:fe:85:fa:b1:39:86:cd:4e:c0:05:83:41:cb:bb:
7d:f4:54:c5:19:62:9e:04:d9:6a:7d:7c:ca:51:cf:
11:72:d3:95:f9:a2:d9:38:7f:c4:10:a5:a9:84:79:
1a:6e:02:6c:ae:83:c2:39:33:76:52:ce:01:11:76:
94:67:da:e4:07:a7:b0:6b:d7:c1:81:ca:d7:c9:3f:
b6:e6:02:46:e7:22:89:64:a7:10:7a:76:12:8f:57:
35:fc:7a:d6:e7:eb:5a:09:53:05:95:cf:53:2c:ec:
bf:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:9B:CC:9A:34:57:74:E3:40:C0:CD:1C:E4:22:83:4C:B4:D5:1A:E8
X509v3 Authority Key Identifier:
keyid:29:68:B4:E0:EF:81:06:F0:E1:2A:B8:E5:01:D2:AA:4E:36:B7:83:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KWi04O-BBvDhKrjlAdKqTja3g8I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/481637-6c1c-45e8-8fbd-44f8ed5d61d7/1/KWi04O-BBvDhKrjlAdKqTja3g8I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/481637-6c1c-45e8-8fbd-44f8ed5d61d7/1/KWi04O-BBvDhKrjlAdKqTja3g8I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:28:33:c6:3d:70:1e:5c:eb:b8:d9:8f:ca:57:05:35:a0:ad:
89:50:44:43:3e:59:34:c9:38:15:66:4c:dc:b6:a8:4a:a2:01:
02:06:ab:87:e0:0e:d0:2c:5b:b5:a7:f1:02:71:1f:65:f7:32:
20:09:3b:ff:07:f7:bc:3a:bd:9f:c6:5a:1c:a3:dc:0d:a4:cd:
f9:2c:ef:b4:56:33:37:c4:27:69:6b:43:91:28:fa:99:28:f5:
13:af:fd:c4:d8:7b:6a:1b:0a:c6:12:06:89:f3:43:69:2f:ab:
88:15:e3:8b:61:13:40:8e:97:0a:5a:7d:c3:a3:9b:0c:00:51:
a2:78:a1:eb:32:bc:f7:1f:2e:36:ff:05:72:92:bd:cf:67:92:
b5:45:2c:b0:ff:13:62:de:82:c7:ae:97:25:95:5a:6f:63:78:
9d:70:94:55:42:3d:cc:a6:23:3e:76:f9:1a:82:bf:fd:31:77:
17:31:95:ad:42:54:b2:92:22:75:ee:b1:89:a1:bd:8e:27:5a:
9d:d4:75:a5:00:7d:b9:56:bc:57:91:11:17:56:a1:00:4b:9d:
5c:40:ed:ba:d4:9c:51:0a:81:4f:a8:9d:1a:57:1e:06:dc:14:
50:1d:17:2e:03:11:8a:63:ab:2e:b0:e9:60:67:96:48:b5:39:
e7:53:52:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 14:01:07 2026 by rpki-client