Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ab/aa55a2-e33e-4dc0-9d87-8cc6579415da/1/kwpXLBbQxE93Zlh9kth4ujBUHR4.mft
File: kwpXLBbQxE93Zlh9kth4ujBUHR4.mft (raw, json)
Hash identifier: 5jLxfI/fQrByA1F5smaJBZfSrPWbwY0frcJG53zwcN4=
Subject key identifier: C7:11:F1:CC:3B:8E:34:BA:BD:0A:89:81:8D:05:FA:A6:67:8D:C3:4B
Authority key identifier: 93:0A:57:2C:16:D0:C4:4F:77:66:58:7D:92:D8:78:BA:30:54:1D:1E
Certificate issuer: /CN=930a572c16d0c44f7766587d92d878ba30541d1e
Certificate serial: 01A089E7CBBDD1B1726F263DCE3882185241
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kwpXLBbQxE93Zlh9kth4ujBUHR4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/aa55a2-e33e-4dc0-9d87-8cc6579415da/1/kwpXLBbQxE93Zlh9kth4ujBUHR4.mft
Manifest number: 0C1D
Signing time: Thu 10 Sep 2026 06:01:04 +0000
Manifest this update: Thu 10 Sep 2026 06:01:04 +0000
Manifest next update: Fri 11 Sep 2026 06:01:04 +0000
Files and hashes: 1: HmYrDKd2yjYmZLmWzYz7se6Li1c.roa (hash: 2E+4PcgEvP7v29a2K/Pql8IKPHh2ZcXb/x/xhB+Fnbs=)
2: kwpXLBbQxE93Zlh9kth4ujBUHR4.crl (hash: AokosomGPDOTUNZdJkhk7iWa/gvydV9unFU3rm333i4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/aa55a2-e33e-4dc0-9d87-8cc6579415da/1/kwpXLBbQxE93Zlh9kth4ujBUHR4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/aa55a2-e33e-4dc0-9d87-8cc6579415da/1/kwpXLBbQxE93Zlh9kth4ujBUHR4.mft
rsync://rpki.ripe.net/repository/DEFAULT/kwpXLBbQxE93Zlh9kth4ujBUHR4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 06:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:89:e7:cb:bd:d1:b1:72:6f:26:3d:ce:38:82:18:52:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=930a572c16d0c44f7766587d92d878ba30541d1e
Validity
Not Before: Sep 10 06:01:04 2026 GMT
Not After : Sep 11 06:01:04 2026 GMT
Subject: CN=c711f1cc3b8e34babd0a89818d05faa6678dc34b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:60:17:65:4e:19:22:25:7d:d3:d5:2f:09:6a:
4d:e7:cf:d6:78:1d:58:59:cb:9e:90:2d:6e:91:e3:
cd:a4:d7:dc:24:02:5f:21:01:be:3c:f7:7b:0e:e6:
46:22:d8:36:8d:ba:f1:a5:32:fd:a1:5a:03:01:1d:
ab:30:fe:63:cc:cb:4e:c2:c0:ca:81:76:a4:45:e1:
ea:0e:f3:5c:65:18:65:1f:b1:f4:07:cf:58:83:45:
9c:b3:e9:64:17:34:00:32:c7:d7:57:8f:1b:15:9e:
81:3d:38:de:cd:55:24:ba:aa:de:7c:7e:77:05:7b:
8a:1a:8c:28:43:01:2e:92:32:b5:5e:43:45:e8:5c:
2f:d2:40:be:01:fe:1b:46:ce:c6:19:0c:04:ea:96:
1b:9f:a7:f8:b8:b9:9d:dc:a5:b8:57:7a:f6:2b:0e:
7a:b2:8a:da:1d:55:3c:3c:51:04:c7:1f:d5:f1:6e:
ab:0d:ac:f3:3c:42:52:4f:27:53:e7:16:d2:af:ec:
fd:f2:99:42:7c:09:57:ab:4b:d6:15:4f:90:84:51:
f1:8a:dd:33:59:fc:b3:79:52:b0:a7:63:39:32:9d:
90:a3:88:cb:02:31:0d:53:08:5e:27:9d:e9:cd:fd:
22:d9:fb:b6:53:82:01:c7:be:54:a5:a7:49:1f:cb:
ce:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:11:F1:CC:3B:8E:34:BA:BD:0A:89:81:8D:05:FA:A6:67:8D:C3:4B
X509v3 Authority Key Identifier:
keyid:93:0A:57:2C:16:D0:C4:4F:77:66:58:7D:92:D8:78:BA:30:54:1D:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kwpXLBbQxE93Zlh9kth4ujBUHR4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/aa55a2-e33e-4dc0-9d87-8cc6579415da/1/kwpXLBbQxE93Zlh9kth4ujBUHR4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/aa55a2-e33e-4dc0-9d87-8cc6579415da/1/kwpXLBbQxE93Zlh9kth4ujBUHR4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
f2:d5:49:35:eb:72:d3:94:63:ba:b3:ff:4b:6b:d4:00:7a:8f:
35:e3:e3:a9:b7:64:92:f9:21:40:0c:7d:7b:3a:a5:6d:b1:fe:
82:60:fc:11:0d:77:75:5b:29:70:77:e7:2f:0e:64:66:91:98:
6d:09:d2:88:ab:64:01:f8:49:76:0d:45:1e:36:77:05:0a:9d:
11:32:ed:6c:3a:71:89:9a:65:f5:56:7b:23:22:ed:21:d5:02:
c6:43:2d:21:14:54:5d:d9:7e:f2:25:6c:94:f4:8e:6e:57:cc:
17:95:79:c8:e1:af:1c:99:6c:bc:0b:c1:56:d0:18:b6:35:f4:
a9:36:9d:56:9c:d6:01:78:5e:e6:67:26:d8:e0:1d:2f:46:34:
26:8a:b8:f2:d8:6b:9d:11:28:ad:9e:0f:96:be:7a:3a:30:31:
12:5a:12:9f:f9:e3:51:2e:55:1a:75:be:b0:fb:90:03:91:df:
9f:50:50:a5:97:88:d6:62:15:6c:12:dd:d5:1d:bc:fa:00:83:
1f:0c:1a:4a:f2:b9:b8:f9:7d:75:25:4b:57:4c:4e:1a:4d:e7:
06:ae:62:ee:ee:5e:0f:11:8c:db:95:b7:c7:ad:1f:78:e5:2d:
d4:68:05:42:b2:4d:69:e9:8a:7f:86:06:00:bf:7a:85:fb:3d:
4f:33:45:c8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaCJ58u90bFybyY9zjiCGFJBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkzMGE1NzJjMTZkMGM0NGY3NzY2NTg3ZDkyZDg3OGJhMzA1
NDFkMWUwHhcNMjYwOTEwMDYwMTA0WhcNMjYwOTExMDYwMTA0WjAzMTEwLwYDVQQD
EyhjNzExZjFjYzNiOGUzNGJhYmQwYTg5ODE4ZDA1ZmFhNjY3OGRjMzRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj2AXZU4ZIiV909UvCWpN58/WeB1Y
WcuekC1ukePNpNfcJAJfIQG+PPd7DuZGItg2jbrxpTL9oVoDAR2rMP5jzMtOwsDK
gXakReHqDvNcZRhlH7H0B89Yg0Wcs+lkFzQAMsfXV48bFZ6BPTjezVUkuqrefH53
BXuKGowoQwEukjK1XkNF6Fwv0kC+Af4bRs7GGQwE6pYbn6f4uLmd3KW4V3r2Kw56
soraHVU8PFEExx/V8W6rDazzPEJSTydT5xbSr+z98plCfAlXq0vWFU+QhFHxit0z
WfyzeVKwp2M5Mp2Qo4jLAjENUwheJ53pzf0i2fu2U4IBx75UpadJH8vOQQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMcR8cw7jjS6vQqJgY0F+qZnjcNLMB8GA1UdIwQY
MBaAFJMKVywW0MRPd2ZYfZLYeLowVB0eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva3dwWExCYlF4RTkzWmxoOWt0aDR1akJVSFI0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi9hYTU1YTItZTMzZS00ZGMwLTlkODct
OGNjNjU3OTQxNWRhLzEva3dwWExCYlF4RTkzWmxoOWt0aDR1akJVSFI0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYi9hYTU1YTItZTMzZS00ZGMwLTlkODctOGNjNjU3OTQxNWRh
LzEva3dwWExCYlF4RTkzWmxoOWt0aDR1akJVSFI0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA8tVJNety
05RjurP/S2vUAHqPNePjqbdkkvkhQAx9ezqlbbH+gmD8EQ13dVspcHfnLw5kZpGY
bQnSiKtkAfhJdg1FHjZ3BQqdETLtbDpxiZpl9VZ7IyLtIdUCxkMtIRRUXdl+8iVs
lPSOblfMF5V5yOGvHJlsvAvBVtAYtjX0qTadVpzWAXhe5mcm2OAdL0Y0Joq48thr
nREorZ4Plr56OjAxEloSn/njUS5VGnW+sPuQA5Hfn1BQpZeI1mIVbBLd1R28+gCD
HwwaSvK5uPl9dSVLV0xOGk3nBq5i7u5eDxGM25W3x60feOUt1GgFQrJNaemKf4YG
AL96hfs9TzNFyA==
-----END CERTIFICATE-----
Generated at Thu Sep 10 11:57:53 2026 by rpki-client