Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/aa55a2-e33e-4dc0-9d87-8cc6579415da/1/kwpXLBbQxE93Zlh9kth4ujBUHR4.mft
File: kwpXLBbQxE93Zlh9kth4ujBUHR4.mft (raw, json)
Hash identifier: sRwfLPfUFgR38LaXXUGaXPAlqmkqPoz/GWidz7iGswg=
Subject key identifier: 97:19:44:9E:E7:D3:EA:61:78:94:34:09:49:31:42:AA:03:27:39:89
Authority key identifier: 93:0A:57:2C:16:D0:C4:4F:77:66:58:7D:92:D8:78:BA:30:54:1D:1E
Certificate issuer: /CN=930a572c16d0c44f7766587d92d878ba30541d1e
Certificate serial: 019EB87CD5BA6C0354AF1DEDEF500CD79E0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kwpXLBbQxE93Zlh9kth4ujBUHR4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/aa55a2-e33e-4dc0-9d87-8cc6579415da/1/kwpXLBbQxE93Zlh9kth4ujBUHR4.mft
Manifest number: 0B2C
Signing time: Thu 11 Jun 2026 21:00:49 +0000
Manifest this update: Thu 11 Jun 2026 21:00:49 +0000
Manifest next update: Fri 12 Jun 2026 21:00:49 +0000
Files and hashes: 1: HmYrDKd2yjYmZLmWzYz7se6Li1c.roa (hash: 2E+4PcgEvP7v29a2K/Pql8IKPHh2ZcXb/x/xhB+Fnbs=)
2: kwpXLBbQxE93Zlh9kth4ujBUHR4.crl (hash: ICMntnSETKEhBf8lq6JKJN0XKh+ynhF8GVsGB38BPRo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/aa55a2-e33e-4dc0-9d87-8cc6579415da/1/kwpXLBbQxE93Zlh9kth4ujBUHR4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/aa55a2-e33e-4dc0-9d87-8cc6579415da/1/kwpXLBbQxE93Zlh9kth4ujBUHR4.mft
rsync://rpki.ripe.net/repository/DEFAULT/kwpXLBbQxE93Zlh9kth4ujBUHR4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 20:26:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b8:7c:d5:ba:6c:03:54:af:1d:ed:ef:50:0c:d7:9e:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=930a572c16d0c44f7766587d92d878ba30541d1e
Validity
Not Before: Jun 11 21:00:49 2026 GMT
Not After : Jun 12 21:00:49 2026 GMT
Subject: CN=9719449ee7d3ea6178943409493142aa03273989
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:ed:8f:7c:74:c9:52:04:c0:60:f0:f9:1c:62:
cb:a6:b8:88:b5:12:3f:07:eb:be:6b:d5:62:3c:06:
14:85:e7:60:52:1d:46:07:46:08:8b:70:c3:8f:f4:
85:80:ba:39:68:3d:75:03:cf:ed:ba:ac:c8:37:a7:
0e:c1:9a:29:8b:78:c1:3f:f9:d2:86:0e:25:5b:23:
54:d7:c8:1c:88:e7:85:0d:ac:a9:73:c0:83:6a:63:
43:b7:78:1a:80:bb:48:bb:1c:98:8d:ef:32:f3:95:
c3:7a:ff:64:7a:5a:8a:59:0e:a4:0c:27:c2:41:de:
83:d8:22:e3:3a:5c:1e:d1:f1:fa:28:ea:e8:10:cd:
8f:dc:cb:c2:4b:ab:c8:11:35:8a:b1:ac:45:1f:0c:
30:dc:02:7a:a2:2f:57:e1:c6:cb:96:ba:4a:d6:54:
4d:f2:66:09:a3:53:d5:be:db:72:02:6a:4d:3f:df:
2f:e3:9a:fb:13:e3:5a:b5:2e:ae:3f:3f:f3:b1:76:
28:97:30:15:c8:fd:d9:3e:fa:d8:c1:be:51:12:ce:
74:7e:0a:ce:9f:24:df:af:11:21:7a:82:c7:7d:31:
5b:c7:61:3a:18:d0:ca:09:81:14:fd:d1:85:a1:33:
40:e8:2a:64:40:6d:22:fd:1f:a4:41:46:b1:d6:f4:
25:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:19:44:9E:E7:D3:EA:61:78:94:34:09:49:31:42:AA:03:27:39:89
X509v3 Authority Key Identifier:
keyid:93:0A:57:2C:16:D0:C4:4F:77:66:58:7D:92:D8:78:BA:30:54:1D:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kwpXLBbQxE93Zlh9kth4ujBUHR4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/aa55a2-e33e-4dc0-9d87-8cc6579415da/1/kwpXLBbQxE93Zlh9kth4ujBUHR4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/aa55a2-e33e-4dc0-9d87-8cc6579415da/1/kwpXLBbQxE93Zlh9kth4ujBUHR4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:2b:44:8e:6c:a0:60:ec:f7:bb:c3:ae:e4:2e:25:6c:ea:23:
15:7c:09:de:9a:f5:3a:92:44:eb:3d:a3:34:d1:3a:24:f4:e0:
55:b5:0c:9c:b8:03:f3:ac:98:1f:86:a2:28:ee:f9:b1:19:09:
1d:8b:a5:b1:c4:51:e6:51:71:79:88:d8:a8:d8:65:b6:db:f8:
a0:10:d9:af:81:a5:8d:69:62:c0:17:79:7b:58:aa:3e:ec:59:
01:4c:7f:f2:1b:36:a0:a6:1d:77:35:71:ed:b7:74:64:f9:96:
d7:58:90:52:70:89:2f:4b:6b:e9:d2:f0:1c:a6:53:96:8b:d9:
ea:5d:eb:d5:0d:15:79:43:9f:d9:cb:88:bd:0c:69:5b:33:c3:
0e:fe:0e:96:47:01:0e:3d:67:90:7e:7a:90:a5:1d:c6:d9:81:
d3:2c:75:b8:29:d8:5e:53:ad:7b:9f:05:db:b5:3c:56:bc:3b:
c0:a7:80:e2:59:e0:7e:59:1c:1a:d6:70:09:8d:6f:e6:3f:01:
b6:94:c1:f5:97:bc:40:99:7b:cc:87:b4:64:4e:8b:82:5f:80:
f7:54:6b:f1:dd:fa:e0:8b:e2:27:3b:b6:40:79:ff:26:e9:d4:
69:13:01:21:89:d1:cb:67:3a:67:40:3f:61:5d:8b:dd:bc:2e:
22:ed:21:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 04:59:54 2026 by rpki-client