Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/aa55a2-e33e-4dc0-9d87-8cc6579415da/1/kwpXLBbQxE93Zlh9kth4ujBUHR4.mft
File: kwpXLBbQxE93Zlh9kth4ujBUHR4.mft (raw, json)
Hash identifier: Bz50GTGdvmgLS5H+UZCeY/95rq3kl41H966mwur+dSM=
Subject key identifier: 5A:92:B8:F9:BC:9B:40:F0:84:3D:74:DA:87:C6:2E:7E:A0:29:AF:B9
Authority key identifier: 93:0A:57:2C:16:D0:C4:4F:77:66:58:7D:92:D8:78:BA:30:54:1D:1E
Certificate issuer: /CN=930a572c16d0c44f7766587d92d878ba30541d1e
Certificate serial: 019D382DE2AE38757281D8E217843BAF3573
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kwpXLBbQxE93Zlh9kth4ujBUHR4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/aa55a2-e33e-4dc0-9d87-8cc6579415da/1/kwpXLBbQxE93Zlh9kth4ujBUHR4.mft
Manifest number: 0A65
Signing time: Sun 29 Mar 2026 06:00:24 +0000
Manifest this update: Sun 29 Mar 2026 06:00:24 +0000
Manifest next update: Mon 30 Mar 2026 06:00:24 +0000
Files and hashes: 1: HmYrDKd2yjYmZLmWzYz7se6Li1c.roa (hash: 2E+4PcgEvP7v29a2K/Pql8IKPHh2ZcXb/x/xhB+Fnbs=)
2: kwpXLBbQxE93Zlh9kth4ujBUHR4.crl (hash: /r09vYF1FzIYWQDSG5q4F9IZ2xwez39l2eHFogm9Pcs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/aa55a2-e33e-4dc0-9d87-8cc6579415da/1/kwpXLBbQxE93Zlh9kth4ujBUHR4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/aa55a2-e33e-4dc0-9d87-8cc6579415da/1/kwpXLBbQxE93Zlh9kth4ujBUHR4.mft
rsync://rpki.ripe.net/repository/DEFAULT/kwpXLBbQxE93Zlh9kth4ujBUHR4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2d:e2:ae:38:75:72:81:d8:e2:17:84:3b:af:35:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=930a572c16d0c44f7766587d92d878ba30541d1e
Validity
Not Before: Mar 29 06:00:24 2026 GMT
Not After : Mar 30 06:00:24 2026 GMT
Subject: CN=5a92b8f9bc9b40f0843d74da87c62e7ea029afb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:13:f5:73:9a:39:19:aa:43:4b:08:68:51:32:
2b:14:c4:e7:fa:06:4a:64:9a:60:62:37:d2:fc:8c:
24:e5:8f:d0:3b:f9:51:bc:65:69:dc:6c:f5:72:66:
6a:fc:43:1a:b7:a3:81:cc:50:04:b9:53:64:5c:9a:
f8:0f:08:1a:6b:44:e2:3e:cd:84:f5:81:76:80:3b:
07:45:be:23:b0:b0:ea:9f:a0:56:af:07:e8:0f:47:
b8:5e:00:13:70:60:d5:6b:31:9c:44:51:80:bd:4a:
bf:4b:f5:40:76:69:42:11:58:83:ad:9b:e9:86:da:
55:07:7e:79:de:6a:4d:6b:81:ac:5f:ad:28:2f:fb:
47:e0:20:ae:61:a1:0f:04:f3:0e:9d:0c:ac:81:56:
ea:90:58:0b:3e:da:5f:ca:44:c5:0d:98:6f:35:c0:
32:c7:2a:83:4d:4c:22:14:62:f3:b1:18:f4:8b:d9:
d7:de:f7:2b:55:2a:d0:5f:cd:45:7c:de:3c:87:4c:
68:5c:9d:de:11:21:fb:ad:42:d2:0a:a0:fe:e4:36:
df:51:8a:03:1d:04:c0:68:6b:40:20:59:7d:f5:5a:
1a:d9:0f:1e:72:c5:6c:53:d3:4b:f6:c0:50:ca:26:
75:1c:bb:3e:61:5c:d1:97:d3:21:b9:9a:89:e1:54:
93:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:92:B8:F9:BC:9B:40:F0:84:3D:74:DA:87:C6:2E:7E:A0:29:AF:B9
X509v3 Authority Key Identifier:
keyid:93:0A:57:2C:16:D0:C4:4F:77:66:58:7D:92:D8:78:BA:30:54:1D:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kwpXLBbQxE93Zlh9kth4ujBUHR4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/aa55a2-e33e-4dc0-9d87-8cc6579415da/1/kwpXLBbQxE93Zlh9kth4ujBUHR4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/aa55a2-e33e-4dc0-9d87-8cc6579415da/1/kwpXLBbQxE93Zlh9kth4ujBUHR4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:85:fd:84:29:f0:e3:5e:c1:bd:a3:04:bb:10:b1:84:68:77:
6d:48:9a:2e:51:b4:4a:d3:6f:0c:69:f8:5f:69:5c:ee:c7:6b:
26:b9:dc:98:fe:e3:05:9a:6a:1f:3d:1f:64:df:e5:ce:15:29:
6b:bc:d1:19:62:49:ea:f6:5f:a4:2d:64:6b:c9:91:26:1e:dd:
b2:53:19:23:ae:d7:96:f9:77:0f:f3:d9:b8:1f:d8:c2:d8:c2:
13:65:59:04:db:ef:70:6e:c6:80:07:b0:9d:6e:ae:84:be:e8:
1c:48:1c:6d:a3:07:ed:fc:f8:ce:63:bf:58:06:b9:a2:54:c4:
af:af:a8:0b:cb:85:1e:e2:8b:16:4e:80:35:77:b7:fd:90:fc:
ee:cd:e3:77:07:10:9f:de:05:9f:5b:10:f3:ff:25:ac:b7:8f:
5a:e6:72:6d:5d:5b:ce:18:56:81:2c:78:40:07:76:fa:df:2c:
56:fe:2d:58:95:c2:61:ac:d7:c2:92:1d:6b:ad:50:80:d0:6a:
81:68:03:d8:45:36:5e:ca:68:9f:eb:1c:a4:00:2a:6c:ae:dd:
7b:70:3c:56:8e:bc:70:32:9c:87:ed:b0:e1:07:61:f0:97:d0:
e4:38:50:9f:cf:64:a9:8e:2b:7f:aa:04:bf:e1:8b:aa:d0:0e:
eb:d2:9a:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:18:37 2026 by rpki-client