Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ab/aa55a2-e33e-4dc0-9d87-8cc6579415da/1/kwpXLBbQxE93Zlh9kth4ujBUHR4.mft
File: kwpXLBbQxE93Zlh9kth4ujBUHR4.mft (raw, json)
Hash identifier: 5jI1evPvN6ACQqU2jXBaom6JKpXxFu1ST9LFcjA1UsU=
Subject key identifier: 61:C7:EC:AB:16:C0:21:0A:37:A2:4D:26:E6:15:B7:3F:55:16:17:8D
Authority key identifier: 93:0A:57:2C:16:D0:C4:4F:77:66:58:7D:92:D8:78:BA:30:54:1D:1E
Certificate issuer: /CN=930a572c16d0c44f7766587d92d878ba30541d1e
Certificate serial: 01A17F2A866336376E75EB7657C779A622F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kwpXLBbQxE93Zlh9kth4ujBUHR4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/aa55a2-e33e-4dc0-9d87-8cc6579415da/1/kwpXLBbQxE93Zlh9kth4ujBUHR4.mft
Manifest number: 0C9C
Signing time: Tue 27 Oct 2026 21:00:55 +0000
Manifest this update: Tue 27 Oct 2026 21:00:55 +0000
Manifest next update: Wed 28 Oct 2026 21:00:55 +0000
Files and hashes: 1: HmYrDKd2yjYmZLmWzYz7se6Li1c.roa (hash: 2E+4PcgEvP7v29a2K/Pql8IKPHh2ZcXb/x/xhB+Fnbs=)
2: kwpXLBbQxE93Zlh9kth4ujBUHR4.crl (hash: yYjqR/caI1IzWv5jUEwT9y3K/p1QegSWbC8fnuPBLVY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/aa55a2-e33e-4dc0-9d87-8cc6579415da/1/kwpXLBbQxE93Zlh9kth4ujBUHR4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/aa55a2-e33e-4dc0-9d87-8cc6579415da/1/kwpXLBbQxE93Zlh9kth4ujBUHR4.mft
rsync://rpki.ripe.net/repository/DEFAULT/kwpXLBbQxE93Zlh9kth4ujBUHR4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 21:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7f:2a:86:63:36:37:6e:75:eb:76:57:c7:79:a6:22:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=930a572c16d0c44f7766587d92d878ba30541d1e
Validity
Not Before: Oct 27 21:00:55 2026 GMT
Not After : Oct 28 21:00:55 2026 GMT
Subject: CN=61c7ecab16c0210a37a24d26e615b73f5516178d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:72:32:42:e3:f7:c6:ca:47:e4:d5:11:d6:ad:
b7:c7:04:e8:d4:46:3d:ac:7e:b3:ac:e2:64:8a:b5:
8d:40:1a:b4:77:6a:cf:96:2f:d7:a5:f0:af:7a:c2:
04:ad:94:2a:ea:2d:65:62:e5:ec:51:5a:c6:ba:9c:
fd:61:91:4d:00:2a:26:99:58:45:32:e8:a8:aa:0b:
80:21:f4:38:c9:17:01:b3:79:35:ab:e0:58:eb:23:
24:ab:1a:d0:df:11:32:43:3a:81:10:8a:b1:f9:c0:
b8:d8:af:e2:4d:eb:b1:79:cb:91:33:fc:20:73:99:
29:40:16:0e:1e:71:1f:1c:83:cd:12:97:37:99:bd:
60:56:6b:64:aa:4b:05:7a:50:9b:64:9f:6d:2f:69:
20:6c:3d:ad:43:73:63:e4:d2:cb:20:21:32:8a:80:
aa:d5:92:8e:41:c6:16:68:b3:96:c3:b4:dd:1b:e5:
d7:05:d1:3f:bc:b7:72:93:3f:1d:f3:38:fb:5f:f0:
a1:a0:39:81:97:f6:7a:41:b5:27:36:36:6a:d4:b9:
95:37:9e:d1:8d:f9:4e:5b:ec:42:31:59:1b:20:c8:
2c:85:df:ab:2a:81:87:bf:89:86:dd:ba:8a:bc:7f:
c0:f8:47:85:2e:16:58:d7:14:b4:63:15:af:63:18:
a3:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:C7:EC:AB:16:C0:21:0A:37:A2:4D:26:E6:15:B7:3F:55:16:17:8D
X509v3 Authority Key Identifier:
keyid:93:0A:57:2C:16:D0:C4:4F:77:66:58:7D:92:D8:78:BA:30:54:1D:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kwpXLBbQxE93Zlh9kth4ujBUHR4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/aa55a2-e33e-4dc0-9d87-8cc6579415da/1/kwpXLBbQxE93Zlh9kth4ujBUHR4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/aa55a2-e33e-4dc0-9d87-8cc6579415da/1/kwpXLBbQxE93Zlh9kth4ujBUHR4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:eb:ed:a5:02:09:07:f4:b8:08:74:b8:ab:75:91:be:da:c7:
d0:8a:3c:e2:f1:a1:ba:b2:dc:62:32:12:d5:86:37:43:0b:38:
71:c6:67:de:69:b1:27:d1:86:98:5a:eb:2f:20:ae:46:c5:74:
55:09:03:7d:1e:18:6f:fe:ff:0d:80:8e:14:a5:a7:73:26:5f:
71:0c:70:17:60:cb:02:01:24:5d:27:3b:35:f5:b0:96:64:fa:
47:ba:e1:5f:ea:a3:66:9e:38:cd:57:87:77:80:84:6f:95:cc:
21:87:26:1b:06:9e:95:d0:ed:98:10:a1:21:fd:dc:29:5f:12:
8e:7a:6f:68:c3:fc:a0:f2:93:82:c5:8d:04:38:9b:77:4c:a7:
b1:cc:fa:73:cb:b5:33:ff:d5:49:aa:f5:47:64:94:45:5a:e4:
ce:1d:ab:24:19:8e:38:9f:36:12:eb:bb:cf:98:d0:ec:ca:ed:
a2:65:82:30:51:75:5c:40:03:45:a8:52:4f:25:55:b6:0e:64:
9f:dc:aa:ef:96:d7:73:f1:7b:7f:a0:90:34:4f:23:e5:cd:6e:
b1:69:47:09:2c:a7:cc:6f:39:f0:84:2c:04:77:1d:5c:1d:06:
d8:91:f0:a2:24:89:8c:e4:3f:59:ce:6a:10:34:15:c4:d3:14:
9c:e1:c1:e2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaF/KoZjNjdudet2V8d5piL0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkzMGE1NzJjMTZkMGM0NGY3NzY2NTg3ZDkyZDg3OGJhMzA1
NDFkMWUwHhcNMjYxMDI3MjEwMDU1WhcNMjYxMDI4MjEwMDU1WjAzMTEwLwYDVQQD
Eyg2MWM3ZWNhYjE2YzAyMTBhMzdhMjRkMjZlNjE1YjczZjU1MTYxNzhkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqnIyQuP3xspH5NUR1q23xwTo1EY9
rH6zrOJkirWNQBq0d2rPli/XpfCvesIErZQq6i1lYuXsUVrGupz9YZFNACommVhF
MuioqguAIfQ4yRcBs3k1q+BY6yMkqxrQ3xEyQzqBEIqx+cC42K/iTeuxecuRM/wg
c5kpQBYOHnEfHIPNEpc3mb1gVmtkqksFelCbZJ9tL2kgbD2tQ3Nj5NLLICEyioCq
1ZKOQcYWaLOWw7TdG+XXBdE/vLdykz8d8zj7X/ChoDmBl/Z6QbUnNjZq1LmVN57R
jflOW+xCMVkbIMgshd+rKoGHv4mG3bqKvH/A+EeFLhZY1xS0YxWvYxij2QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGHH7KsWwCEKN6JNJuYVtz9VFheNMB8GA1UdIwQY
MBaAFJMKVywW0MRPd2ZYfZLYeLowVB0eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva3dwWExCYlF4RTkzWmxoOWt0aDR1akJVSFI0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi9hYTU1YTItZTMzZS00ZGMwLTlkODct
OGNjNjU3OTQxNWRhLzEva3dwWExCYlF4RTkzWmxoOWt0aDR1akJVSFI0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYi9hYTU1YTItZTMzZS00ZGMwLTlkODctOGNjNjU3OTQxNWRh
LzEva3dwWExCYlF4RTkzWmxoOWt0aDR1akJVSFI0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANOvtpQIJ
B/S4CHS4q3WRvtrH0Io84vGhurLcYjIS1YY3Qws4ccZn3mmxJ9GGmFrrLyCuRsV0
VQkDfR4Yb/7/DYCOFKWncyZfcQxwF2DLAgEkXSc7NfWwlmT6R7rhX+qjZp44zVeH
d4CEb5XMIYcmGwaeldDtmBChIf3cKV8SjnpvaMP8oPKTgsWNBDibd0ynscz6c8u1
M//VSar1R2SURVrkzh2rJBmOOJ82Euu7z5jQ7MrtomWCMFF1XEADRahSTyVVtg5k
n9yq75bXc/F7f6CQNE8j5c1usWlHCSynzG858IQsBHcdXB0G2JHwoiSJjOQ/Wc5q
EDQVxNMUnOHB4g==
-----END CERTIFICATE-----
Generated at Wed Oct 28 03:12:09 2026 by rpki-client