Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ad/194f22-8689-4fdb-9c41-058bbf9d5e27/1/KwA-WDvbJRH_V6t6MvznQTNLNDs.mft
File: KwA-WDvbJRH_V6t6MvznQTNLNDs.mft (raw, json)
Hash identifier: sCsVLU2EONXDlK46mUfEJjQhhvJRN5lG4hHobHODzGA=
Subject key identifier: F6:5B:24:2D:A9:C4:26:80:09:A6:D4:09:05:A9:1F:2C:BC:2E:77:00
Authority key identifier: 2B:00:3E:58:3B:DB:25:11:FF:57:AB:7A:32:FC:E7:41:33:4B:34:3B
Certificate issuer: /CN=2b003e583bdb2511ff57ab7a32fce741334b343b
Certificate serial: 01A1A0A427CA4C3A0D69BB9ADCEF6E410BDE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KwA-WDvbJRH_V6t6MvznQTNLNDs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/194f22-8689-4fdb-9c41-058bbf9d5e27/1/KwA-WDvbJRH_V6t6MvznQTNLNDs.mft
Manifest number: 1AD9
Signing time: Tue 03 Nov 2026 09:01:14 +0000
Manifest this update: Tue 03 Nov 2026 09:01:14 +0000
Manifest next update: Wed 04 Nov 2026 09:01:14 +0000
Files and hashes: 1: KZ7bDRNwTfIEQWY_jhARUR9DHxI.roa (hash: eyE+qcEsEBDUoKEFoqctNchUZLkDzCl+DcFXWEI/yFY=)
2: KwA-WDvbJRH_V6t6MvznQTNLNDs.crl (hash: 6ZK5a3mRuMpe8Hd4gOY43fCDqJNYoEuXi/kGKGJaT/8=)
3: NzKx6KcOHXw58MEojB9ud-uaBro.roa (hash: a9iaY6BAt3IsnsebJ+05WFxE0TvGeWD+djHy5NWOc0U=)
4: WVIppZ-adXM0RCbFNu2ZaCBfuZQ.roa (hash: hwZIh3ZVsKyRI6oFuWtqGMKZtqEO+xpper2aZGmlvQM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/194f22-8689-4fdb-9c41-058bbf9d5e27/1/KwA-WDvbJRH_V6t6MvznQTNLNDs.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/194f22-8689-4fdb-9c41-058bbf9d5e27/1/KwA-WDvbJRH_V6t6MvznQTNLNDs.mft
rsync://rpki.ripe.net/repository/DEFAULT/KwA-WDvbJRH_V6t6MvznQTNLNDs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 04 Nov 2026 09:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:a0:a4:27:ca:4c:3a:0d:69:bb:9a:dc:ef:6e:41:0b:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b003e583bdb2511ff57ab7a32fce741334b343b
Validity
Not Before: Nov 3 09:01:14 2026 GMT
Not After : Nov 4 09:01:14 2026 GMT
Subject: CN=f65b242da9c4268009a6d40905a91f2cbc2e7700
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:00:42:5b:a6:c6:09:3b:08:94:21:60:6a:5c:
f7:0c:a0:99:8c:2c:88:81:6d:96:25:e5:0f:0c:e0:
ee:a6:b6:b8:a5:bb:f2:65:9d:d7:b1:eb:93:ad:8e:
95:4f:6a:03:89:5d:37:57:91:53:3a:d2:c3:24:cd:
3d:6e:6a:f7:4b:4d:b7:6a:4d:22:20:1a:64:e4:69:
c8:23:86:e5:96:ac:3d:75:c8:c7:a9:36:45:b9:d9:
d7:8e:1b:e0:48:72:a0:a3:75:a4:66:64:0c:18:fa:
30:2d:2b:51:4f:81:0e:f4:4d:d6:94:60:53:84:e0:
9c:f2:74:ae:25:d0:e6:77:7e:9f:17:f5:68:d8:c8:
c5:a0:06:62:4f:07:73:ec:91:29:28:30:91:65:0c:
91:a7:64:87:42:17:e8:0a:8c:31:7a:df:7f:76:9a:
6e:ab:43:e8:0e:96:17:f7:8b:76:2a:64:57:30:77:
a7:f2:b4:72:b0:3f:3c:23:ef:92:f2:94:a0:81:fd:
29:91:be:7b:41:ca:b2:a8:3d:a4:61:fc:2d:6f:27:
47:3b:3d:3b:7a:b2:70:f9:4d:d3:15:b7:9d:1d:97:
6a:3a:de:40:12:7a:6e:0b:ac:60:95:6f:9a:36:5a:
8c:f5:7f:5a:85:2d:a9:a2:fb:53:dc:3a:46:23:6e:
38:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:5B:24:2D:A9:C4:26:80:09:A6:D4:09:05:A9:1F:2C:BC:2E:77:00
X509v3 Authority Key Identifier:
keyid:2B:00:3E:58:3B:DB:25:11:FF:57:AB:7A:32:FC:E7:41:33:4B:34:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KwA-WDvbJRH_V6t6MvznQTNLNDs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/194f22-8689-4fdb-9c41-058bbf9d5e27/1/KwA-WDvbJRH_V6t6MvznQTNLNDs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/194f22-8689-4fdb-9c41-058bbf9d5e27/1/KwA-WDvbJRH_V6t6MvznQTNLNDs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:3a:f5:fb:21:65:b8:5f:28:d6:18:b9:73:56:e5:c7:ae:f3:
da:0b:bb:e5:12:5e:f7:1d:c4:f4:d3:bf:73:75:ef:cf:60:0f:
21:8c:6b:22:17:73:b2:69:50:4e:1f:b1:20:4d:2d:2b:64:fd:
e6:07:c5:d9:35:f0:1f:a3:8a:e3:50:4b:55:94:74:0b:84:65:
31:08:c8:5f:ec:da:f4:e3:a7:91:24:62:89:9d:86:09:f1:78:
a0:39:f1:dd:0e:6b:11:ee:67:28:43:31:9c:79:a5:54:57:b1:
d1:fa:ca:97:ff:b2:c6:b8:48:ed:76:c4:5d:c4:5e:52:ab:96:
1b:52:6c:68:15:13:89:4b:05:ee:8d:5a:7c:50:aa:0e:d8:6b:
67:5a:cc:fa:be:94:23:91:95:39:0b:b9:ae:ca:71:8f:d7:e2:
1d:0a:fb:1d:e5:47:98:e0:d7:70:5f:59:56:be:42:3a:e9:ba:
18:90:68:37:24:2d:e5:ab:48:95:2a:34:6e:20:e9:dd:33:6a:
cd:4e:9f:5d:8a:65:65:81:40:4e:30:24:a1:92:1c:3a:e8:7b:
30:16:a4:ad:70:9a:09:88:88:b8:48:f9:b9:99:17:1a:15:be:
91:3d:56:14:73:5f:7d:c0:1e:1a:08:c0:f8:34:06:ba:5c:32:
19:40:37:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 3 16:19:04 2026 by rpki-client