Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/af/951bce-2850-4943-8f00-db2c57f4ef16/1/kPwsEuoXAhuorOBiGJfwhW2sJVk.mft
File: kPwsEuoXAhuorOBiGJfwhW2sJVk.mft (raw, json)
Hash identifier: /HnPpR5Bb/x2Vk7qXZiMUw1Ooi7JCrne7KyxwI5rVAY=
Subject key identifier: 09:42:F5:B5:F3:79:D2:EB:7C:CC:F3:40:83:8D:40:8B:F9:45:C0:6F
Authority key identifier: 90:FC:2C:12:EA:17:02:1B:A8:AC:E0:62:18:97:F0:85:6D:AC:25:59
Certificate issuer: /CN=90fc2c12ea17021ba8ace0621897f0856dac2559
Certificate serial: 01A1980E415C981630BC680679D9CE4FED3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kPwsEuoXAhuorOBiGJfwhW2sJVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/951bce-2850-4943-8f00-db2c57f4ef16/1/kPwsEuoXAhuorOBiGJfwhW2sJVk.mft
Manifest number: 0A4D
Signing time: Sun 01 Nov 2026 17:00:33 +0000
Manifest this update: Sun 01 Nov 2026 17:00:33 +0000
Manifest next update: Mon 02 Nov 2026 17:00:33 +0000
Files and hashes: 1: 41FDoFH6M2is1lsICkgfh5ITDqc.roa (hash: EewgyLxSVnO+QoRL7ntY20ccJSFgs1pW1bzWTclj1yE=)
2: BRDlyqeJrmrBAcGjXwsME96B8FA.roa (hash: jjDNz/Y1cZhGq2xfdDGq/oEMuXVbmPo8+lz5IqqCETc=)
3: kPwsEuoXAhuorOBiGJfwhW2sJVk.crl (hash: pEKvLVY5Pyem2b/WFEx3uoDyxRBv+9uQkCTQROMDsd0=)
4: nXsgPSU5eo-g-H5HVGkbUxzs-M0.roa (hash: bHUY+9ATlshHA4NGy9V8O1pXq9p6uilZoEQtRA9DmuU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/951bce-2850-4943-8f00-db2c57f4ef16/1/kPwsEuoXAhuorOBiGJfwhW2sJVk.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/951bce-2850-4943-8f00-db2c57f4ef16/1/kPwsEuoXAhuorOBiGJfwhW2sJVk.mft
rsync://rpki.ripe.net/repository/DEFAULT/kPwsEuoXAhuorOBiGJfwhW2sJVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Nov 2026 13:18:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:98:0e:41:5c:98:16:30:bc:68:06:79:d9:ce:4f:ed:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90fc2c12ea17021ba8ace0621897f0856dac2559
Validity
Not Before: Nov 1 17:00:33 2026 GMT
Not After : Nov 2 17:00:33 2026 GMT
Subject: CN=0942f5b5f379d2eb7cccf340838d408bf945c06f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:85:48:fb:e7:f9:21:34:1f:e1:a1:f5:7b:cc:
32:38:f0:3c:a4:b6:75:1d:79:2d:a3:0e:e8:4b:fa:
e3:07:98:4f:b7:17:aa:9a:65:4d:1f:b4:a4:b4:5d:
5e:3b:8c:7c:bd:18:6c:2b:27:93:e9:13:9e:25:5f:
de:4d:95:26:49:65:43:74:14:b6:d7:bc:e0:46:ef:
b3:fd:66:e4:2a:5a:31:c7:b9:fe:5c:57:1c:96:95:
88:57:70:0b:8f:46:fe:88:44:bb:81:9a:bc:d0:2a:
c3:3f:f6:66:f0:d8:43:a1:4e:69:41:c3:49:c5:5a:
4c:d4:6d:92:7e:dd:40:f9:b2:12:0a:8a:d5:33:2d:
3b:88:49:ce:6d:b4:ea:e4:d2:3a:b7:1c:b1:2a:31:
01:d3:b1:36:ef:c5:7c:67:91:a9:be:ba:38:58:a4:
39:82:2d:88:08:ef:34:44:f7:95:0a:7a:14:6e:23:
50:40:ba:f1:b6:1a:3c:e6:69:7c:e3:51:68:e0:73:
c0:59:c5:6f:fb:64:d9:81:5b:33:0c:f5:32:8f:64:
82:06:1f:e8:3f:5f:69:37:04:07:c0:b3:f6:3c:c7:
eb:ab:89:d4:3d:f7:b8:5b:d8:48:0e:9c:91:3f:4e:
f9:65:b2:d9:c0:c4:9d:36:5a:8f:07:4f:b5:b6:07:
1e:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:42:F5:B5:F3:79:D2:EB:7C:CC:F3:40:83:8D:40:8B:F9:45:C0:6F
X509v3 Authority Key Identifier:
keyid:90:FC:2C:12:EA:17:02:1B:A8:AC:E0:62:18:97:F0:85:6D:AC:25:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kPwsEuoXAhuorOBiGJfwhW2sJVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/951bce-2850-4943-8f00-db2c57f4ef16/1/kPwsEuoXAhuorOBiGJfwhW2sJVk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/951bce-2850-4943-8f00-db2c57f4ef16/1/kPwsEuoXAhuorOBiGJfwhW2sJVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:03:f9:b3:6c:f7:95:de:fb:8f:80:a1:79:4a:6c:10:99:ab:
b0:5d:da:31:d6:5b:35:a0:73:b3:66:70:2e:8a:96:ac:ab:47:
39:63:18:2c:41:10:a5:d5:9a:49:e5:41:14:65:a5:80:d4:3f:
35:12:bf:25:80:6b:b7:8f:7d:92:3f:c8:bc:e9:be:e6:38:50:
91:56:b7:04:98:39:5d:e5:86:ef:43:14:26:3c:e0:eb:75:9f:
ab:1c:69:fb:97:c2:0f:c3:c8:92:a9:d6:56:33:6b:13:12:cf:
52:ed:19:4b:1c:c9:7b:7b:13:44:14:c3:73:59:b1:c5:77:17:
8b:c1:89:59:86:21:c2:60:f7:2c:60:7f:69:ec:fa:cc:97:c2:
60:53:7d:4b:f8:e9:65:6d:a4:8b:6a:30:8b:76:7b:c7:7e:ec:
1a:43:c2:f2:5c:d6:48:06:6c:ce:04:13:cf:1a:fb:5e:67:d3:
ff:b5:0b:22:f1:51:82:c6:36:ae:18:28:08:1c:c6:ea:ae:f2:
2d:3d:a0:b4:b3:08:c1:a9:02:4b:c6:98:d0:6c:d9:7e:ea:e5:
74:83:3c:03:b5:7c:1e:0f:4a:a5:0e:93:63:d4:0f:19:76:ad:
c7:42:8e:e8:9c:01:1a:be:a1:18:79:c2:65:0d:25:ce:9b:f8:
1f:77:52:58
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaGYDkFcmBYwvGgGednOT+07MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkwZmMyYzEyZWExNzAyMWJhOGFjZTA2MjE4OTdmMDg1NmRh
YzI1NTkwHhcNMjYxMTAxMTcwMDMzWhcNMjYxMTAyMTcwMDMzWjAzMTEwLwYDVQQD
EygwOTQyZjViNWYzNzlkMmViN2NjY2YzNDA4MzhkNDA4YmY5NDVjMDZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0IVI++f5ITQf4aH1e8wyOPA8pLZ1
HXktow7oS/rjB5hPtxeqmmVNH7SktF1eO4x8vRhsKyeT6ROeJV/eTZUmSWVDdBS2
17zgRu+z/WbkKloxx7n+XFcclpWIV3ALj0b+iES7gZq80CrDP/Zm8NhDoU5pQcNJ
xVpM1G2Sft1A+bISCorVMy07iEnObbTq5NI6txyxKjEB07E278V8Z5Gpvro4WKQ5
gi2ICO80RPeVCnoUbiNQQLrxtho85ml841Fo4HPAWcVv+2TZgVszDPUyj2SCBh/o
P19pNwQHwLP2PMfrq4nUPfe4W9hIDpyRP075ZbLZwMSdNlqPB0+1tgceXwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAlC9bXzedLrfMzzQIONQIv5RcBvMB8GA1UdIwQY
MBaAFJD8LBLqFwIbqKzgYhiX8IVtrCVZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva1B3c0V1b1hBaHVvck9CaUdKZndoVzJzSlZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi85NTFiY2UtMjg1MC00OTQzLThmMDAt
ZGIyYzU3ZjRlZjE2LzEva1B3c0V1b1hBaHVvck9CaUdKZndoVzJzSlZrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZi85NTFiY2UtMjg1MC00OTQzLThmMDAtZGIyYzU3ZjRlZjE2
LzEva1B3c0V1b1hBaHVvck9CaUdKZndoVzJzSlZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACgP5s2z3
ld77j4CheUpsEJmrsF3aMdZbNaBzs2ZwLoqWrKtHOWMYLEEQpdWaSeVBFGWlgNQ/
NRK/JYBrt499kj/IvOm+5jhQkVa3BJg5XeWG70MUJjzg63Wfqxxp+5fCD8PIkqnW
VjNrExLPUu0ZSxzJe3sTRBTDc1mxxXcXi8GJWYYhwmD3LGB/aez6zJfCYFN9S/jp
ZW2ki2owi3Z7x37sGkPC8lzWSAZszgQTzxr7XmfT/7ULIvFRgsY2rhgoCBzG6q7y
LT2gtLMIwakCS8aY0GzZfurldIM8A7V8Hg9KpQ6TY9QPGXatx0KO6JwBGr6hGHnC
ZQ0lzpv4H3dSWA==
-----END CERTIFICATE-----
Generated at Sun Nov 1 19:53:39 2026 by rpki-client