Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/ebf6cb-a779-464f-8bee-8f08e0272df8/1/kwHqBZY8l1byjuLpi488xHncn1g.mft
File: kwHqBZY8l1byjuLpi488xHncn1g.mft (raw, json)
Hash identifier: xWDjWHMaXhHXVg3tnxc5ByoXtnO3c/9oXZptYgPOfA4=
Subject key identifier: 44:E4:BB:EA:5C:FC:9E:47:3B:58:AF:0A:DF:8B:AD:98:D2:3A:69:F3
Authority key identifier: 93:01:EA:05:96:3C:97:56:F2:8E:E2:E9:8B:8F:3C:C4:79:DC:9F:58
Certificate issuer: /CN=9301ea05963c9756f28ee2e98b8f3cc479dc9f58
Certificate serial: 019F3829E50F6A9E8951540B07A74907DA11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kwHqBZY8l1byjuLpi488xHncn1g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/ebf6cb-a779-464f-8bee-8f08e0272df8/1/kwHqBZY8l1byjuLpi488xHncn1g.mft
Manifest number: 1999
Signing time: Mon 06 Jul 2026 16:01:37 +0000
Manifest this update: Mon 06 Jul 2026 16:01:37 +0000
Manifest next update: Tue 07 Jul 2026 16:01:37 +0000
Files and hashes: 1: FBhDmdYEI1srtuu7JrFgr66x8ew.roa (hash: R2ovnBFrcn5EnM6GfbKn3aVU8U4YfuAvDOw4VakEfcE=)
2: H0_IomRRpyz9ZuX5Gk79E728dxM.roa (hash: e7ZDp/bE6peOT9CEy08QjhlQAfh2fOeWM0+4hMAUyDw=)
3: aYuTn-9yQTAQTYpNQto8rHBvH-k.roa (hash: nykKhsVthOtSK2vkaElBeNHj+3rLVcnRvVm79PIvOeg=)
4: kwHqBZY8l1byjuLpi488xHncn1g.crl (hash: QDA5iBv7MHHr0lXhEHGbReKUFsBXvKAUgpU05Xku2/4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/ebf6cb-a779-464f-8bee-8f08e0272df8/1/kwHqBZY8l1byjuLpi488xHncn1g.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/ebf6cb-a779-464f-8bee-8f08e0272df8/1/kwHqBZY8l1byjuLpi488xHncn1g.mft
rsync://rpki.ripe.net/repository/DEFAULT/kwHqBZY8l1byjuLpi488xHncn1g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Jul 2026 14:46:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:38:29:e5:0f:6a:9e:89:51:54:0b:07:a7:49:07:da:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9301ea05963c9756f28ee2e98b8f3cc479dc9f58
Validity
Not Before: Jul 6 16:01:37 2026 GMT
Not After : Jul 7 16:01:37 2026 GMT
Subject: CN=44e4bbea5cfc9e473b58af0adf8bad98d23a69f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:40:10:44:fe:1e:b3:05:c6:31:18:e8:a6:f2:
9a:00:4c:af:c0:5c:4d:3a:5c:68:7c:f0:78:97:fa:
c1:32:2c:e1:90:05:ff:e9:60:c7:8c:a1:20:e4:1d:
f7:c4:50:1c:62:6e:a6:20:3f:69:76:e8:68:6d:26:
17:bf:d9:7b:cc:fc:6f:91:d8:ae:81:96:a0:d7:70:
65:20:b0:09:21:37:96:49:89:87:0c:4c:76:90:50:
cd:5f:0f:cc:e3:73:b7:ce:0a:c3:f6:27:bc:31:f0:
0a:b1:a2:03:81:41:d4:bc:f7:bb:74:3b:3e:d5:7a:
55:9d:3c:46:21:05:74:ad:dd:8f:03:f0:dd:b5:63:
08:35:38:e8:ae:00:ea:c5:47:87:ad:03:b9:a3:ba:
d5:3a:58:4e:a4:97:6f:12:e6:7b:22:92:56:a8:ac:
8e:07:2b:4b:75:83:7f:2e:f1:0e:00:e0:04:ad:72:
82:16:4d:36:1b:5e:04:f6:d7:83:e3:25:48:35:40:
d2:d6:a7:19:37:2b:44:c4:85:1d:da:c2:e8:be:90:
6e:45:f6:d4:f0:63:f4:e9:14:04:49:fb:f5:86:b2:
ae:10:ba:88:79:2d:5a:b6:5a:75:4d:eb:89:ff:ba:
7f:43:19:3f:ab:80:3b:45:d2:95:ed:3f:e4:57:c1:
53:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:E4:BB:EA:5C:FC:9E:47:3B:58:AF:0A:DF:8B:AD:98:D2:3A:69:F3
X509v3 Authority Key Identifier:
keyid:93:01:EA:05:96:3C:97:56:F2:8E:E2:E9:8B:8F:3C:C4:79:DC:9F:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kwHqBZY8l1byjuLpi488xHncn1g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/ebf6cb-a779-464f-8bee-8f08e0272df8/1/kwHqBZY8l1byjuLpi488xHncn1g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/ebf6cb-a779-464f-8bee-8f08e0272df8/1/kwHqBZY8l1byjuLpi488xHncn1g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:89:08:6f:65:6d:07:2b:1f:05:b8:ef:1b:f9:61:5d:21:e4:
b9:05:4e:b2:69:a9:1a:9a:c5:e5:c1:da:94:13:2f:67:72:ff:
d2:17:57:06:d4:7f:6c:10:11:5d:16:21:b6:53:a6:ce:66:fd:
7e:b8:0b:18:0e:f1:fa:9e:26:36:18:1e:ad:80:50:d0:e4:8f:
e6:f5:2f:91:94:9f:2d:73:8b:d2:ad:3a:65:e4:cc:32:2e:61:
70:45:cd:58:ba:00:27:a6:9f:c9:72:32:0c:f3:e3:b4:79:1c:
45:53:12:a9:cc:16:3f:43:4f:c7:d7:56:48:4a:09:03:25:1d:
04:a7:f2:39:bf:59:44:97:4b:70:54:c5:e2:92:53:62:66:7e:
d8:99:12:89:3e:7e:f8:94:0b:08:2d:74:74:2d:21:8b:a4:d1:
57:fc:c7:24:63:bd:58:1d:0b:55:f7:e9:f4:0e:c0:25:f9:c2:
8a:b5:fb:4d:6d:4b:a2:9f:6e:4c:eb:df:4e:f3:ce:8d:7e:7b:
42:4c:9b:c7:52:12:3b:4c:15:6b:7b:c2:4c:19:39:25:30:ba:
47:23:8f:cb:57:61:81:af:e1:86:28:ba:61:8a:45:26:c0:fd:
c2:b9:ec:df:a8:c5:ba:c4:3c:6d:96:ed:bb:aa:3f:41:41:10:
83:1f:7e:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 19:17:36 2026 by rpki-client