Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/ebf6cb-a779-464f-8bee-8f08e0272df8/1/kwHqBZY8l1byjuLpi488xHncn1g.mft
File: kwHqBZY8l1byjuLpi488xHncn1g.mft (raw, json)
Hash identifier: JU8OFt1vtm8QelMWjD1d58y4IO48sLlcLEMd76G2GcI=
Subject key identifier: FD:40:65:42:C4:1E:C5:63:55:39:94:2C:1E:8B:B7:6F:78:71:2C:2F
Authority key identifier: 93:01:EA:05:96:3C:97:56:F2:8E:E2:E9:8B:8F:3C:C4:79:DC:9F:58
Certificate issuer: /CN=9301ea05963c9756f28ee2e98b8f3cc479dc9f58
Certificate serial: 019D38664886669B1EB60D7C3A7917D945C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kwHqBZY8l1byjuLpi488xHncn1g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/ebf6cb-a779-464f-8bee-8f08e0272df8/1/kwHqBZY8l1byjuLpi488xHncn1g.mft
Manifest number: 1890
Signing time: Sun 29 Mar 2026 07:02:00 +0000
Manifest this update: Sun 29 Mar 2026 07:02:00 +0000
Manifest next update: Mon 30 Mar 2026 07:02:00 +0000
Files and hashes: 1: FBhDmdYEI1srtuu7JrFgr66x8ew.roa (hash: R2ovnBFrcn5EnM6GfbKn3aVU8U4YfuAvDOw4VakEfcE=)
2: H0_IomRRpyz9ZuX5Gk79E728dxM.roa (hash: e7ZDp/bE6peOT9CEy08QjhlQAfh2fOeWM0+4hMAUyDw=)
3: aYuTn-9yQTAQTYpNQto8rHBvH-k.roa (hash: nykKhsVthOtSK2vkaElBeNHj+3rLVcnRvVm79PIvOeg=)
4: kwHqBZY8l1byjuLpi488xHncn1g.crl (hash: 2PyPudqTXXRT/vmHn6tF9nmg/GVf5vJnbssO+msd594=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/ebf6cb-a779-464f-8bee-8f08e0272df8/1/kwHqBZY8l1byjuLpi488xHncn1g.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/ebf6cb-a779-464f-8bee-8f08e0272df8/1/kwHqBZY8l1byjuLpi488xHncn1g.mft
rsync://rpki.ripe.net/repository/DEFAULT/kwHqBZY8l1byjuLpi488xHncn1g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:48:86:66:9b:1e:b6:0d:7c:3a:79:17:d9:45:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9301ea05963c9756f28ee2e98b8f3cc479dc9f58
Validity
Not Before: Mar 29 07:02:00 2026 GMT
Not After : Mar 30 07:02:00 2026 GMT
Subject: CN=fd406542c41ec5635539942c1e8bb76f78712c2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:77:52:e5:a5:e6:07:6a:6c:15:6e:e4:a9:99:
0d:28:4f:0a:c1:c6:79:96:02:db:5b:74:0d:09:4c:
a4:28:9b:d9:de:ee:fc:14:1a:e8:04:b0:5b:33:0f:
6d:28:bf:e0:45:8f:24:7b:f8:7d:d9:94:84:86:be:
72:1a:33:90:c6:de:37:76:44:45:f0:fa:f5:02:ed:
a2:9c:71:c6:be:5a:30:69:b6:82:ec:16:73:1d:6d:
7b:a1:b6:05:76:63:d3:80:67:c8:65:17:f7:58:24:
5c:c8:7b:1e:6d:41:fd:4e:b3:67:b5:57:38:9c:1e:
4b:24:22:d0:a9:14:71:df:8a:e0:c7:11:d6:02:5c:
22:00:37:9b:12:64:90:4c:9b:39:b7:3b:2b:4f:25:
af:db:f5:00:a9:fd:d3:85:97:37:39:0d:a3:5a:26:
cc:2d:66:92:e0:3b:56:d8:65:2f:46:e6:5e:70:2d:
47:d7:a8:60:3f:5e:77:64:22:c7:5c:16:1c:d7:0f:
11:5e:f3:8d:71:9c:b5:6d:b6:8f:7a:50:8f:7e:d1:
de:96:76:08:f2:93:1c:9a:fb:5f:9d:04:59:6a:86:
0a:1c:5e:7e:8b:b1:9f:26:8f:a4:5b:74:ab:30:a7:
a6:f5:3b:90:49:da:ca:d8:59:cc:72:e5:07:82:d4:
8f:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:40:65:42:C4:1E:C5:63:55:39:94:2C:1E:8B:B7:6F:78:71:2C:2F
X509v3 Authority Key Identifier:
keyid:93:01:EA:05:96:3C:97:56:F2:8E:E2:E9:8B:8F:3C:C4:79:DC:9F:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kwHqBZY8l1byjuLpi488xHncn1g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/ebf6cb-a779-464f-8bee-8f08e0272df8/1/kwHqBZY8l1byjuLpi488xHncn1g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/ebf6cb-a779-464f-8bee-8f08e0272df8/1/kwHqBZY8l1byjuLpi488xHncn1g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:99:25:e3:fb:c3:34:4b:8d:b2:d6:f1:3f:c2:cd:47:9d:7a:
d5:9a:2d:e0:b6:95:f1:5d:d4:17:6d:35:5d:9b:0d:df:0f:ac:
d0:0b:54:1d:31:ce:ac:90:9a:57:1d:4a:ff:81:32:a6:ba:30:
ec:1e:12:c6:07:5c:a4:1b:82:4c:a9:60:c4:34:cd:cd:0e:ed:
4b:0a:66:91:69:a3:1a:8a:30:90:80:e8:b3:af:b9:3e:21:8b:
41:f7:d0:27:52:f6:5b:a6:03:d0:ad:f6:dc:bb:4f:c8:21:ca:
75:84:66:f0:9f:d5:1e:52:16:ff:33:a4:f6:af:72:30:c4:c4:
43:fa:a5:cf:aa:fd:5c:6c:cc:d5:7d:c5:28:89:a2:1d:94:aa:
92:7e:01:45:b1:e3:e1:c4:50:5a:75:c1:99:9b:7b:b6:bd:17:
a3:dc:7a:42:84:59:8c:9a:cf:c3:0a:27:d4:a0:92:b6:24:73:
4e:c4:28:d6:24:82:09:dd:b0:26:26:f8:7f:44:bc:c0:b5:0b:
fb:55:c7:20:30:5a:26:23:73:09:b9:70:13:4b:26:4a:7a:89:
d6:28:22:cf:3d:37:06:80:a1:48:88:5e:d7:82:75:26:f5:1a:
08:84:2f:89:e1:c8:06:d9:00:93:24:02:e8:c0:cf:00:90:42:
c3:28:d4:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:50:57 2026 by rpki-client