Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/ebf6cb-a779-464f-8bee-8f08e0272df8/1/kwHqBZY8l1byjuLpi488xHncn1g.mft
File: kwHqBZY8l1byjuLpi488xHncn1g.mft (raw, json)
Hash identifier: yRRXlRVFOPXW+MEkt3n0p69osmw12OuF/5zTVtKcVno=
Subject key identifier: 25:17:0F:34:18:B2:E0:21:99:4D:C8:44:B9:90:70:3B:BB:7F:58:BD
Authority key identifier: 93:01:EA:05:96:3C:97:56:F2:8E:E2:E9:8B:8F:3C:C4:79:DC:9F:58
Certificate issuer: /CN=9301ea05963c9756f28ee2e98b8f3cc479dc9f58
Certificate serial: 01A01FE7290BFDD227DA49E3E4AE2E1CB517
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kwHqBZY8l1byjuLpi488xHncn1g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/ebf6cb-a779-464f-8bee-8f08e0272df8/1/kwHqBZY8l1byjuLpi488xHncn1g.mft
Manifest number: 1A11
Signing time: Thu 20 Aug 2026 16:00:38 +0000
Manifest this update: Thu 20 Aug 2026 16:00:38 +0000
Manifest next update: Fri 21 Aug 2026 16:00:38 +0000
Files and hashes: 1: FBhDmdYEI1srtuu7JrFgr66x8ew.roa (hash: R2ovnBFrcn5EnM6GfbKn3aVU8U4YfuAvDOw4VakEfcE=)
2: H0_IomRRpyz9ZuX5Gk79E728dxM.roa (hash: e7ZDp/bE6peOT9CEy08QjhlQAfh2fOeWM0+4hMAUyDw=)
3: aYuTn-9yQTAQTYpNQto8rHBvH-k.roa (hash: nykKhsVthOtSK2vkaElBeNHj+3rLVcnRvVm79PIvOeg=)
4: kwHqBZY8l1byjuLpi488xHncn1g.crl (hash: clpdeLWh350HCMsBKMU5mPYvjBh+MvXPuW2XRKttr3A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/ebf6cb-a779-464f-8bee-8f08e0272df8/1/kwHqBZY8l1byjuLpi488xHncn1g.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/ebf6cb-a779-464f-8bee-8f08e0272df8/1/kwHqBZY8l1byjuLpi488xHncn1g.mft
rsync://rpki.ripe.net/repository/DEFAULT/kwHqBZY8l1byjuLpi488xHncn1g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 21 Aug 2026 16:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:1f:e7:29:0b:fd:d2:27:da:49:e3:e4:ae:2e:1c:b5:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9301ea05963c9756f28ee2e98b8f3cc479dc9f58
Validity
Not Before: Aug 20 16:00:38 2026 GMT
Not After : Aug 21 16:00:38 2026 GMT
Subject: CN=25170f3418b2e021994dc844b990703bbb7f58bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:9c:7d:9b:c2:64:07:21:0c:50:0e:6b:35:9a:
5e:e0:ef:cc:ea:70:b8:ac:1c:f5:ed:16:d7:f5:26:
4b:60:fb:ea:b6:28:d8:ed:b2:f3:23:2b:cf:70:cb:
71:72:6c:7e:ec:ed:62:c0:ca:22:dc:e9:c7:33:09:
c0:81:c7:37:5d:c2:5a:28:ee:d3:d6:d4:02:53:fa:
66:0f:1d:7e:b3:1c:87:b0:40:5a:27:cb:92:1d:c3:
70:a6:cb:0c:02:5b:9f:93:e4:4f:99:5d:6e:7e:79:
6e:73:1f:58:fe:69:b9:33:14:6d:e0:f2:7b:91:ae:
35:69:fc:af:e5:c6:f8:d8:80:fd:b2:40:1f:bb:3c:
3a:e7:eb:90:c1:92:ca:ff:53:cd:fb:03:ce:e6:8e:
13:50:7e:f5:6d:fd:d1:e3:0e:b7:bb:54:3d:84:20:
e8:17:a8:07:4a:bb:89:a1:84:e1:84:10:1e:71:85:
a3:07:68:0e:2d:38:05:15:bb:1a:73:d5:58:2d:14:
ce:74:e5:bf:3c:d9:6c:8b:ed:9b:21:de:ba:7a:ac:
6d:3e:40:82:a2:3a:0a:97:c3:66:25:c9:5b:c8:54:
f6:55:74:13:b9:c4:ce:aa:46:5d:5c:40:5a:eb:f5:
18:71:0a:a0:cf:a1:12:10:bc:8b:8d:1d:fa:6d:91:
32:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:17:0F:34:18:B2:E0:21:99:4D:C8:44:B9:90:70:3B:BB:7F:58:BD
X509v3 Authority Key Identifier:
keyid:93:01:EA:05:96:3C:97:56:F2:8E:E2:E9:8B:8F:3C:C4:79:DC:9F:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kwHqBZY8l1byjuLpi488xHncn1g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/ebf6cb-a779-464f-8bee-8f08e0272df8/1/kwHqBZY8l1byjuLpi488xHncn1g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/ebf6cb-a779-464f-8bee-8f08e0272df8/1/kwHqBZY8l1byjuLpi488xHncn1g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:f6:ee:9a:5d:c5:5d:94:5c:8a:b0:f6:84:3a:05:8f:93:1d:
71:51:94:81:fe:5b:49:d3:11:b3:1b:5b:a1:d0:2a:7c:11:39:
16:af:61:77:ad:b3:44:32:bc:df:a8:6b:2c:d4:6a:ba:79:f1:
63:0e:5b:51:1e:ef:95:21:e2:bf:ee:95:d5:e0:06:8b:80:a6:
b0:df:09:ef:19:a4:31:47:df:36:75:34:48:1b:82:f6:35:33:
35:53:4c:4c:c8:b0:c5:d0:56:fc:ed:0c:f5:e3:c2:b6:73:42:
4e:1b:3c:d1:70:24:66:72:6f:b9:36:c2:15:e8:73:cb:fa:0a:
8d:6c:ec:1e:88:c4:84:0a:23:23:89:42:1f:9d:01:46:be:f5:
97:10:c9:b8:20:22:49:1a:88:e4:c5:83:ac:92:47:6a:7d:86:
f4:e6:e5:93:b4:2c:cb:ce:db:1d:c3:ef:e0:1b:1b:d4:dd:3a:
45:9d:8c:8a:a0:5f:4e:2d:9b:d0:26:25:f8:71:37:ae:17:5f:
ad:2e:c0:f9:af:81:c1:d9:55:e1:47:7c:fe:4a:aa:dd:9c:ff:
71:0b:d0:ca:17:ad:9c:0e:8d:9c:9b:5e:75:63:6e:c9:b8:48:
0e:2c:75:81:98:89:ea:6c:d7:10:9e:48:3e:02:81:1d:4d:96:
24:95:46:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 00:18:55 2026 by rpki-client