Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c4/545258-f8a9-4ceb-b01b-c8df84e7ae29/1/KWJHhUnYzCZMLMV9znGQXRdvuIo.mft
File: KWJHhUnYzCZMLMV9znGQXRdvuIo.mft (raw, json)
Hash identifier: FUIClJV+aaYwYgFg0xEnGvQpVDiXquY71h4Gv/219lA=
Subject key identifier: 71:3C:34:26:0D:73:29:B1:1D:0D:89:8D:FF:E1:AE:F7:71:B1:FD:FB
Authority key identifier: 29:62:47:85:49:D8:CC:26:4C:2C:C5:7D:CE:71:90:5D:17:6F:B8:8A
Certificate issuer: /CN=2962478549d8cc264c2cc57dce71905d176fb88a
Certificate serial: 01A186ACFDFC12DFA2627D2838FCF7A62B8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KWJHhUnYzCZMLMV9znGQXRdvuIo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/545258-f8a9-4ceb-b01b-c8df84e7ae29/1/KWJHhUnYzCZMLMV9znGQXRdvuIo.mft
Manifest number: 1A5B
Signing time: Thu 29 Oct 2026 08:00:46 +0000
Manifest this update: Thu 29 Oct 2026 08:00:46 +0000
Manifest next update: Fri 30 Oct 2026 08:00:46 +0000
Files and hashes: 1: DcG15XyhdtPXOoAizwXiwS-vgWk.roa (hash: 03f0uMllqGm3yVnRgDCB+1RlKyMTqkNgfPJ+f2YUXH4=)
2: KWJHhUnYzCZMLMV9znGQXRdvuIo.crl (hash: istF0xG4ACN1HJt7oMvPLhxzA1iYJvEOEYOr3h2E9d4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/545258-f8a9-4ceb-b01b-c8df84e7ae29/1/KWJHhUnYzCZMLMV9znGQXRdvuIo.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/545258-f8a9-4ceb-b01b-c8df84e7ae29/1/KWJHhUnYzCZMLMV9znGQXRdvuIo.mft
rsync://rpki.ripe.net/repository/DEFAULT/KWJHhUnYzCZMLMV9znGQXRdvuIo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 30 Oct 2026 08:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:86:ac:fd:fc:12:df:a2:62:7d:28:38:fc:f7:a6:2b:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2962478549d8cc264c2cc57dce71905d176fb88a
Validity
Not Before: Oct 29 08:00:46 2026 GMT
Not After : Oct 30 08:00:46 2026 GMT
Subject: CN=713c34260d7329b11d0d898dffe1aef771b1fdfb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:7f:bf:bd:ab:a3:cc:1d:4e:e5:22:39:30:cf:
84:d2:5f:11:04:82:47:29:fd:92:0a:48:8f:8a:ee:
1a:25:4e:6c:6c:c5:24:f3:97:35:12:44:2a:46:b2:
a8:81:39:1e:a1:7e:f1:60:53:76:b8:09:8f:a3:e7:
01:c3:35:e8:11:de:64:07:9f:18:4d:4b:0e:af:12:
96:98:e8:2b:ef:61:0b:a0:d0:1f:e1:85:ea:58:f2:
d0:08:08:33:c6:4a:05:95:40:a3:eb:d0:41:78:85:
7e:26:17:3d:71:9d:4f:28:d7:98:66:7f:3a:cb:be:
a9:fa:3a:6b:47:1c:5e:1e:28:e3:ed:70:f2:23:68:
92:e6:26:30:ff:a7:19:81:99:c4:30:c4:07:af:10:
39:c6:d0:88:5b:50:62:43:79:bb:58:2f:8e:bf:32:
10:f9:ce:53:a3:33:45:9e:42:ff:f2:12:d5:3f:03:
fb:33:0b:6e:6b:24:00:ed:f6:18:af:88:3e:4a:b0:
40:26:d0:a1:22:20:20:41:4c:e0:5e:dc:4a:98:ec:
99:77:6b:e1:62:e3:b8:eb:1c:bb:39:3d:79:ee:3b:
48:4e:c9:60:21:16:e5:3c:ea:74:de:ac:b3:41:de:
92:25:74:a8:f4:cb:52:a7:94:fc:39:d2:8d:1c:b2:
18:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:3C:34:26:0D:73:29:B1:1D:0D:89:8D:FF:E1:AE:F7:71:B1:FD:FB
X509v3 Authority Key Identifier:
keyid:29:62:47:85:49:D8:CC:26:4C:2C:C5:7D:CE:71:90:5D:17:6F:B8:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KWJHhUnYzCZMLMV9znGQXRdvuIo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/545258-f8a9-4ceb-b01b-c8df84e7ae29/1/KWJHhUnYzCZMLMV9znGQXRdvuIo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/545258-f8a9-4ceb-b01b-c8df84e7ae29/1/KWJHhUnYzCZMLMV9znGQXRdvuIo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c6:89:aa:e1:c4:c4:b8:2c:c1:14:8a:11:08:77:13:8b:95:11:
89:45:bb:7a:04:5f:f1:af:b6:29:39:1e:b0:84:51:4c:4f:e8:
fd:cb:9a:f3:d8:08:46:09:86:11:ca:64:d5:ad:23:40:81:f0:
c9:c0:aa:06:06:e9:28:fa:02:cf:1a:b0:31:f8:12:c9:6e:14:
fc:ef:86:9f:22:2a:03:d8:78:63:3d:7f:5d:84:d9:53:f1:02:
5f:b9:a5:70:78:c1:37:c1:3d:a3:f1:78:5f:b0:3b:58:ec:39:
e7:98:1e:41:ca:00:b2:a7:97:e8:a2:04:16:ad:ac:32:d2:a4:
b9:83:ed:b4:da:7a:be:73:c6:d5:ce:7d:41:04:a4:98:bc:08:
71:e5:37:2a:c9:1a:a8:c9:9a:0f:42:0f:e9:00:5c:93:71:b2:
77:ab:b3:2e:fd:85:aa:88:7f:39:3d:17:53:da:ff:f1:71:d8:
11:a6:16:d2:47:53:7c:67:16:fd:14:5b:02:36:20:79:d6:d1:
3d:f0:48:6b:21:bd:92:37:e5:2b:80:b5:57:fc:79:71:59:5b:
81:73:9d:43:9f:78:2c:a7:92:f6:12:30:36:d3:2e:e0:73:cf:
bf:98:88:36:0b:26:0f:f7:e5:b1:18:3c:91:e7:7c:9a:08:49:
0e:90:c2:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 15:58:18 2026 by rpki-client