Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/545258-f8a9-4ceb-b01b-c8df84e7ae29/1/KWJHhUnYzCZMLMV9znGQXRdvuIo.mft
File: KWJHhUnYzCZMLMV9znGQXRdvuIo.mft (raw, json)
Hash identifier: OZy80ZwcNtNBJB6NzVhcIdIS5i3Diaz+XblvnXV9n8g=
Subject key identifier: 5A:B9:8D:DD:4C:8E:74:B6:C3:A0:5F:B9:1C:17:33:F1:98:17:1B:D9
Authority key identifier: 29:62:47:85:49:D8:CC:26:4C:2C:C5:7D:CE:71:90:5D:17:6F:B8:8A
Certificate issuer: /CN=2962478549d8cc264c2cc57dce71905d176fb88a
Certificate serial: 019E3117A12405E1317E9BCCB9472D702A5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KWJHhUnYzCZMLMV9znGQXRdvuIo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/545258-f8a9-4ceb-b01b-c8df84e7ae29/1/KWJHhUnYzCZMLMV9znGQXRdvuIo.mft
Manifest number: 18A1
Signing time: Sat 16 May 2026 14:01:32 +0000
Manifest this update: Sat 16 May 2026 14:01:32 +0000
Manifest next update: Sun 17 May 2026 14:01:32 +0000
Files and hashes: 1: DcG15XyhdtPXOoAizwXiwS-vgWk.roa (hash: 03f0uMllqGm3yVnRgDCB+1RlKyMTqkNgfPJ+f2YUXH4=)
2: KWJHhUnYzCZMLMV9znGQXRdvuIo.crl (hash: Y/KouRnP0w650/MqLPHAnASY9+EsBOD+wuy7SSgX62c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/545258-f8a9-4ceb-b01b-c8df84e7ae29/1/KWJHhUnYzCZMLMV9znGQXRdvuIo.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/545258-f8a9-4ceb-b01b-c8df84e7ae29/1/KWJHhUnYzCZMLMV9znGQXRdvuIo.mft
rsync://rpki.ripe.net/repository/DEFAULT/KWJHhUnYzCZMLMV9znGQXRdvuIo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 12:40:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:31:17:a1:24:05:e1:31:7e:9b:cc:b9:47:2d:70:2a:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2962478549d8cc264c2cc57dce71905d176fb88a
Validity
Not Before: May 16 14:01:32 2026 GMT
Not After : May 17 14:01:32 2026 GMT
Subject: CN=5ab98ddd4c8e74b6c3a05fb91c1733f198171bd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:6c:9b:b3:cf:23:3f:aa:b4:c5:d4:d9:a9:77:
69:55:dd:fa:6a:0a:b1:94:3b:ae:16:60:96:91:4e:
b4:e5:5a:3e:dc:f1:2c:f9:4e:f2:b4:7a:19:41:e0:
64:42:ad:c1:00:31:20:fb:f4:62:87:9c:c1:8c:b7:
26:b2:31:b2:58:55:2e:18:69:ab:ce:cd:51:87:84:
b3:e2:fa:fc:eb:2b:0f:fd:a7:17:c3:c6:44:47:66:
26:01:fd:72:8b:96:93:5e:f3:5f:00:43:3d:db:58:
fd:5e:b6:42:49:c8:ba:8b:40:d9:1d:8a:26:c4:cf:
2c:55:02:d2:35:87:57:29:44:dd:09:13:46:36:b5:
f2:9a:52:bc:a3:df:91:f2:b3:97:bf:77:70:4b:21:
97:a6:15:66:6f:cf:22:c2:b0:d8:5a:9b:47:f3:f3:
df:07:73:80:9d:10:ed:78:e6:ff:84:82:70:a3:e6:
0f:48:db:b6:24:53:44:ef:bf:37:88:0d:5e:78:2c:
db:b0:f0:be:a3:3b:0d:05:19:9b:6e:03:d3:c4:e7:
41:10:99:a7:c4:2f:9a:45:92:0b:d3:86:14:b2:8d:
24:02:43:a9:9c:cd:16:f6:09:c7:62:67:83:7f:c9:
4d:ac:97:ff:bb:77:93:40:cb:ae:24:40:0f:84:41:
b7:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:B9:8D:DD:4C:8E:74:B6:C3:A0:5F:B9:1C:17:33:F1:98:17:1B:D9
X509v3 Authority Key Identifier:
keyid:29:62:47:85:49:D8:CC:26:4C:2C:C5:7D:CE:71:90:5D:17:6F:B8:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KWJHhUnYzCZMLMV9znGQXRdvuIo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/545258-f8a9-4ceb-b01b-c8df84e7ae29/1/KWJHhUnYzCZMLMV9znGQXRdvuIo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/545258-f8a9-4ceb-b01b-c8df84e7ae29/1/KWJHhUnYzCZMLMV9znGQXRdvuIo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:44:76:44:03:04:ef:a4:e3:47:32:07:95:7c:f9:7b:95:f0:
b1:ff:e6:1d:1a:ee:c8:f9:14:2d:e1:94:91:b6:e8:81:51:e4:
ca:ea:a5:b2:5d:64:08:a8:4c:6b:48:db:b6:f0:1e:18:e0:3f:
6d:a2:3a:84:82:cb:10:00:90:41:1a:d1:89:1e:55:c6:ca:6d:
68:a6:75:ab:d3:23:ec:a2:49:d9:57:c0:0e:2b:10:d4:f0:9e:
32:1e:e4:2c:47:2b:f1:e4:79:fb:35:3c:fe:c8:8d:7a:f7:cf:
01:6b:e1:d0:b2:8b:4b:8e:1a:42:23:de:53:da:93:ec:22:37:
9d:38:64:ba:e6:54:ed:10:c5:7f:15:d7:f9:a0:fc:35:a4:48:
72:50:15:12:9b:e5:e3:cc:d0:6e:59:cd:a7:c7:9a:34:a1:53:
bd:96:d8:2b:10:5b:43:9e:5b:7f:4f:96:14:06:85:c6:ad:73:
d8:e4:09:43:61:bb:1c:c4:ed:b7:52:af:aa:63:35:46:e8:be:
1d:e6:60:4e:19:14:f8:61:52:96:87:1f:aa:5a:62:3e:9b:4b:
4a:7b:96:dd:9b:d7:82:51:09:b4:e9:8e:11:88:41:7a:e4:fa:
6d:b6:27:cc:cd:29:ed:d6:05:29:bb:36:cd:44:75:e9:24:d4:
75:0e:c7:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 21:12:49 2026 by rpki-client