Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/545258-f8a9-4ceb-b01b-c8df84e7ae29/1/KWJHhUnYzCZMLMV9znGQXRdvuIo.mft
File: KWJHhUnYzCZMLMV9znGQXRdvuIo.mft (raw, json)
Hash identifier: KPQP61ic5W3Wy0eeZ8+QHB42HW3h/gHVMFVehz7SVEw=
Subject key identifier: 5A:D9:92:95:CD:6B:20:B8:17:D1:63:EF:F6:6F:1F:24:13:FB:D0:8D
Authority key identifier: 29:62:47:85:49:D8:CC:26:4C:2C:C5:7D:CE:71:90:5D:17:6F:B8:8A
Certificate issuer: /CN=2962478549d8cc264c2cc57dce71905d176fb88a
Certificate serial: 019D37F75C0DEAD91D993CBC6358D738E9BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KWJHhUnYzCZMLMV9znGQXRdvuIo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/545258-f8a9-4ceb-b01b-c8df84e7ae29/1/KWJHhUnYzCZMLMV9znGQXRdvuIo.mft
Manifest number: 1820
Signing time: Sun 29 Mar 2026 05:00:50 +0000
Manifest this update: Sun 29 Mar 2026 05:00:50 +0000
Manifest next update: Mon 30 Mar 2026 05:00:50 +0000
Files and hashes: 1: DcG15XyhdtPXOoAizwXiwS-vgWk.roa (hash: 03f0uMllqGm3yVnRgDCB+1RlKyMTqkNgfPJ+f2YUXH4=)
2: KWJHhUnYzCZMLMV9znGQXRdvuIo.crl (hash: HSNc12Q1TNmcoWchn/YgHT9v6GTsyDDtFjbws0xblmo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/545258-f8a9-4ceb-b01b-c8df84e7ae29/1/KWJHhUnYzCZMLMV9znGQXRdvuIo.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/545258-f8a9-4ceb-b01b-c8df84e7ae29/1/KWJHhUnYzCZMLMV9znGQXRdvuIo.mft
rsync://rpki.ripe.net/repository/DEFAULT/KWJHhUnYzCZMLMV9znGQXRdvuIo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f7:5c:0d:ea:d9:1d:99:3c:bc:63:58:d7:38:e9:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2962478549d8cc264c2cc57dce71905d176fb88a
Validity
Not Before: Mar 29 05:00:50 2026 GMT
Not After : Mar 30 05:00:50 2026 GMT
Subject: CN=5ad99295cd6b20b817d163eff66f1f2413fbd08d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:f0:64:93:04:84:6e:b3:fd:15:32:17:91:16:
2f:41:8e:17:06:cd:b0:aa:12:62:de:4e:21:ba:aa:
7d:68:55:67:37:06:2a:21:e9:52:c6:cc:25:61:39:
19:95:7b:c6:0a:d0:ab:8e:5d:0a:b3:02:41:4d:f4:
d3:9c:df:b4:a9:e9:b7:62:a1:9a:a2:59:89:70:fa:
11:93:74:a5:51:a2:37:f7:f4:4e:70:43:cc:a6:79:
76:10:11:21:0e:a5:42:e7:ba:49:34:88:55:3e:5a:
e7:31:29:d4:18:e7:a0:3a:74:69:b5:66:7c:98:f6:
d5:e8:ad:0d:ab:cd:ed:3a:fa:22:62:a3:1d:47:73:
93:4e:f6:c2:fe:31:2e:6b:8c:32:93:84:fc:50:4b:
5d:5c:af:5f:5f:34:a4:22:47:ae:e3:d1:20:93:2d:
a7:9d:47:17:97:f2:be:e4:cc:9a:8a:a6:96:dd:37:
2f:55:63:1e:17:aa:33:71:67:3a:b3:22:58:a3:2d:
ce:29:03:6f:90:28:ac:07:a1:a8:b4:e2:a5:a5:02:
26:f8:01:0a:b2:5e:ba:c8:14:ba:fe:64:53:9b:b8:
22:6e:d9:0b:71:75:88:e0:19:3e:e2:e3:79:f9:e5:
40:9d:f7:95:5f:e7:bb:40:ce:86:dd:89:e5:28:ed:
ef:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:D9:92:95:CD:6B:20:B8:17:D1:63:EF:F6:6F:1F:24:13:FB:D0:8D
X509v3 Authority Key Identifier:
keyid:29:62:47:85:49:D8:CC:26:4C:2C:C5:7D:CE:71:90:5D:17:6F:B8:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KWJHhUnYzCZMLMV9znGQXRdvuIo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/545258-f8a9-4ceb-b01b-c8df84e7ae29/1/KWJHhUnYzCZMLMV9znGQXRdvuIo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/545258-f8a9-4ceb-b01b-c8df84e7ae29/1/KWJHhUnYzCZMLMV9znGQXRdvuIo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:01:ec:fa:a3:f4:34:92:be:57:c4:56:bb:30:87:f5:b8:99:
37:f2:3a:17:31:78:c4:65:bc:60:47:b6:e9:43:69:09:50:63:
c6:74:2d:5a:4a:89:4b:49:b0:0b:39:2c:b6:26:8d:cf:8f:b3:
1d:dc:1d:d0:9d:3c:60:75:ec:8c:25:4a:5f:da:50:cb:8d:59:
b9:39:0d:41:58:0c:3e:fa:c7:22:80:46:f7:5e:85:e0:72:ff:
bc:4f:77:4c:3a:d1:c5:32:12:ef:76:51:c6:1e:69:e3:f5:f3:
44:6e:54:82:79:3c:e1:bd:b2:55:a7:54:d2:7c:98:ca:3a:1c:
93:d4:69:b8:cf:47:e1:d9:91:d9:fc:4c:8f:a4:c2:71:fb:c6:
7a:a9:66:9b:f8:6e:32:fb:2d:7e:b2:cf:4d:72:cf:db:e1:df:
01:a0:03:fe:37:d7:4d:b2:6a:06:34:66:1a:6e:7e:23:32:e7:
27:af:c3:dd:e6:c1:a1:b9:fb:0b:4d:3c:9a:d3:da:48:3a:75:
7d:31:28:a1:f1:83:4c:40:ee:f8:e8:55:77:80:e7:04:e6:1f:
04:c5:ad:0d:d2:b6:7a:0e:1e:07:e7:af:5c:a0:e4:64:a9:40:
6b:c6:1c:d1:23:f2:f8:34:f1:00:5b:96:3a:e0:0a:07:20:1d:
ab:5e:1c:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:31:53 2026 by rpki-client