Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c5/37b63e-9c88-42dc-b043-de844964f5ee/1/kwpGPWfktC2GOazfDRVCT4LxmmA.mft
File: kwpGPWfktC2GOazfDRVCT4LxmmA.mft (raw, json)
Hash identifier: x8BAvgRhuTMt100FRYQ2oG6T8O9HAMtT0/X/HmhcsQU=
Subject key identifier: A1:53:35:3E:15:51:1D:D0:4A:7D:8B:08:E5:C0:A6:F1:47:56:53:9B
Authority key identifier: 93:0A:46:3D:67:E4:B4:2D:86:39:AC:DF:0D:15:42:4F:82:F1:9A:60
Certificate issuer: /CN=930a463d67e4b42d8639acdf0d15424f82f19a60
Certificate serial: 01A0B79BCB64713C22358BDE8039977BAB3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kwpGPWfktC2GOazfDRVCT4LxmmA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/37b63e-9c88-42dc-b043-de844964f5ee/1/kwpGPWfktC2GOazfDRVCT4LxmmA.mft
Manifest number: 19F3
Signing time: Sat 19 Sep 2026 03:00:35 +0000
Manifest this update: Sat 19 Sep 2026 03:00:35 +0000
Manifest next update: Sun 20 Sep 2026 03:00:35 +0000
Files and hashes: 1: izkOI9oY18uKSV4FRgb611Hp7mU.roa (hash: QUMFHyKky+C4/Hhg2gnIkNny4unJriThfo8M2jzgsDs=)
2: kwpGPWfktC2GOazfDRVCT4LxmmA.crl (hash: 9AQj2R99wyIjmQQJhrTbNurT6tzX2Q6PxXfqMplp0mM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/37b63e-9c88-42dc-b043-de844964f5ee/1/kwpGPWfktC2GOazfDRVCT4LxmmA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/37b63e-9c88-42dc-b043-de844964f5ee/1/kwpGPWfktC2GOazfDRVCT4LxmmA.mft
rsync://rpki.ripe.net/repository/DEFAULT/kwpGPWfktC2GOazfDRVCT4LxmmA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Sep 2026 02:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:b7:9b:cb:64:71:3c:22:35:8b:de:80:39:97:7b:ab:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=930a463d67e4b42d8639acdf0d15424f82f19a60
Validity
Not Before: Sep 19 03:00:35 2026 GMT
Not After : Sep 20 03:00:35 2026 GMT
Subject: CN=a153353e15511dd04a7d8b08e5c0a6f14756539b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:a0:20:5f:a7:ff:6b:c0:aa:4e:1b:c3:21:ff:
80:2d:5d:64:fd:fd:f9:aa:f9:05:54:f4:98:4c:65:
19:95:c2:c6:8c:66:03:d3:2b:55:a5:1d:4a:8e:a3:
fa:09:a8:e0:32:9e:60:1e:dc:b4:09:1a:ee:ac:98:
46:5d:da:02:62:7a:c9:74:b6:c7:1b:8b:cf:1d:83:
4f:5d:92:87:a0:f6:44:62:17:d1:28:e5:13:f7:b7:
47:53:a6:1c:fa:b0:b4:bb:df:b9:d7:5d:0f:24:c4:
2e:56:8b:bf:07:57:9d:8e:fc:4d:03:80:40:50:6c:
56:08:77:d4:a7:28:98:8e:95:17:f1:58:85:7b:ac:
c4:95:b9:c4:59:40:1a:f1:95:68:cb:7b:de:05:51:
4a:80:fb:2c:81:c1:6f:e3:6d:ec:b5:83:eb:c8:5f:
c9:5a:dd:91:18:bf:9c:c8:d2:dd:c2:7f:ae:80:5b:
cf:6c:76:08:60:b3:06:52:5b:77:6c:59:c6:20:6f:
f4:9a:12:64:a9:cc:53:02:63:a5:5b:35:a6:05:17:
80:f2:7a:73:6c:15:f1:ca:a1:db:59:d0:40:fb:c3:
f1:81:e3:09:22:73:c5:34:11:70:f4:4c:99:3b:bf:
f0:ce:37:2c:2f:a7:2d:10:64:d6:33:da:1e:e5:c3:
6f:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:53:35:3E:15:51:1D:D0:4A:7D:8B:08:E5:C0:A6:F1:47:56:53:9B
X509v3 Authority Key Identifier:
keyid:93:0A:46:3D:67:E4:B4:2D:86:39:AC:DF:0D:15:42:4F:82:F1:9A:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kwpGPWfktC2GOazfDRVCT4LxmmA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/37b63e-9c88-42dc-b043-de844964f5ee/1/kwpGPWfktC2GOazfDRVCT4LxmmA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/37b63e-9c88-42dc-b043-de844964f5ee/1/kwpGPWfktC2GOazfDRVCT4LxmmA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:da:37:13:51:f5:d0:40:5b:8f:99:6a:07:ce:de:cc:9f:2c:
6c:c5:54:95:34:a1:80:05:7f:4c:74:3e:df:e4:be:60:bc:9a:
77:b8:2d:43:e6:b0:e3:19:ee:ea:24:e9:d8:c0:2f:99:62:7b:
ef:b0:c2:7b:1d:92:51:01:92:94:1a:23:cc:24:36:70:52:6d:
75:c4:4f:09:59:58:27:50:8c:88:8b:1b:88:a4:cc:6e:a2:81:
45:b5:f9:f2:f8:9f:d1:da:b9:09:04:a2:e1:81:99:fd:4d:7b:
85:e2:b2:f2:fc:33:a1:68:98:0f:ed:7e:4c:4d:5b:37:cd:76:
5a:67:a8:b2:e4:b0:e0:47:e5:bd:1c:b2:e2:ea:ad:8f:bb:c8:
6c:8e:d2:7c:ff:d6:b3:73:87:b5:79:d3:72:b7:a2:39:ac:21:
d1:bd:c8:90:42:d7:af:06:08:92:42:79:5f:de:e9:de:39:4f:
09:d6:c5:e3:d6:b2:7c:60:f5:f4:b6:e6:06:57:32:3a:e9:f5:
87:d2:68:75:0b:d5:70:4a:ba:ca:8d:d7:b5:39:4b:c4:79:7e:
4f:72:ae:e0:60:25:c3:a4:5d:1e:ab:04:50:6d:fa:2e:01:fa:
fd:b5:9d:b0:79:ea:eb:ba:e5:1c:25:de:42:88:a0:91:73:ea:
7e:e3:44:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 12:39:54 2026 by rpki-client