Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/37b63e-9c88-42dc-b043-de844964f5ee/1/kwpGPWfktC2GOazfDRVCT4LxmmA.mft
File: kwpGPWfktC2GOazfDRVCT4LxmmA.mft (raw, json)
Hash identifier: Q1rWi0vWtU1oLIxruQUSFg4ZJwZ+qTLLa/GA8jtIM5Q=
Subject key identifier: 25:33:1B:CD:F9:6B:6C:6B:3B:61:D2:70:69:92:53:76:BC:0F:A9:21
Authority key identifier: 93:0A:46:3D:67:E4:B4:2D:86:39:AC:DF:0D:15:42:4F:82:F1:9A:60
Certificate issuer: /CN=930a463d67e4b42d8639acdf0d15424f82f19a60
Certificate serial: 019D37897634F102A20CBC74A586F34226E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kwpGPWfktC2GOazfDRVCT4LxmmA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/37b63e-9c88-42dc-b043-de844964f5ee/1/kwpGPWfktC2GOazfDRVCT4LxmmA.mft
Manifest number: 1823
Signing time: Sun 29 Mar 2026 03:00:48 +0000
Manifest this update: Sun 29 Mar 2026 03:00:48 +0000
Manifest next update: Mon 30 Mar 2026 03:00:48 +0000
Files and hashes: 1: izkOI9oY18uKSV4FRgb611Hp7mU.roa (hash: QUMFHyKky+C4/Hhg2gnIkNny4unJriThfo8M2jzgsDs=)
2: kwpGPWfktC2GOazfDRVCT4LxmmA.crl (hash: R9QYAjgzhGm0AjZHkDFBQaDOY/Cqfm7hgm6wcltYxgA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/37b63e-9c88-42dc-b043-de844964f5ee/1/kwpGPWfktC2GOazfDRVCT4LxmmA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/37b63e-9c88-42dc-b043-de844964f5ee/1/kwpGPWfktC2GOazfDRVCT4LxmmA.mft
rsync://rpki.ripe.net/repository/DEFAULT/kwpGPWfktC2GOazfDRVCT4LxmmA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 03:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:89:76:34:f1:02:a2:0c:bc:74:a5:86:f3:42:26:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=930a463d67e4b42d8639acdf0d15424f82f19a60
Validity
Not Before: Mar 29 03:00:48 2026 GMT
Not After : Mar 30 03:00:48 2026 GMT
Subject: CN=25331bcdf96b6c6b3b61d27069925376bc0fa921
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:9e:85:c7:0a:b0:72:d5:cd:52:3b:bd:5b:5b:
b5:0d:ad:6e:f3:ca:2a:1e:79:88:07:fd:e5:62:20:
34:ed:0f:2b:d2:ad:f9:9c:3e:05:73:25:55:ae:a5:
ca:65:15:f4:e6:ae:8a:cb:a9:16:ce:79:68:34:04:
9d:c8:62:b0:fd:fd:49:b2:a9:c3:31:22:bb:1b:6d:
56:9e:61:7a:a2:4a:cc:9d:be:a2:82:f9:01:70:ec:
bc:b8:33:62:41:37:e6:43:2a:19:e6:de:ba:7e:9c:
50:31:be:1d:16:fd:4c:9b:3b:37:c6:a9:86:11:1c:
f3:fc:60:0b:e0:99:4b:8b:31:4f:49:cc:9f:30:21:
09:52:db:39:41:5c:6c:b5:a6:ed:09:6b:d6:b4:10:
85:93:f7:6f:62:e3:59:4c:2e:c2:47:84:3a:f6:c2:
f8:0b:1c:8d:e5:eb:37:20:2b:76:3c:7b:c6:d9:3e:
d9:b7:fd:35:f9:2b:c0:ae:6f:ab:bc:78:19:7f:8e:
7a:0f:8c:a9:76:ba:a2:b6:3d:64:c4:01:dc:d8:b8:
38:7c:38:9a:3d:d8:d5:fe:dd:6a:8a:44:78:06:3d:
3e:6c:04:4d:88:cf:60:1b:b5:df:38:12:df:1c:fd:
7e:6f:30:e0:48:eb:c4:95:64:b8:2f:13:2c:c9:a9:
04:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:33:1B:CD:F9:6B:6C:6B:3B:61:D2:70:69:92:53:76:BC:0F:A9:21
X509v3 Authority Key Identifier:
keyid:93:0A:46:3D:67:E4:B4:2D:86:39:AC:DF:0D:15:42:4F:82:F1:9A:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kwpGPWfktC2GOazfDRVCT4LxmmA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/37b63e-9c88-42dc-b043-de844964f5ee/1/kwpGPWfktC2GOazfDRVCT4LxmmA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/37b63e-9c88-42dc-b043-de844964f5ee/1/kwpGPWfktC2GOazfDRVCT4LxmmA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:fc:a2:df:90:ff:82:5b:74:69:54:3d:a0:a2:b9:8d:c4:06:
23:84:30:d1:a0:67:3c:22:89:9a:7b:ae:1b:d6:8e:21:2e:98:
18:8f:a9:68:87:fb:ba:59:39:28:13:4a:e9:c0:b5:33:15:4d:
19:8a:97:ea:39:69:4e:62:36:bf:ef:a4:5b:59:78:bf:55:13:
73:69:61:4d:64:da:06:b1:ba:df:5e:b7:29:89:29:56:a2:47:
c7:54:d4:c0:7f:d3:01:f6:d8:a5:c9:96:8c:32:3c:79:1c:55:
fd:57:ef:28:44:9d:dd:70:f2:d1:64:2f:3b:f9:72:38:4f:66:
4b:37:dc:99:01:22:60:4c:bc:f9:7f:13:ea:1d:b9:5a:77:e2:
ee:77:f3:18:c9:78:f9:e6:5b:dd:dd:90:c2:b6:48:17:c6:f4:
f1:7b:99:41:e8:1b:8c:d3:7f:4a:f1:30:7f:d6:a1:32:05:1f:
13:52:59:97:03:c9:ff:4b:fe:6e:00:85:ee:bd:c5:81:ed:78:
70:62:f6:79:91:51:15:c7:95:c7:48:82:7a:74:0c:16:65:13:
3e:be:94:1e:cc:ee:47:5f:13:0a:92:9d:f3:e8:4e:20:c9:48:
e4:a8:42:43:e4:61:ed:7d:10:47:a4:e1:3c:d9:02:ea:86:96:
1e:98:71:79
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03iXY08QKiDLx0pYbzQibhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkzMGE0NjNkNjdlNGI0MmQ4NjM5YWNkZjBkMTU0MjRmODJm
MTlhNjAwHhcNMjYwMzI5MDMwMDQ4WhcNMjYwMzMwMDMwMDQ4WjAzMTEwLwYDVQQD
EygyNTMzMWJjZGY5NmI2YzZiM2I2MWQyNzA2OTkyNTM3NmJjMGZhOTIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9Z6FxwqwctXNUju9W1u1Da1u88oq
HnmIB/3lYiA07Q8r0q35nD4FcyVVrqXKZRX05q6Ky6kWznloNASdyGKw/f1JsqnD
MSK7G21WnmF6okrMnb6igvkBcOy8uDNiQTfmQyoZ5t66fpxQMb4dFv1Mmzs3xqmG
ERzz/GAL4JlLizFPScyfMCEJUts5QVxstabtCWvWtBCFk/dvYuNZTC7CR4Q69sL4
CxyN5es3ICt2PHvG2T7Zt/01+SvArm+rvHgZf456D4ypdrqitj1kxAHc2Lg4fDia
PdjV/t1qikR4Bj0+bARNiM9gG7XfOBLfHP1+bzDgSOvElWS4LxMsyakEdwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCUzG835a2xrO2HScGmSU3a8D6khMB8GA1UdIwQY
MBaAFJMKRj1n5LQthjms3w0VQk+C8ZpgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva3dwR1BXZmt0QzJHT2F6ZkRSVkNUNEx4bW1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS8zN2I2M2UtOWM4OC00MmRjLWIwNDMt
ZGU4NDQ5NjRmNWVlLzEva3dwR1BXZmt0QzJHT2F6ZkRSVkNUNEx4bW1BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNS8zN2I2M2UtOWM4OC00MmRjLWIwNDMtZGU4NDQ5NjRmNWVl
LzEva3dwR1BXZmt0QzJHT2F6ZkRSVkNUNEx4bW1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvvyi35D/
glt0aVQ9oKK5jcQGI4Qw0aBnPCKJmnuuG9aOIS6YGI+paIf7ulk5KBNK6cC1MxVN
GYqX6jlpTmI2v++kW1l4v1UTc2lhTWTaBrG63163KYkpVqJHx1TUwH/TAfbYpcmW
jDI8eRxV/VfvKESd3XDy0WQvO/lyOE9mSzfcmQEiYEy8+X8T6h25Wnfi7nfzGMl4
+eZb3d2QwrZIF8b08XuZQegbjNN/SvEwf9ahMgUfE1JZlwPJ/0v+bgCF7r3Fge14
cGL2eZFRFceVx0iCenQMFmUTPr6UHszuR18TCpKd8+hOIMlI5KhCQ+Rh7X0QR6Th
PNkC6oaWHphxeQ==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:13:37 2026 by rpki-client