Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/35a19e-edab-44c9-916a-16b5ebdd2040/1/KAWFe6e9XcggxhYmxjNJ47f6p9M.mft
File: KAWFe6e9XcggxhYmxjNJ47f6p9M.mft (raw, json)
Hash identifier: PUjxrIY2Z8n90TpVZI9GgPY36nhJ6D0LyA1eWXbFj08=
Subject key identifier: B0:D4:32:6D:0F:E3:BE:25:B7:CE:A9:98:AE:5F:59:0C:DC:72:23:FD
Authority key identifier: 28:05:85:7B:A7:BD:5D:C8:20:C6:16:26:C6:33:49:E3:B7:FA:A7:D3
Certificate issuer: /CN=2805857ba7bd5dc820c61626c63349e3b7faa7d3
Certificate serial: 019D2771CC3F5C7DAF0321DB6F71D2C94D11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KAWFe6e9XcggxhYmxjNJ47f6p9M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/35a19e-edab-44c9-916a-16b5ebdd2040/1/KAWFe6e9XcggxhYmxjNJ47f6p9M.mft
Manifest number: 111A
Signing time: Thu 26 Mar 2026 00:01:02 +0000
Manifest this update: Thu 26 Mar 2026 00:01:02 +0000
Manifest next update: Fri 27 Mar 2026 00:01:02 +0000
Files and hashes: 1: KAWFe6e9XcggxhYmxjNJ47f6p9M.crl (hash: 5wrBvv8B26EyPrbdDDe/rUIOb3PvQkhIGDBZZpsii28=)
2: O1rNzvRwKl6vTU_ykriXJLKMTfE.roa (hash: cMg6CgAQOaopNdwApex1GmDSfWpvN+uvDUY++vWUD+o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/35a19e-edab-44c9-916a-16b5ebdd2040/1/KAWFe6e9XcggxhYmxjNJ47f6p9M.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/35a19e-edab-44c9-916a-16b5ebdd2040/1/KAWFe6e9XcggxhYmxjNJ47f6p9M.mft
rsync://rpki.ripe.net/repository/DEFAULT/KAWFe6e9XcggxhYmxjNJ47f6p9M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:71:cc:3f:5c:7d:af:03:21:db:6f:71:d2:c9:4d:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2805857ba7bd5dc820c61626c63349e3b7faa7d3
Validity
Not Before: Mar 26 00:01:02 2026 GMT
Not After : Mar 27 00:01:02 2026 GMT
Subject: CN=b0d4326d0fe3be25b7cea998ae5f590cdc7223fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:47:65:4e:2d:d5:f6:fc:cc:21:09:8c:5f:6c:
71:04:b6:d2:a1:14:6a:be:cb:5a:f9:4d:6d:33:70:
2e:11:6a:66:fa:63:b5:7f:f7:c6:2d:55:31:de:0e:
41:66:02:f2:27:3e:95:1e:30:ee:0b:c7:13:90:cf:
e6:bb:af:cd:9f:d1:ca:21:fa:bc:74:da:50:1e:12:
f2:3d:5e:5c:f7:cd:c4:6a:44:97:5b:01:cb:87:4f:
5c:74:34:dd:12:52:11:0e:6a:d5:80:c2:8d:2e:88:
03:f8:07:fe:7b:2c:30:47:a4:9a:2f:47:bd:4a:b4:
a7:36:3f:18:63:31:d8:ec:b1:25:ec:c6:14:5a:7d:
ca:3f:68:c0:f1:91:95:90:eb:85:47:cb:7f:3d:91:
41:b3:38:86:d2:b4:3c:12:61:e8:4e:ea:a7:d6:78:
58:7c:e9:b4:08:c8:f2:58:bb:f8:64:99:a2:f1:04:
8d:8a:35:45:83:f3:b2:01:61:d2:bd:9b:1d:03:de:
de:21:0e:12:a2:9a:17:92:51:db:46:68:43:60:7f:
50:66:15:4f:b6:94:f2:d1:13:0e:36:41:ff:35:18:
96:f6:fc:1c:f3:37:be:d1:9e:d8:f4:9b:55:0a:9e:
ad:7b:c9:b6:7f:e4:1e:5e:00:93:c4:fc:ba:af:f4:
b8:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:D4:32:6D:0F:E3:BE:25:B7:CE:A9:98:AE:5F:59:0C:DC:72:23:FD
X509v3 Authority Key Identifier:
keyid:28:05:85:7B:A7:BD:5D:C8:20:C6:16:26:C6:33:49:E3:B7:FA:A7:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KAWFe6e9XcggxhYmxjNJ47f6p9M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/35a19e-edab-44c9-916a-16b5ebdd2040/1/KAWFe6e9XcggxhYmxjNJ47f6p9M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/35a19e-edab-44c9-916a-16b5ebdd2040/1/KAWFe6e9XcggxhYmxjNJ47f6p9M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:de:35:42:4d:b7:e3:eb:2b:6a:b0:7e:4a:c3:78:52:7e:2d:
25:8b:48:c3:ed:b4:ce:f9:31:5f:b8:5a:a1:22:b0:31:b1:06:
f3:64:58:85:bf:e8:cb:bf:da:df:6a:ba:72:2b:ff:32:82:92:
4b:e6:55:c9:38:b1:7a:0d:75:58:19:df:5b:95:33:04:41:93:
0e:2f:07:50:ac:0b:cc:aa:e9:29:95:b3:fa:ff:7b:da:9c:d4:
32:39:b0:39:88:c3:bd:84:f1:16:4e:fa:1e:8e:af:6e:16:76:
ae:b1:49:f8:11:1e:fa:5f:5f:73:95:28:7b:14:ef:a0:e2:2a:
db:01:fd:0e:bf:ec:e9:f8:fe:ee:cf:27:1c:03:4e:ee:81:ac:
63:48:c5:9c:02:f7:52:8f:e7:de:51:4c:3b:27:62:7d:9e:8e:
e4:8f:cd:ff:20:b9:63:e8:f4:24:b9:d2:d7:0a:09:d1:4f:ef:
54:41:24:ba:a3:df:b7:71:01:fd:34:42:09:ed:37:0d:2a:83:
32:9e:62:35:6a:b3:af:23:f2:e1:59:44:cd:d7:de:9b:fc:39:
61:24:bc:4e:a1:89:2f:f0:85:63:66:13:27:9f:e8:ea:f6:e5:
cd:04:be:21:9e:dc:de:fc:b8:3a:88:f6:2a:5d:79:fc:ae:4a:
02:db:7f:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:13:16 2026 by rpki-client