Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/f516f6-d5a0-4086-94f2-abd4c5c9b374/1/kuwQUNOpMgq58M4rNloJfuQTSyQ.mft
File: kuwQUNOpMgq58M4rNloJfuQTSyQ.mft (raw, json)
Hash identifier: CosuasiwdgQYVLMtHoX/HIP1P8bCWIn8vD9RKh1ctwI=
Subject key identifier: 82:C9:A1:56:17:21:B9:73:B0:C7:53:20:3D:97:42:16:46:61:B2:F2
Authority key identifier: 92:EC:10:50:D3:A9:32:0A:B9:F0:CE:2B:36:5A:09:7E:E4:13:4B:24
Certificate issuer: /CN=92ec1050d3a9320ab9f0ce2b365a097ee4134b24
Certificate serial: 019D2704A8A9ED485A3B445286AA3C591DEE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kuwQUNOpMgq58M4rNloJfuQTSyQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/f516f6-d5a0-4086-94f2-abd4c5c9b374/1/kuwQUNOpMgq58M4rNloJfuQTSyQ.mft
Manifest number: 15BD
Signing time: Wed 25 Mar 2026 22:01:49 +0000
Manifest this update: Wed 25 Mar 2026 22:01:49 +0000
Manifest next update: Thu 26 Mar 2026 22:01:49 +0000
Files and hashes: 1: kuwQUNOpMgq58M4rNloJfuQTSyQ.crl (hash: fkSPh45RB8WdYkeASWr2Rt+QMp2IT52V+MuN3qhG3Eg=)
2: pS_aC8FbZiw_mmNWrXEQK1MHFNw.roa (hash: 0RzrxLXwiw0ILr05gey7vS2L1ChVUD2SMX+WoCfTDCU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/f516f6-d5a0-4086-94f2-abd4c5c9b374/1/kuwQUNOpMgq58M4rNloJfuQTSyQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/f516f6-d5a0-4086-94f2-abd4c5c9b374/1/kuwQUNOpMgq58M4rNloJfuQTSyQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/kuwQUNOpMgq58M4rNloJfuQTSyQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:a8:a9:ed:48:5a:3b:44:52:86:aa:3c:59:1d:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92ec1050d3a9320ab9f0ce2b365a097ee4134b24
Validity
Not Before: Mar 25 22:01:49 2026 GMT
Not After : Mar 26 22:01:49 2026 GMT
Subject: CN=82c9a1561721b973b0c753203d9742164661b2f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:cb:ca:c2:34:35:6d:cd:1f:cf:9b:07:de:96:
1a:59:67:be:f7:cb:6e:13:b3:63:a9:68:f0:b5:f0:
6a:19:ef:64:25:e0:66:93:9c:0d:f9:d1:e1:14:e4:
c7:d9:26:f4:8a:2d:f4:5e:ce:d3:2b:de:4e:df:69:
8e:11:1b:f9:8c:1d:a4:67:54:80:00:ac:5b:fd:da:
e3:3a:04:27:c0:05:22:b6:ec:01:61:4e:fd:84:51:
a4:8b:b2:65:b0:83:0b:7f:57:4f:b6:72:f1:86:2d:
2c:70:f4:f3:17:e7:16:15:6f:ac:72:c7:f8:d2:92:
fc:ff:ea:6e:26:62:6d:6b:a6:2f:8c:d3:48:47:1c:
fa:43:d4:69:34:a8:36:cd:c9:61:75:96:77:83:71:
c9:b2:7b:ff:81:c2:f9:8e:b2:3f:94:aa:49:c4:c2:
22:06:8d:ae:bd:28:12:cc:2f:e8:98:99:40:06:1f:
ca:c7:3b:a6:1d:46:88:8d:5b:d9:c5:9e:49:71:ac:
98:6d:a9:c9:14:d7:3a:29:be:e9:13:12:19:39:17:
51:08:8a:41:ed:d8:f3:cb:90:85:22:e5:e9:2e:48:
f3:1a:d5:3b:7d:e2:ea:dc:3f:f0:3a:10:74:8f:81:
8c:55:ef:7e:2d:1f:86:31:fb:1b:0d:19:fe:44:5e:
08:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:C9:A1:56:17:21:B9:73:B0:C7:53:20:3D:97:42:16:46:61:B2:F2
X509v3 Authority Key Identifier:
keyid:92:EC:10:50:D3:A9:32:0A:B9:F0:CE:2B:36:5A:09:7E:E4:13:4B:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kuwQUNOpMgq58M4rNloJfuQTSyQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/f516f6-d5a0-4086-94f2-abd4c5c9b374/1/kuwQUNOpMgq58M4rNloJfuQTSyQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/f516f6-d5a0-4086-94f2-abd4c5c9b374/1/kuwQUNOpMgq58M4rNloJfuQTSyQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:0d:ff:45:7f:d7:a0:ba:0e:c2:bc:99:f7:bc:13:48:82:80:
fa:ea:fa:dc:e3:89:fd:07:bd:5e:f1:84:8a:5c:4d:cb:b3:0a:
94:c6:a1:5d:f7:79:e8:42:c6:26:8f:0e:c8:e6:73:ca:c6:7b:
84:58:fa:5e:d0:31:e1:ef:02:18:43:5d:ad:82:dd:89:61:b7:
08:4d:6f:a6:35:f2:10:3d:1d:34:82:b1:2a:70:00:98:9d:3f:
c5:ee:a9:95:25:0c:18:9f:a8:12:d6:1f:cb:36:43:bf:d8:3d:
b8:a6:60:f2:0e:e6:48:b7:77:9f:ae:d6:ef:78:ef:b3:f8:1d:
9a:a2:39:07:1a:c2:57:99:4c:73:ff:74:14:58:d4:ba:10:dc:
e4:98:dc:01:9d:e2:6a:36:99:4b:e8:f5:21:af:20:7b:ba:ea:
30:cc:32:32:c2:02:d4:6f:8d:b3:11:bc:47:57:a6:36:f5:6b:
9c:ec:e7:40:9d:ca:61:96:04:04:1d:37:2f:9d:88:97:32:b2:
10:8e:09:cb:78:eb:c9:2b:62:3e:a7:1f:6c:2f:bd:fe:c9:4e:
f8:ba:4f:26:8b:05:9d:3e:c8:c3:20:9b:fb:d8:2d:8b:ad:61:
42:a2:a9:a7:c6:85:c7:1a:cb:8a:cf:a7:a7:16:bc:e6:8e:c2:
fe:d4:32:39
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nBKip7UhaO0RShqo8WR3uMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyZWMxMDUwZDNhOTMyMGFiOWYwY2UyYjM2NWEwOTdlZTQx
MzRiMjQwHhcNMjYwMzI1MjIwMTQ5WhcNMjYwMzI2MjIwMTQ5WjAzMTEwLwYDVQQD
Eyg4MmM5YTE1NjE3MjFiOTczYjBjNzUzMjAzZDk3NDIxNjQ2NjFiMmYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAusvKwjQ1bc0fz5sH3pYaWWe+98tu
E7NjqWjwtfBqGe9kJeBmk5wN+dHhFOTH2Sb0ii30Xs7TK95O32mOERv5jB2kZ1SA
AKxb/drjOgQnwAUituwBYU79hFGki7JlsIMLf1dPtnLxhi0scPTzF+cWFW+scsf4
0pL8/+puJmJta6YvjNNIRxz6Q9RpNKg2zclhdZZ3g3HJsnv/gcL5jrI/lKpJxMIi
Bo2uvSgSzC/omJlABh/KxzumHUaIjVvZxZ5JcayYbanJFNc6Kb7pExIZORdRCIpB
7djzy5CFIuXpLkjzGtU7feLq3D/wOhB0j4GMVe9+LR+GMfsbDRn+RF4IFwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFILJoVYXIblzsMdTID2XQhZGYbLyMB8GA1UdIwQY
MBaAFJLsEFDTqTIKufDOKzZaCX7kE0skMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva3V3UVVOT3BNZ3E1OE00ck5sb0pmdVFUU3lRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC9mNTE2ZjYtZDVhMC00MDg2LTk0ZjIt
YWJkNGM1YzliMzc0LzEva3V3UVVOT3BNZ3E1OE00ck5sb0pmdVFUU3lRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC9mNTE2ZjYtZDVhMC00MDg2LTk0ZjItYWJkNGM1YzliMzc0
LzEva3V3UVVOT3BNZ3E1OE00ck5sb0pmdVFUU3lRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQw3/RX/X
oLoOwryZ97wTSIKA+ur63OOJ/Qe9XvGEilxNy7MKlMahXfd56ELGJo8OyOZzysZ7
hFj6XtAx4e8CGENdrYLdiWG3CE1vpjXyED0dNIKxKnAAmJ0/xe6plSUMGJ+oEtYf
yzZDv9g9uKZg8g7mSLd3n67W73jvs/gdmqI5BxrCV5lMc/90FFjUuhDc5JjcAZ3i
ajaZS+j1Ia8ge7rqMMwyMsIC1G+NsxG8R1emNvVrnOznQJ3KYZYEBB03L52IlzKy
EI4Jy3jryStiPqcfbC+9/slO+LpPJosFnT7IwyCb+9gti61hQqKpp8aFxxrLis+n
pxa85o7C/tQyOQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:45:00 2026 by rpki-client