Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/254995-4c39-4f37-9e3b-b2f0541afacf/1/KWMrEVG5T_zt9AqK02quGvshYlc.mft
File: KWMrEVG5T_zt9AqK02quGvshYlc.mft (raw, json)
Hash identifier: CV6NAB+cruRoxw6GxO9PZrmBawY4t2PSHfJ8cQDhdOE=
Subject key identifier: 44:8F:1F:4A:44:60:73:D6:CA:0F:6C:9C:82:4B:11:DC:9E:9E:83:EF
Authority key identifier: 29:63:2B:11:51:B9:4F:FC:ED:F4:0A:8A:D3:6A:AE:1A:FB:21:62:57
Certificate issuer: /CN=29632b1151b94ffcedf40a8ad36aae1afb216257
Certificate serial: 019E20910C082CDEC066F874C5F8C22D1E52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KWMrEVG5T_zt9AqK02quGvshYlc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/254995-4c39-4f37-9e3b-b2f0541afacf/1/KWMrEVG5T_zt9AqK02quGvshYlc.mft
Manifest number: 011F
Signing time: Wed 13 May 2026 09:00:37 +0000
Manifest this update: Wed 13 May 2026 09:00:37 +0000
Manifest next update: Thu 14 May 2026 09:00:37 +0000
Files and hashes: 1: KWMrEVG5T_zt9AqK02quGvshYlc.crl (hash: h8GXDxY4S/eCMC0cb1Im7cCHbQu7g5wI+YIwCmjWaQw=)
2: R04uk59tL-FqUHxfWd8Y5B17azg.roa (hash: 5f566Fl0rgtpysFtLbApUeRuQVHAZSsSCcfDuYmn3cU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/254995-4c39-4f37-9e3b-b2f0541afacf/1/KWMrEVG5T_zt9AqK02quGvshYlc.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/254995-4c39-4f37-9e3b-b2f0541afacf/1/KWMrEVG5T_zt9AqK02quGvshYlc.mft
rsync://rpki.ripe.net/repository/DEFAULT/KWMrEVG5T_zt9AqK02quGvshYlc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:91:0c:08:2c:de:c0:66:f8:74:c5:f8:c2:2d:1e:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29632b1151b94ffcedf40a8ad36aae1afb216257
Validity
Not Before: May 13 09:00:37 2026 GMT
Not After : May 14 09:00:37 2026 GMT
Subject: CN=448f1f4a446073d6ca0f6c9c824b11dc9e9e83ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:9e:00:55:f9:b2:2d:b3:81:8a:dd:56:5b:70:
1b:40:10:a5:d9:b2:b6:a2:51:10:5e:fd:fc:b0:3d:
77:9e:f2:31:24:39:8e:1f:ab:fb:f1:1a:1f:73:62:
a2:0e:dd:6b:14:14:0b:25:7b:7c:f9:3e:e5:57:66:
72:65:c4:f6:ea:e6:ca:bb:67:12:7f:9f:5d:01:fc:
bc:6d:4b:2e:3a:77:e3:28:3c:15:cf:02:96:ad:b7:
3c:6b:06:45:8c:44:5c:17:30:95:64:c0:ff:91:96:
e9:79:1a:be:19:a1:f1:a2:11:ef:a6:b6:25:1d:9e:
79:f4:31:5a:c4:0d:2c:3f:ac:ac:30:20:69:ae:bb:
e2:b7:49:17:8e:5e:14:a6:6f:5e:5c:e4:4e:92:01:
39:d3:ce:38:be:72:c5:23:ad:12:2b:92:23:1a:51:
e4:57:e9:0c:11:6a:b8:54:a5:f0:a1:b6:b5:a6:46:
87:a3:fa:79:ee:00:a8:8c:28:6e:45:12:05:45:1a:
d2:ce:4e:11:a6:5e:4e:f8:4e:65:84:29:c0:b5:68:
b2:c0:1e:04:97:26:ba:b9:d3:6c:30:38:a7:6d:4f:
0c:dd:08:ee:e2:de:7a:fa:a6:54:80:61:d2:e3:a9:
e9:d8:2b:6f:47:80:9e:46:65:83:78:f3:55:77:cf:
cf:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:8F:1F:4A:44:60:73:D6:CA:0F:6C:9C:82:4B:11:DC:9E:9E:83:EF
X509v3 Authority Key Identifier:
keyid:29:63:2B:11:51:B9:4F:FC:ED:F4:0A:8A:D3:6A:AE:1A:FB:21:62:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KWMrEVG5T_zt9AqK02quGvshYlc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/254995-4c39-4f37-9e3b-b2f0541afacf/1/KWMrEVG5T_zt9AqK02quGvshYlc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/254995-4c39-4f37-9e3b-b2f0541afacf/1/KWMrEVG5T_zt9AqK02quGvshYlc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:bb:7e:6d:19:83:6e:e3:89:06:6f:42:8c:20:6a:82:41:91:
ee:9d:6e:fc:f0:a4:18:96:5f:23:ac:75:d3:5d:22:53:72:ee:
e4:c2:50:6f:62:ae:d7:f7:a8:b0:1f:23:2a:3b:4e:cc:06:4b:
51:8c:0f:15:58:13:20:a4:82:57:7d:2c:a5:a1:e9:d4:b0:22:
a4:48:4a:55:c5:7e:9f:20:b7:61:b3:52:83:e5:3a:c3:d6:08:
d1:3a:5c:57:74:4b:26:c5:97:d0:89:a9:cb:a5:42:3d:db:11:
bc:4f:87:26:69:0c:4c:59:35:26:94:bf:bf:28:7f:e5:55:51:
d7:26:5a:67:92:1c:73:66:6b:dd:0e:af:29:2d:e7:05:71:eb:
3f:49:0e:90:8c:f1:a0:9f:a7:18:8e:35:e5:7e:4b:b6:c2:be:
2e:60:84:1d:6e:b7:cf:d1:30:a0:92:91:55:cc:63:77:fc:ab:
f2:88:e9:24:d8:ba:c9:53:8a:b6:b3:86:b3:8e:7b:ff:cc:86:
74:46:7b:f3:30:fb:ec:1c:e4:5e:fb:57:94:a8:82:ea:a2:b2:
22:26:09:80:27:a5:46:76:b7:3a:bd:84:5d:fd:d6:2e:d7:0b:
2b:ff:af:2a:ff:ed:c7:1a:25:ba:a7:69:87:ba:ea:85:b7:ce:
3d:6a:ae:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:23:09 2026 by rpki-client