Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/254995-4c39-4f37-9e3b-b2f0541afacf/1/KWMrEVG5T_zt9AqK02quGvshYlc.mft
File: KWMrEVG5T_zt9AqK02quGvshYlc.mft (raw, json)
Hash identifier: /IIO4uWVQAW3ugLDg5GhupAiMD+Mp1GETlDe0hGdKa4=
Subject key identifier: 4D:B4:0C:52:9F:D2:5E:E5:0F:0C:C0:B0:37:E0:46:89:16:CB:8F:63
Authority key identifier: 29:63:2B:11:51:B9:4F:FC:ED:F4:0A:8A:D3:6A:AE:1A:FB:21:62:57
Certificate issuer: /CN=29632b1151b94ffcedf40a8ad36aae1afb216257
Certificate serial: 019F954947D748B7CF2E063F754FDA0BACE6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KWMrEVG5T_zt9AqK02quGvshYlc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/254995-4c39-4f37-9e3b-b2f0541afacf/1/KWMrEVG5T_zt9AqK02quGvshYlc.mft
Manifest number: 01E0
Signing time: Fri 24 Jul 2026 18:00:35 +0000
Manifest this update: Fri 24 Jul 2026 18:00:35 +0000
Manifest next update: Sat 25 Jul 2026 18:00:35 +0000
Files and hashes: 1: KWMrEVG5T_zt9AqK02quGvshYlc.crl (hash: UpxNR+Pm09u4rFczsWaqJvRpYityj2uO5Gec+8e1rDM=)
2: R04uk59tL-FqUHxfWd8Y5B17azg.roa (hash: 5f566Fl0rgtpysFtLbApUeRuQVHAZSsSCcfDuYmn3cU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/254995-4c39-4f37-9e3b-b2f0541afacf/1/KWMrEVG5T_zt9AqK02quGvshYlc.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/254995-4c39-4f37-9e3b-b2f0541afacf/1/KWMrEVG5T_zt9AqK02quGvshYlc.mft
rsync://rpki.ripe.net/repository/DEFAULT/KWMrEVG5T_zt9AqK02quGvshYlc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:95:49:47:d7:48:b7:cf:2e:06:3f:75:4f:da:0b:ac:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29632b1151b94ffcedf40a8ad36aae1afb216257
Validity
Not Before: Jul 24 18:00:35 2026 GMT
Not After : Jul 25 18:00:35 2026 GMT
Subject: CN=4db40c529fd25ee50f0cc0b037e0468916cb8f63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:6b:17:b1:b7:44:df:3a:3d:6d:a9:b7:4a:4d:
a5:70:8e:2b:6d:19:eb:eb:1f:8c:b0:72:7c:c6:b7:
b7:54:6f:06:00:b5:5c:b6:28:ac:36:bf:0d:0f:d3:
f4:57:24:75:5b:c0:bc:03:be:a7:ea:9e:aa:5d:70:
4e:e3:1a:a2:5e:69:9e:ef:de:d0:9c:a5:28:d4:e7:
af:ad:0e:57:50:9d:66:66:4d:86:0e:4a:ec:85:a1:
a7:f1:ff:ed:3b:4b:ac:75:1e:b0:ac:0b:94:81:ce:
a8:be:b5:75:d0:97:5f:ac:66:96:f8:f5:ef:81:df:
ac:f7:3c:6c:7b:b7:18:46:23:0d:76:9b:80:c7:e2:
73:b4:8a:d9:34:ec:85:8f:9f:a4:9d:20:08:90:6f:
9f:de:59:1a:2a:84:a5:66:1a:78:4d:ee:cc:7c:7d:
3f:d5:f2:80:45:2c:75:85:42:ea:64:b2:95:9f:f8:
64:31:9e:83:30:40:6a:b2:fe:40:cc:d7:1c:e4:ca:
6d:b6:98:96:5e:6b:38:1e:3e:05:77:a1:0d:ba:05:
76:e0:98:15:69:3e:70:2e:48:89:a8:15:68:2b:49:
e5:e5:04:c0:87:0e:30:e6:e2:8e:de:e0:9f:da:44:
62:e7:d1:dd:b8:03:0a:73:1e:ba:c7:2e:1e:ee:ec:
b1:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:B4:0C:52:9F:D2:5E:E5:0F:0C:C0:B0:37:E0:46:89:16:CB:8F:63
X509v3 Authority Key Identifier:
keyid:29:63:2B:11:51:B9:4F:FC:ED:F4:0A:8A:D3:6A:AE:1A:FB:21:62:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KWMrEVG5T_zt9AqK02quGvshYlc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/254995-4c39-4f37-9e3b-b2f0541afacf/1/KWMrEVG5T_zt9AqK02quGvshYlc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/254995-4c39-4f37-9e3b-b2f0541afacf/1/KWMrEVG5T_zt9AqK02quGvshYlc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:2a:43:cf:65:d2:ce:a6:a7:ca:6e:89:83:52:9c:6c:5b:c0:
96:bb:76:07:80:27:01:b9:69:c0:07:d3:dc:df:2e:1e:b2:11:
45:f2:41:3e:65:af:8e:e8:7c:0b:20:27:92:fc:7b:f4:c7:12:
bf:b9:d2:cd:6b:5b:ba:9b:2e:98:85:b1:f0:28:2f:72:d5:a8:
3d:ed:46:77:f7:e3:0d:e3:56:2a:2c:c5:f3:ad:36:bb:8a:f2:
b0:ad:a7:1b:57:42:66:6c:c4:66:35:d5:99:72:8c:d7:c2:5c:
40:ea:41:3a:b0:ae:f4:9c:f9:3d:af:fe:88:37:0e:4f:6d:c5:
76:06:c0:c2:3f:a1:1a:50:c8:85:89:49:3b:d7:54:68:6f:61:
28:47:e6:84:81:28:84:53:52:1e:7c:b6:47:26:8e:f7:a5:8f:
d5:f1:a1:2c:6b:91:94:65:32:52:6b:d5:10:e6:56:63:fe:47:
90:11:ab:16:be:3a:f7:2b:0d:ee:05:b3:9b:6f:fe:b8:ae:d4:
af:df:96:96:3a:b4:20:62:87:c5:0e:a7:15:1d:6f:c6:f5:44:
8b:af:18:7d:c0:77:54:c2:3c:8f:47:f0:c7:3b:f9:1d:87:23:
4f:d4:74:d6:41:86:e3:3f:dd:99:9b:e5:0a:7c:48:8d:c7:5f:
d8:40:5c:5e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+VSUfXSLfPLgY/dU/aC6zmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI5NjMyYjExNTFiOTRmZmNlZGY0MGE4YWQzNmFhZTFhZmIy
MTYyNTcwHhcNMjYwNzI0MTgwMDM1WhcNMjYwNzI1MTgwMDM1WjAzMTEwLwYDVQQD
Eyg0ZGI0MGM1MjlmZDI1ZWU1MGYwY2MwYjAzN2UwNDY4OTE2Y2I4ZjYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu2sXsbdE3zo9bam3Sk2lcI4rbRnr
6x+MsHJ8xre3VG8GALVctiisNr8ND9P0VyR1W8C8A76n6p6qXXBO4xqiXmme797Q
nKUo1OevrQ5XUJ1mZk2GDkrshaGn8f/tO0usdR6wrAuUgc6ovrV10JdfrGaW+PXv
gd+s9zxse7cYRiMNdpuAx+JztIrZNOyFj5+knSAIkG+f3lkaKoSlZhp4Te7MfH0/
1fKARSx1hULqZLKVn/hkMZ6DMEBqsv5AzNcc5MpttpiWXms4Hj4Fd6ENugV24JgV
aT5wLkiJqBVoK0nl5QTAhw4w5uKO3uCf2kRi59HduAMKcx66xy4e7uyx2wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE20DFKf0l7lDwzAsDfgRokWy49jMB8GA1UdIwQY
MBaAFCljKxFRuU/87fQKitNqrhr7IWJXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS1dNckVWRzVUX3p0OUFxSzAycXVHdnNoWWxjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni8yNTQ5OTUtNGMzOS00ZjM3LTllM2It
YjJmMDU0MWFmYWNmLzEvS1dNckVWRzVUX3p0OUFxSzAycXVHdnNoWWxjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ni8yNTQ5OTUtNGMzOS00ZjM3LTllM2ItYjJmMDU0MWFmYWNm
LzEvS1dNckVWRzVUX3p0OUFxSzAycXVHdnNoWWxjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjCpDz2XS
zqanym6Jg1KcbFvAlrt2B4AnAblpwAfT3N8uHrIRRfJBPmWvjuh8CyAnkvx79McS
v7nSzWtbupsumIWx8CgvctWoPe1Gd/fjDeNWKizF8602u4rysK2nG1dCZmzEZjXV
mXKM18JcQOpBOrCu9Jz5Pa/+iDcOT23FdgbAwj+hGlDIhYlJO9dUaG9hKEfmhIEo
hFNSHny2RyaO96WP1fGhLGuRlGUyUmvVEOZWY/5HkBGrFr469ysN7gWzm2/+uK7U
r9+Wljq0IGKHxQ6nFR1vxvVEi68YfcB3VMI8j0fwxzv5HYcjT9R01kGG4z/dmZvl
CnxIjcdf2EBcXg==
-----END CERTIFICATE-----
Generated at Sat Jul 25 02:11:54 2026 by rpki-client