Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/254995-4c39-4f37-9e3b-b2f0541afacf/1/KWMrEVG5T_zt9AqK02quGvshYlc.mft
File: KWMrEVG5T_zt9AqK02quGvshYlc.mft (raw, json)
Hash identifier: PDGszZNEXS+0M0/COkXm/zbBJ76co/qOZdVA46gLhUk=
Subject key identifier: 88:FB:D7:44:39:58:2F:A4:89:83:AC:95:3E:FC:B0:1F:5A:C4:AF:91
Authority key identifier: 29:63:2B:11:51:B9:4F:FC:ED:F4:0A:8A:D3:6A:AE:1A:FB:21:62:57
Certificate issuer: /CN=29632b1151b94ffcedf40a8ad36aae1afb216257
Certificate serial: 019D25842998B73A2B26E1DAB24D86740C25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KWMrEVG5T_zt9AqK02quGvshYlc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/254995-4c39-4f37-9e3b-b2f0541afacf/1/KWMrEVG5T_zt9AqK02quGvshYlc.mft
Manifest number: 9D
Signing time: Wed 25 Mar 2026 15:01:51 +0000
Manifest this update: Wed 25 Mar 2026 15:01:51 +0000
Manifest next update: Thu 26 Mar 2026 15:01:51 +0000
Files and hashes: 1: KWMrEVG5T_zt9AqK02quGvshYlc.crl (hash: a2LC0UNqGlNEsBKhgKQF+ZU3veJq2wdXEU9pVrWb+1E=)
2: R04uk59tL-FqUHxfWd8Y5B17azg.roa (hash: 5f566Fl0rgtpysFtLbApUeRuQVHAZSsSCcfDuYmn3cU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/254995-4c39-4f37-9e3b-b2f0541afacf/1/KWMrEVG5T_zt9AqK02quGvshYlc.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/254995-4c39-4f37-9e3b-b2f0541afacf/1/KWMrEVG5T_zt9AqK02quGvshYlc.mft
rsync://rpki.ripe.net/repository/DEFAULT/KWMrEVG5T_zt9AqK02quGvshYlc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:01:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:84:29:98:b7:3a:2b:26:e1:da:b2:4d:86:74:0c:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29632b1151b94ffcedf40a8ad36aae1afb216257
Validity
Not Before: Mar 25 15:01:51 2026 GMT
Not After : Mar 26 15:01:51 2026 GMT
Subject: CN=88fbd74439582fa48983ac953efcb01f5ac4af91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:c3:b5:37:69:70:da:50:96:27:4a:cf:0d:b7:
e6:e2:80:bf:ce:44:49:b1:fc:c5:12:5c:fe:d6:d9:
3a:cb:5d:76:2a:e6:77:20:c8:9c:64:44:47:bf:fb:
08:54:4c:08:6d:f9:07:b0:50:46:13:2b:f4:00:8b:
0c:a8:0d:d9:97:fe:18:dc:63:3d:18:a4:0d:4a:1d:
91:49:1a:5c:a2:74:e4:b3:4d:38:6d:0d:53:1d:82:
be:96:aa:5e:ab:5d:94:88:c1:de:89:77:0d:d1:58:
da:34:22:0a:c7:71:ef:55:02:b4:f3:27:a9:fe:28:
7d:b2:f0:69:e2:84:78:d9:b6:b8:52:fd:6c:4b:ac:
34:b1:67:41:71:60:58:74:cb:d7:4e:2f:1e:a6:ba:
50:6d:a2:e8:fa:8b:b4:93:36:9a:19:07:85:f0:72:
2f:8d:34:fb:70:69:f1:02:8d:fe:6f:9d:c9:cd:e5:
18:5a:db:f8:80:63:40:fa:33:13:34:72:35:b1:62:
40:ba:4b:d9:3b:91:32:13:ee:55:be:07:a3:91:1d:
12:f7:8a:ec:af:89:df:75:68:47:4b:c9:fa:67:78:
35:11:2b:a3:93:78:ec:6a:28:b2:b4:70:a2:a0:78:
12:ca:ab:c1:7b:e0:8c:41:ef:5f:11:2f:8d:fc:15:
10:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:FB:D7:44:39:58:2F:A4:89:83:AC:95:3E:FC:B0:1F:5A:C4:AF:91
X509v3 Authority Key Identifier:
keyid:29:63:2B:11:51:B9:4F:FC:ED:F4:0A:8A:D3:6A:AE:1A:FB:21:62:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KWMrEVG5T_zt9AqK02quGvshYlc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/254995-4c39-4f37-9e3b-b2f0541afacf/1/KWMrEVG5T_zt9AqK02quGvshYlc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/254995-4c39-4f37-9e3b-b2f0541afacf/1/KWMrEVG5T_zt9AqK02quGvshYlc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:71:9f:35:58:ac:45:59:89:9b:cf:68:ed:ce:5a:41:7e:ec:
62:8b:47:5d:9d:aa:27:82:42:f4:3f:d0:aa:16:97:5b:33:1a:
cd:a6:14:a4:d8:12:42:29:ac:38:bd:a6:30:59:59:65:2c:da:
43:15:b4:f8:13:07:f0:c2:78:99:72:31:f8:9d:e8:56:7f:f9:
c3:37:19:a1:6f:03:5b:b8:7c:cb:86:67:58:59:cd:8c:6a:0f:
4f:17:84:b9:23:97:17:f7:ae:f3:de:45:42:27:6e:a9:78:30:
b2:c1:f2:67:98:07:fa:92:21:49:7f:e1:6d:b9:3a:ff:b9:e8:
e8:cf:0c:63:7d:4b:16:0b:a7:18:49:bc:b5:d1:43:2d:46:ca:
66:f6:33:4c:86:6b:a0:a7:ae:72:f7:83:a4:a1:a3:50:14:38:
c6:b2:3f:4f:a6:7f:e1:8c:81:18:86:4d:60:61:45:0a:49:46:
bd:13:a0:b1:61:2c:50:b2:7f:1f:ec:9c:cd:c5:07:84:f7:35:
21:f7:6f:e3:e4:e2:d7:b2:47:6e:52:9c:06:1f:55:66:fa:5f:
4c:fb:df:39:db:77:ac:b2:af:06:a1:2c:80:2b:26:a9:81:7e:
06:dc:82:c3:b6:39:01:f6:62:36:38:39:96:f8:c3:2c:26:4c:
27:fe:54:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:28:20 2026 by rpki-client