Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/46/254995-4c39-4f37-9e3b-b2f0541afacf/1/KWMrEVG5T_zt9AqK02quGvshYlc.mft
File: KWMrEVG5T_zt9AqK02quGvshYlc.mft (raw, json)
Hash identifier: FIMEZJvjgTnjbcArg75JiwEWuawIzKLx/hv4NiAYIow=
Subject key identifier: 28:ED:EA:37:CA:14:AE:45:75:EC:01:E1:AD:E2:66:A3:40:D5:25:F2
Authority key identifier: 29:63:2B:11:51:B9:4F:FC:ED:F4:0A:8A:D3:6A:AE:1A:FB:21:62:57
Certificate issuer: /CN=29632b1151b94ffcedf40a8ad36aae1afb216257
Certificate serial: 01A0CA47CDAFC733D258463E5AA4DB3D5245
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KWMrEVG5T_zt9AqK02quGvshYlc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/254995-4c39-4f37-9e3b-b2f0541afacf/1/KWMrEVG5T_zt9AqK02quGvshYlc.mft
Manifest number: 0280
Signing time: Tue 22 Sep 2026 18:01:38 +0000
Manifest this update: Tue 22 Sep 2026 18:01:38 +0000
Manifest next update: Wed 23 Sep 2026 18:01:38 +0000
Files and hashes: 1: KWMrEVG5T_zt9AqK02quGvshYlc.crl (hash: UVe9grwBbPLfuH1nN3fIPnQ8IksISVpU80uBky+0o/0=)
2: R04uk59tL-FqUHxfWd8Y5B17azg.roa (hash: 5f566Fl0rgtpysFtLbApUeRuQVHAZSsSCcfDuYmn3cU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/254995-4c39-4f37-9e3b-b2f0541afacf/1/KWMrEVG5T_zt9AqK02quGvshYlc.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/254995-4c39-4f37-9e3b-b2f0541afacf/1/KWMrEVG5T_zt9AqK02quGvshYlc.mft
rsync://rpki.ripe.net/repository/DEFAULT/KWMrEVG5T_zt9AqK02quGvshYlc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ca:47:cd:af:c7:33:d2:58:46:3e:5a:a4:db:3d:52:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29632b1151b94ffcedf40a8ad36aae1afb216257
Validity
Not Before: Sep 22 18:01:38 2026 GMT
Not After : Sep 23 18:01:38 2026 GMT
Subject: CN=28edea37ca14ae4575ec01e1ade266a340d525f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:1d:05:52:2b:ad:36:bf:ee:11:05:3f:b2:2f:
9c:89:95:73:7e:05:66:b9:e3:ae:96:0c:52:b6:28:
4b:75:9e:ef:21:d6:e4:36:79:4d:cf:d6:d6:bb:bb:
57:e2:99:f2:e0:7a:19:ad:ef:ff:c5:23:b5:e3:1f:
24:45:b2:1e:4d:4f:ea:2b:2d:2b:16:f8:5e:db:65:
fb:f9:43:51:73:bd:a6:41:f9:64:3b:f9:dc:1f:99:
2e:9a:64:c3:b0:a3:67:3d:bd:c7:79:5f:b7:76:1c:
5d:97:bf:9a:1c:05:97:f7:ea:c4:59:07:c3:95:1d:
70:08:e1:1e:76:05:78:97:64:74:f2:31:12:b8:cd:
7a:b6:af:97:2a:58:ef:c2:f2:92:0e:17:86:e2:20:
48:71:6e:bd:2d:c0:c9:88:30:f4:44:4e:b7:9e:14:
99:9b:b8:b2:75:27:f9:7a:9f:ca:b4:d7:b4:15:5e:
5b:be:7c:fd:8e:b8:35:60:11:82:06:05:e3:27:b1:
f7:b8:ce:93:b9:d5:8d:0e:85:f9:30:79:48:cd:96:
44:34:0f:f7:a8:38:62:47:b1:78:b4:15:33:f4:bc:
c8:9a:8c:76:ef:bf:0a:97:5c:53:f5:25:83:8b:67:
da:a7:ef:80:f4:7a:40:77:09:26:d9:ed:87:dd:d7:
30:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:ED:EA:37:CA:14:AE:45:75:EC:01:E1:AD:E2:66:A3:40:D5:25:F2
X509v3 Authority Key Identifier:
keyid:29:63:2B:11:51:B9:4F:FC:ED:F4:0A:8A:D3:6A:AE:1A:FB:21:62:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KWMrEVG5T_zt9AqK02quGvshYlc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/254995-4c39-4f37-9e3b-b2f0541afacf/1/KWMrEVG5T_zt9AqK02quGvshYlc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/254995-4c39-4f37-9e3b-b2f0541afacf/1/KWMrEVG5T_zt9AqK02quGvshYlc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:83:eb:e3:60:12:fa:34:3c:f4:42:28:f7:74:d3:41:b0:a4:
4e:06:b1:07:20:c1:7b:9e:93:06:b5:c8:9b:42:8d:a0:78:96:
dc:d4:81:d2:5b:2f:06:c0:69:c1:ec:90:40:96:81:fa:55:ea:
e5:13:5a:4e:6b:67:87:c6:54:e5:27:53:d7:7a:f7:5b:24:84:
d1:2d:f1:b7:93:78:bc:94:66:e7:7a:40:4d:02:65:26:52:dd:
82:c1:71:9b:1b:40:a7:42:8f:f0:9b:37:2f:8d:c8:f3:74:de:
85:7a:fd:15:6a:aa:bf:f3:8e:50:76:2f:27:3c:bc:ae:45:c4:
69:97:25:21:cf:52:27:17:97:81:b6:10:eb:dd:8e:a7:8a:f8:
1d:5f:c1:03:ee:78:16:e7:3a:d7:00:41:26:1d:f4:37:a9:7b:
ee:3c:41:49:fb:82:dd:9d:73:e5:49:92:5e:8d:83:6e:0b:93:
c9:c3:22:1d:6f:ea:3d:87:db:c6:b9:9a:0e:ea:92:57:96:75:
90:0b:29:d8:6f:88:a2:68:28:37:31:a3:ea:e6:21:af:5f:04:
d0:b6:85:87:d9:9d:16:43:4e:a4:75:76:9b:a8:4b:ea:74:d6:
51:0d:27:29:c5:46:48:1a:0d:96:62:22:6c:e5:6d:57:e4:d0:
cd:c9:27:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 21:26:15 2026 by rpki-client