
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/KWWTt0fnalZJJRG7NhLk1eTL5-w.mft
File: KWWTt0fnalZJJRG7NhLk1eTL5-w.mft (raw, json)
Hash identifier: E1MmvdiojZqVBhUq5JuqeLhdqVmcCZqNmPciXL0LtTI=
Subject key identifier: C7:1F:53:F6:1D:B8:CE:74:19:9F:3D:03:DE:22:BE:5F:28:9B:F4:47
Authority key identifier: 29:65:93:B7:47:E7:6A:56:49:25:11:BB:36:12:E4:D5:E4:CB:E7:EC
Certificate issuer: /CN=296593b747e76a56492511bb3612e4d5e4cbe7ec
Certificate serial: 01A0CDB59C17DAD97A2835D418AA891A7601
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KWWTt0fnalZJJRG7NhLk1eTL5-w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/KWWTt0fnalZJJRG7NhLk1eTL5-w.mft
Manifest number: 1ACD
Signing time: Wed 23 Sep 2026 10:00:26 +0000
Manifest this update: Wed 23 Sep 2026 10:00:26 +0000
Manifest next update: Thu 24 Sep 2026 10:00:26 +0000
Files and hashes: 1: 1-jurUBuvQ1yZwU9729jbGVH_Dqc.roa (hash: NmPNOCnlOq4J9jRPSVe9AqahPbi72yXv6vfuK53ObQM=)
2: BqAUWEEEynRAHsyw8vXlJOPtoko.roa (hash: fRUb8UeVdZCw52nD6tz43yTIJk+lOvp55J1+ztgjww8=)
3: EiyPYGJUCaKyLhDbDbPOkYPeFdg.roa (hash: +VRrZJlK+58yebvWqB6g7vqkLfWkY0a7+iXy3NJ3xEA=)
4: HqzX4EklzjztmxQHcTQSLToHBQo.roa (hash: 0C/Lc4jGp8PVv3g8+j/yiQ53pvc2GRhFcYHGJMXCY4s=)
5: IKjez_Jm_DroxNL6eA8oXbFCAr0.roa (hash: mQpdrbrtX9b+4ISzQxTZgRdXAFDBgRhT/V1RvJ33ORU=)
6: IjEclqq9aZVHP-1pPKHauFgerso.roa (hash: Uuc4FOdMforWzk+OMtEZAMLMegin8YdnOU2GgixhPDY=)
7: JXqXZhRMyYLEhxzVh3Gj36s_Ph0.roa (hash: pjrfkngpXTbXlOemB2zK4PxTtGivr+ki34ZUor3sLNE=)
8: JsnBQ-d6HlJ1IQj1cCRf-BvuxJY.roa (hash: MvWPx/XVlwEwn/CUfqwpxVOvbOK59XZKMZoYvkiq7pg=)
9: KWWTt0fnalZJJRG7NhLk1eTL5-w.crl (hash: rnRX7JNUejYwBs45upM7IVg5dAuDgHi7ZJ+5oI5aIi4=)
10: LbIBxCm3zc4zW15g4xohoJX9qic.roa (hash: 6wgCSs5mGVTM6aHPm61i10v74wejjqjW11LjQknpJBs=)
11: Q0My9AMCGjxZ0npORFZ4Tvx3C54.roa (hash: wu0aq49AqLS5xqmMACLQlP9eC2ugRqQQAybYzzqc3fE=)
12: XHlnD811u3em9JVJklrQN7J3cm0.roa (hash: u0+XGjhQ3bXTODeSfwve+tcBoDp30OCy9deDRC9QRYE=)
13: XZGlyG2IPt3742FE82Tkz8mGyq4.roa (hash: v8XatKoIXBXuIzaIEHcax1FamZrLl2OwB/RHFgt/lSU=)
14: ZUTPmES_I92lge3VqoMKVsiadL8.roa (hash: EYCn+DNcKMqEruiNAkvCDVx9dzY2G8BAuiKbjATbTdE=)
15: bhiGtzF7RuIEDHlSsVtceIRxH38.roa (hash: akX2koLtc0Hj8AOQToNc3k0ORycX0LTS6PyoFdzhc4U=)
16: cmuS_wFKhe7wwbr6EPdnbQmyZXo.roa (hash: LWlpo3v+x70PYDVy1B035O4VkZRBTo/qhBO9cRkrJH8=)
17: dAAgbpptLSU0Vrmk2iT4sKGu6bI.roa (hash: hLII+38WbV+tc1ZpNKlU1+REUXlmuvngdatwvZdVzBw=)
18: eFDPwahAIiaqNqf51zTx5lDvrZo.roa (hash: kr9w8Xld1i6+vsqQh/FD6WhZ+7q4oP80iULOMOz1iZ4=)
19: gDUrBxB6wNpkw1auAIeXKcxfpjk.roa (hash: MmMgI7BZHSBDbxCR5wftqfrkAJEiDMDH3YAVO82UluY=)
20: gPMjhhmemxpOq_6aVVCJVdiEiCw.roa (hash: Awi0lJMvPZIsKzXkRn4khXQRzuK6j9oUkbHUvDLJIPw=)
21: hegEslKsgUN8EfSljeWho5LH9AA.roa (hash: 7FUVQSpJvZtjHYpEYQtMbItOT8EfPhZLjylSV3d45Mk=)
22: iY5AUZ3oRD8enxE2YfRVgLOVchA.roa (hash: qdLguy24Q8ECPU9WacB+CHbkQyPvE/BjpYZ7lL8qnf4=)
23: j1LnzihLWpEHbVivIKleh48juQY.roa (hash: lSBEl6VaQ8BKt1Y/BfkhK36reElNLrWjumdNs9QCL94=)
24: roUgq1WWF-4-EBD-mSjF2FqhNuM.roa (hash: O7LaxZ0YLI1xv3D+p2716Dcd2hVN4y4qQfPRDb1TsUg=)
25: rtCZvcnDjssgDm1M5Mw6U_MuaQk.roa (hash: R1fOJZ69TZqTYVrK6Gl8R5/LkM043G84eXV/p0wdc3o=)
26: uNRqwpIiIZEsgTyrEkw7uhF314Y.roa (hash: nuf882yOK7Gm1Xhr7tFICsJpWAnlPOnwhndnq27u30w=)
27: vSREg_6m_MabpC6JhPX3QzIHx78.roa (hash: Mx3Adg5UoxiR8yhy3TEKj54l/CCfjvWb1t/HSvBKpE0=)
28: yDXd_AbeSk2V33waKgA8v3F-94A.roa (hash: xPpNioqtvkgaxveXzWANtmkRIznkEJ/Yx8p+E6Od7EM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/KWWTt0fnalZJJRG7NhLk1eTL5-w.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/KWWTt0fnalZJJRG7NhLk1eTL5-w.mft
rsync://rpki.ripe.net/repository/DEFAULT/KWWTt0fnalZJJRG7NhLk1eTL5-w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 10:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cd:b5:9c:17:da:d9:7a:28:35:d4:18:aa:89:1a:76:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=296593b747e76a56492511bb3612e4d5e4cbe7ec
Validity
Not Before: Sep 23 10:00:26 2026 GMT
Not After : Sep 24 10:00:26 2026 GMT
Subject: CN=c71f53f61db8ce74199f3d03de22be5f289bf447
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:e6:25:bf:b8:fb:66:78:f1:f8:ee:6f:61:51:
6c:36:c2:0f:22:54:11:c0:a4:56:cc:4d:31:a4:50:
d3:00:43:21:85:7a:64:5f:ae:b1:3a:6d:91:11:7a:
4b:d1:4a:58:f6:b4:59:a5:74:7f:d5:17:30:11:84:
50:71:69:2e:8a:b3:d0:b6:21:ca:9a:25:3e:84:fd:
1a:b7:ca:c8:ff:54:18:bd:14:e3:e8:cc:75:ca:37:
0d:ca:27:6d:55:07:15:95:06:8f:0c:9e:f8:ab:dc:
e8:e2:35:77:31:a6:89:97:65:06:7e:b8:09:54:1c:
7f:dc:a2:c5:6d:fe:4a:e1:fc:55:26:00:2c:0b:d7:
6d:f8:b6:1c:44:e5:6d:ce:13:e0:ab:40:0b:81:e8:
2f:c1:57:51:df:f8:0c:f3:e2:20:b6:a4:52:d7:e9:
f9:8a:51:85:4a:6a:03:0a:4c:bc:49:ec:d8:b0:63:
06:3f:ab:2a:b6:af:a4:9c:92:ec:77:af:9b:c4:f6:
97:9e:72:b2:ca:a1:1b:75:ba:b4:44:4e:d0:c4:a0:
0a:04:34:b9:6b:4a:39:fa:00:ed:8a:26:ff:8f:f0:
ff:0f:95:ac:3d:38:ce:03:cf:31:b9:cc:cd:dc:c7:
20:a2:c2:e0:fa:af:81:20:c2:29:9b:c8:5e:de:cd:
f6:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:1F:53:F6:1D:B8:CE:74:19:9F:3D:03:DE:22:BE:5F:28:9B:F4:47
X509v3 Authority Key Identifier:
keyid:29:65:93:B7:47:E7:6A:56:49:25:11:BB:36:12:E4:D5:E4:CB:E7:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KWWTt0fnalZJJRG7NhLk1eTL5-w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/KWWTt0fnalZJJRG7NhLk1eTL5-w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/KWWTt0fnalZJJRG7NhLk1eTL5-w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:87:df:b6:81:c7:7d:68:0f:b8:ef:cf:4f:57:1b:a0:11:d5:
1f:8d:37:64:16:df:f4:a8:fa:11:01:2e:6a:dc:6f:b7:8d:86:
42:51:d0:19:50:1a:bf:86:1e:f1:f2:4f:96:6d:43:2b:a6:8c:
3b:1e:c1:dc:fe:27:f5:71:88:37:1b:61:10:f0:fc:13:34:96:
f0:6a:ba:72:b7:3e:14:ec:0d:c1:27:0b:ac:b0:4a:6d:f6:8e:
d3:94:e0:b7:81:b8:7e:92:13:de:e4:52:33:86:c1:5e:78:08:
c0:cc:38:ef:d8:ba:09:62:9b:6f:ab:5f:53:d7:e4:e1:2e:32:
01:ec:47:7a:1a:48:55:7b:73:90:bc:6c:ab:7c:ae:5c:98:59:
64:46:f9:1a:f8:48:9a:70:be:31:b1:fd:9c:fb:90:43:b6:28:
de:8b:1d:13:dc:eb:1b:82:ca:b1:a5:93:df:af:1a:4c:61:2c:
96:37:e8:03:95:07:cc:b9:62:02:b1:a0:12:62:f7:a4:35:9e:
c5:0f:08:cf:97:20:56:51:3a:51:93:1f:43:24:01:d6:b9:b4:
23:f9:f0:82:90:19:b8:9b:04:52:b0:65:1e:8e:bf:fe:da:23:
48:57:34:66:eb:a6:74:f5:17:fe:01:b3:ac:2a:fa:28:8a:95:
98:6b:ea:fc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDNtZwX2tl6KDXUGKqJGnYBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI5NjU5M2I3NDdlNzZhNTY0OTI1MTFiYjM2MTJlNGQ1ZTRj
YmU3ZWMwHhcNMjYwOTIzMTAwMDI2WhcNMjYwOTI0MTAwMDI2WjAzMTEwLwYDVQQD
EyhjNzFmNTNmNjFkYjhjZTc0MTk5ZjNkMDNkZTIyYmU1ZjI4OWJmNDQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAleYlv7j7Znjx+O5vYVFsNsIPIlQR
wKRWzE0xpFDTAEMhhXpkX66xOm2REXpL0UpY9rRZpXR/1RcwEYRQcWkuirPQtiHK
miU+hP0at8rI/1QYvRTj6Mx1yjcNyidtVQcVlQaPDJ74q9zo4jV3MaaJl2UGfrgJ
VBx/3KLFbf5K4fxVJgAsC9dt+LYcROVtzhPgq0ALgegvwVdR3/gM8+IgtqRS1+n5
ilGFSmoDCky8SezYsGMGP6sqtq+knJLsd6+bxPaXnnKyyqEbdbq0RE7QxKAKBDS5
a0o5+gDtiib/j/D/D5WsPTjOA88xuczN3McgosLg+q+BIMIpm8he3s328wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMcfU/YduM50GZ89A94ivl8om/RHMB8GA1UdIwQY
MBaAFCllk7dH52pWSSURuzYS5NXky+fsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS1dXVHQwZm5hbFpKSlJHN05oTGsxZVRMNS13LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS9jNThiZGMtMTRlNy00OTljLTlkOWMt
MWI3Y2JiMDhkNzNmLzEvS1dXVHQwZm5hbFpKSlJHN05oTGsxZVRMNS13Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZS9jNThiZGMtMTRlNy00OTljLTlkOWMtMWI3Y2JiMDhkNzNm
LzEvS1dXVHQwZm5hbFpKSlJHN05oTGsxZVRMNS13LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGofftoHH
fWgPuO/PT1cboBHVH403ZBbf9Kj6EQEuatxvt42GQlHQGVAav4Ye8fJPlm1DK6aM
Ox7B3P4n9XGINxthEPD8EzSW8Gq6crc+FOwNwScLrLBKbfaO05Tgt4G4fpIT3uRS
M4bBXngIwMw479i6CWKbb6tfU9fk4S4yAexHehpIVXtzkLxsq3yuXJhZZEb5GvhI
mnC+MbH9nPuQQ7Yo3osdE9zrG4LKsaWT368aTGEsljfoA5UHzLliArGgEmL3pDWe
xQ8Iz5cgVlE6UZMfQyQB1rm0I/nwgpAZuJsEUrBlHo6//tojSFc0ZuumdPUX/gGz
rCr6KIqVmGvq/A==
-----END CERTIFICATE-----
Generated at Wed Sep 23 19:01:24 2026 by rpki-client