Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5d/077a50-45b6-4a38-9db9-950c7e73245c/1/kwNiKzxU5F9BZvMBeY-G27pHGAw.mft
File: kwNiKzxU5F9BZvMBeY-G27pHGAw.mft (raw, json)
Hash identifier: JQzWVhlm4b/HmNMxSRcU6aEmg3iNN/1GN1q4rOHYw1c=
Subject key identifier: 8A:C6:CE:79:99:77:E6:D0:6B:E6:7B:7F:C2:C5:EF:DC:50:A9:54:5A
Authority key identifier: 93:03:62:2B:3C:54:E4:5F:41:66:F3:01:79:8F:86:DB:BA:47:18:0C
Certificate issuer: /CN=9303622b3c54e45f4166f301798f86dbba47180c
Certificate serial: 01A0EBF947131FFA7CB956F567255F876FB4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kwNiKzxU5F9BZvMBeY-G27pHGAw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/077a50-45b6-4a38-9db9-950c7e73245c/1/kwNiKzxU5F9BZvMBeY-G27pHGAw.mft
Manifest number: 0C14
Signing time: Tue 29 Sep 2026 07:02:57 +0000
Manifest this update: Tue 29 Sep 2026 07:02:57 +0000
Manifest next update: Wed 30 Sep 2026 07:02:57 +0000
Files and hashes: 1: kwNiKzxU5F9BZvMBeY-G27pHGAw.crl (hash: 4l8tbLEBh0EzyHIawyVQJ2NVFG7J6YxAt2GFlIWS1AI=)
2: oEI10F1yOzZXTlBBBvzIeX5OXog.roa (hash: QNwI0l8coi9XbWot/ryVzcBU4wEtxZkGadr7asLldw8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/077a50-45b6-4a38-9db9-950c7e73245c/1/kwNiKzxU5F9BZvMBeY-G27pHGAw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/077a50-45b6-4a38-9db9-950c7e73245c/1/kwNiKzxU5F9BZvMBeY-G27pHGAw.mft
rsync://rpki.ripe.net/repository/DEFAULT/kwNiKzxU5F9BZvMBeY-G27pHGAw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 07:02:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:eb:f9:47:13:1f:fa:7c:b9:56:f5:67:25:5f:87:6f:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9303622b3c54e45f4166f301798f86dbba47180c
Validity
Not Before: Sep 29 07:02:57 2026 GMT
Not After : Sep 30 07:02:57 2026 GMT
Subject: CN=8ac6ce799977e6d06be67b7fc2c5efdc50a9545a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:c8:41:98:ba:91:90:83:ce:4b:c9:14:48:95:
07:aa:61:e4:b1:3a:17:7e:cd:6b:69:bb:a4:b6:f1:
25:c6:ab:bd:5b:49:8c:0e:35:44:b3:c7:d3:2f:55:
74:4a:6d:1a:87:dc:98:b9:1d:5c:58:5a:fd:33:82:
b6:0a:c5:51:07:22:b2:56:47:7b:49:46:78:86:1b:
49:73:30:db:58:ff:5b:d8:5d:89:95:f4:9c:43:fd:
c7:c7:bf:d7:dc:72:4c:08:ad:95:63:9f:b9:6e:58:
71:b0:7a:ac:72:c3:83:b0:48:57:05:3a:32:8e:f9:
df:48:76:90:30:d2:f4:c7:50:8a:d2:92:69:c4:83:
58:4a:2c:8c:d8:83:4f:81:6a:ef:2e:5b:eb:39:b6:
fc:22:76:5c:d4:60:b3:e5:7c:e6:85:6b:ca:b7:f3:
47:71:8a:05:b4:0f:21:fc:2a:60:0d:ef:fc:4e:1b:
74:14:75:3f:0a:b8:60:7e:48:1d:20:35:8d:65:59:
82:73:94:c1:a1:4a:35:32:ae:93:81:f5:58:1d:af:
d1:f1:28:22:57:c9:a0:ef:51:39:bd:27:a4:51:52:
f5:b6:b3:fd:bc:ad:e5:d0:12:74:39:0d:29:36:00:
63:9f:a5:55:96:30:d7:3e:5e:91:fa:71:21:d6:2e:
53:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:C6:CE:79:99:77:E6:D0:6B:E6:7B:7F:C2:C5:EF:DC:50:A9:54:5A
X509v3 Authority Key Identifier:
keyid:93:03:62:2B:3C:54:E4:5F:41:66:F3:01:79:8F:86:DB:BA:47:18:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kwNiKzxU5F9BZvMBeY-G27pHGAw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/077a50-45b6-4a38-9db9-950c7e73245c/1/kwNiKzxU5F9BZvMBeY-G27pHGAw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/077a50-45b6-4a38-9db9-950c7e73245c/1/kwNiKzxU5F9BZvMBeY-G27pHGAw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:a5:46:fa:b2:b3:34:ca:50:c0:c1:54:e8:de:06:73:cd:44:
94:47:e4:0b:72:4a:11:b4:80:25:c1:3c:e0:fc:69:ce:0d:fb:
5a:47:45:e2:b8:fa:9f:b8:d9:d5:31:7c:d2:70:04:51:74:4f:
23:c9:be:e7:f2:99:63:6c:e8:fa:49:d5:80:f2:c1:62:b1:c8:
a8:0c:08:0c:3b:72:60:f0:17:84:79:7f:ba:0e:46:51:98:9f:
c5:12:7b:37:20:73:ed:fd:43:d8:bf:45:e0:cc:14:61:28:3a:
97:63:8f:45:d2:ed:f8:9a:a7:d9:3d:2a:9f:26:8b:c1:d3:dc:
12:8c:9e:76:0b:c5:4c:1a:bf:c6:25:91:8c:2a:a5:36:b1:a9:
d3:a5:bf:b2:38:d8:8f:ca:95:b3:ae:28:5b:f2:f8:85:2c:21:
68:65:2b:7e:bf:f5:c2:5d:49:20:ff:2a:c0:8d:a1:21:d4:a4:
b7:1d:46:33:a7:99:6e:f2:0c:dc:6f:b2:87:2b:51:0c:db:58:
4f:e3:46:1c:0a:30:3e:26:84:21:05:d6:19:c1:7c:89:b5:6f:
62:20:6f:86:0c:aa:8e:2b:0c:3f:d5:ac:16:5e:95:29:a9:cb:
7f:17:8f:79:ef:ed:b1:b1:95:4a:e6:b0:1c:e5:58:8a:2c:27:
d7:ca:07:ef
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDr+UcTH/p8uVb1ZyVfh2+0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkzMDM2MjJiM2M1NGU0NWY0MTY2ZjMwMTc5OGY4NmRiYmE0
NzE4MGMwHhcNMjYwOTI5MDcwMjU3WhcNMjYwOTMwMDcwMjU3WjAzMTEwLwYDVQQD
Eyg4YWM2Y2U3OTk5NzdlNmQwNmJlNjdiN2ZjMmM1ZWZkYzUwYTk1NDVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm8hBmLqRkIPOS8kUSJUHqmHksToX
fs1rabuktvElxqu9W0mMDjVEs8fTL1V0Sm0ah9yYuR1cWFr9M4K2CsVRByKyVkd7
SUZ4hhtJczDbWP9b2F2JlfScQ/3Hx7/X3HJMCK2VY5+5blhxsHqscsODsEhXBToy
jvnfSHaQMNL0x1CK0pJpxINYSiyM2INPgWrvLlvrObb8InZc1GCz5XzmhWvKt/NH
cYoFtA8h/CpgDe/8Tht0FHU/CrhgfkgdIDWNZVmCc5TBoUo1Mq6TgfVYHa/R8Sgi
V8mg71E5vSekUVL1trP9vK3l0BJ0OQ0pNgBjn6VVljDXPl6R+nEh1i5T6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIrGznmZd+bQa+Z7f8LF79xQqVRaMB8GA1UdIwQY
MBaAFJMDYis8VORfQWbzAXmPhtu6RxgMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva3dOaUt6eFU1RjlCWnZNQmVZLUcyN3BIR0F3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC8wNzdhNTAtNDViNi00YTM4LTlkYjkt
OTUwYzdlNzMyNDVjLzEva3dOaUt6eFU1RjlCWnZNQmVZLUcyN3BIR0F3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZC8wNzdhNTAtNDViNi00YTM4LTlkYjktOTUwYzdlNzMyNDVj
LzEva3dOaUt6eFU1RjlCWnZNQmVZLUcyN3BIR0F3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASqVG+rKz
NMpQwMFU6N4Gc81ElEfkC3JKEbSAJcE84Pxpzg37WkdF4rj6n7jZ1TF80nAEUXRP
I8m+5/KZY2zo+knVgPLBYrHIqAwIDDtyYPAXhHl/ug5GUZifxRJ7NyBz7f1D2L9F
4MwUYSg6l2OPRdLt+Jqn2T0qnyaLwdPcEoyedgvFTBq/xiWRjCqlNrGp06W/sjjY
j8qVs64oW/L4hSwhaGUrfr/1wl1JIP8qwI2hIdSktx1GM6eZbvIM3G+yhytRDNtY
T+NGHAowPiaEIQXWGcF8ibVvYiBvhgyqjisMP9WsFl6VKanLfxePee/tsbGVSuaw
HOVYiiwn18oH7w==
-----END CERTIFICATE-----
Generated at Tue Sep 29 18:44:34 2026 by rpki-client