Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/077a50-45b6-4a38-9db9-950c7e73245c/1/kwNiKzxU5F9BZvMBeY-G27pHGAw.mft
File: kwNiKzxU5F9BZvMBeY-G27pHGAw.mft (raw, json)
Hash identifier: aky0iys8D+tMZSNxjlK9r/xGbIAIs2nYvKcVYQfp86I=
Subject key identifier: 08:F2:83:68:40:2C:D6:4D:51:61:CD:91:BD:37:B0:70:C5:F9:99:2E
Authority key identifier: 93:03:62:2B:3C:54:E4:5F:41:66:F3:01:79:8F:86:DB:BA:47:18:0C
Certificate issuer: /CN=9303622b3c54e45f4166f301798f86dbba47180c
Certificate serial: 019F9248A31DA900294C12BBEBEDB7AE6936
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kwNiKzxU5F9BZvMBeY-G27pHGAw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/077a50-45b6-4a38-9db9-950c7e73245c/1/kwNiKzxU5F9BZvMBeY-G27pHGAw.mft
Manifest number: 0B61
Signing time: Fri 24 Jul 2026 04:01:01 +0000
Manifest this update: Fri 24 Jul 2026 04:01:01 +0000
Manifest next update: Sat 25 Jul 2026 04:01:01 +0000
Files and hashes: 1: kwNiKzxU5F9BZvMBeY-G27pHGAw.crl (hash: 9/eE3T8X/OKyFwkDyXF/bwxeiW5XfZgguPHEa29mLDk=)
2: oEI10F1yOzZXTlBBBvzIeX5OXog.roa (hash: QNwI0l8coi9XbWot/ryVzcBU4wEtxZkGadr7asLldw8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/077a50-45b6-4a38-9db9-950c7e73245c/1/kwNiKzxU5F9BZvMBeY-G27pHGAw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/077a50-45b6-4a38-9db9-950c7e73245c/1/kwNiKzxU5F9BZvMBeY-G27pHGAw.mft
rsync://rpki.ripe.net/repository/DEFAULT/kwNiKzxU5F9BZvMBeY-G27pHGAw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 04:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:48:a3:1d:a9:00:29:4c:12:bb:eb:ed:b7:ae:69:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9303622b3c54e45f4166f301798f86dbba47180c
Validity
Not Before: Jul 24 04:01:01 2026 GMT
Not After : Jul 25 04:01:01 2026 GMT
Subject: CN=08f28368402cd64d5161cd91bd37b070c5f9992e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:56:2c:e9:aa:95:82:04:30:65:d9:a4:a9:08:
45:8a:f5:c3:73:9c:4d:b1:99:ef:f9:2b:63:f9:bd:
ac:3c:4a:a0:b0:c2:82:e4:36:53:25:b7:30:8c:f0:
7d:ec:9f:01:14:73:c7:b4:02:de:3d:31:f5:4a:1f:
8b:c4:f3:1f:93:64:1b:f3:ff:6a:f8:3f:d6:99:c2:
51:d6:26:70:97:42:f8:41:33:db:b9:e3:f9:7c:57:
14:c7:b9:2c:fd:f8:5f:c8:b0:2d:5d:49:5e:05:e6:
5e:d8:88:b6:a0:6d:00:8b:66:18:08:cf:b5:58:d4:
90:0f:8f:b6:35:cd:87:b3:70:50:1d:fd:d1:11:8d:
d6:25:0c:79:ab:5e:3b:59:17:e4:a9:5d:d2:e9:c4:
41:a2:02:af:db:75:9a:fb:0e:29:31:93:bc:ca:11:
79:47:7e:51:ce:72:41:bc:d3:4f:d4:74:1d:e7:07:
35:bf:53:a2:e5:e5:23:f1:98:e5:98:eb:08:6b:b5:
0f:2d:70:13:79:74:b1:d8:64:ae:14:17:5e:df:61:
7c:6c:21:f6:e4:4c:44:74:0e:ee:ec:c6:d8:5b:b4:
db:e4:c1:79:59:88:06:e8:b0:68:66:94:11:95:98:
e7:16:9f:7e:c6:69:9e:73:c1:09:df:23:46:74:9d:
77:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:F2:83:68:40:2C:D6:4D:51:61:CD:91:BD:37:B0:70:C5:F9:99:2E
X509v3 Authority Key Identifier:
keyid:93:03:62:2B:3C:54:E4:5F:41:66:F3:01:79:8F:86:DB:BA:47:18:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kwNiKzxU5F9BZvMBeY-G27pHGAw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/077a50-45b6-4a38-9db9-950c7e73245c/1/kwNiKzxU5F9BZvMBeY-G27pHGAw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/077a50-45b6-4a38-9db9-950c7e73245c/1/kwNiKzxU5F9BZvMBeY-G27pHGAw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:d9:9a:7b:a0:01:b8:d1:43:f5:e5:3b:e1:1a:33:11:74:cf:
0e:4c:a0:08:bb:e5:8b:d4:ce:3d:e8:42:ac:b2:a8:80:12:46:
2c:2d:76:24:b9:c0:95:5a:86:bd:c0:73:8f:43:a7:01:6b:44:
6a:d8:0c:40:51:aa:bd:ab:89:fc:c5:d5:e7:79:2a:95:e0:75:
5c:b2:1e:45:8d:b9:3b:ba:5b:0c:0d:86:18:39:9a:60:ac:3e:
43:49:33:93:dd:db:a6:7c:43:9d:f0:d6:f0:f6:3f:37:e2:8a:
c7:c9:62:56:48:d8:ea:17:e7:ba:ef:33:98:91:3b:5c:c0:3d:
dd:8a:b8:75:71:05:4b:42:a0:d4:84:79:ef:e1:83:10:d0:ca:
ff:72:e9:ef:6e:69:be:e6:4e:9f:2d:87:e4:c1:24:f7:79:bb:
99:90:76:52:c6:82:4f:ef:56:6b:b8:b5:51:81:a0:ca:aa:8f:
b1:89:79:1c:c5:eb:05:68:1b:3e:b8:2f:ef:18:e6:9c:19:8b:
69:28:92:70:ab:4a:1d:1e:55:a9:15:25:d9:19:20:cb:89:16:
e2:51:c4:4e:44:d1:86:de:bd:05:f0:b0:eb:cc:e5:c3:37:98:
30:b2:2b:66:02:60:85:c5:1f:6b:fa:b2:b8:8d:d6:d0:19:e5:
b1:a3:a9:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:11:27 2026 by rpki-client