Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/58394a-8cf6-4b11-becb-3ba69131458b/1/kuwpVHbKHZNNsE0AJE_FB5ucl0g.mft
File: kuwpVHbKHZNNsE0AJE_FB5ucl0g.mft (raw, json)
Hash identifier: WHLtXagtnd+B+0bOYekeKCRc4QViARyLKYwhW7KnYuY=
Subject key identifier: 79:91:5A:0B:D6:5D:80:4F:88:78:9A:B8:41:01:47:4D:F8:BF:20:B9
Authority key identifier: 92:EC:29:54:76:CA:1D:93:4D:B0:4D:00:24:4F:C5:07:9B:9C:97:48
Certificate issuer: /CN=92ec295476ca1d934db04d00244fc5079b9c9748
Certificate serial: 019D273AA1AD2CA37D8272F54F58AEB1E35A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kuwpVHbKHZNNsE0AJE_FB5ucl0g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/58394a-8cf6-4b11-becb-3ba69131458b/1/kuwpVHbKHZNNsE0AJE_FB5ucl0g.mft
Manifest number: 1497
Signing time: Wed 25 Mar 2026 23:00:46 +0000
Manifest this update: Wed 25 Mar 2026 23:00:46 +0000
Manifest next update: Thu 26 Mar 2026 23:00:46 +0000
Files and hashes: 1: _a0tUF2pNgWfD8OvNlNztg1Ec8c.roa (hash: pNVgv9HkjiIVawMVQfKe39+BIhySc8Uon8fScm4gi/w=)
2: kuwpVHbKHZNNsE0AJE_FB5ucl0g.crl (hash: u0dk/kvGoAk8oE1prn91KQXE3+pmwRZ+yZGcVVSEgNA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/58394a-8cf6-4b11-becb-3ba69131458b/1/kuwpVHbKHZNNsE0AJE_FB5ucl0g.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/58394a-8cf6-4b11-becb-3ba69131458b/1/kuwpVHbKHZNNsE0AJE_FB5ucl0g.mft
rsync://rpki.ripe.net/repository/DEFAULT/kuwpVHbKHZNNsE0AJE_FB5ucl0g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3a:a1:ad:2c:a3:7d:82:72:f5:4f:58:ae:b1:e3:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92ec295476ca1d934db04d00244fc5079b9c9748
Validity
Not Before: Mar 25 23:00:46 2026 GMT
Not After : Mar 26 23:00:46 2026 GMT
Subject: CN=79915a0bd65d804f88789ab84101474df8bf20b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:2e:1f:68:e8:02:f7:8a:0a:6d:88:f5:52:e5:
07:c6:c7:a9:96:f4:c7:d1:97:cc:20:9b:34:83:98:
d1:e3:0c:ba:02:2a:3a:dc:9a:1b:10:5c:6a:d4:55:
4e:cd:4c:7d:25:49:cc:b4:e0:2b:24:4e:c3:87:3a:
9b:2f:d3:40:0f:17:5c:fc:62:ee:6a:11:66:4c:88:
43:64:2c:9b:cd:44:4c:45:01:fb:b8:96:62:e7:2a:
81:03:66:02:66:79:e7:08:75:eb:38:ba:f3:26:49:
27:21:e6:ec:31:6c:af:89:f8:41:bb:fa:3d:72:de:
4b:a0:5d:ff:ec:ae:23:61:c0:3e:51:d9:c2:75:60:
04:f9:eb:77:70:06:8d:0d:44:2e:56:87:40:7c:ba:
e1:50:87:fb:aa:a3:34:67:e7:48:22:33:44:29:a2:
8a:07:3a:b2:f0:7a:0c:82:d3:e8:08:a2:84:8f:25:
03:40:b0:05:77:93:48:50:8f:47:aa:d4:64:07:24:
fb:a9:00:30:92:1c:82:23:96:dc:15:86:df:ad:64:
a4:56:14:55:62:20:16:0f:8f:03:37:27:e4:96:7d:
2e:b0:9b:95:0b:6e:a6:c1:fe:6b:a9:74:9d:c3:49:
8a:1b:5d:cf:a7:0e:81:38:e9:c0:63:2d:d0:3c:e4:
79:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:91:5A:0B:D6:5D:80:4F:88:78:9A:B8:41:01:47:4D:F8:BF:20:B9
X509v3 Authority Key Identifier:
keyid:92:EC:29:54:76:CA:1D:93:4D:B0:4D:00:24:4F:C5:07:9B:9C:97:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kuwpVHbKHZNNsE0AJE_FB5ucl0g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/58394a-8cf6-4b11-becb-3ba69131458b/1/kuwpVHbKHZNNsE0AJE_FB5ucl0g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/58394a-8cf6-4b11-becb-3ba69131458b/1/kuwpVHbKHZNNsE0AJE_FB5ucl0g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:ba:a0:4b:42:58:c9:be:52:06:18:63:93:a0:b6:2c:9b:9c:
7e:92:32:86:f0:8a:61:2f:d2:65:1c:80:77:96:58:49:af:11:
d7:3f:4b:99:55:fb:c5:90:6c:d0:1d:95:f2:28:8d:ed:91:b3:
e0:22:7a:06:21:7e:c7:eb:17:87:51:51:b7:03:84:9c:7c:a3:
cd:84:fd:85:dc:8b:02:29:b6:78:12:32:4a:7e:bd:ae:ad:9c:
87:70:68:2f:26:4a:9e:af:7b:03:9d:71:67:7a:91:d7:52:fc:
cc:3b:7c:ca:0f:bb:6b:94:b9:e3:22:34:b7:0a:b2:71:b8:69:
c9:3c:76:13:69:86:a8:1e:1f:8e:85:5d:ff:01:a6:e5:15:38:
bc:4c:47:b0:0d:03:cc:40:b6:23:0a:0c:80:ab:b0:a6:d8:b8:
06:fd:6e:96:65:79:5a:23:94:13:22:61:cc:5d:c0:77:78:d5:
82:fd:b0:a3:b1:9d:ed:3d:70:8a:0f:6e:38:31:17:a0:67:2e:
5c:14:a2:63:22:36:fc:4b:b8:f3:29:5c:50:02:e6:42:a5:f3:
e5:9e:e5:88:f0:3c:bc:86:32:3c:25:d3:9c:f7:96:e8:7d:9e:
6d:00:37:47:42:b7:92:55:8f:a6:83:cb:51:2f:eb:44:8b:61:
0f:00:30:59
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nOqGtLKN9gnL1T1iuseNaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyZWMyOTU0NzZjYTFkOTM0ZGIwNGQwMDI0NGZjNTA3OWI5
Yzk3NDgwHhcNMjYwMzI1MjMwMDQ2WhcNMjYwMzI2MjMwMDQ2WjAzMTEwLwYDVQQD
Eyg3OTkxNWEwYmQ2NWQ4MDRmODg3ODlhYjg0MTAxNDc0ZGY4YmYyMGI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqS4faOgC94oKbYj1UuUHxseplvTH
0ZfMIJs0g5jR4wy6Aio63JobEFxq1FVOzUx9JUnMtOArJE7DhzqbL9NADxdc/GLu
ahFmTIhDZCybzURMRQH7uJZi5yqBA2YCZnnnCHXrOLrzJkknIebsMWyvifhBu/o9
ct5LoF3/7K4jYcA+UdnCdWAE+et3cAaNDUQuVodAfLrhUIf7qqM0Z+dIIjNEKaKK
Bzqy8HoMgtPoCKKEjyUDQLAFd5NIUI9HqtRkByT7qQAwkhyCI5bcFYbfrWSkVhRV
YiAWD48DNyfkln0usJuVC26mwf5rqXSdw0mKG13Ppw6BOOnAYy3QPOR59QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHmRWgvWXYBPiHiauEEBR034vyC5MB8GA1UdIwQY
MBaAFJLsKVR2yh2TTbBNACRPxQebnJdIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva3V3cFZIYktIWk5Oc0UwQUpFX0ZCNXVjbDBnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy81ODM5NGEtOGNmNi00YjExLWJlY2It
M2JhNjkxMzE0NThiLzEva3V3cFZIYktIWk5Oc0UwQUpFX0ZCNXVjbDBnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yy81ODM5NGEtOGNmNi00YjExLWJlY2ItM2JhNjkxMzE0NThi
LzEva3V3cFZIYktIWk5Oc0UwQUpFX0ZCNXVjbDBnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYLqgS0JY
yb5SBhhjk6C2LJucfpIyhvCKYS/SZRyAd5ZYSa8R1z9LmVX7xZBs0B2V8iiN7ZGz
4CJ6BiF+x+sXh1FRtwOEnHyjzYT9hdyLAim2eBIySn69rq2ch3BoLyZKnq97A51x
Z3qR11L8zDt8yg+7a5S54yI0twqycbhpyTx2E2mGqB4fjoVd/wGm5RU4vExHsA0D
zEC2IwoMgKuwpti4Bv1ulmV5WiOUEyJhzF3Ad3jVgv2wo7Gd7T1wig9uODEXoGcu
XBSiYyI2/Eu48ylcUALmQqXz5Z7liPA8vIYyPCXTnPeW6H2ebQA3R0K3klWPpoPL
US/rRIthDwAwWQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:17:57 2026 by rpki-client