Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/5950c9-97ec-40dc-9b11-0295a1c11feb/1/kw4KO7COSsZzY-MLqDsHFjLQqkM.mft
File: kw4KO7COSsZzY-MLqDsHFjLQqkM.mft (raw, json)
Hash identifier: u1xtdkP+CceJJNVKEtK8sy44orrr4oszkq8nwxoX/Jc=
Subject key identifier: 93:17:48:C4:85:C0:A6:3C:45:EB:4F:2D:BF:59:A6:F8:D6:84:1D:FC
Authority key identifier: 93:0E:0A:3B:B0:8E:4A:C6:73:63:E3:0B:A8:3B:07:16:32:D0:AA:43
Certificate issuer: /CN=930e0a3bb08e4ac67363e30ba83b071632d0aa43
Certificate serial: 019D2772AC379DB4DC94FA7888CE1E386B08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kw4KO7COSsZzY-MLqDsHFjLQqkM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/5950c9-97ec-40dc-9b11-0295a1c11feb/1/kw4KO7COSsZzY-MLqDsHFjLQqkM.mft
Manifest number: 058F
Signing time: Thu 26 Mar 2026 00:01:59 +0000
Manifest this update: Thu 26 Mar 2026 00:01:59 +0000
Manifest next update: Fri 27 Mar 2026 00:01:59 +0000
Files and hashes: 1: i15V9-c2PXcAQ6Lawcpbt-GL_iw.roa (hash: GlpJvGhZVuGz4aIWr1fluB9fbXXAkmsasT3KRZg6g4Y=)
2: kw4KO7COSsZzY-MLqDsHFjLQqkM.crl (hash: vZiBWKn3LuCfgu0qIKoFKi60Y2VLp5aKD09oNQCrXxs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/5950c9-97ec-40dc-9b11-0295a1c11feb/1/kw4KO7COSsZzY-MLqDsHFjLQqkM.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/5950c9-97ec-40dc-9b11-0295a1c11feb/1/kw4KO7COSsZzY-MLqDsHFjLQqkM.mft
rsync://rpki.ripe.net/repository/DEFAULT/kw4KO7COSsZzY-MLqDsHFjLQqkM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:ac:37:9d:b4:dc:94:fa:78:88:ce:1e:38:6b:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=930e0a3bb08e4ac67363e30ba83b071632d0aa43
Validity
Not Before: Mar 26 00:01:59 2026 GMT
Not After : Mar 27 00:01:59 2026 GMT
Subject: CN=931748c485c0a63c45eb4f2dbf59a6f8d6841dfc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:a3:d9:69:6d:ad:55:36:31:43:a1:a4:c8:fd:
18:46:e0:c9:2d:9e:e5:f0:4f:ef:91:d8:72:85:b1:
a3:04:de:1c:b1:cd:c0:ad:71:d2:5a:bf:66:67:28:
93:a2:52:de:fd:2c:e2:c2:f6:61:c3:34:04:00:9d:
20:fb:15:32:61:04:2c:d7:c5:bb:93:de:5e:3a:91:
11:f8:55:88:a8:f6:62:35:de:64:f8:c0:af:a0:85:
a3:4c:70:63:26:e4:90:79:31:79:34:15:ee:d8:c4:
ec:75:22:cd:e1:bb:be:dc:5d:85:e8:66:1d:c8:62:
51:4f:bb:22:25:97:df:38:97:91:51:f4:23:57:a4:
be:7d:d6:b9:15:89:93:17:69:62:68:4d:c9:05:b5:
03:a3:5d:01:e7:ce:91:7c:45:af:91:9d:63:e6:56:
f4:19:44:81:09:54:1d:0c:7c:d3:53:d4:4c:6b:84:
18:18:c5:d4:b4:80:7b:ab:3b:5d:89:77:c1:88:07:
1e:ff:b1:9b:b6:db:5f:b0:cd:35:fa:72:ed:b1:06:
0d:88:63:82:08:36:c4:74:6d:1c:79:cd:89:37:89:
f7:ab:ef:76:02:a3:1b:2e:0b:5b:f3:17:d8:89:60:
84:6e:d1:d2:4f:9c:dd:62:98:58:a5:27:2b:b2:30:
b9:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:17:48:C4:85:C0:A6:3C:45:EB:4F:2D:BF:59:A6:F8:D6:84:1D:FC
X509v3 Authority Key Identifier:
keyid:93:0E:0A:3B:B0:8E:4A:C6:73:63:E3:0B:A8:3B:07:16:32:D0:AA:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kw4KO7COSsZzY-MLqDsHFjLQqkM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/5950c9-97ec-40dc-9b11-0295a1c11feb/1/kw4KO7COSsZzY-MLqDsHFjLQqkM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/5950c9-97ec-40dc-9b11-0295a1c11feb/1/kw4KO7COSsZzY-MLqDsHFjLQqkM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:5d:c2:f1:71:89:e2:da:81:77:11:f8:69:bb:e5:12:7f:2e:
85:f5:85:80:52:10:e2:b3:21:ad:21:9a:c5:89:7a:9a:63:1c:
fa:12:10:52:59:7e:03:f1:1d:9c:40:2f:09:56:ce:5a:9f:61:
99:54:d0:cd:81:11:b3:28:6a:14:1c:c6:85:d3:11:52:24:ad:
05:f9:64:d2:1b:16:f3:f0:dc:19:ea:9e:02:f5:d6:cc:09:cf:
9a:b2:98:e6:cc:29:63:04:b1:cf:1f:35:2d:01:a4:69:db:92:
0a:d5:91:26:33:cc:cf:f9:83:8c:84:fa:26:ba:aa:8d:09:07:
5c:0d:b0:81:f1:f6:f5:4e:20:a1:00:b1:0b:5e:98:37:4b:95:
72:68:6c:1c:55:32:3a:b8:aa:23:26:a3:72:83:61:27:a3:37:
8d:5a:ba:ee:c1:46:5b:a8:57:bd:67:5e:54:9c:ca:43:b3:23:
a2:35:99:41:54:68:3a:d4:95:0a:34:8c:40:18:c1:cc:51:61:
3d:fb:e9:49:d6:b2:f0:74:51:43:93:f2:ed:1b:2a:0e:90:6c:
be:6e:80:67:94:7e:0b:0e:78:4f:96:3f:99:7a:f5:07:21:3b:
51:06:74:1b:fa:d8:e9:26:53:65:b5:20:17:ce:08:82:ac:c0:
55:ce:83:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:17:03 2026 by rpki-client