Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/4eca3f-4f41-4598-aa1b-eedb1698c21a/1/kwy6S0MwS1HEvd-9QzF4KtkRAso.mft
File: kwy6S0MwS1HEvd-9QzF4KtkRAso.mft (raw, json)
Hash identifier: Uubd18JMVGQV0SWJJzdxJK3nXspaPRjqNzPNylptIV8=
Subject key identifier: 76:01:99:B0:E0:0A:6B:57:5D:69:E2:19:5D:20:89:07:82:DD:EE:75
Authority key identifier: 93:0C:BA:4B:43:30:4B:51:C4:BD:DF:BD:43:31:78:2A:D9:11:02:CA
Certificate issuer: /CN=930cba4b43304b51c4bddfbd4331782ad91102ca
Certificate serial: 019D28F1FBAA024480628A74BF567AAD7313
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kwy6S0MwS1HEvd-9QzF4KtkRAso.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/4eca3f-4f41-4598-aa1b-eedb1698c21a/1/kwy6S0MwS1HEvd-9QzF4KtkRAso.mft
Manifest number: 05A0
Signing time: Thu 26 Mar 2026 07:00:40 +0000
Manifest this update: Thu 26 Mar 2026 07:00:40 +0000
Manifest next update: Fri 27 Mar 2026 07:00:40 +0000
Files and hashes: 1: kwy6S0MwS1HEvd-9QzF4KtkRAso.crl (hash: hDIXY4Ov7jxr3hz7+aEbtakPnrmuLwHO4Ii4Y0Jv/Mo=)
2: oL9_-G_BE3Ib7OwngyyeN305t6g.roa (hash: bC+XZTw3+M3qUxRZBZ3OzKSTrnOKvMY+D1VuNWxrnR8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/4eca3f-4f41-4598-aa1b-eedb1698c21a/1/kwy6S0MwS1HEvd-9QzF4KtkRAso.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/4eca3f-4f41-4598-aa1b-eedb1698c21a/1/kwy6S0MwS1HEvd-9QzF4KtkRAso.mft
rsync://rpki.ripe.net/repository/DEFAULT/kwy6S0MwS1HEvd-9QzF4KtkRAso.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 07:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:f1:fb:aa:02:44:80:62:8a:74:bf:56:7a:ad:73:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=930cba4b43304b51c4bddfbd4331782ad91102ca
Validity
Not Before: Mar 26 07:00:40 2026 GMT
Not After : Mar 27 07:00:40 2026 GMT
Subject: CN=760199b0e00a6b575d69e2195d20890782ddee75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:22:24:ab:98:2c:8c:c6:b5:71:5f:35:d4:71:
23:51:a8:b3:26:d1:20:54:2f:30:e0:25:84:30:42:
f7:d3:65:7b:3a:4c:33:d6:5d:8e:b3:0a:f0:31:64:
fe:1d:7c:34:8e:46:b2:2f:52:e3:32:e2:ff:84:72:
35:b3:09:8a:32:7d:bd:cc:81:a5:bc:57:b3:d8:2a:
ed:2d:3a:da:26:f6:45:f9:99:49:01:b8:23:f3:cf:
c9:6c:6c:30:3c:d0:58:2b:bc:13:b1:6c:8b:ed:29:
13:c9:34:73:7d:d6:6a:95:54:a5:05:c6:3f:99:d4:
b6:24:f9:db:c2:fc:b1:e4:c6:e6:4a:49:b1:3e:d2:
2e:f1:4d:5e:b4:f7:1b:36:2d:8f:32:fd:e0:01:13:
43:b8:77:d2:70:52:49:58:9d:fe:dc:85:ff:e1:ae:
f7:60:fb:da:95:94:d0:f5:f5:f4:2c:1c:97:af:82:
9d:06:04:e1:da:32:06:8d:08:b1:89:9c:87:75:f7:
43:35:14:0c:86:25:a5:0e:06:ed:ec:ba:f2:2a:dd:
35:2d:55:ee:a8:dd:73:54:98:97:70:bf:e5:62:d0:
72:68:b2:0e:14:68:48:cd:1b:11:fd:8d:d9:05:44:
05:b6:34:11:89:b8:f4:8b:d4:ca:bb:24:47:9e:2f:
6b:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:01:99:B0:E0:0A:6B:57:5D:69:E2:19:5D:20:89:07:82:DD:EE:75
X509v3 Authority Key Identifier:
keyid:93:0C:BA:4B:43:30:4B:51:C4:BD:DF:BD:43:31:78:2A:D9:11:02:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kwy6S0MwS1HEvd-9QzF4KtkRAso.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/4eca3f-4f41-4598-aa1b-eedb1698c21a/1/kwy6S0MwS1HEvd-9QzF4KtkRAso.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/4eca3f-4f41-4598-aa1b-eedb1698c21a/1/kwy6S0MwS1HEvd-9QzF4KtkRAso.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:52:72:e5:eb:7b:76:6c:be:58:c4:bb:8b:22:5d:18:8e:80:
fa:75:ca:b3:9f:64:0c:06:b3:0d:fe:c1:a9:47:d6:a5:94:6f:
6d:a4:f3:57:9c:22:df:0f:bd:ec:bb:54:1d:21:39:5c:d8:ea:
b8:a7:c4:8f:15:29:37:ad:a6:d2:e2:2b:c2:90:9f:d4:96:30:
9c:e4:a6:37:e1:8f:af:32:fd:3f:42:2d:4e:f9:ac:78:7a:12:
de:76:54:16:32:42:f2:e8:01:a1:9f:3a:95:5c:8c:d0:c8:3e:
87:8c:6d:60:a1:7a:73:16:69:1d:ca:a5:4e:20:ac:ca:3d:97:
86:ec:cc:61:78:2f:d3:a8:07:b2:fb:92:2a:81:f4:db:b7:d9:
7f:94:b5:46:04:7d:ed:1f:93:7f:d5:8c:31:52:67:dd:4a:78:
c6:22:a3:7f:8a:95:44:c0:59:fa:e7:67:e3:fc:a4:dd:76:5a:
dd:0a:b8:fe:4b:8a:94:55:a5:00:73:75:05:8b:32:e1:ab:02:
9f:06:a1:e9:95:50:84:02:6f:5d:6c:cf:f8:d1:15:77:a1:c4:
d2:4b:4e:de:1c:40:a0:75:03:1d:6b:9d:63:27:ae:e8:56:be:
00:37:1e:5b:03:10:71:15:d1:99:c9:64:c9:72:4e:20:d6:38:
b1:06:47:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:25:23 2026 by rpki-client