Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/e13112-5758-4552-b2ad-ed1b9b8e6470/1/KS-wn35or-lfI5ExFObApqpyb90.mft
File: KS-wn35or-lfI5ExFObApqpyb90.mft (raw, json)
Hash identifier: 5aITjHoyTNrSNL8eVyj1OGzpP+aQ0yFNhVAIiBEoZ8I=
Subject key identifier: EE:0A:0D:43:02:C2:84:A7:C9:CF:59:40:12:4D:E7:3F:D2:CC:3C:51
Authority key identifier: 29:2F:B0:9F:7E:68:AF:E9:5F:23:91:31:14:E6:C0:A6:AA:72:6F:DD
Certificate issuer: /CN=292fb09f7e68afe95f23913114e6c0a6aa726fdd
Certificate serial: 019D2884200366B4D9527D5CAD78F6EB86FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KS-wn35or-lfI5ExFObApqpyb90.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/e13112-5758-4552-b2ad-ed1b9b8e6470/1/KS-wn35or-lfI5ExFObApqpyb90.mft
Manifest number: 059D
Signing time: Thu 26 Mar 2026 05:00:40 +0000
Manifest this update: Thu 26 Mar 2026 05:00:40 +0000
Manifest next update: Fri 27 Mar 2026 05:00:40 +0000
Files and hashes: 1: KS-wn35or-lfI5ExFObApqpyb90.crl (hash: 7XUxjkrNRGUUz/PfTfuPts5CeAai5KIStzDFlAiCy2A=)
2: NBei4LdBsHZ6BQheCZXzva3D_io.roa (hash: Ao2IxiAhOOXCtUZ4UAP36ctfXjHHxfB4rqAgfIlvuRg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/e13112-5758-4552-b2ad-ed1b9b8e6470/1/KS-wn35or-lfI5ExFObApqpyb90.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/e13112-5758-4552-b2ad-ed1b9b8e6470/1/KS-wn35or-lfI5ExFObApqpyb90.mft
rsync://rpki.ripe.net/repository/DEFAULT/KS-wn35or-lfI5ExFObApqpyb90.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:84:20:03:66:b4:d9:52:7d:5c:ad:78:f6:eb:86:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=292fb09f7e68afe95f23913114e6c0a6aa726fdd
Validity
Not Before: Mar 26 05:00:40 2026 GMT
Not After : Mar 27 05:00:40 2026 GMT
Subject: CN=ee0a0d4302c284a7c9cf5940124de73fd2cc3c51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:a0:0e:48:7f:18:45:b3:b9:5b:7e:df:88:9a:
08:69:f5:34:42:81:75:b4:f7:e1:31:4a:2c:59:8d:
70:a9:ea:90:a2:1f:e3:e3:d8:cb:77:78:06:f2:48:
14:b4:13:a4:a1:80:17:de:12:c0:4e:37:af:86:9a:
b9:35:49:da:83:6b:b7:1f:46:4c:d7:3f:b2:cf:9c:
35:33:3e:91:12:be:eb:b4:b5:69:4b:1c:4d:e5:12:
16:0b:0e:31:66:d2:5a:f4:be:3b:1a:80:db:d4:66:
21:fe:5b:9f:f1:b8:ab:7b:c1:2b:1d:75:9c:21:36:
e9:6e:b1:a9:98:6b:e4:1c:dd:48:bc:d5:0c:7d:4e:
4b:51:15:64:62:24:c0:72:2b:58:6b:e2:f4:52:30:
42:4d:4a:98:a6:58:47:3d:21:db:71:36:9c:bf:06:
e6:cd:b9:ef:0d:75:50:7d:03:6a:a1:11:5c:d1:dd:
16:c4:5b:a1:29:05:7e:0b:3c:9c:61:61:d1:eb:4e:
5b:26:69:a5:eb:e1:9b:06:46:53:0b:4b:1b:c6:62:
56:86:22:dc:04:da:4a:4c:ea:14:af:0f:b3:4f:46:
81:24:b8:27:71:bd:0f:53:40:84:f7:b8:00:ae:6a:
02:27:6e:82:52:06:68:ce:d3:10:48:70:94:80:98:
85:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:0A:0D:43:02:C2:84:A7:C9:CF:59:40:12:4D:E7:3F:D2:CC:3C:51
X509v3 Authority Key Identifier:
keyid:29:2F:B0:9F:7E:68:AF:E9:5F:23:91:31:14:E6:C0:A6:AA:72:6F:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KS-wn35or-lfI5ExFObApqpyb90.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/e13112-5758-4552-b2ad-ed1b9b8e6470/1/KS-wn35or-lfI5ExFObApqpyb90.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/e13112-5758-4552-b2ad-ed1b9b8e6470/1/KS-wn35or-lfI5ExFObApqpyb90.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:62:62:ab:a9:19:58:1b:2b:f2:0a:f2:81:ca:dc:cb:59:8d:
ee:80:5a:46:04:d7:91:47:08:43:d3:06:cb:3f:f8:42:46:67:
5e:d2:e0:6d:39:82:47:88:71:1f:7a:4a:31:47:0c:22:f4:65:
d9:72:ec:8f:7f:02:52:ef:94:07:69:c0:ab:db:1e:db:0b:36:
97:2c:fe:34:00:c3:ff:90:7e:10:94:a6:db:6b:71:b4:c2:28:
35:6a:71:21:ca:5e:41:65:f2:88:10:92:87:5c:7f:c1:2f:84:
5a:5d:91:5d:ff:3d:cb:52:4e:fe:76:65:c1:be:24:31:05:5a:
01:9b:3a:92:42:54:43:7e:49:67:e2:7d:1e:93:05:69:c4:96:
19:3d:50:ad:18:76:64:d1:be:54:64:67:b7:b4:ce:cc:1d:8e:
01:2f:8a:d6:11:8b:d0:b1:72:4b:e3:07:0b:ae:f9:ab:4b:31:
9d:fb:9f:8d:08:3a:88:13:f4:3d:50:e4:72:ff:54:12:07:88:
a8:b9:82:46:85:e6:e7:87:b5:f8:dd:f0:46:8e:e3:d9:6a:da:
e9:d1:42:4e:db:30:6d:78:32:8c:28:8f:46:fb:1c:4c:08:b8:
49:31:3d:72:dc:20:39:a4:f6:e5:71:1c:8b:2a:24:09:09:dc:
01:d5:c8:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:55:35 2026 by rpki-client