Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9e/e13112-5758-4552-b2ad-ed1b9b8e6470/1/KS-wn35or-lfI5ExFObApqpyb90.mft
File: KS-wn35or-lfI5ExFObApqpyb90.mft (raw, json)
Hash identifier: xrtzuoE1La9RNeGZjdhDYHXZlqkW2HGq0/a/LQKFxe0=
Subject key identifier: 2F:B7:DE:2B:4C:B9:9F:B1:6C:36:D3:5D:64:70:67:BA:7F:68:08:43
Authority key identifier: 29:2F:B0:9F:7E:68:AF:E9:5F:23:91:31:14:E6:C0:A6:AA:72:6F:DD
Certificate issuer: /CN=292fb09f7e68afe95f23913114e6c0a6aa726fdd
Certificate serial: 01A0D8DEB3B35787449C8E355DE4F6CE606C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KS-wn35or-lfI5ExFObApqpyb90.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/e13112-5758-4552-b2ad-ed1b9b8e6470/1/KS-wn35or-lfI5ExFObApqpyb90.mft
Manifest number: 0786
Signing time: Fri 25 Sep 2026 14:01:08 +0000
Manifest this update: Fri 25 Sep 2026 14:01:08 +0000
Manifest next update: Sat 26 Sep 2026 14:01:08 +0000
Files and hashes: 1: KS-wn35or-lfI5ExFObApqpyb90.crl (hash: cqeAL0iJJ5Hyrq/ybP9tVVjanoBc3ETnBahz2ydxy44=)
2: NBei4LdBsHZ6BQheCZXzva3D_io.roa (hash: Ao2IxiAhOOXCtUZ4UAP36ctfXjHHxfB4rqAgfIlvuRg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/e13112-5758-4552-b2ad-ed1b9b8e6470/1/KS-wn35or-lfI5ExFObApqpyb90.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/e13112-5758-4552-b2ad-ed1b9b8e6470/1/KS-wn35or-lfI5ExFObApqpyb90.mft
rsync://rpki.ripe.net/repository/DEFAULT/KS-wn35or-lfI5ExFObApqpyb90.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 14:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d8:de:b3:b3:57:87:44:9c:8e:35:5d:e4:f6:ce:60:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=292fb09f7e68afe95f23913114e6c0a6aa726fdd
Validity
Not Before: Sep 25 14:01:08 2026 GMT
Not After : Sep 26 14:01:08 2026 GMT
Subject: CN=2fb7de2b4cb99fb16c36d35d647067ba7f680843
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:dc:a3:4e:c9:fe:2d:f8:3a:d7:0f:78:53:c3:
c9:5f:3f:43:ee:54:16:39:f7:25:16:22:9d:58:dc:
26:ef:e5:93:bd:68:39:06:ef:d9:12:e8:97:a0:6f:
55:40:a0:27:01:5b:e8:f5:dc:53:dd:fd:af:e3:89:
1e:99:70:20:55:94:ae:cf:45:7f:74:a3:40:4a:90:
a6:8b:27:bc:ac:da:3d:33:1c:72:db:4b:dc:6e:2f:
e2:83:2c:b9:f8:76:1d:86:e5:f2:83:c4:b7:54:76:
0c:cc:68:54:d1:9b:97:f6:95:98:ef:f3:b6:8f:a6:
f8:c9:34:07:2f:60:ad:54:5c:29:94:8e:29:3a:d7:
c6:1e:2b:bc:ad:55:43:94:a7:33:fc:cb:a9:c1:ef:
34:d5:05:eb:6b:4f:a8:f4:31:27:83:88:6b:d7:b5:
ce:9d:7b:c5:b7:70:bb:0d:b8:7b:51:6e:0d:2f:92:
e3:c8:0b:49:10:89:aa:a0:ed:47:f5:36:77:6b:69:
eb:f1:aa:92:72:79:4b:19:7a:a4:7a:1d:6b:bc:c0:
4a:53:06:d9:3b:a3:a1:c8:b1:5b:7b:b2:f5:24:75:
5b:8e:ab:9b:71:59:1c:c4:a4:85:0b:a6:ab:9c:8f:
32:f9:41:91:7f:4f:23:e6:80:79:da:28:5d:d5:e7:
37:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:B7:DE:2B:4C:B9:9F:B1:6C:36:D3:5D:64:70:67:BA:7F:68:08:43
X509v3 Authority Key Identifier:
keyid:29:2F:B0:9F:7E:68:AF:E9:5F:23:91:31:14:E6:C0:A6:AA:72:6F:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KS-wn35or-lfI5ExFObApqpyb90.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/e13112-5758-4552-b2ad-ed1b9b8e6470/1/KS-wn35or-lfI5ExFObApqpyb90.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/e13112-5758-4552-b2ad-ed1b9b8e6470/1/KS-wn35or-lfI5ExFObApqpyb90.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:3b:6d:ea:7b:f2:53:91:06:21:d9:6c:e5:ff:77:76:e4:50:
db:a1:21:63:2a:14:d4:92:68:50:f5:17:fa:af:28:0a:ea:27:
04:af:a4:7b:53:b2:f1:ef:1c:e9:19:8a:d5:99:d1:a0:77:e4:
53:bf:96:79:57:df:2b:9f:ab:f4:a3:1a:fa:52:1b:40:12:a7:
74:f7:d4:dc:9b:eb:7f:8e:1d:ef:ae:27:d6:d1:14:ce:b0:b4:
d2:2f:69:2b:ac:4d:32:a6:3f:32:62:64:71:d8:2c:68:52:d6:
a1:02:fc:dc:af:99:d1:53:77:08:e6:66:fc:a7:88:1e:2f:3a:
92:87:c1:75:25:03:2a:48:6a:28:10:77:3f:a9:05:a7:1c:7f:
30:4c:99:95:7b:73:98:f3:44:f0:ec:8c:6a:3b:22:95:14:01:
3b:36:0f:49:ef:37:51:62:f8:a8:9d:ff:ff:17:34:78:2c:78:
f8:d5:a7:16:9f:68:4b:c1:e4:49:e4:bb:ae:fd:3a:d9:fc:64:
23:93:da:c1:b7:b8:9f:02:14:b6:ad:7a:e4:cf:9d:76:48:95:
e9:ec:35:84:b4:bd:a9:f6:75:e0:af:47:84:38:cc:51:ab:e0:
66:c3:03:a6:22:20:7a:13:45:ae:c8:31:06:7d:17:b4:be:58:
f8:da:e9:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 22:08:55 2026 by rpki-client