Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/89c3e4-b613-49ec-ae25-2e75228f9261/1/KwFArTlBTE6rAqxVQitEFj7TSw8.mft
File: KwFArTlBTE6rAqxVQitEFj7TSw8.mft (raw, json)
Hash identifier: FNBEWjoLfFU++rKRF6eLYA69UvIals0RShkS47L/0Is=
Subject key identifier: 0E:02:9E:8B:D3:92:24:FD:10:B0:F8:E0:5F:86:8A:8D:62:6C:C0:B3
Authority key identifier: 2B:01:40:AD:39:41:4C:4E:AB:02:AC:55:42:2B:44:16:3E:D3:4B:0F
Certificate issuer: /CN=2b0140ad39414c4eab02ac55422b44163ed34b0f
Certificate serial: 019F946DA54EC7F2487D3F6FDCBA89C45094
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KwFArTlBTE6rAqxVQitEFj7TSw8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/89c3e4-b613-49ec-ae25-2e75228f9261/1/KwFArTlBTE6rAqxVQitEFj7TSw8.mft
Manifest number: 071F
Signing time: Fri 24 Jul 2026 14:00:41 +0000
Manifest this update: Fri 24 Jul 2026 14:00:41 +0000
Manifest next update: Sat 25 Jul 2026 14:00:41 +0000
Files and hashes: 1: KwFArTlBTE6rAqxVQitEFj7TSw8.crl (hash: r2VjBWDse4aLco3DCuB2Ny8AIZSS3SGh3sqCpNomJw0=)
2: ir9SuLduq8J9bIwWBVKAyAFiwvk.roa (hash: LeNR5QQthmrMSFvWNxLjb0RXrLTd6w9z7OeC3M8gneo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/89c3e4-b613-49ec-ae25-2e75228f9261/1/KwFArTlBTE6rAqxVQitEFj7TSw8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/89c3e4-b613-49ec-ae25-2e75228f9261/1/KwFArTlBTE6rAqxVQitEFj7TSw8.mft
rsync://rpki.ripe.net/repository/DEFAULT/KwFArTlBTE6rAqxVQitEFj7TSw8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:6d:a5:4e:c7:f2:48:7d:3f:6f:dc:ba:89:c4:50:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b0140ad39414c4eab02ac55422b44163ed34b0f
Validity
Not Before: Jul 24 14:00:41 2026 GMT
Not After : Jul 25 14:00:41 2026 GMT
Subject: CN=0e029e8bd39224fd10b0f8e05f868a8d626cc0b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:0b:da:ba:3a:6f:b4:f0:33:00:60:73:a5:6a:
a4:c1:ce:2b:03:98:9b:c2:0f:d7:23:0d:76:3d:80:
41:1b:7c:a0:e7:c3:cf:7f:c9:95:05:f9:d9:7c:26:
13:ad:c7:84:e2:8a:bb:5d:f7:ae:0c:5c:72:83:14:
b0:51:16:45:07:eb:ba:32:a7:c2:b5:00:ba:81:4e:
10:af:6b:99:b7:fc:91:8b:c4:3e:21:d7:1a:a1:45:
29:b6:11:93:fe:58:85:61:62:a7:83:6d:41:45:39:
bd:33:ea:5c:76:9e:06:19:fe:3c:36:11:05:ef:ef:
fa:86:2a:ec:01:81:25:a4:39:bc:58:08:a1:de:67:
19:ae:fc:85:7d:b0:ed:2c:35:18:79:b6:02:82:ed:
6e:fe:3f:7d:26:f1:2a:53:f9:0e:cd:30:1e:b5:b8:
02:85:f1:2a:e3:64:b3:ed:91:80:45:3d:61:c4:4d:
81:85:dc:c3:58:d6:0f:e2:88:db:03:44:b2:e8:bf:
c4:f5:6f:1d:d3:6c:06:8b:bb:34:7b:a1:e2:6f:90:
32:58:3d:8b:cb:03:34:10:ac:aa:43:0a:2b:4c:8d:
4b:3a:62:cd:3e:f7:b8:1b:6c:72:cf:2a:b2:a0:9f:
f2:1d:58:47:c6:17:95:46:6d:c7:de:a3:95:b7:f2:
65:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:02:9E:8B:D3:92:24:FD:10:B0:F8:E0:5F:86:8A:8D:62:6C:C0:B3
X509v3 Authority Key Identifier:
keyid:2B:01:40:AD:39:41:4C:4E:AB:02:AC:55:42:2B:44:16:3E:D3:4B:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KwFArTlBTE6rAqxVQitEFj7TSw8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/89c3e4-b613-49ec-ae25-2e75228f9261/1/KwFArTlBTE6rAqxVQitEFj7TSw8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/89c3e4-b613-49ec-ae25-2e75228f9261/1/KwFArTlBTE6rAqxVQitEFj7TSw8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:b6:09:2b:c0:fb:40:8d:21:a4:33:22:d4:e2:84:f8:e5:11:
39:d0:7a:61:46:ab:07:1d:fb:43:d5:26:c4:a4:a1:33:fd:66:
e1:20:8c:99:fe:5d:61:68:c8:9e:de:1c:28:ab:68:37:19:3d:
0e:b2:42:60:d9:f2:0f:4b:20:ce:88:4a:a8:1c:17:79:01:a5:
17:0c:4d:b1:f0:a0:95:18:29:59:56:64:47:33:25:a8:44:86:
dd:c5:67:c3:43:27:5f:6c:f6:33:e8:dc:ee:55:d6:b2:55:61:
23:43:32:b8:bc:79:bb:c3:29:ba:71:4f:bb:d7:5a:44:12:71:
6a:b5:ec:78:55:0c:b9:16:5f:0f:f7:0c:84:86:87:28:ad:2a:
fe:82:47:77:a2:48:d4:09:c4:ea:96:c9:c6:1b:f7:ba:12:08:
42:21:08:de:bc:97:1f:e2:09:fa:e3:34:9e:0a:6e:e8:ed:55:
90:b4:cb:0b:b4:75:e0:15:47:0e:e5:2f:c0:2e:58:a2:da:81:
c6:29:18:cc:89:d5:68:1b:be:f8:9c:6a:ff:e0:80:74:3c:ae:
83:3e:04:26:35:e0:6b:57:73:cc:74:df:4d:32:d1:99:e9:67:
2e:7a:cb:3f:db:a9:97:dd:f2:57:0a:48:84:4c:01:af:ce:85:
d6:e5:f1:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 17:29:18 2026 by rpki-client