Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a3/89c3e4-b613-49ec-ae25-2e75228f9261/1/KwFArTlBTE6rAqxVQitEFj7TSw8.mft
File: KwFArTlBTE6rAqxVQitEFj7TSw8.mft (raw, json)
Hash identifier: Pi4bGqb/DO2DhmsTXqc9Gh+BywNq0q5vKjeoRCeHuws=
Subject key identifier: 55:36:12:3E:D8:C9:38:D8:F8:E2:B0:19:16:83:0D:3F:9D:DD:22:62
Authority key identifier: 2B:01:40:AD:39:41:4C:4E:AB:02:AC:55:42:2B:44:16:3E:D3:4B:0F
Certificate issuer: /CN=2b0140ad39414c4eab02ac55422b44163ed34b0f
Certificate serial: 01A10B144F5EA365506E43838891FE2AF629
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KwFArTlBTE6rAqxVQitEFj7TSw8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/89c3e4-b613-49ec-ae25-2e75228f9261/1/KwFArTlBTE6rAqxVQitEFj7TSw8.mft
Manifest number: 07E1
Signing time: Mon 05 Oct 2026 08:00:42 +0000
Manifest this update: Mon 05 Oct 2026 08:00:42 +0000
Manifest next update: Tue 06 Oct 2026 08:00:42 +0000
Files and hashes: 1: KwFArTlBTE6rAqxVQitEFj7TSw8.crl (hash: FONeZqUe3eN8QauacZ/wL4DFMtuzvalYvtl933r+MpQ=)
2: ir9SuLduq8J9bIwWBVKAyAFiwvk.roa (hash: LeNR5QQthmrMSFvWNxLjb0RXrLTd6w9z7OeC3M8gneo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/89c3e4-b613-49ec-ae25-2e75228f9261/1/KwFArTlBTE6rAqxVQitEFj7TSw8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/89c3e4-b613-49ec-ae25-2e75228f9261/1/KwFArTlBTE6rAqxVQitEFj7TSw8.mft
rsync://rpki.ripe.net/repository/DEFAULT/KwFArTlBTE6rAqxVQitEFj7TSw8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 Oct 2026 08:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:0b:14:4f:5e:a3:65:50:6e:43:83:88:91:fe:2a:f6:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b0140ad39414c4eab02ac55422b44163ed34b0f
Validity
Not Before: Oct 5 08:00:42 2026 GMT
Not After : Oct 6 08:00:42 2026 GMT
Subject: CN=5536123ed8c938d8f8e2b01916830d3f9ddd2262
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:fc:a5:f8:2c:70:c2:1a:6e:5c:77:02:ad:ee:
54:97:81:5a:7e:15:7e:50:e0:c9:a6:67:d5:73:0d:
25:65:58:cf:e6:71:32:2f:15:fb:23:7d:0e:a4:5d:
e7:f5:9e:e5:84:d4:2f:e5:a5:43:e0:8d:c7:3c:a2:
7c:b1:20:a0:6a:80:80:3b:84:07:f9:be:ac:c7:3f:
32:27:88:ca:48:5f:7e:84:08:ca:db:f6:fd:22:d4:
6d:bb:1d:5e:aa:b3:61:18:fa:ae:01:e8:02:1f:4d:
eb:24:66:f8:8f:19:41:43:0b:78:8c:eb:94:43:56:
bf:f0:91:8b:d4:67:70:79:bc:0d:a1:b1:1f:69:ad:
0f:e7:d5:bc:3a:0b:5c:1f:b3:0d:13:a8:6b:d9:de:
4f:93:50:b5:a2:cc:3d:19:f1:31:4b:33:3d:35:1d:
4d:3b:31:57:7d:ae:c0:c6:ab:57:3d:91:63:46:bc:
e7:5b:42:c8:e2:06:aa:83:97:1a:b9:75:ba:de:05:
08:34:bf:c1:e4:13:3e:b7:44:f7:61:73:66:6d:04:
b6:22:47:1b:f9:5b:aa:40:b9:fe:86:af:00:04:22:
8e:c0:c5:f4:9a:fa:84:4b:2a:f9:1e:08:f3:17:83:
f4:e5:e9:9c:ac:c4:ab:c2:99:3d:cf:fc:8a:14:3a:
c3:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:36:12:3E:D8:C9:38:D8:F8:E2:B0:19:16:83:0D:3F:9D:DD:22:62
X509v3 Authority Key Identifier:
keyid:2B:01:40:AD:39:41:4C:4E:AB:02:AC:55:42:2B:44:16:3E:D3:4B:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KwFArTlBTE6rAqxVQitEFj7TSw8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/89c3e4-b613-49ec-ae25-2e75228f9261/1/KwFArTlBTE6rAqxVQitEFj7TSw8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/89c3e4-b613-49ec-ae25-2e75228f9261/1/KwFArTlBTE6rAqxVQitEFj7TSw8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:67:65:76:03:c5:e7:fe:0a:13:54:85:be:38:32:fb:16:27:
49:21:2f:83:af:f8:36:b7:7c:ce:20:be:90:4f:08:a6:fc:f8:
19:c4:3e:d4:59:d7:c5:71:8e:10:05:47:6c:17:1b:df:cc:e9:
84:24:53:75:1d:0f:67:7f:a6:08:ea:c6:d2:dc:95:a7:8d:02:
c5:7a:a5:68:8c:86:9d:f2:61:d1:9d:4e:f0:33:ac:9a:0d:bc:
16:fe:b0:cb:80:15:22:de:6f:06:75:73:a9:b6:84:ec:53:5e:
8b:e4:2e:18:94:75:fc:ae:32:13:67:5e:2b:cc:96:5d:89:cd:
67:8f:9a:70:b6:89:fe:78:1f:6e:d4:0b:7c:c5:39:91:3e:fb:
e7:71:c2:a8:ba:ca:31:2e:1a:f5:48:54:2b:a2:da:1c:0a:53:
fa:87:0a:c0:c5:b6:9f:33:44:72:47:4a:ff:b1:67:82:12:14:
f0:01:06:bd:c6:ab:26:bc:5e:fb:10:12:6c:f0:02:13:e5:36:
cb:89:e8:0d:80:27:ce:73:ff:30:61:d3:12:98:3e:2e:67:6f:
bf:8f:18:5a:46:83:d2:ab:3c:a9:e4:69:85:d0:d0:92:2f:47:
a5:00:49:cf:c5:17:27:f5:2c:71:9b:c5:db:c1:d7:12:b2:13:
24:92:d4:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 16:48:56 2026 by rpki-client