
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a7/481637-6c1c-45e8-8fbd-44f8ed5d61d7/1/KWi04O-BBvDhKrjlAdKqTja3g8I.mft
File: KWi04O-BBvDhKrjlAdKqTja3g8I.mft (raw, json)
Hash identifier: 3DoKtY+OjEXRBg4znVpCVd6XzFBrcaNpTlnCkItiLKs=
Subject key identifier: D2:D7:1D:9F:97:A1:7E:C8:7F:13:E5:DF:6F:44:29:F3:E3:71:07:38
Authority key identifier: 29:68:B4:E0:EF:81:06:F0:E1:2A:B8:E5:01:D2:AA:4E:36:B7:83:C2
Certificate issuer: /CN=2968b4e0ef8106f0e12ab8e501d2aa4e36b783c2
Certificate serial: 01A0E4AC0E561EB7150F975E6A7A34BB4BE1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KWi04O-BBvDhKrjlAdKqTja3g8I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/481637-6c1c-45e8-8fbd-44f8ed5d61d7/1/KWi04O-BBvDhKrjlAdKqTja3g8I.mft
Manifest number: 0831
Signing time: Sun 27 Sep 2026 21:01:16 +0000
Manifest this update: Sun 27 Sep 2026 21:01:16 +0000
Manifest next update: Mon 28 Sep 2026 21:01:16 +0000
Files and hashes: 1: 0hpieyXYpLMjxyT6mWgC5hB6md0.roa (hash: kAt+7z9pm070nauT+nqQ0kqKEN21nUOuAvbTxD+QIxY=)
2: 1-BeXqPwf4wGqQf8BMkvATSMUSvg.roa (hash: sHCQTjP4DGWRR+9EwPFQEYOJ1YUo6fNUrBWZXp0K9lU=)
3: 1npgJu3da2DJY-gYNC0mp_D7cA8.roa (hash: hTdQzo7dggejXQGIdEULc8F5CFOgeJzoVvTDCzsb0Pw=)
4: 1nu_yHaz4a9cC9ZPSse62hEV7z4.roa (hash: JbDziZ7Tgxvff3ssi+tWGZ4dDDxpjWqXNx9DdzoeJIs=)
5: 4J-3un-Yz1yl1SRrxlOCEySqXvc.asa (hash: sWD+AvZgpViJHkE0RVHOakA+EiK/FgLRtqxvsse3Zp0=)
6: 6FnJdPGW5pvMSXpTXx-nurrcFJ0.roa (hash: Neuse6+sPgHinhaJ6KBCDHKqQY1zJXc/3mtpYtYxBEE=)
7: 7urWinFGpaQwu4q2NACNc33Uqc0.roa (hash: /0y45l7uncJz+6g4k7MjIHbXj2ToXe8FU4Al2yYxxrk=)
8: 9SPUZscn5UHUz0KxWadlqmWkzEI.roa (hash: +z80uBDmEaW37+3/F4siP80+51S8q+6clFxeAIILT5U=)
9: AGIcyv6akkuecB-WP_iweJslK-o.roa (hash: kZrndDnlcrxedsLlgmQqLvVG/016dDI5arID3t6+DWA=)
10: B8H6VmxfJXD2bVcz9lqwmFV8ya0.roa (hash: NunX4yChBXH4mlq5nGv56BR4PCufDfN3zLv9ymhyXpc=)
11: KWi04O-BBvDhKrjlAdKqTja3g8I.crl (hash: po2VKSK1BQ3HcfBu9vrYUS2zoD6ILPW7FwFL96Mf/UQ=)
12: OqFJQmWIWlUgwt4wauu6KZcowmw.roa (hash: 5cgutzLvwloFkAKb42SaluRwnKatUxb+LuqQKWj5zbk=)
13: PJdBUbgKBhgSdoiiMeIPTyM59kM.roa (hash: +cAcRGvopCgB6nUW8hVTRtRILfXgI80D1d6TR///UD8=)
14: S-PfT7x9rr1Key3l24FiMn_GM3M.roa (hash: 69f7peYT5HVTCqDrHMvYQn0aPJJ6z/N2GfKv65UX+FI=)
15: S0f4eJQFFpAJU7gBmRif1cCdYzE.roa (hash: dMXse4/XYRfPD3fvc6eTVZmcZ4FGksUwnohMDVBgvc0=)
16: X9PkKl2cefOx63qVtTaYdrkzxd0.roa (hash: giM5kvZJx533XVrawIuRkLj+sL+9hAPHNii8Ak6qshk=)
17: YUks2Od0XGVs_0qy4zM64qK2ilc.roa (hash: fOJKj898k6XkbbvQ0FoOeL9v44eRzqi39qmYuSLOEko=)
18: d09V5eWhYv9aykbhDD8PZZhSkDY.roa (hash: eCHaD+x218KDcdTbF1dK/1E4f55+dTQp2/AUHsT1heU=)
19: dJLZ82woz9osVRfBLK_-niCyNj8.roa (hash: gbJMkN3Qke1KrYB5jhYzib+ht/WJlZL8orB4ISUMuEE=)
20: eU8i6nPKMWqCsVdPFp89hHhQ_hs.roa (hash: rNMI3gPO9pm+cF0NT/diCkjrM2NOj9L9A6LND/aPFyw=)
21: fnpBuXApf2KSN0_I10e4uBBef4I.roa (hash: mg7y4ym55PhF1uqywLWBK6bXIQO52AVjtO1tHb0Miig=)
22: mHSeWUrjc6YX-rsHgTi0XW2FRBg.roa (hash: t5nE21qjW3DJQIzH2j04n4MZU2wBAB1tTQYoPBXsr7U=)
23: mscT-yjpefQxwhiAkQBK5LU9YNI.roa (hash: AFKqRZpefBn2UqJLZfz5iAvOxe4M4XZCr9/bNjwQOC4=)
24: oq1t9a6_NvskvBAPm9-FRhVY4b8.roa (hash: Qrnl/t8muiKf2rVgb3xH0a4B7FWa64wS6nhiWVd6iLY=)
25: pc6siy3_DxYAwddcJOSIg7X07Yc.roa (hash: 2HJWbABktGThGQHpV8qMPjcUrVEey5pJp9pmV+aft3c=)
26: q5OHsMnoclPtZxTfFFLO8V7xM_A.roa (hash: kRnxJnfbBG687+x3M5t+/g6fKT4I4zdzsfRk/nUF+bo=)
27: rq7JejW5a3_irbw_aBIqgmSBTqc.roa (hash: wxuzzzOzEBqdMOCvC7XteOmfCNZ5CNJjs+MU2tOaWDY=)
28: vZNbnCQJNucOJmHvAwRz35uFqM4.roa (hash: qlxRyQlm7/P4XD2LyXkJPHShRipWPQgw8VPLfmMcrGE=)
29: wnxy5V-1cEegaxJtKVAMut3benM.roa (hash: sUdU5a1rnsEdOVKYhJDEO/xTx4mzMBYqk5k2KepP1tw=)
30: wwaY0WuQZFQx_lqyW2jSnUb7Uno.roa (hash: hC+e2pC0Y+hwrr9gw3/mXUJ159/dSRXVbIamUE8ySl8=)
31: y_hFsBFw5TnwZzUPUVeY_JDobJw.roa (hash: Yw4KTjxopDUyK/440NIIBj8AANnYLxlC6/L3kGPhoos=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/481637-6c1c-45e8-8fbd-44f8ed5d61d7/1/KWi04O-BBvDhKrjlAdKqTja3g8I.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/481637-6c1c-45e8-8fbd-44f8ed5d61d7/1/KWi04O-BBvDhKrjlAdKqTja3g8I.mft
rsync://rpki.ripe.net/repository/DEFAULT/KWi04O-BBvDhKrjlAdKqTja3g8I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 14:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e4:ac:0e:56:1e:b7:15:0f:97:5e:6a:7a:34:bb:4b:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2968b4e0ef8106f0e12ab8e501d2aa4e36b783c2
Validity
Not Before: Sep 27 21:01:16 2026 GMT
Not After : Sep 28 21:01:16 2026 GMT
Subject: CN=d2d71d9f97a17ec87f13e5df6f4429f3e3710738
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:ef:cd:03:89:a1:38:fb:77:49:13:6a:a6:d4:
b6:b4:28:22:bd:4f:93:a3:6f:ee:f6:6e:83:31:8d:
1b:e8:90:a3:4d:a2:ff:01:ab:70:83:39:84:60:23:
53:69:31:5a:dc:6b:a6:09:f2:d7:fe:75:24:e6:86:
11:ab:39:04:58:f3:7f:ef:de:7b:0d:75:52:3b:63:
41:05:c9:da:eb:24:78:d7:d8:c9:01:9b:72:8e:35:
85:0e:32:84:f8:5d:e7:52:b4:81:83:6f:f7:9e:66:
a1:e0:40:7e:6c:a4:d5:4c:0c:85:45:d3:e1:a0:3b:
65:36:8c:9c:51:61:6e:28:75:97:1f:de:84:49:86:
ef:b8:6c:b3:98:e8:6e:fb:bb:12:b9:3d:80:c6:7e:
2b:87:ff:1f:f1:be:ac:93:f6:bb:7a:dd:02:8f:de:
c5:31:36:54:ca:77:a3:f5:2b:ec:94:d0:4b:8a:48:
2d:1d:d1:12:c3:65:16:49:70:85:f4:dc:bc:72:65:
25:00:a2:4a:20:4c:dd:18:c4:b3:44:e4:81:a8:6b:
fb:bf:e9:43:13:4c:9b:1d:cb:3b:bf:7f:92:88:10:
6d:d2:3d:5a:89:cb:cb:7c:6d:90:7a:65:62:da:15:
c2:17:52:4e:01:40:16:26:47:3f:07:d0:09:a4:4f:
6e:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:D7:1D:9F:97:A1:7E:C8:7F:13:E5:DF:6F:44:29:F3:E3:71:07:38
X509v3 Authority Key Identifier:
keyid:29:68:B4:E0:EF:81:06:F0:E1:2A:B8:E5:01:D2:AA:4E:36:B7:83:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KWi04O-BBvDhKrjlAdKqTja3g8I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/481637-6c1c-45e8-8fbd-44f8ed5d61d7/1/KWi04O-BBvDhKrjlAdKqTja3g8I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/481637-6c1c-45e8-8fbd-44f8ed5d61d7/1/KWi04O-BBvDhKrjlAdKqTja3g8I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:b1:54:12:5c:8a:b7:67:10:0a:83:94:28:8b:0d:e1:17:07:
68:e7:60:67:a2:fc:db:81:03:8b:65:6c:9f:b9:f6:a9:33:ea:
8e:57:da:f6:99:7f:d5:83:fe:73:20:40:52:a3:97:db:ce:17:
62:15:f8:c7:98:28:1d:b8:a4:50:09:54:27:a3:fb:55:73:c8:
21:47:e6:bb:c1:02:54:fd:f6:04:27:4b:dd:49:5c:59:6f:73:
7e:07:3e:5e:80:66:9b:b7:2d:f7:06:d7:0f:2b:f0:30:eb:12:
a0:ae:9c:27:ae:82:dd:67:af:4a:07:47:40:7d:e6:db:9b:8a:
95:f8:80:1d:bd:f9:63:df:e2:90:b5:74:60:f8:8c:87:f0:48:
e3:46:cb:fe:07:43:be:71:93:14:75:20:c7:c2:c5:2f:8b:73:
cc:52:74:70:de:83:eb:6e:b2:04:3c:e0:b5:8f:7d:97:d4:63:
a5:51:14:da:a2:da:8d:9b:6c:c7:21:7c:21:18:62:aa:79:bb:
51:4f:af:e2:db:7f:34:6a:b4:b4:3a:ad:86:89:95:34:e0:fe:
4b:59:51:eb:30:32:39:42:3b:48:1e:28:8c:b7:60:71:96:a9:
7e:2c:31:a7:2a:43:eb:40:80:58:72:1f:94:e8:96:03:77:4a:
ff:00:9d:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 23:43:37 2026 by rpki-client