
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/481637-6c1c-45e8-8fbd-44f8ed5d61d7/1/KWi04O-BBvDhKrjlAdKqTja3g8I.mft
File: KWi04O-BBvDhKrjlAdKqTja3g8I.mft (raw, json)
Hash identifier: qQpz4Cup6GN/scX/jQkR+6IxO135tfO8667fpj3mzcQ=
Subject key identifier: 0E:57:9F:A6:51:09:B8:B8:FE:71:A2:0A:B3:1D:E9:8D:3C:ED:62:D5
Authority key identifier: 29:68:B4:E0:EF:81:06:F0:E1:2A:B8:E5:01:D2:AA:4E:36:B7:83:C2
Certificate issuer: /CN=2968b4e0ef8106f0e12ab8e501d2aa4e36b783c2
Certificate serial: 019D281657E23CACB7210F8A844B40E59FD4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KWi04O-BBvDhKrjlAdKqTja3g8I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/481637-6c1c-45e8-8fbd-44f8ed5d61d7/1/KWi04O-BBvDhKrjlAdKqTja3g8I.mft
Manifest number: 063E
Signing time: Thu 26 Mar 2026 03:00:45 +0000
Manifest this update: Thu 26 Mar 2026 03:00:45 +0000
Manifest next update: Fri 27 Mar 2026 03:00:45 +0000
Files and hashes: 1: 0hpieyXYpLMjxyT6mWgC5hB6md0.roa (hash: kAt+7z9pm070nauT+nqQ0kqKEN21nUOuAvbTxD+QIxY=)
2: 1-BeXqPwf4wGqQf8BMkvATSMUSvg.roa (hash: sHCQTjP4DGWRR+9EwPFQEYOJ1YUo6fNUrBWZXp0K9lU=)
3: 1npgJu3da2DJY-gYNC0mp_D7cA8.roa (hash: hTdQzo7dggejXQGIdEULc8F5CFOgeJzoVvTDCzsb0Pw=)
4: 1nu_yHaz4a9cC9ZPSse62hEV7z4.roa (hash: JbDziZ7Tgxvff3ssi+tWGZ4dDDxpjWqXNx9DdzoeJIs=)
5: 4J-3un-Yz1yl1SRrxlOCEySqXvc.asa (hash: sWD+AvZgpViJHkE0RVHOakA+EiK/FgLRtqxvsse3Zp0=)
6: 6FnJdPGW5pvMSXpTXx-nurrcFJ0.roa (hash: Neuse6+sPgHinhaJ6KBCDHKqQY1zJXc/3mtpYtYxBEE=)
7: 7urWinFGpaQwu4q2NACNc33Uqc0.roa (hash: /0y45l7uncJz+6g4k7MjIHbXj2ToXe8FU4Al2yYxxrk=)
8: AGIcyv6akkuecB-WP_iweJslK-o.roa (hash: kZrndDnlcrxedsLlgmQqLvVG/016dDI5arID3t6+DWA=)
9: B8H6VmxfJXD2bVcz9lqwmFV8ya0.roa (hash: NunX4yChBXH4mlq5nGv56BR4PCufDfN3zLv9ymhyXpc=)
10: KWi04O-BBvDhKrjlAdKqTja3g8I.crl (hash: 405f/hKuciGL50Q4yWW+TJodf4bcGI4cQLUcrV+i8Js=)
11: OqFJQmWIWlUgwt4wauu6KZcowmw.roa (hash: 5cgutzLvwloFkAKb42SaluRwnKatUxb+LuqQKWj5zbk=)
12: PJdBUbgKBhgSdoiiMeIPTyM59kM.roa (hash: +cAcRGvopCgB6nUW8hVTRtRILfXgI80D1d6TR///UD8=)
13: S-PfT7x9rr1Key3l24FiMn_GM3M.roa (hash: 69f7peYT5HVTCqDrHMvYQn0aPJJ6z/N2GfKv65UX+FI=)
14: S0f4eJQFFpAJU7gBmRif1cCdYzE.roa (hash: dMXse4/XYRfPD3fvc6eTVZmcZ4FGksUwnohMDVBgvc0=)
15: X9PkKl2cefOx63qVtTaYdrkzxd0.roa (hash: giM5kvZJx533XVrawIuRkLj+sL+9hAPHNii8Ak6qshk=)
16: YUks2Od0XGVs_0qy4zM64qK2ilc.roa (hash: fOJKj898k6XkbbvQ0FoOeL9v44eRzqi39qmYuSLOEko=)
17: dJLZ82woz9osVRfBLK_-niCyNj8.roa (hash: gbJMkN3Qke1KrYB5jhYzib+ht/WJlZL8orB4ISUMuEE=)
18: eU8i6nPKMWqCsVdPFp89hHhQ_hs.roa (hash: rNMI3gPO9pm+cF0NT/diCkjrM2NOj9L9A6LND/aPFyw=)
19: fnpBuXApf2KSN0_I10e4uBBef4I.roa (hash: mg7y4ym55PhF1uqywLWBK6bXIQO52AVjtO1tHb0Miig=)
20: jqEjGYh7qUp-XQFkbZ_XJaczat0.roa (hash: WzbAMKZ6zmVx5KMLERHIaL+opRQ0pxgEvfyxQMwxNeQ=)
21: mHSeWUrjc6YX-rsHgTi0XW2FRBg.roa (hash: t5nE21qjW3DJQIzH2j04n4MZU2wBAB1tTQYoPBXsr7U=)
22: mscT-yjpefQxwhiAkQBK5LU9YNI.roa (hash: AFKqRZpefBn2UqJLZfz5iAvOxe4M4XZCr9/bNjwQOC4=)
23: oq1t9a6_NvskvBAPm9-FRhVY4b8.roa (hash: Qrnl/t8muiKf2rVgb3xH0a4B7FWa64wS6nhiWVd6iLY=)
24: pc6siy3_DxYAwddcJOSIg7X07Yc.roa (hash: 2HJWbABktGThGQHpV8qMPjcUrVEey5pJp9pmV+aft3c=)
25: q5OHsMnoclPtZxTfFFLO8V7xM_A.roa (hash: kRnxJnfbBG687+x3M5t+/g6fKT4I4zdzsfRk/nUF+bo=)
26: rq7JejW5a3_irbw_aBIqgmSBTqc.roa (hash: wxuzzzOzEBqdMOCvC7XteOmfCNZ5CNJjs+MU2tOaWDY=)
27: vZNbnCQJNucOJmHvAwRz35uFqM4.roa (hash: qlxRyQlm7/P4XD2LyXkJPHShRipWPQgw8VPLfmMcrGE=)
28: wnxy5V-1cEegaxJtKVAMut3benM.roa (hash: sUdU5a1rnsEdOVKYhJDEO/xTx4mzMBYqk5k2KepP1tw=)
29: wwaY0WuQZFQx_lqyW2jSnUb7Uno.roa (hash: hC+e2pC0Y+hwrr9gw3/mXUJ159/dSRXVbIamUE8ySl8=)
30: xdd7SEG9mLRxhUdaoUG1DLRpkPI.roa (hash: GW2iR1Svx+wKk5VPTDs/4jldiJuhITkDvE5OyBpw0WA=)
31: y_hFsBFw5TnwZzUPUVeY_JDobJw.roa (hash: Yw4KTjxopDUyK/440NIIBj8AANnYLxlC6/L3kGPhoos=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/481637-6c1c-45e8-8fbd-44f8ed5d61d7/1/KWi04O-BBvDhKrjlAdKqTja3g8I.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/481637-6c1c-45e8-8fbd-44f8ed5d61d7/1/KWi04O-BBvDhKrjlAdKqTja3g8I.mft
rsync://rpki.ripe.net/repository/DEFAULT/KWi04O-BBvDhKrjlAdKqTja3g8I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:16:57:e2:3c:ac:b7:21:0f:8a:84:4b:40:e5:9f:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2968b4e0ef8106f0e12ab8e501d2aa4e36b783c2
Validity
Not Before: Mar 26 03:00:45 2026 GMT
Not After : Mar 27 03:00:45 2026 GMT
Subject: CN=0e579fa65109b8b8fe71a20ab31de98d3ced62d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:67:ea:bf:46:bf:d2:09:f8:59:ef:d9:f4:db:
a3:29:d7:d0:75:63:e7:d7:78:22:4e:01:3a:8e:3a:
38:7c:50:ea:97:3b:f4:74:7c:bf:a1:94:f9:9d:6b:
4f:48:52:03:43:dc:65:4e:16:0b:2a:ea:2e:6d:30:
8d:a2:1f:4d:c8:db:e7:c1:32:50:aa:41:21:cb:c1:
97:43:d1:7c:21:18:d9:95:aa:6e:6e:72:c2:3d:4b:
ea:52:63:4e:d9:ad:80:53:f3:b5:21:79:6e:d1:11:
5a:ab:f5:0f:38:9c:0d:02:f7:b2:33:41:3c:66:35:
e7:be:c9:1e:37:fe:10:0d:47:b1:67:6d:34:a2:66:
61:20:15:8e:f0:64:f5:03:28:1b:97:73:29:30:11:
0f:05:e2:2e:f4:7e:20:fa:e8:30:02:47:d9:fe:9e:
e0:ac:bb:84:d2:65:39:36:e7:0a:5a:5b:35:79:e7:
9d:fa:c5:20:aa:97:e1:fa:ab:98:2a:ac:8f:8f:72:
83:3a:f5:75:97:cc:22:ef:1f:ce:4d:54:36:29:ff:
ed:fb:b6:0e:91:bf:79:2a:ec:9f:29:23:c4:b6:e6:
96:c7:0b:b2:9e:23:d9:fe:a3:7f:e5:0a:57:7d:10:
06:f7:0c:ea:e0:21:bd:ca:35:14:88:9f:fc:04:1c:
44:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:57:9F:A6:51:09:B8:B8:FE:71:A2:0A:B3:1D:E9:8D:3C:ED:62:D5
X509v3 Authority Key Identifier:
keyid:29:68:B4:E0:EF:81:06:F0:E1:2A:B8:E5:01:D2:AA:4E:36:B7:83:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KWi04O-BBvDhKrjlAdKqTja3g8I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/481637-6c1c-45e8-8fbd-44f8ed5d61d7/1/KWi04O-BBvDhKrjlAdKqTja3g8I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/481637-6c1c-45e8-8fbd-44f8ed5d61d7/1/KWi04O-BBvDhKrjlAdKqTja3g8I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:10:80:43:06:1c:3e:03:63:63:0a:cf:a0:65:e6:97:6a:51:
d5:e8:0b:92:38:fd:b5:fb:8d:51:14:ef:39:3e:5e:88:94:80:
3a:ab:77:a4:b0:20:5a:fe:24:7d:cb:b8:9b:37:47:e8:44:71:
14:90:de:2d:6f:37:ba:61:75:f7:5c:dc:c3:dc:da:48:27:37:
08:33:5f:3e:04:cb:6e:1b:d7:99:30:c0:b8:93:c0:4e:1f:5a:
70:2e:73:9a:e1:d7:a9:69:22:2a:e6:3d:2d:7c:64:10:1d:54:
54:39:2a:c0:ff:fb:ad:89:b5:ad:0d:0f:3a:51:fe:45:e4:ef:
93:d6:5a:1e:46:11:b7:66:ab:b2:44:e0:73:46:e9:46:59:43:
18:25:15:4e:df:2c:70:cc:32:25:fa:8b:e0:7d:6b:57:dd:1a:
78:c4:e7:4d:e1:71:5b:ac:cb:e7:09:f6:00:dc:ea:3f:09:09:
3d:ea:fb:b8:5a:93:81:b3:09:7b:b4:c9:09:3e:20:5b:ee:8d:
66:b9:91:c0:7b:11:ac:26:cf:ed:d3:08:ab:86:30:81:d3:c3:
21:23:b4:d2:f2:ab:aa:47:a8:38:a0:ec:6f:81:83:64:3e:af:
99:56:36:83:0a:7a:54:df:8e:61:ab:b8:af:50:05:0f:bf:fc:
f9:bd:37:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:54:48 2026 by rpki-client