
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/481637-6c1c-45e8-8fbd-44f8ed5d61d7/1/KWi04O-BBvDhKrjlAdKqTja3g8I.mft
File: KWi04O-BBvDhKrjlAdKqTja3g8I.mft (raw, json)
Hash identifier: CKdog6c/1851MBVv1OAZPxe5mFssmKuxOsrISRYlTH8=
Subject key identifier: 0D:0C:37:BA:FA:9E:A3:8D:04:98:81:B1:24:BD:97:AC:49:00:D8:26
Authority key identifier: 29:68:B4:E0:EF:81:06:F0:E1:2A:B8:E5:01:D2:AA:4E:36:B7:83:C2
Certificate issuer: /CN=2968b4e0ef8106f0e12ab8e501d2aa4e36b783c2
Certificate serial: 019E1CB4AB87419BA9A8C592979E45129A8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KWi04O-BBvDhKrjlAdKqTja3g8I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/481637-6c1c-45e8-8fbd-44f8ed5d61d7/1/KWi04O-BBvDhKrjlAdKqTja3g8I.mft
Manifest number: 06BD
Signing time: Tue 12 May 2026 15:01:02 +0000
Manifest this update: Tue 12 May 2026 15:01:02 +0000
Manifest next update: Wed 13 May 2026 15:01:02 +0000
Files and hashes: 1: 0hpieyXYpLMjxyT6mWgC5hB6md0.roa (hash: kAt+7z9pm070nauT+nqQ0kqKEN21nUOuAvbTxD+QIxY=)
2: 1-BeXqPwf4wGqQf8BMkvATSMUSvg.roa (hash: sHCQTjP4DGWRR+9EwPFQEYOJ1YUo6fNUrBWZXp0K9lU=)
3: 1npgJu3da2DJY-gYNC0mp_D7cA8.roa (hash: hTdQzo7dggejXQGIdEULc8F5CFOgeJzoVvTDCzsb0Pw=)
4: 1nu_yHaz4a9cC9ZPSse62hEV7z4.roa (hash: JbDziZ7Tgxvff3ssi+tWGZ4dDDxpjWqXNx9DdzoeJIs=)
5: 4J-3un-Yz1yl1SRrxlOCEySqXvc.asa (hash: sWD+AvZgpViJHkE0RVHOakA+EiK/FgLRtqxvsse3Zp0=)
6: 6FnJdPGW5pvMSXpTXx-nurrcFJ0.roa (hash: Neuse6+sPgHinhaJ6KBCDHKqQY1zJXc/3mtpYtYxBEE=)
7: 7urWinFGpaQwu4q2NACNc33Uqc0.roa (hash: /0y45l7uncJz+6g4k7MjIHbXj2ToXe8FU4Al2yYxxrk=)
8: AAf-UhAAKKoX99e1y-clL2vF5MI.roa (hash: CvmT5xM2HshaiNzJabgceSJQyGF24/yyH24K3t935zc=)
9: AGIcyv6akkuecB-WP_iweJslK-o.roa (hash: kZrndDnlcrxedsLlgmQqLvVG/016dDI5arID3t6+DWA=)
10: B8H6VmxfJXD2bVcz9lqwmFV8ya0.roa (hash: NunX4yChBXH4mlq5nGv56BR4PCufDfN3zLv9ymhyXpc=)
11: KWi04O-BBvDhKrjlAdKqTja3g8I.crl (hash: Psd41bZZoc5qS6KNCfWKbGZMkhK4PixM8J0nS29kygk=)
12: OqFJQmWIWlUgwt4wauu6KZcowmw.roa (hash: 5cgutzLvwloFkAKb42SaluRwnKatUxb+LuqQKWj5zbk=)
13: PJdBUbgKBhgSdoiiMeIPTyM59kM.roa (hash: +cAcRGvopCgB6nUW8hVTRtRILfXgI80D1d6TR///UD8=)
14: S-PfT7x9rr1Key3l24FiMn_GM3M.roa (hash: 69f7peYT5HVTCqDrHMvYQn0aPJJ6z/N2GfKv65UX+FI=)
15: S0f4eJQFFpAJU7gBmRif1cCdYzE.roa (hash: dMXse4/XYRfPD3fvc6eTVZmcZ4FGksUwnohMDVBgvc0=)
16: X9PkKl2cefOx63qVtTaYdrkzxd0.roa (hash: giM5kvZJx533XVrawIuRkLj+sL+9hAPHNii8Ak6qshk=)
17: YUks2Od0XGVs_0qy4zM64qK2ilc.roa (hash: fOJKj898k6XkbbvQ0FoOeL9v44eRzqi39qmYuSLOEko=)
18: dJLZ82woz9osVRfBLK_-niCyNj8.roa (hash: gbJMkN3Qke1KrYB5jhYzib+ht/WJlZL8orB4ISUMuEE=)
19: eU8i6nPKMWqCsVdPFp89hHhQ_hs.roa (hash: rNMI3gPO9pm+cF0NT/diCkjrM2NOj9L9A6LND/aPFyw=)
20: fnpBuXApf2KSN0_I10e4uBBef4I.roa (hash: mg7y4ym55PhF1uqywLWBK6bXIQO52AVjtO1tHb0Miig=)
21: mHSeWUrjc6YX-rsHgTi0XW2FRBg.roa (hash: t5nE21qjW3DJQIzH2j04n4MZU2wBAB1tTQYoPBXsr7U=)
22: mscT-yjpefQxwhiAkQBK5LU9YNI.roa (hash: AFKqRZpefBn2UqJLZfz5iAvOxe4M4XZCr9/bNjwQOC4=)
23: oq1t9a6_NvskvBAPm9-FRhVY4b8.roa (hash: Qrnl/t8muiKf2rVgb3xH0a4B7FWa64wS6nhiWVd6iLY=)
24: pc6siy3_DxYAwddcJOSIg7X07Yc.roa (hash: 2HJWbABktGThGQHpV8qMPjcUrVEey5pJp9pmV+aft3c=)
25: q5OHsMnoclPtZxTfFFLO8V7xM_A.roa (hash: kRnxJnfbBG687+x3M5t+/g6fKT4I4zdzsfRk/nUF+bo=)
26: rq7JejW5a3_irbw_aBIqgmSBTqc.roa (hash: wxuzzzOzEBqdMOCvC7XteOmfCNZ5CNJjs+MU2tOaWDY=)
27: vZNbnCQJNucOJmHvAwRz35uFqM4.roa (hash: qlxRyQlm7/P4XD2LyXkJPHShRipWPQgw8VPLfmMcrGE=)
28: wnxy5V-1cEegaxJtKVAMut3benM.roa (hash: sUdU5a1rnsEdOVKYhJDEO/xTx4mzMBYqk5k2KepP1tw=)
29: wwaY0WuQZFQx_lqyW2jSnUb7Uno.roa (hash: hC+e2pC0Y+hwrr9gw3/mXUJ159/dSRXVbIamUE8ySl8=)
30: xdd7SEG9mLRxhUdaoUG1DLRpkPI.roa (hash: GW2iR1Svx+wKk5VPTDs/4jldiJuhITkDvE5OyBpw0WA=)
31: y_hFsBFw5TnwZzUPUVeY_JDobJw.roa (hash: Yw4KTjxopDUyK/440NIIBj8AANnYLxlC6/L3kGPhoos=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/481637-6c1c-45e8-8fbd-44f8ed5d61d7/1/KWi04O-BBvDhKrjlAdKqTja3g8I.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/481637-6c1c-45e8-8fbd-44f8ed5d61d7/1/KWi04O-BBvDhKrjlAdKqTja3g8I.mft
rsync://rpki.ripe.net/repository/DEFAULT/KWi04O-BBvDhKrjlAdKqTja3g8I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:b4:ab:87:41:9b:a9:a8:c5:92:97:9e:45:12:9a:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2968b4e0ef8106f0e12ab8e501d2aa4e36b783c2
Validity
Not Before: May 12 15:01:02 2026 GMT
Not After : May 13 15:01:02 2026 GMT
Subject: CN=0d0c37bafa9ea38d049881b124bd97ac4900d826
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:8f:90:b7:41:ae:00:41:39:fd:53:36:2b:55:
f8:33:dd:11:0f:ef:01:ee:f8:14:ed:9e:0a:c1:86:
13:93:bb:38:12:c8:5a:71:28:b3:48:b1:2f:f0:04:
c2:2c:39:bb:73:47:97:c5:7e:20:1c:b8:c4:93:d3:
de:3b:c1:0a:dc:aa:e4:88:11:09:81:6c:94:0d:cb:
c3:20:6f:a8:65:3d:7d:e7:bb:5f:df:d9:8f:4e:a3:
14:8e:f5:e6:2a:a5:86:73:73:56:21:f2:73:e3:71:
99:70:c5:f8:3c:21:c7:bc:00:22:ee:88:6b:5e:45:
95:2b:ae:92:5f:ac:66:8c:a7:d1:08:40:e1:09:bb:
07:45:82:a2:55:72:19:42:7d:71:18:50:c2:2c:25:
9c:f4:9f:34:93:fc:a9:4e:33:7b:4a:38:f9:bd:15:
5f:d3:d3:be:37:01:2a:61:6c:84:2e:ba:cd:5d:2c:
14:21:8d:ec:87:ad:e3:ce:19:42:42:2a:1f:0b:0a:
98:88:ad:89:bf:2c:3a:84:ca:c1:74:32:96:16:43:
30:17:62:2b:0c:b7:bb:a5:33:73:45:65:ef:c0:8e:
ff:72:d3:f4:b1:64:d3:31:af:72:77:24:80:9a:3d:
3e:f3:14:39:cb:57:2b:dc:92:7b:72:12:7f:78:0c:
dd:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:0C:37:BA:FA:9E:A3:8D:04:98:81:B1:24:BD:97:AC:49:00:D8:26
X509v3 Authority Key Identifier:
keyid:29:68:B4:E0:EF:81:06:F0:E1:2A:B8:E5:01:D2:AA:4E:36:B7:83:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KWi04O-BBvDhKrjlAdKqTja3g8I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/481637-6c1c-45e8-8fbd-44f8ed5d61d7/1/KWi04O-BBvDhKrjlAdKqTja3g8I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/481637-6c1c-45e8-8fbd-44f8ed5d61d7/1/KWi04O-BBvDhKrjlAdKqTja3g8I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:e8:f5:a2:20:27:66:e8:c8:28:9c:4c:3f:bd:a9:0b:aa:79:
c8:91:58:4d:5e:b0:1d:9b:6f:29:5e:4d:50:53:2e:bf:fe:e2:
00:4f:5f:ef:3c:61:19:f1:3d:df:81:2e:36:e1:ec:a6:9a:97:
ae:0e:4f:99:6d:07:59:21:96:7f:ee:91:34:12:c2:d7:04:b7:
4a:24:41:02:12:aa:38:90:16:fd:2c:40:e8:e5:62:43:91:60:
16:92:f9:5c:01:3a:41:1e:49:c2:d7:ba:a9:df:16:8d:15:e3:
71:21:65:66:e9:1f:14:d7:75:45:25:9e:b3:c1:7c:42:55:06:
4b:17:b9:fb:81:2e:1f:18:dd:46:f5:a7:f3:46:86:35:16:a0:
42:85:b9:b8:4f:d6:9a:f3:b5:9c:f7:7c:48:92:b8:2e:79:0c:
ee:ac:32:a1:20:77:f5:7f:b9:ea:c3:f6:81:eb:f1:2b:3f:76:
49:31:92:ef:13:5c:bf:93:37:84:9e:d5:47:66:c6:ab:66:37:
52:e8:8c:db:90:d4:73:64:70:e6:d0:95:7e:38:9f:ed:bd:5a:
11:85:57:89:ec:a1:86:2d:70:89:59:1f:3d:33:6c:82:43:9b:
87:78:0a:77:eb:80:a4:11:16:65:ae:dd:c8:e2:ef:64:42:5e:
82:f3:59:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:26:29 2026 by rpki-client