Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/aa55a2-e33e-4dc0-9d87-8cc6579415da/1/kwpXLBbQxE93Zlh9kth4ujBUHR4.mft
File: kwpXLBbQxE93Zlh9kth4ujBUHR4.mft (raw, json)
Hash identifier: XugLqicKbSq06LlYqSeMirDm2UT3wXAiaBYp4wfe/2A=
Subject key identifier: E9:0F:74:E8:FC:60:3E:A7:B8:AB:C1:36:E4:36:0C:83:DA:D1:B2:6A
Authority key identifier: 93:0A:57:2C:16:D0:C4:4F:77:66:58:7D:92:D8:78:BA:30:54:1D:1E
Certificate issuer: /CN=930a572c16d0c44f7766587d92d878ba30541d1e
Certificate serial: 019D26CCDA3C0A8693E140E38D098E903003
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kwpXLBbQxE93Zlh9kth4ujBUHR4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/aa55a2-e33e-4dc0-9d87-8cc6579415da/1/kwpXLBbQxE93Zlh9kth4ujBUHR4.mft
Manifest number: 0A5C
Signing time: Wed 25 Mar 2026 21:00:52 +0000
Manifest this update: Wed 25 Mar 2026 21:00:52 +0000
Manifest next update: Thu 26 Mar 2026 21:00:52 +0000
Files and hashes: 1: HmYrDKd2yjYmZLmWzYz7se6Li1c.roa (hash: 2E+4PcgEvP7v29a2K/Pql8IKPHh2ZcXb/x/xhB+Fnbs=)
2: kwpXLBbQxE93Zlh9kth4ujBUHR4.crl (hash: rlGD7crvrMnzzubJIEhiTqFilIPD2zO+ucwA+khA+vc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/aa55a2-e33e-4dc0-9d87-8cc6579415da/1/kwpXLBbQxE93Zlh9kth4ujBUHR4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/aa55a2-e33e-4dc0-9d87-8cc6579415da/1/kwpXLBbQxE93Zlh9kth4ujBUHR4.mft
rsync://rpki.ripe.net/repository/DEFAULT/kwpXLBbQxE93Zlh9kth4ujBUHR4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cc:da:3c:0a:86:93:e1:40:e3:8d:09:8e:90:30:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=930a572c16d0c44f7766587d92d878ba30541d1e
Validity
Not Before: Mar 25 21:00:52 2026 GMT
Not After : Mar 26 21:00:52 2026 GMT
Subject: CN=e90f74e8fc603ea7b8abc136e4360c83dad1b26a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:4e:42:f4:0c:65:5b:2c:b6:69:87:5e:9f:c5:
e3:05:c0:19:98:a9:be:34:39:74:7b:fd:5d:85:42:
ef:d8:55:92:6d:f4:3b:6d:09:f4:0b:d0:c3:b5:03:
67:79:14:f0:cb:85:96:59:f9:0a:25:cc:73:2b:98:
8e:df:18:d8:79:73:54:24:22:42:6e:ba:98:fd:76:
8a:6b:d9:a7:e0:d1:85:a1:7b:8a:93:f0:c1:b7:a4:
da:94:94:db:0a:24:97:b0:cc:aa:8e:68:8f:93:13:
9c:84:02:38:01:ef:f5:92:d6:ca:a2:91:d7:01:57:
a9:1c:5b:dc:87:e0:5c:4a:13:b7:97:61:6a:9c:f7:
2c:0c:93:a2:c2:b8:98:3e:a3:ab:93:66:67:51:91:
a6:38:92:c2:37:ff:43:44:95:ad:06:4f:91:44:e2:
1e:f9:1b:4b:35:83:ae:77:d1:42:f7:e8:c2:e4:01:
4a:98:3b:31:12:fb:4b:cf:67:aa:6c:3a:9b:87:6d:
82:7a:49:16:db:57:7b:64:fb:e8:41:da:96:1f:5e:
ef:27:f8:0e:05:f9:7a:46:f9:31:03:d6:a0:12:8a:
2e:cd:20:17:1d:17:9b:5b:73:75:a4:05:78:6b:09:
66:b0:e6:d6:5d:db:85:48:b9:09:cc:ea:dc:4d:e4:
d5:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:0F:74:E8:FC:60:3E:A7:B8:AB:C1:36:E4:36:0C:83:DA:D1:B2:6A
X509v3 Authority Key Identifier:
keyid:93:0A:57:2C:16:D0:C4:4F:77:66:58:7D:92:D8:78:BA:30:54:1D:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kwpXLBbQxE93Zlh9kth4ujBUHR4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/aa55a2-e33e-4dc0-9d87-8cc6579415da/1/kwpXLBbQxE93Zlh9kth4ujBUHR4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/aa55a2-e33e-4dc0-9d87-8cc6579415da/1/kwpXLBbQxE93Zlh9kth4ujBUHR4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:ba:58:7e:18:0d:e0:f9:a5:58:80:e5:ae:93:86:45:28:e7:
33:06:d7:97:78:ce:e9:be:99:a1:b3:af:e1:ab:fe:74:2c:2c:
7d:5c:c4:a4:8c:0a:21:f5:b9:46:4b:70:2f:17:ae:66:ea:8e:
12:d0:be:21:30:bd:be:eb:24:6f:da:1b:55:f7:94:e3:92:fc:
15:ba:fb:40:b0:ed:58:bc:33:c7:7b:ef:cb:e1:b4:8f:fa:f9:
8e:89:7b:6a:f2:5f:d1:2f:34:f0:56:e2:0b:d8:ba:d9:2e:f8:
ec:72:45:0d:6f:36:76:7a:57:da:b9:eb:3d:13:65:3b:39:70:
e7:bb:66:14:7b:87:e6:4d:e9:a9:ed:dd:a5:47:5b:32:69:12:
e4:92:ec:47:97:e2:62:f8:8a:8b:31:5b:3f:b3:7b:8b:13:3b:
aa:08:fb:9d:56:28:85:d8:27:a6:25:3e:d8:e3:01:61:4a:7a:
06:20:00:90:91:db:cb:fe:bd:58:06:87:c7:e9:dc:17:89:90:
d7:b3:eb:57:b6:0d:79:9b:00:2b:a4:a0:b6:62:80:4a:3e:21:
e0:d2:10:8e:5b:08:58:bf:31:cd:74:0b:c2:1c:a3:04:96:6f:
87:bb:e5:c8:9b:d5:bc:de:09:b5:36:89:8a:41:4e:e9:89:8c:
bf:b1:4f:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:18:39 2026 by rpki-client