Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/aa55a2-e33e-4dc0-9d87-8cc6579415da/1/kwpXLBbQxE93Zlh9kth4ujBUHR4.mft
File: kwpXLBbQxE93Zlh9kth4ujBUHR4.mft (raw, json)
Hash identifier: 8T1xlXml4q0fqUeGXFJa1tPxO8ijAirzUEBDkLwmnd4=
Subject key identifier: ED:CD:5F:DA:10:47:F9:48:76:A3:05:27:AB:56:F6:21:E1:4E:9C:61
Authority key identifier: 93:0A:57:2C:16:D0:C4:4F:77:66:58:7D:92:D8:78:BA:30:54:1D:1E
Certificate issuer: /CN=930a572c16d0c44f7766587d92d878ba30541d1e
Certificate serial: 019F94A46EBAEB028F91E7C751C28A94102A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kwpXLBbQxE93Zlh9kth4ujBUHR4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/aa55a2-e33e-4dc0-9d87-8cc6579415da/1/kwpXLBbQxE93Zlh9kth4ujBUHR4.mft
Manifest number: 0B9E
Signing time: Fri 24 Jul 2026 15:00:31 +0000
Manifest this update: Fri 24 Jul 2026 15:00:31 +0000
Manifest next update: Sat 25 Jul 2026 15:00:31 +0000
Files and hashes: 1: HmYrDKd2yjYmZLmWzYz7se6Li1c.roa (hash: 2E+4PcgEvP7v29a2K/Pql8IKPHh2ZcXb/x/xhB+Fnbs=)
2: kwpXLBbQxE93Zlh9kth4ujBUHR4.crl (hash: dqQDNXdfObGuE7cEtS7Iyqp8kgt3DOlrILXxucuFYKA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/aa55a2-e33e-4dc0-9d87-8cc6579415da/1/kwpXLBbQxE93Zlh9kth4ujBUHR4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/aa55a2-e33e-4dc0-9d87-8cc6579415da/1/kwpXLBbQxE93Zlh9kth4ujBUHR4.mft
rsync://rpki.ripe.net/repository/DEFAULT/kwpXLBbQxE93Zlh9kth4ujBUHR4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:a4:6e:ba:eb:02:8f:91:e7:c7:51:c2:8a:94:10:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=930a572c16d0c44f7766587d92d878ba30541d1e
Validity
Not Before: Jul 24 15:00:31 2026 GMT
Not After : Jul 25 15:00:31 2026 GMT
Subject: CN=edcd5fda1047f94876a30527ab56f621e14e9c61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:21:45:dd:3e:66:5a:36:9f:86:17:11:aa:ed:
08:4f:94:67:a9:92:b8:ca:25:52:21:1f:21:ae:7d:
ec:80:9b:fc:d2:a9:24:a5:d3:a8:12:85:62:da:a0:
a0:10:f3:cb:9e:4c:38:80:a1:2b:c9:de:86:23:82:
75:9b:20:8b:b0:cf:2a:23:36:42:96:ca:1c:16:38:
49:89:49:dd:fe:5d:af:0c:3b:b9:60:b5:84:ba:46:
8d:78:39:d7:c0:81:bd:10:2e:10:36:be:52:dc:78:
e3:e1:98:1d:6f:25:da:3c:b7:96:12:4e:4a:77:d8:
ee:ea:74:98:b8:14:8d:fa:30:cf:fe:3b:07:68:11:
a9:94:10:0f:a7:56:f4:bc:e4:5e:97:7f:f8:68:f9:
37:db:cf:e1:de:85:98:4b:61:f7:a0:3e:11:93:2f:
12:6b:c8:d6:8e:92:8d:fa:54:53:25:96:49:b1:24:
65:c1:82:bb:e0:70:25:8a:ba:54:33:26:6c:88:3c:
99:75:17:fe:d1:f6:a7:c5:20:a5:ff:49:ff:94:59:
87:60:97:db:8c:8e:92:db:02:87:b7:fb:d9:65:f6:
94:28:df:ba:b5:37:f7:02:37:43:30:ae:4c:f3:e3:
40:3e:ac:57:5f:4f:c6:be:6b:8e:b8:d3:62:df:64:
4e:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:CD:5F:DA:10:47:F9:48:76:A3:05:27:AB:56:F6:21:E1:4E:9C:61
X509v3 Authority Key Identifier:
keyid:93:0A:57:2C:16:D0:C4:4F:77:66:58:7D:92:D8:78:BA:30:54:1D:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kwpXLBbQxE93Zlh9kth4ujBUHR4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/aa55a2-e33e-4dc0-9d87-8cc6579415da/1/kwpXLBbQxE93Zlh9kth4ujBUHR4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/aa55a2-e33e-4dc0-9d87-8cc6579415da/1/kwpXLBbQxE93Zlh9kth4ujBUHR4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d6:10:f9:5a:0a:9b:da:e2:96:f3:8a:f8:0a:c8:89:56:7e:58:
5a:e3:ba:2f:ff:17:63:63:83:04:cf:9d:61:70:6c:1f:01:b3:
8d:6d:c5:2f:4d:bd:92:8b:e4:69:bc:42:92:89:93:46:40:77:
65:df:a0:0a:e9:58:57:6d:fc:1a:86:b3:7f:8f:ec:0a:ae:a4:
84:c9:07:f6:7c:c9:01:f2:61:42:b9:dd:e9:79:77:0c:bf:2d:
37:f6:54:3c:46:1a:76:67:52:1b:c2:fb:13:90:24:89:fd:eb:
00:ba:6c:9d:ee:29:59:10:52:a8:d7:46:fd:81:11:e6:7c:2d:
9e:30:2e:cd:95:29:9e:77:1d:9e:84:2b:43:af:0d:f8:1a:52:
05:b9:a9:b3:62:11:5d:49:fe:3a:65:25:44:41:46:0b:03:7c:
82:d6:b9:c5:62:77:dd:b5:51:97:da:e9:91:49:68:3a:16:53:
f9:d1:bc:16:3a:e1:71:4a:48:3f:07:70:b1:db:bf:43:4d:d1:
69:84:b2:9c:89:93:3b:28:06:70:74:29:a5:01:ee:df:54:28:
4a:94:92:f7:6c:89:2b:88:a0:6a:29:10:61:92:e4:2e:ce:c5:
7a:e8:cf:db:49:d8:dc:b1:16:61:7d:d8:ed:09:66:44:c2:d1:
02:58:f9:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 17:50:28 2026 by rpki-client