Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/ebf6cb-a779-464f-8bee-8f08e0272df8/1/kwHqBZY8l1byjuLpi488xHncn1g.mft
File: kwHqBZY8l1byjuLpi488xHncn1g.mft (raw, json)
Hash identifier: RsL99QfpgX8C9+gKI4yksJAJ/BKS504cq3BvjEHsV+w=
Subject key identifier: 16:B5:73:73:58:5E:A1:96:7F:89:DF:BD:06:87:0E:D2:90:DE:74:73
Authority key identifier: 93:01:EA:05:96:3C:97:56:F2:8E:E2:E9:8B:8F:3C:C4:79:DC:9F:58
Certificate issuer: /CN=9301ea05963c9756f28ee2e98b8f3cc479dc9f58
Certificate serial: 019D2704CF2D78498D3656C0148B08080F6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kwHqBZY8l1byjuLpi488xHncn1g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/ebf6cb-a779-464f-8bee-8f08e0272df8/1/kwHqBZY8l1byjuLpi488xHncn1g.mft
Manifest number: 1887
Signing time: Wed 25 Mar 2026 22:01:59 +0000
Manifest this update: Wed 25 Mar 2026 22:01:59 +0000
Manifest next update: Thu 26 Mar 2026 22:01:59 +0000
Files and hashes: 1: FBhDmdYEI1srtuu7JrFgr66x8ew.roa (hash: R2ovnBFrcn5EnM6GfbKn3aVU8U4YfuAvDOw4VakEfcE=)
2: H0_IomRRpyz9ZuX5Gk79E728dxM.roa (hash: e7ZDp/bE6peOT9CEy08QjhlQAfh2fOeWM0+4hMAUyDw=)
3: aYuTn-9yQTAQTYpNQto8rHBvH-k.roa (hash: nykKhsVthOtSK2vkaElBeNHj+3rLVcnRvVm79PIvOeg=)
4: kwHqBZY8l1byjuLpi488xHncn1g.crl (hash: 48DzD5i0LrBwIA930QBN96MWpML0YMaWoIiKeEtlmTI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/ebf6cb-a779-464f-8bee-8f08e0272df8/1/kwHqBZY8l1byjuLpi488xHncn1g.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/ebf6cb-a779-464f-8bee-8f08e0272df8/1/kwHqBZY8l1byjuLpi488xHncn1g.mft
rsync://rpki.ripe.net/repository/DEFAULT/kwHqBZY8l1byjuLpi488xHncn1g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:01:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:cf:2d:78:49:8d:36:56:c0:14:8b:08:08:0f:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9301ea05963c9756f28ee2e98b8f3cc479dc9f58
Validity
Not Before: Mar 25 22:01:59 2026 GMT
Not After : Mar 26 22:01:59 2026 GMT
Subject: CN=16b57373585ea1967f89dfbd06870ed290de7473
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:5c:36:ad:78:dc:15:9d:46:02:bc:44:14:53:
15:fe:f6:86:84:ec:30:c5:11:41:23:71:b1:1b:6b:
7f:78:31:9d:52:04:31:d6:ff:39:e0:a5:a2:ce:8e:
23:28:c5:7c:11:94:f6:59:c7:86:04:5c:6c:05:bc:
7b:7d:db:38:b0:b0:a7:ed:e0:53:d6:e0:04:63:4c:
d1:0a:c7:1a:e6:5f:ba:4c:ef:29:8d:1f:54:cc:44:
20:76:8f:67:14:29:35:4c:b8:34:b6:90:d6:57:a1:
07:45:a2:eb:1c:40:32:f0:a1:c5:cf:79:cb:6a:46:
8f:95:e5:7c:3e:ac:7b:0c:fd:dc:25:34:26:3d:2d:
22:d9:68:a3:36:05:67:09:92:3d:c6:68:8e:d4:1e:
b0:11:1e:26:83:56:3c:e9:45:c3:c4:7d:32:d2:6d:
8b:b1:08:66:5e:e4:c5:2c:50:9f:4b:37:65:f0:af:
75:f3:08:e5:8f:46:3b:ba:b6:cc:91:b7:cf:ed:0d:
7f:55:70:37:14:03:50:f9:d9:97:3d:5e:ee:eb:76:
f9:05:4e:61:78:b1:d5:49:fc:15:97:2c:94:88:cb:
ba:e2:ed:21:ec:76:aa:ed:de:28:e3:49:4d:bc:4c:
48:5e:50:5d:d5:55:25:88:de:2f:fa:dd:ce:ce:55:
80:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:B5:73:73:58:5E:A1:96:7F:89:DF:BD:06:87:0E:D2:90:DE:74:73
X509v3 Authority Key Identifier:
keyid:93:01:EA:05:96:3C:97:56:F2:8E:E2:E9:8B:8F:3C:C4:79:DC:9F:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kwHqBZY8l1byjuLpi488xHncn1g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/ebf6cb-a779-464f-8bee-8f08e0272df8/1/kwHqBZY8l1byjuLpi488xHncn1g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/ebf6cb-a779-464f-8bee-8f08e0272df8/1/kwHqBZY8l1byjuLpi488xHncn1g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:ef:44:7e:33:0c:f9:d9:92:58:a5:cd:aa:93:8c:6f:63:c5:
60:fe:e0:be:b4:20:4f:3f:81:92:aa:11:f2:98:e6:c1:15:70:
a9:9c:5b:73:ea:79:a3:0b:54:5e:6c:24:1b:4b:fd:88:14:00:
f0:81:8b:a0:ad:b7:12:1d:09:e4:45:f8:d2:4d:09:d6:f2:78:
93:05:6e:e6:aa:cb:9d:1a:41:4c:47:5e:c1:1a:72:27:37:2d:
0d:e8:07:95:0b:c4:d9:8f:53:9f:1c:16:30:60:99:c5:fa:df:
45:6f:6a:29:ca:47:8e:80:4d:ac:b2:22:88:a0:10:d9:ce:fb:
03:eb:ef:f1:0a:4a:77:54:79:31:0b:7c:7b:d5:71:56:9a:9b:
02:d6:3f:5d:a2:fc:cd:e6:0f:83:22:8c:2d:07:79:73:b2:40:
53:43:90:d2:ab:24:87:81:19:7e:0c:ee:22:5a:28:8a:4a:40:
13:e6:b7:42:3b:6e:0f:56:b4:c1:b6:67:61:c2:6e:ff:92:69:
3c:7a:67:b2:ef:0f:3b:c5:8d:cb:16:73:14:87:fa:fe:b0:c4:
74:4e:78:f9:52:6f:aa:10:09:e3:e4:30:ce:2b:71:8c:09:30:
8b:6f:df:96:de:9b:7e:e6:cd:38:af:b3:30:6d:81:08:27:c8:
ff:18:14:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:27:34 2026 by rpki-client