Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/545258-f8a9-4ceb-b01b-c8df84e7ae29/1/KWJHhUnYzCZMLMV9znGQXRdvuIo.mft
File: KWJHhUnYzCZMLMV9znGQXRdvuIo.mft (raw, json)
Hash identifier: xKM5hf/Uaw+2IyJ+d0Nww8dlvkK1Cy9o9ScqN/yVqEU=
Subject key identifier: CD:25:3D:59:92:ED:02:EC:B5:CD:C2:E8:A9:D9:9C:F2:48:59:9A:A3
Authority key identifier: 29:62:47:85:49:D8:CC:26:4C:2C:C5:7D:CE:71:90:5D:17:6F:B8:8A
Certificate issuer: /CN=2962478549d8cc264c2cc57dce71905d176fb88a
Certificate serial: 019D26961BE601B87A9FFBD98A65218C1688
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KWJHhUnYzCZMLMV9znGQXRdvuIo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/545258-f8a9-4ceb-b01b-c8df84e7ae29/1/KWJHhUnYzCZMLMV9znGQXRdvuIo.mft
Manifest number: 1817
Signing time: Wed 25 Mar 2026 20:01:04 +0000
Manifest this update: Wed 25 Mar 2026 20:01:04 +0000
Manifest next update: Thu 26 Mar 2026 20:01:04 +0000
Files and hashes: 1: DcG15XyhdtPXOoAizwXiwS-vgWk.roa (hash: 03f0uMllqGm3yVnRgDCB+1RlKyMTqkNgfPJ+f2YUXH4=)
2: KWJHhUnYzCZMLMV9znGQXRdvuIo.crl (hash: kOCSIUM5Qqegr8kUdm2XUh9xJyHA4GAzAd/KcrbzFsc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/545258-f8a9-4ceb-b01b-c8df84e7ae29/1/KWJHhUnYzCZMLMV9znGQXRdvuIo.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/545258-f8a9-4ceb-b01b-c8df84e7ae29/1/KWJHhUnYzCZMLMV9znGQXRdvuIo.mft
rsync://rpki.ripe.net/repository/DEFAULT/KWJHhUnYzCZMLMV9znGQXRdvuIo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 20:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:96:1b:e6:01:b8:7a:9f:fb:d9:8a:65:21:8c:16:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2962478549d8cc264c2cc57dce71905d176fb88a
Validity
Not Before: Mar 25 20:01:04 2026 GMT
Not After : Mar 26 20:01:04 2026 GMT
Subject: CN=cd253d5992ed02ecb5cdc2e8a9d99cf248599aa3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:06:7e:d7:96:81:0a:41:c2:de:2f:4c:e1:8e:
d4:26:66:43:5f:fc:e9:4d:04:2c:6b:6b:a7:43:1f:
c6:c7:1f:23:f0:ed:79:f5:3b:5c:9e:39:ea:66:bc:
a9:f7:41:db:d8:91:90:f2:c6:f2:8f:ee:02:ad:89:
1a:12:21:d1:a8:14:17:d7:c9:f0:b6:41:5f:7e:61:
7f:a6:77:23:02:96:e2:6d:fb:c2:14:dd:59:a3:94:
4a:33:f1:2a:de:1d:18:87:df:28:2e:a5:4b:d5:10:
0b:34:5e:45:a2:3f:6d:4d:d9:63:08:6d:d9:9a:2c:
83:d5:c5:87:84:e2:c3:a2:b2:59:a6:9f:71:2c:82:
08:e1:52:aa:a3:e8:f9:cb:08:74:51:b7:4e:8f:de:
b4:89:76:76:f0:e2:67:e5:f3:f9:7f:00:db:8f:34:
f3:89:46:1b:35:86:56:d9:ba:8f:92:d4:cd:95:ca:
0d:47:25:f4:6b:4a:3c:04:5e:51:9e:d0:2a:4c:1e:
2c:d0:83:5c:0d:22:d3:37:3a:c0:78:a2:82:f6:43:
84:5f:72:3e:0a:af:f9:b3:06:13:51:f6:55:75:2f:
81:5f:26:60:45:85:ae:8e:08:34:c2:b8:68:49:33:
db:c3:f2:8c:ca:78:7d:de:9d:65:f4:38:fe:5d:29:
28:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:25:3D:59:92:ED:02:EC:B5:CD:C2:E8:A9:D9:9C:F2:48:59:9A:A3
X509v3 Authority Key Identifier:
keyid:29:62:47:85:49:D8:CC:26:4C:2C:C5:7D:CE:71:90:5D:17:6F:B8:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KWJHhUnYzCZMLMV9znGQXRdvuIo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/545258-f8a9-4ceb-b01b-c8df84e7ae29/1/KWJHhUnYzCZMLMV9znGQXRdvuIo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/545258-f8a9-4ceb-b01b-c8df84e7ae29/1/KWJHhUnYzCZMLMV9znGQXRdvuIo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:72:42:c6:99:6b:51:2d:97:c8:f8:94:81:f6:32:9d:e8:c1:
7c:76:0e:83:05:58:a6:bc:d7:e6:8b:fb:c0:29:d8:3f:7b:7b:
6b:28:6b:af:e4:f6:f7:e0:cf:b3:ff:87:cb:dd:98:fb:4c:3e:
be:11:e0:92:46:47:30:a5:a2:30:e4:dc:f2:e5:37:a2:53:11:
be:9f:0d:2c:43:88:cd:38:af:7c:5c:2f:95:d2:c6:2d:b1:83:
74:61:11:0b:5e:66:f3:3c:29:26:79:27:eb:e4:58:81:da:3f:
94:3a:d3:dd:94:53:89:51:77:1b:57:a3:84:f4:84:66:9b:ef:
be:98:07:4f:56:be:cc:65:58:7a:22:42:18:38:e0:79:68:57:
6e:cb:f3:e2:89:68:00:62:e1:07:05:c8:46:ab:b1:6b:b4:ae:
8b:aa:80:32:dc:30:17:0e:cf:48:11:7b:89:24:4e:94:41:15:
fc:8d:a1:65:cf:cc:b2:7e:f3:ed:9d:73:99:f6:ad:a9:40:15:
a9:74:69:8f:be:62:34:c0:0a:a8:e3:13:b2:60:58:f1:e0:b7:
91:25:29:ee:1a:a1:c3:bc:ad:63:d2:6e:73:4a:f1:b6:c4:2f:
7c:b2:70:b5:ba:26:7f:92:97:cf:8a:d5:3a:92:20:c9:9f:3e:
b8:20:29:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:50:54 2026 by rpki-client