Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/37b63e-9c88-42dc-b043-de844964f5ee/1/kwpGPWfktC2GOazfDRVCT4LxmmA.mft
File: kwpGPWfktC2GOazfDRVCT4LxmmA.mft (raw, json)
Hash identifier: 6ovg9QpfGVc1yEJMOzgmzc3dHhVkU9/MQGCoJ5A5oIo=
Subject key identifier: 44:E9:1E:95:81:26:0B:95:D3:E7:F7:BD:69:2F:E6:72:36:CB:69:30
Authority key identifier: 93:0A:46:3D:67:E4:B4:2D:86:39:AC:DF:0D:15:42:4F:82:F1:9A:60
Certificate issuer: /CN=930a463d67e4b42d8639acdf0d15424f82f19a60
Certificate serial: 019F94000BEF231060927568F30ADEF3193C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kwpGPWfktC2GOazfDRVCT4LxmmA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/37b63e-9c88-42dc-b043-de844964f5ee/1/kwpGPWfktC2GOazfDRVCT4LxmmA.mft
Manifest number: 195C
Signing time: Fri 24 Jul 2026 12:00:58 +0000
Manifest this update: Fri 24 Jul 2026 12:00:58 +0000
Manifest next update: Sat 25 Jul 2026 12:00:58 +0000
Files and hashes: 1: izkOI9oY18uKSV4FRgb611Hp7mU.roa (hash: QUMFHyKky+C4/Hhg2gnIkNny4unJriThfo8M2jzgsDs=)
2: kwpGPWfktC2GOazfDRVCT4LxmmA.crl (hash: i9LBBqzgTrbnXupl8mIWBVgwT+cNr4yfJT63GOl9Aiw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/37b63e-9c88-42dc-b043-de844964f5ee/1/kwpGPWfktC2GOazfDRVCT4LxmmA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/37b63e-9c88-42dc-b043-de844964f5ee/1/kwpGPWfktC2GOazfDRVCT4LxmmA.mft
rsync://rpki.ripe.net/repository/DEFAULT/kwpGPWfktC2GOazfDRVCT4LxmmA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:00:0b:ef:23:10:60:92:75:68:f3:0a:de:f3:19:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=930a463d67e4b42d8639acdf0d15424f82f19a60
Validity
Not Before: Jul 24 12:00:58 2026 GMT
Not After : Jul 25 12:00:58 2026 GMT
Subject: CN=44e91e9581260b95d3e7f7bd692fe67236cb6930
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:75:90:00:12:0b:13:27:17:97:47:97:61:21:
92:fe:0d:7c:13:2e:e6:f7:fa:64:2b:31:77:82:4f:
1d:5f:6e:9c:1b:6c:63:42:b8:2d:3d:0f:e1:58:ce:
43:93:69:4a:b9:a3:46:4e:f4:d6:2e:1d:a1:d3:11:
34:ed:3c:19:3c:63:9c:e3:ce:27:d7:1f:f7:fa:66:
39:93:98:39:93:c1:41:e0:07:92:8f:95:74:6c:6e:
4d:74:ca:53:75:fc:7d:6f:02:2e:f2:e3:f9:eb:58:
7d:a0:ba:14:f8:53:dc:09:b0:ef:e6:8b:55:48:de:
f8:18:95:a8:4a:f4:a9:e8:7f:a5:1d:57:b4:a5:71:
b4:59:e6:3c:36:f7:aa:a5:5f:d2:1d:ad:b7:24:94:
38:72:67:6c:8d:aa:06:d7:33:6b:cf:fc:c2:af:1e:
b7:c6:78:31:8c:5b:17:53:88:c3:6f:5e:01:37:37:
d1:0f:ca:bf:b2:83:3d:34:f0:d9:11:aa:7f:25:7b:
ae:d1:54:eb:3c:6a:da:35:b4:d4:dc:6c:bc:69:fd:
c6:08:e4:b9:24:bc:13:4b:e8:30:5a:d8:13:49:60:
54:e9:54:66:fd:a7:08:cb:1f:ca:78:b7:90:5a:a3:
7c:d3:9b:5a:97:f7:1a:7b:82:7a:6a:55:21:1b:79:
1d:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:E9:1E:95:81:26:0B:95:D3:E7:F7:BD:69:2F:E6:72:36:CB:69:30
X509v3 Authority Key Identifier:
keyid:93:0A:46:3D:67:E4:B4:2D:86:39:AC:DF:0D:15:42:4F:82:F1:9A:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kwpGPWfktC2GOazfDRVCT4LxmmA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/37b63e-9c88-42dc-b043-de844964f5ee/1/kwpGPWfktC2GOazfDRVCT4LxmmA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/37b63e-9c88-42dc-b043-de844964f5ee/1/kwpGPWfktC2GOazfDRVCT4LxmmA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:1d:d6:f8:29:7c:8e:fb:ea:87:07:06:44:90:c1:55:4a:64:
55:8b:01:af:b2:ef:24:d8:7e:8f:20:c3:cb:2d:e1:c9:a1:25:
4b:f0:0a:b6:d0:4d:ab:da:63:68:d7:34:92:51:e1:88:96:5f:
ee:aa:dc:7a:cb:67:1b:55:85:a6:c3:7a:d5:08:a3:d4:08:ae:
bc:5b:3a:98:17:83:c7:d8:df:37:43:fc:b7:38:84:11:60:06:
7b:73:1a:83:36:c9:ea:00:5a:1a:12:62:93:e7:53:f0:eb:a8:
8f:b3:60:64:80:dc:4d:85:a7:39:7b:5b:5a:49:8f:12:6f:11:
46:bf:d7:c6:92:02:75:79:68:8b:8c:d1:31:3c:2b:71:09:00:
0c:6b:37:99:8d:cd:59:47:29:b0:57:5b:15:0f:d5:db:42:6e:
69:63:9c:41:b5:f0:c9:aa:f1:44:2d:bf:48:2a:79:73:f5:73:
95:61:7b:31:9c:69:c5:ed:36:5d:12:f9:0b:c9:be:08:da:55:
e1:18:49:57:a3:37:85:78:4f:90:64:d2:f3:29:f1:f1:7b:64:
56:da:27:c8:eb:46:f4:c5:2d:87:df:e7:bc:26:6c:a4:72:3b:
cf:63:80:24:83:06:97:31:0f:e6:7b:59:6b:4b:86:5a:0a:b2:
5b:2d:f7:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:36:26 2026 by rpki-client