Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/37b63e-9c88-42dc-b043-de844964f5ee/1/kwpGPWfktC2GOazfDRVCT4LxmmA.mft
File: kwpGPWfktC2GOazfDRVCT4LxmmA.mft (raw, json)
Hash identifier: gIaGUyam5HWP2fS2KVVuGWycPwWGbFzoVmX7ys+MN4E=
Subject key identifier: 29:0D:82:F8:81:07:07:C7:E6:1B:5B:53:05:D8:3D:92:43:06:27:D3
Authority key identifier: 93:0A:46:3D:67:E4:B4:2D:86:39:AC:DF:0D:15:42:4F:82:F1:9A:60
Certificate issuer: /CN=930a463d67e4b42d8639acdf0d15424f82f19a60
Certificate serial: 019D262874F28A08570AE18CD307A1BCB8C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kwpGPWfktC2GOazfDRVCT4LxmmA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/37b63e-9c88-42dc-b043-de844964f5ee/1/kwpGPWfktC2GOazfDRVCT4LxmmA.mft
Manifest number: 181A
Signing time: Wed 25 Mar 2026 18:01:18 +0000
Manifest this update: Wed 25 Mar 2026 18:01:18 +0000
Manifest next update: Thu 26 Mar 2026 18:01:18 +0000
Files and hashes: 1: izkOI9oY18uKSV4FRgb611Hp7mU.roa (hash: QUMFHyKky+C4/Hhg2gnIkNny4unJriThfo8M2jzgsDs=)
2: kwpGPWfktC2GOazfDRVCT4LxmmA.crl (hash: H8+fAkWx0Y39ZoeJTKwUgzPEzGMgeWkxaAGoA9/5W6A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/37b63e-9c88-42dc-b043-de844964f5ee/1/kwpGPWfktC2GOazfDRVCT4LxmmA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/37b63e-9c88-42dc-b043-de844964f5ee/1/kwpGPWfktC2GOazfDRVCT4LxmmA.mft
rsync://rpki.ripe.net/repository/DEFAULT/kwpGPWfktC2GOazfDRVCT4LxmmA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:28:74:f2:8a:08:57:0a:e1:8c:d3:07:a1:bc:b8:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=930a463d67e4b42d8639acdf0d15424f82f19a60
Validity
Not Before: Mar 25 18:01:18 2026 GMT
Not After : Mar 26 18:01:18 2026 GMT
Subject: CN=290d82f8810707c7e61b5b5305d83d92430627d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:d7:9e:20:f4:3d:1e:7c:07:a0:5c:b8:46:41:
82:0c:de:db:59:ff:a5:7b:2b:24:4d:48:de:39:da:
60:b6:17:cc:8c:23:14:cb:8a:1e:d1:b2:e3:75:07:
61:32:4c:84:43:1d:fb:de:51:18:f5:3a:5c:e7:6e:
09:a0:da:aa:02:c8:91:fa:38:97:30:bf:7d:b6:dd:
93:fe:1e:59:3e:9e:ed:9b:92:e9:ed:0c:05:1d:0f:
9e:b3:57:5b:af:75:e5:cc:4d:6b:2a:1e:21:b2:e6:
23:bb:1d:ef:c2:ea:df:cc:4b:42:f1:29:7f:01:02:
70:90:de:42:f6:f3:ef:af:e7:08:46:98:0d:da:92:
37:6d:62:00:2a:ef:18:1a:66:a1:06:c6:5b:d8:72:
ff:47:07:a6:72:80:f5:6f:47:b0:2c:f0:6a:30:0e:
01:0d:b7:3c:9b:4b:64:b3:99:9f:d6:57:e6:c3:4a:
e8:ce:b0:bf:93:78:4d:13:82:54:f2:a6:09:10:00:
38:5b:6d:08:bd:0c:11:6f:db:b1:87:45:14:20:89:
b5:f6:8f:95:10:ac:d7:52:26:47:ce:d5:01:fb:15:
ad:bc:51:b8:2e:3a:a8:e3:ba:2d:29:fe:cd:b8:76:
fd:bc:02:6e:c1:4f:5f:9c:5f:37:11:b1:9d:39:62:
21:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:0D:82:F8:81:07:07:C7:E6:1B:5B:53:05:D8:3D:92:43:06:27:D3
X509v3 Authority Key Identifier:
keyid:93:0A:46:3D:67:E4:B4:2D:86:39:AC:DF:0D:15:42:4F:82:F1:9A:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kwpGPWfktC2GOazfDRVCT4LxmmA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/37b63e-9c88-42dc-b043-de844964f5ee/1/kwpGPWfktC2GOazfDRVCT4LxmmA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/37b63e-9c88-42dc-b043-de844964f5ee/1/kwpGPWfktC2GOazfDRVCT4LxmmA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:8d:74:32:9c:a9:52:57:61:1f:eb:85:12:a9:d7:af:fd:10:
e1:d2:2b:e8:3f:f5:20:42:38:6a:19:44:ee:a2:aa:8e:5d:36:
df:a0:2b:86:53:75:7a:b2:fd:65:b8:c5:bc:ce:d1:e9:a8:41:
7d:e7:58:14:bc:14:c1:48:7a:2f:8d:69:c3:f5:bd:d7:f3:8b:
09:79:17:fb:74:8b:92:7b:19:1f:69:dd:bc:44:f7:10:67:9f:
fc:6c:c8:28:57:54:79:f7:91:ef:33:95:2a:b3:3d:8c:27:26:
5b:64:7c:c9:51:37:00:b8:ef:ab:81:e1:c7:5f:b2:0d:87:62:
49:ba:06:91:17:0b:1b:e7:5d:fa:f8:70:9f:74:e9:52:24:e1:
a0:fd:94:14:c2:4a:9c:11:f7:49:12:76:b1:62:61:f4:2f:4d:
41:16:98:b8:6c:75:88:cd:15:f1:3a:14:b5:0d:2f:29:6c:fb:
e3:58:9b:63:a4:f4:0c:b3:6c:0a:e1:94:c5:cf:21:7d:fe:cc:
ec:50:35:fa:52:99:15:7f:33:a7:1f:3c:2d:78:6c:7e:a7:25:
0a:7a:09:b5:9a:68:b5:66:90:98:5d:54:f7:0f:4b:7a:1c:70:
a0:38:b1:ec:45:b6:25:1c:dc:e1:53:d8:a7:33:85:f4:8e:c8:
e1:f0:9c:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:00:54 2026 by rpki-client