Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c5/37b63e-9c88-42dc-b043-de844964f5ee/1/kwpGPWfktC2GOazfDRVCT4LxmmA.mft
File: kwpGPWfktC2GOazfDRVCT4LxmmA.mft (raw, json)
Hash identifier: 6znwql7eUK6LkWhuu6HBXpTcNmfi2jzVYLjBxKgy1NE=
Subject key identifier: 94:1D:5A:5D:FA:06:19:6B:7B:44:2C:BD:9C:91:F3:B8:23:01:18:11
Authority key identifier: 93:0A:46:3D:67:E4:B4:2D:86:39:AC:DF:0D:15:42:4F:82:F1:9A:60
Certificate issuer: /CN=930a463d67e4b42d8639acdf0d15424f82f19a60
Certificate serial: 01A0E7E4312C953D0392EBC2D66C42AC25A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kwpGPWfktC2GOazfDRVCT4LxmmA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/37b63e-9c88-42dc-b043-de844964f5ee/1/kwpGPWfktC2GOazfDRVCT4LxmmA.mft
Manifest number: 1A0C
Signing time: Mon 28 Sep 2026 12:01:26 +0000
Manifest this update: Mon 28 Sep 2026 12:01:26 +0000
Manifest next update: Tue 29 Sep 2026 12:01:26 +0000
Files and hashes: 1: izkOI9oY18uKSV4FRgb611Hp7mU.roa (hash: QUMFHyKky+C4/Hhg2gnIkNny4unJriThfo8M2jzgsDs=)
2: kwpGPWfktC2GOazfDRVCT4LxmmA.crl (hash: TovDaZGpNLWsUJY9apOV9oleQKHtZgQmtTSVP9TBVlU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/37b63e-9c88-42dc-b043-de844964f5ee/1/kwpGPWfktC2GOazfDRVCT4LxmmA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/37b63e-9c88-42dc-b043-de844964f5ee/1/kwpGPWfktC2GOazfDRVCT4LxmmA.mft
rsync://rpki.ripe.net/repository/DEFAULT/kwpGPWfktC2GOazfDRVCT4LxmmA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 12:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e7:e4:31:2c:95:3d:03:92:eb:c2:d6:6c:42:ac:25:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=930a463d67e4b42d8639acdf0d15424f82f19a60
Validity
Not Before: Sep 28 12:01:26 2026 GMT
Not After : Sep 29 12:01:26 2026 GMT
Subject: CN=941d5a5dfa06196b7b442cbd9c91f3b823011811
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:4a:dd:38:e0:11:53:24:01:75:6d:25:4b:7c:
fd:f0:dd:d3:f7:13:37:24:ed:07:65:c2:19:a8:12:
1a:21:c5:51:cb:87:14:a8:14:aa:54:03:bb:6c:6d:
2a:62:d0:35:2b:cc:7d:32:f6:73:9e:8b:38:2e:bc:
01:d5:21:db:dd:40:6b:31:12:ed:7c:19:4c:2f:b4:
6c:d1:a2:88:bb:67:1f:a0:5f:c2:06:61:01:3b:ac:
39:5d:55:cf:1a:82:d8:7b:72:d2:e6:f8:29:7f:92:
ca:a7:0d:14:75:35:48:c8:93:b8:4f:05:0d:03:1c:
29:ab:5b:b1:3f:1c:80:61:dd:f5:32:3b:53:03:20:
39:c3:ca:44:21:d6:44:67:07:38:91:de:1c:ab:2e:
a3:40:94:0d:b2:0f:09:00:de:69:97:b9:b2:2a:b5:
8b:1d:e3:de:cb:36:ce:b8:c9:05:a9:24:d3:7f:45:
b3:ca:47:8a:11:27:cd:27:95:75:00:08:32:29:43:
89:ce:25:98:d2:2c:36:4d:2d:6e:7d:d5:1e:92:48:
8b:fa:77:21:e4:05:1d:f9:62:1b:78:70:a6:1c:42:
a4:d9:96:fd:e6:3c:7e:12:4b:5a:64:7c:10:37:f6:
1d:24:76:68:4d:b4:a2:cf:6b:1c:e6:63:80:bf:e2:
e4:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:1D:5A:5D:FA:06:19:6B:7B:44:2C:BD:9C:91:F3:B8:23:01:18:11
X509v3 Authority Key Identifier:
keyid:93:0A:46:3D:67:E4:B4:2D:86:39:AC:DF:0D:15:42:4F:82:F1:9A:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kwpGPWfktC2GOazfDRVCT4LxmmA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/37b63e-9c88-42dc-b043-de844964f5ee/1/kwpGPWfktC2GOazfDRVCT4LxmmA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/37b63e-9c88-42dc-b043-de844964f5ee/1/kwpGPWfktC2GOazfDRVCT4LxmmA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:e9:a5:d1:7e:ab:31:f9:44:1d:6f:a9:78:f2:05:c2:24:33:
ca:52:e7:0a:2a:74:79:41:6f:50:f1:76:0d:ab:99:4d:d8:34:
ba:cf:de:b7:22:53:ce:3c:8e:9e:d5:8c:3f:8d:56:e9:51:da:
82:0b:d0:df:cd:eb:77:a1:ff:9b:79:c2:38:06:23:b6:ea:66:
83:da:9a:c0:97:71:bc:bc:82:5e:92:2c:7f:7b:2b:48:63:54:
35:f8:bb:c8:1a:45:c1:f2:00:71:e9:f6:1e:57:9f:fd:bd:8f:
b4:ff:dc:d3:61:10:a4:5d:3b:71:96:d9:39:3b:d4:82:11:36:
d7:27:bc:ed:f8:28:7e:4d:f1:86:30:3a:89:2d:ac:d9:6d:f7:
d5:a3:0c:19:99:02:eb:59:12:ad:3f:e6:1d:10:2a:a6:25:16:
ed:b3:05:74:8f:0e:85:03:90:1c:13:30:b4:22:c8:cf:a3:00:
be:ae:3f:d9:30:52:d0:cc:bd:5c:62:cd:fb:63:08:88:d1:e8:
ee:78:a4:47:3b:97:99:d4:80:46:6e:cd:27:0a:70:2c:b7:db:
73:15:dd:b3:83:d9:fa:49:a6:30:b7:4d:b5:ce:f0:12:8e:81:
db:0c:8b:3f:82:0f:45:b3:22:ef:cd:54:ad:a5:98:54:ab:78:
9d:90:d7:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 22:47:15 2026 by rpki-client