Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/35a19e-edab-44c9-916a-16b5ebdd2040/1/KAWFe6e9XcggxhYmxjNJ47f6p9M.mft
File: KAWFe6e9XcggxhYmxjNJ47f6p9M.mft (raw, json)
Hash identifier: k2R0LHuteXBkagGQSl5e9u6LVCech7N5z/sFMJtqkWk=
Subject key identifier: 6D:D6:6D:53:89:18:A5:48:93:C7:9A:82:82:7B:8C:00:6A:10:D3:AA
Authority key identifier: 28:05:85:7B:A7:BD:5D:C8:20:C6:16:26:C6:33:49:E3:B7:FA:A7:D3
Certificate issuer: /CN=2805857ba7bd5dc820c61626c63349e3b7faa7d3
Certificate serial: 019CABD8F9EFA8DBB0008EAA834B9C607715
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KAWFe6e9XcggxhYmxjNJ47f6p9M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/35a19e-edab-44c9-916a-16b5ebdd2040/1/KAWFe6e9XcggxhYmxjNJ47f6p9M.mft
Manifest number: 10DA
Signing time: Mon 02 Mar 2026 00:00:49 +0000
Manifest this update: Mon 02 Mar 2026 00:00:49 +0000
Manifest next update: Tue 03 Mar 2026 00:00:49 +0000
Files and hashes: 1: KAWFe6e9XcggxhYmxjNJ47f6p9M.crl (hash: bBmAm39GugUuVIELHjjXbEnKxC15yXh3iytMjVy6zFM=)
2: O1rNzvRwKl6vTU_ykriXJLKMTfE.roa (hash: cMg6CgAQOaopNdwApex1GmDSfWpvN+uvDUY++vWUD+o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/35a19e-edab-44c9-916a-16b5ebdd2040/1/KAWFe6e9XcggxhYmxjNJ47f6p9M.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/35a19e-edab-44c9-916a-16b5ebdd2040/1/KAWFe6e9XcggxhYmxjNJ47f6p9M.mft
rsync://rpki.ripe.net/repository/DEFAULT/KAWFe6e9XcggxhYmxjNJ47f6p9M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d8:f9:ef:a8:db:b0:00:8e:aa:83:4b:9c:60:77:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2805857ba7bd5dc820c61626c63349e3b7faa7d3
Validity
Not Before: Mar 2 00:00:49 2026 GMT
Not After : Mar 3 00:00:49 2026 GMT
Subject: CN=6dd66d538918a54893c79a82827b8c006a10d3aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:7d:c3:41:f4:a4:89:18:24:70:3b:14:2e:59:
8f:08:51:a0:4a:b6:47:e9:4c:f6:56:a0:2f:36:2b:
85:b9:19:aa:4d:b4:16:b8:01:16:8b:a3:a4:26:39:
3f:5c:8c:4c:98:15:d7:5e:dc:90:2f:04:f2:68:c8:
c5:9d:5d:5f:23:33:6a:1b:aa:15:75:c6:b6:92:38:
97:f5:9e:25:d3:36:96:a0:dc:a9:ef:c1:7d:45:00:
71:ff:e6:0f:de:6f:f3:7b:ca:df:84:9f:80:b4:a3:
51:95:c4:3a:3c:a2:2e:1f:5e:f7:b6:43:07:be:3a:
e4:55:f5:56:bb:53:c9:11:81:c8:4a:43:7b:29:c2:
c5:0c:c2:cb:91:79:48:9e:35:1b:64:b0:0d:b0:17:
c9:14:ed:c4:a7:f1:39:37:02:60:25:cf:43:25:8a:
f7:f0:f5:72:02:9e:26:29:2c:c7:26:6b:fc:5a:ab:
97:3e:b3:78:94:3d:ef:10:f7:71:21:a2:ba:e0:12:
f6:19:d5:25:cf:f5:86:4d:f1:51:f2:14:96:41:4a:
0c:af:dd:af:f4:f3:83:57:5d:0b:d7:8b:bb:f3:ef:
e9:84:ef:63:c1:37:a3:8b:40:48:29:bf:bf:6a:44:
35:24:b6:a9:bb:9f:93:90:dc:97:73:7f:ce:22:b6:
67:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:D6:6D:53:89:18:A5:48:93:C7:9A:82:82:7B:8C:00:6A:10:D3:AA
X509v3 Authority Key Identifier:
keyid:28:05:85:7B:A7:BD:5D:C8:20:C6:16:26:C6:33:49:E3:B7:FA:A7:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KAWFe6e9XcggxhYmxjNJ47f6p9M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/35a19e-edab-44c9-916a-16b5ebdd2040/1/KAWFe6e9XcggxhYmxjNJ47f6p9M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/35a19e-edab-44c9-916a-16b5ebdd2040/1/KAWFe6e9XcggxhYmxjNJ47f6p9M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:0e:08:20:cd:65:07:b0:ec:68:6c:ce:42:fb:b3:f7:6f:d1:
69:bb:48:f6:60:53:ce:56:be:cf:37:7a:57:a1:32:14:89:33:
66:38:83:0b:aa:5b:32:72:c6:cb:d3:75:6b:14:69:ab:56:d8:
2d:df:91:53:4d:72:fc:ba:40:65:44:3e:e7:3b:64:69:5d:4a:
3e:78:05:9f:f3:89:ef:da:7d:a3:19:e4:43:64:7f:8c:85:0e:
9d:da:b7:24:99:f0:88:4c:65:41:72:a2:60:ed:1c:5b:fe:67:
d5:58:3d:81:83:fc:d0:da:9c:cf:5f:98:07:e3:c1:51:a0:6f:
5c:11:98:8a:aa:6d:5f:bd:c4:aa:81:f4:d9:e8:8f:d4:59:cb:
b0:0c:e1:a5:0c:1f:70:d0:3d:e8:d7:c5:29:71:d9:e6:40:4e:
cd:17:44:27:39:2f:f8:ba:0d:94:0e:e7:86:82:84:4b:40:2a:
75:f3:65:eb:43:1b:fd:24:75:f3:2b:61:70:2b:8f:0f:62:5d:
6a:2e:54:59:d1:b5:81:34:62:59:e1:8c:9d:0f:d5:56:cb:b9:
08:d3:e3:7c:95:cf:77:dc:7f:f6:f6:c4:38:22:a4:0a:7b:35:
b5:1c:df:ad:19:37:ff:2e:24:fb:ff:00:16:72:ae:8b:33:32:
ed:5d:1b:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:54:07 2026 by rpki-client