Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/bc51f4-61f2-4faa-a02a-602936539405/1/kWAz3VV0R5Zb2u-LRySl5308Ba4.mft
File: kWAz3VV0R5Zb2u-LRySl5308Ba4.mft (raw, json)
Hash identifier: NKK83gCPoRPP3C49F4mZSB6FgElafqLwbxyg9VDyPYQ=
Subject key identifier: 5B:93:33:C2:EA:E7:B3:18:D5:A7:A2:FC:BB:86:AB:A1:8F:E5:0A:FF
Authority key identifier: 91:60:33:DD:55:74:47:96:5B:DA:EF:8B:47:24:A5:E7:7D:3C:05:AE
Certificate issuer: /CN=916033dd557447965bdaef8b4724a5e77d3c05ae
Certificate serial: 019D992B642E7FC12AC60F3F2B749FD31421
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kWAz3VV0R5Zb2u-LRySl5308Ba4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/bc51f4-61f2-4faa-a02a-602936539405/1/kWAz3VV0R5Zb2u-LRySl5308Ba4.mft
Manifest number: 0B2B
Signing time: Fri 17 Apr 2026 02:00:50 +0000
Manifest this update: Fri 17 Apr 2026 02:00:50 +0000
Manifest next update: Sat 18 Apr 2026 02:00:50 +0000
Files and hashes: 1: _rghgGhHIYbLY2yOEoA9mmW7wqg.roa (hash: LafLigZh1QXUn5FQibqQ6Xl17st+BespqipLbfL+dgY=)
2: kWAz3VV0R5Zb2u-LRySl5308Ba4.crl (hash: X8drRcUryaeh493gvw1WBMIiEoDH3rDfBSx/JasFw8E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/bc51f4-61f2-4faa-a02a-602936539405/1/kWAz3VV0R5Zb2u-LRySl5308Ba4.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/bc51f4-61f2-4faa-a02a-602936539405/1/kWAz3VV0R5Zb2u-LRySl5308Ba4.mft
rsync://rpki.ripe.net/repository/DEFAULT/kWAz3VV0R5Zb2u-LRySl5308Ba4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:2b:64:2e:7f:c1:2a:c6:0f:3f:2b:74:9f:d3:14:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=916033dd557447965bdaef8b4724a5e77d3c05ae
Validity
Not Before: Apr 17 02:00:50 2026 GMT
Not After : Apr 18 02:00:50 2026 GMT
Subject: CN=5b9333c2eae7b318d5a7a2fcbb86aba18fe50aff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:75:18:d3:16:a9:42:02:88:52:77:f0:1c:38:
8f:44:60:32:a7:03:4e:3a:5f:53:58:a9:b4:d8:72:
ae:8a:38:ef:43:91:1b:fe:d0:93:04:91:30:20:60:
5d:91:00:62:1e:8f:7f:df:77:e2:df:11:6a:b3:79:
4c:92:2a:ff:ff:5f:cd:b7:b9:e9:21:0f:d0:e4:da:
3e:99:57:6c:53:d7:a1:a9:19:c6:fe:5e:ea:db:2e:
fc:ce:cd:00:94:c4:1f:03:35:bd:45:97:20:96:fb:
2e:af:0f:1f:66:49:1e:3f:f3:b1:f5:2e:d5:c2:24:
d6:84:04:75:76:9d:e3:5f:db:2a:a2:75:07:fa:f5:
94:e5:30:54:1e:d2:ff:f5:62:0d:05:56:0d:27:97:
63:21:13:98:de:de:a1:d7:bf:5d:51:94:85:46:37:
ff:96:d8:80:3f:f2:2d:33:da:1c:bd:fc:91:2c:5b:
68:80:d4:4b:c4:85:ea:8c:8a:17:e8:d3:35:60:52:
7b:86:e4:44:21:f1:28:b3:eb:57:a7:26:70:08:48:
41:d8:aa:08:9c:b3:b0:33:47:3a:65:18:83:65:c1:
05:b1:39:a4:a1:3b:a1:68:bc:59:29:b6:65:61:40:
d7:b5:7d:70:0a:31:ee:03:1c:e4:00:31:95:50:18:
d5:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:93:33:C2:EA:E7:B3:18:D5:A7:A2:FC:BB:86:AB:A1:8F:E5:0A:FF
X509v3 Authority Key Identifier:
keyid:91:60:33:DD:55:74:47:96:5B:DA:EF:8B:47:24:A5:E7:7D:3C:05:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kWAz3VV0R5Zb2u-LRySl5308Ba4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/bc51f4-61f2-4faa-a02a-602936539405/1/kWAz3VV0R5Zb2u-LRySl5308Ba4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/bc51f4-61f2-4faa-a02a-602936539405/1/kWAz3VV0R5Zb2u-LRySl5308Ba4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:d9:26:c4:ac:22:14:dc:31:ef:66:82:ec:a9:29:a0:67:8d:
27:6b:e3:0a:d0:11:62:a2:ba:5f:27:5c:12:cc:f5:b1:ed:32:
64:c7:d7:44:bd:bc:ae:d7:c8:bf:52:7a:96:31:a3:10:68:64:
09:c6:da:f1:a6:5e:2a:ff:79:23:0f:69:86:56:eb:06:f7:ea:
b1:96:68:5b:1e:99:5e:13:b3:89:6b:ee:bf:eb:09:9b:1a:37:
c0:9b:f8:52:a0:11:96:0d:9c:f5:b5:ee:08:37:5f:da:c5:6b:
3a:21:8a:33:8a:a8:48:54:a4:52:c8:8b:34:8c:58:5b:67:04:
bc:dc:e0:19:8c:4b:5b:4b:1e:ce:26:51:25:89:70:41:fe:b5:
d8:2c:78:2c:2d:7e:44:a2:38:41:16:01:15:bd:fc:82:3f:86:
e1:e5:21:3c:bc:fb:e9:e9:83:f1:3e:8b:cb:23:60:18:fd:1a:
f3:0f:59:1a:78:6a:ad:ee:55:d3:50:07:0d:db:3d:b8:db:22:
59:9d:dc:95:91:34:b1:39:f0:e7:75:9c:eb:99:a6:64:a2:64:
f0:c9:86:42:88:b9:4c:6e:7a:31:7e:0d:7b:f5:fa:fb:0f:f1:
3b:77:4d:50:c7:05:e9:62:80:2f:16:6a:fc:8c:3d:1e:3f:34:
6b:8b:a8:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:27:58 2026 by rpki-client