Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/46/254995-4c39-4f37-9e3b-b2f0541afacf/1/KWMrEVG5T_zt9AqK02quGvshYlc.mft
File: KWMrEVG5T_zt9AqK02quGvshYlc.mft (raw, json)
Hash identifier: lu+PEvLQoA4QQOQpajG1+pjIHTz3fK5EVu/rB5E5Ni8=
Subject key identifier: 06:A2:D5:A8:2B:16:1F:06:9A:F8:56:08:BE:A9:9B:CA:B7:76:6F:7E
Authority key identifier: 29:63:2B:11:51:B9:4F:FC:ED:F4:0A:8A:D3:6A:AE:1A:FB:21:62:57
Certificate issuer: /CN=29632b1151b94ffcedf40a8ad36aae1afb216257
Certificate serial: 01A1250BE8CC0F59F9A0CBFD77AAE9052E68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KWMrEVG5T_zt9AqK02quGvshYlc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/254995-4c39-4f37-9e3b-b2f0541afacf/1/KWMrEVG5T_zt9AqK02quGvshYlc.mft
Manifest number: 02AF
Signing time: Sat 10 Oct 2026 09:01:39 +0000
Manifest this update: Sat 10 Oct 2026 09:01:39 +0000
Manifest next update: Sun 11 Oct 2026 09:01:39 +0000
Files and hashes: 1: KWMrEVG5T_zt9AqK02quGvshYlc.crl (hash: rLL8GTk1WAhmaEa+uQuNYsVAxukcJaXqsH13edncV1g=)
2: R04uk59tL-FqUHxfWd8Y5B17azg.roa (hash: 5f566Fl0rgtpysFtLbApUeRuQVHAZSsSCcfDuYmn3cU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/254995-4c39-4f37-9e3b-b2f0541afacf/1/KWMrEVG5T_zt9AqK02quGvshYlc.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/254995-4c39-4f37-9e3b-b2f0541afacf/1/KWMrEVG5T_zt9AqK02quGvshYlc.mft
rsync://rpki.ripe.net/repository/DEFAULT/KWMrEVG5T_zt9AqK02quGvshYlc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 09:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:25:0b:e8:cc:0f:59:f9:a0:cb:fd:77:aa:e9:05:2e:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29632b1151b94ffcedf40a8ad36aae1afb216257
Validity
Not Before: Oct 10 09:01:39 2026 GMT
Not After : Oct 11 09:01:39 2026 GMT
Subject: CN=06a2d5a82b161f069af85608bea99bcab7766f7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:39:17:71:ae:43:48:c1:c8:28:d6:b7:ac:9f:
26:77:2c:e3:86:84:1f:50:dc:e5:1a:59:9a:37:d6:
3e:3f:3e:35:76:12:34:54:ca:d5:0e:a9:ea:d4:33:
1a:6d:d4:05:bc:72:db:f2:9b:ca:98:87:41:3d:f7:
a4:00:bd:c4:2e:95:a8:59:a8:06:8a:f4:dc:42:c0:
be:a8:d3:30:df:1e:2a:3d:bd:a0:8d:ab:96:b7:b0:
15:2c:03:d3:21:5b:5d:d7:b0:1e:e8:36:c3:dc:15:
77:32:c4:b5:34:c6:10:8a:84:5b:c5:ef:54:b5:08:
4c:af:0d:d1:6c:ac:ef:ef:64:f5:38:15:28:76:8b:
99:29:1e:0c:38:f7:83:34:3b:46:76:b0:f8:a0:4a:
dc:7b:42:58:fb:59:87:d3:36:5b:08:a5:ee:dd:68:
df:50:9a:da:a3:06:af:2e:10:2c:e2:b9:03:90:c8:
2a:f2:23:5d:ac:f5:b4:7d:fb:8b:b0:c6:01:41:be:
db:35:24:ee:fc:25:6d:47:cd:e8:f7:00:ac:20:a2:
ed:cc:f7:18:de:2d:b5:f9:27:a1:3e:88:91:32:04:
9e:fb:eb:a4:c8:d0:09:79:7d:1f:73:60:f9:20:6f:
1a:69:8d:56:84:22:5c:38:9c:f7:71:13:fa:ee:0d:
51:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:A2:D5:A8:2B:16:1F:06:9A:F8:56:08:BE:A9:9B:CA:B7:76:6F:7E
X509v3 Authority Key Identifier:
keyid:29:63:2B:11:51:B9:4F:FC:ED:F4:0A:8A:D3:6A:AE:1A:FB:21:62:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KWMrEVG5T_zt9AqK02quGvshYlc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/254995-4c39-4f37-9e3b-b2f0541afacf/1/KWMrEVG5T_zt9AqK02quGvshYlc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/254995-4c39-4f37-9e3b-b2f0541afacf/1/KWMrEVG5T_zt9AqK02quGvshYlc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:2f:74:6f:3f:7c:85:71:f0:e4:e7:6d:88:56:04:4a:75:68:
14:62:5d:3d:34:62:59:0d:51:30:4c:17:01:ab:fb:3a:9e:8a:
5c:88:1d:df:d3:72:9f:37:17:dc:11:87:3e:92:b1:cd:ac:3e:
5f:1b:8f:45:ae:76:39:c6:3f:20:4b:80:63:48:41:98:13:ea:
29:e3:f3:1e:4e:ea:57:13:1b:fd:dd:6a:9b:85:29:24:1d:07:
2c:27:c5:56:08:d9:8c:b7:8b:92:27:91:da:73:08:8b:ea:10:
c2:6a:36:0d:2c:5c:76:e9:8a:3d:c0:2c:7c:67:21:f9:65:63:
6a:e5:8d:64:a4:e8:4d:d3:3b:eb:61:0a:bd:58:db:d3:ab:ef:
4b:f7:a2:d3:30:9b:21:f2:47:75:f2:97:87:4b:f3:2b:fc:0a:
42:75:a3:c9:7f:46:6a:24:3f:9e:01:ca:9a:ff:c1:ea:e7:19:
9b:8a:d9:7b:30:ca:ff:e6:fc:08:38:fc:23:f9:0a:c0:1e:45:
46:00:f5:02:4f:f9:c8:b5:a9:b0:31:10:30:8e:03:51:bb:5a:
b1:bd:c7:9b:43:6d:6d:03:13:4a:3f:c3:6d:8f:c1:1b:69:c2:
d4:03:0f:81:a3:13:96:9a:d4:af:9f:13:46:fa:f4:6d:f0:ad:
83:42:8c:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 13:51:19 2026 by rpki-client