Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4c/2d238e-b31c-4ea0-98cc-c4febc3d6e52/1/Kw5qe9sRxP_XdxgIFRDJFDEXjNs.mft
File: Kw5qe9sRxP_XdxgIFRDJFDEXjNs.mft (raw, json)
Hash identifier: nUQgk410HAc8SkVgAI/idIa3NrvXDIPnt74g78FpSYk=
Subject key identifier: 19:23:43:8F:DF:6B:A9:76:D3:6F:44:FD:F3:CB:51:66:05:4B:2C:24
Authority key identifier: 2B:0E:6A:7B:DB:11:C4:FF:D7:77:18:08:15:10:C9:14:31:17:8C:DB
Certificate issuer: /CN=2b0e6a7bdb11c4ffd77718081510c91431178cdb
Certificate serial: 01A0EDAF6D8DFE2ED4216DD5272BBDFC101D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Kw5qe9sRxP_XdxgIFRDJFDEXjNs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/2d238e-b31c-4ea0-98cc-c4febc3d6e52/1/Kw5qe9sRxP_XdxgIFRDJFDEXjNs.mft
Manifest number: 1A7C
Signing time: Tue 29 Sep 2026 15:01:32 +0000
Manifest this update: Tue 29 Sep 2026 15:01:32 +0000
Manifest next update: Wed 30 Sep 2026 15:01:32 +0000
Files and hashes: 1: Kw5qe9sRxP_XdxgIFRDJFDEXjNs.crl (hash: c0HRtkn+QyOlEvhvg3IJK28508avOWUz51npaYFdbjQ=)
2: xa8hNYnY5YtZ3lvhBoGXHaoWdZs.roa (hash: cfTBRZqteMXbej9rAKnDcge1IuDIIPwXFt2wZ9TtEP8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/2d238e-b31c-4ea0-98cc-c4febc3d6e52/1/Kw5qe9sRxP_XdxgIFRDJFDEXjNs.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/2d238e-b31c-4ea0-98cc-c4febc3d6e52/1/Kw5qe9sRxP_XdxgIFRDJFDEXjNs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Kw5qe9sRxP_XdxgIFRDJFDEXjNs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 15:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ed:af:6d:8d:fe:2e:d4:21:6d:d5:27:2b:bd:fc:10:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b0e6a7bdb11c4ffd77718081510c91431178cdb
Validity
Not Before: Sep 29 15:01:32 2026 GMT
Not After : Sep 30 15:01:32 2026 GMT
Subject: CN=1923438fdf6ba976d36f44fdf3cb5166054b2c24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:34:80:e8:a8:1b:c7:e9:a1:51:fd:8c:90:b8:
b6:e4:1f:bb:ce:a0:24:ae:ff:28:90:5f:f5:e1:80:
c0:12:03:78:f1:f7:db:1a:a1:30:56:70:6c:83:6c:
4b:cb:52:95:63:6f:1c:22:7c:c1:28:60:5d:32:11:
2d:30:e2:45:15:b7:c3:72:07:60:56:a1:37:ca:18:
e5:b4:7c:22:a1:63:51:c7:82:9d:2e:78:bb:8a:2b:
5c:ea:46:d1:38:60:88:3d:92:42:72:f3:c6:cc:05:
22:ce:6b:ae:dc:6d:ea:79:06:22:5a:8d:d8:c8:78:
aa:46:65:d8:e0:35:0b:ec:aa:93:af:58:ea:fd:93:
57:c8:fe:67:c3:90:b9:db:f2:9c:e8:ed:d5:0b:20:
26:4a:cc:53:78:36:1e:85:d7:df:0e:83:bf:35:e2:
bc:d6:1d:8a:d4:e1:66:ac:82:6c:92:76:b6:4f:78:
45:ae:be:6f:c6:2c:a8:d8:ab:62:8f:3d:52:57:26:
19:9c:d6:85:e6:0a:83:a0:f6:f7:8d:aa:24:9c:bc:
90:fe:3e:83:4e:0a:99:d0:fc:40:be:0a:55:40:56:
f6:1c:67:9d:5f:a7:7a:ea:00:fb:43:0e:e0:05:f7:
a9:b4:5e:13:69:b3:cc:5e:0d:f2:73:0b:72:06:89:
56:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:23:43:8F:DF:6B:A9:76:D3:6F:44:FD:F3:CB:51:66:05:4B:2C:24
X509v3 Authority Key Identifier:
keyid:2B:0E:6A:7B:DB:11:C4:FF:D7:77:18:08:15:10:C9:14:31:17:8C:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kw5qe9sRxP_XdxgIFRDJFDEXjNs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/2d238e-b31c-4ea0-98cc-c4febc3d6e52/1/Kw5qe9sRxP_XdxgIFRDJFDEXjNs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/2d238e-b31c-4ea0-98cc-c4febc3d6e52/1/Kw5qe9sRxP_XdxgIFRDJFDEXjNs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:7a:ea:9c:cd:05:45:27:78:49:8d:dc:be:52:a4:e7:81:94:
89:cf:a3:d1:cc:36:b0:99:4d:ec:f6:38:64:30:91:ea:a9:30:
bb:f3:fa:79:24:bb:0f:62:9f:cb:dd:13:c9:41:e7:60:bf:0c:
95:9a:73:fa:e9:63:ec:a5:6a:c9:9f:20:59:21:a2:3d:f7:8f:
40:6f:e3:e5:3c:58:62:65:3b:d6:37:c0:4e:84:c1:36:0f:f9:
e1:2c:09:72:7b:11:d9:86:68:90:92:60:49:e2:65:1d:4d:3b:
43:ca:8c:f4:0c:28:81:82:1a:36:71:3e:94:a4:a3:bd:c6:c5:
6f:73:4a:f0:24:94:c8:90:c3:32:db:d8:f9:2e:a3:cd:3c:ea:
f1:91:bd:b2:ec:96:6c:4e:eb:50:c1:01:92:c6:a3:29:77:a8:
a0:41:73:ae:72:1f:b9:8a:34:ff:fe:bb:15:1f:6e:e6:d2:13:
76:a3:31:12:33:1b:09:b3:9c:2e:ef:46:c4:78:a4:4f:e8:5f:
4e:9c:8d:fe:c0:20:35:48:6a:af:83:d2:5e:05:7e:75:32:40:
ee:27:88:ad:27:78:be:6f:72:89:90:66:06:2c:8f:c5:02:7b:
40:16:97:a0:b3:b7:75:6d:0f:94:d2:b0:54:0e:de:28:2c:5d:
6c:07:72:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 21:06:27 2026 by rpki-client