Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5c/1bac01-212c-4f4c-8d3a-65257b1fec6d/1/kwd6mXyVvQGmTUCK_PVU2ItNteU.mft
File: kwd6mXyVvQGmTUCK_PVU2ItNteU.mft (raw, json)
Hash identifier: SDJ49oEJnaHDdxYqpcJL1FycTHy7TMac77+cH2opb8c=
Subject key identifier: 8B:FC:ED:64:F1:15:4D:FD:2E:CB:0C:4F:F0:86:5B:ED:EB:50:5D:C4
Authority key identifier: 93:07:7A:99:7C:95:BD:01:A6:4D:40:8A:FC:F5:54:D8:8B:4D:B5:E5
Certificate issuer: /CN=93077a997c95bd01a64d408afcf554d88b4db5e5
Certificate serial: 01A0D83C568FAEE0B517F83A14DBDEE78FE6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kwd6mXyVvQGmTUCK_PVU2ItNteU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/1bac01-212c-4f4c-8d3a-65257b1fec6d/1/kwd6mXyVvQGmTUCK_PVU2ItNteU.mft
Manifest number: 095A
Signing time: Fri 25 Sep 2026 11:03:47 +0000
Manifest this update: Fri 25 Sep 2026 11:03:47 +0000
Manifest next update: Sat 26 Sep 2026 11:03:47 +0000
Files and hashes: 1: kwd6mXyVvQGmTUCK_PVU2ItNteU.crl (hash: 5xStXJmFlEllm1vOOOFalBKzHV/t1/f65qzeN/Ivs2U=)
2: xCA0Tyr9gAJcBb_aRk9f4_-65Hw.roa (hash: vLJiM8h1yXdHJ3CZa6/nqFa+H4CdzM6jrN7A815VTRI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/1bac01-212c-4f4c-8d3a-65257b1fec6d/1/kwd6mXyVvQGmTUCK_PVU2ItNteU.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/1bac01-212c-4f4c-8d3a-65257b1fec6d/1/kwd6mXyVvQGmTUCK_PVU2ItNteU.mft
rsync://rpki.ripe.net/repository/DEFAULT/kwd6mXyVvQGmTUCK_PVU2ItNteU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 08:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d8:3c:56:8f:ae:e0:b5:17:f8:3a:14:db:de:e7:8f:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93077a997c95bd01a64d408afcf554d88b4db5e5
Validity
Not Before: Sep 25 11:03:47 2026 GMT
Not After : Sep 26 11:03:47 2026 GMT
Subject: CN=8bfced64f1154dfd2ecb0c4ff0865bedeb505dc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:02:c0:f5:9e:b0:77:a4:bd:37:38:32:44:42:
e4:4d:7e:f8:29:bc:fd:09:0a:79:b4:1a:c1:12:60:
a7:34:34:d5:7d:68:dc:60:1e:a8:3e:6e:f3:40:4b:
12:df:ad:e3:a3:5b:9f:c1:de:e3:08:be:b4:70:e9:
bc:2f:64:82:5d:db:6b:80:a4:b4:e3:95:34:c5:7c:
fa:32:20:44:e6:25:b2:86:c1:7b:86:99:11:71:77:
d4:70:aa:7e:b8:72:0c:c5:09:88:d8:34:dd:21:45:
67:71:3d:04:31:5a:4f:7a:32:b5:b8:c4:06:a1:9b:
bd:a2:df:74:cf:b4:e6:bf:46:04:43:cb:42:be:a6:
2c:8c:cc:4d:3a:7c:91:14:99:9f:5f:20:d0:8c:e9:
c5:7b:12:1d:ea:22:48:85:ec:f6:d2:23:ed:b9:d4:
cd:f1:8c:74:2f:b6:33:a3:e4:2d:ff:dd:52:1c:03:
44:72:0a:10:9a:2d:6b:4f:27:17:39:5f:d3:62:08:
d5:37:d0:4f:42:97:1c:cc:67:d4:5b:9f:03:ae:df:
f9:26:74:bc:32:02:c1:f3:33:af:0a:01:74:54:18:
e3:14:f7:29:bc:8c:27:b6:f9:80:7b:63:17:b0:11:
ae:16:9a:8d:1e:7f:df:86:2f:79:97:92:e7:28:a0:
13:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:FC:ED:64:F1:15:4D:FD:2E:CB:0C:4F:F0:86:5B:ED:EB:50:5D:C4
X509v3 Authority Key Identifier:
keyid:93:07:7A:99:7C:95:BD:01:A6:4D:40:8A:FC:F5:54:D8:8B:4D:B5:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kwd6mXyVvQGmTUCK_PVU2ItNteU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/1bac01-212c-4f4c-8d3a-65257b1fec6d/1/kwd6mXyVvQGmTUCK_PVU2ItNteU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/1bac01-212c-4f4c-8d3a-65257b1fec6d/1/kwd6mXyVvQGmTUCK_PVU2ItNteU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:e6:9d:5c:c0:cd:b3:77:e4:f9:84:41:25:56:b5:34:d6:a4:
80:77:6f:90:28:cc:05:66:5f:ab:1b:19:0d:ab:08:98:d4:8c:
2a:5f:3d:82:b7:73:17:59:89:da:79:91:47:fa:8e:45:30:28:
f7:94:cc:8e:f3:e2:70:09:5a:18:b0:d0:c7:af:f5:a3:d9:54:
17:26:fd:9a:a6:f1:fb:ce:92:2e:58:34:d5:87:31:8a:86:3e:
4f:e9:d0:a8:c0:14:eb:6b:cd:ab:b6:a9:1a:04:e9:4d:bf:23:
c1:0c:4a:5d:8e:14:2f:6f:09:47:69:f6:0e:39:4e:8f:5a:55:
29:98:15:56:c9:a0:11:62:f1:24:d9:65:9b:1d:d3:13:95:da:
f2:29:f9:3e:21:fb:7d:80:7a:b4:5d:3a:f3:ae:ef:7a:a8:35:
da:6c:03:fb:5f:3b:76:96:d2:53:cc:45:58:82:05:59:3a:e2:
37:ed:ed:00:1e:fb:67:55:41:6a:62:12:dd:b5:22:6e:61:a1:
01:34:15:fc:b3:b3:f5:18:5d:8a:d3:63:d0:fa:e1:da:b1:2b:
11:78:cf:c3:5d:5c:37:9b:6c:e0:78:96:4c:f6:23:81:5a:70:
90:33:55:30:d4:1e:4f:bd:8d:6e:f0:90:cf:29:d4:fb:ad:c1:
6c:9b:a3:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 17:01:53 2026 by rpki-client