Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/1bac01-212c-4f4c-8d3a-65257b1fec6d/1/kwd6mXyVvQGmTUCK_PVU2ItNteU.mft
File: kwd6mXyVvQGmTUCK_PVU2ItNteU.mft (raw, json)
Hash identifier: PVEp5aEl4Qp8DcVL7wgMZRHXZm9ufztbswC13nv+41c=
Subject key identifier: 9F:8E:47:5D:6C:13:47:AB:33:A0:25:48:72:0F:FD:59:A1:A8:DF:56
Authority key identifier: 93:07:7A:99:7C:95:BD:01:A6:4D:40:8A:FC:F5:54:D8:8B:4D:B5:E5
Certificate issuer: /CN=93077a997c95bd01a64d408afcf554d88b4db5e5
Certificate serial: 019CAA5832D793D6C240BD79F88C9D746E78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kwd6mXyVvQGmTUCK_PVU2ItNteU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/1bac01-212c-4f4c-8d3a-65257b1fec6d/1/kwd6mXyVvQGmTUCK_PVU2ItNteU.mft
Manifest number: 0730
Signing time: Sun 01 Mar 2026 17:00:32 +0000
Manifest this update: Sun 01 Mar 2026 17:00:32 +0000
Manifest next update: Mon 02 Mar 2026 17:00:32 +0000
Files and hashes: 1: kwd6mXyVvQGmTUCK_PVU2ItNteU.crl (hash: INHVWm/dwlc8H2cjupgSQBvMb8DrAJjWNamBrguY+0I=)
2: xCA0Tyr9gAJcBb_aRk9f4_-65Hw.roa (hash: vLJiM8h1yXdHJ3CZa6/nqFa+H4CdzM6jrN7A815VTRI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/1bac01-212c-4f4c-8d3a-65257b1fec6d/1/kwd6mXyVvQGmTUCK_PVU2ItNteU.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/1bac01-212c-4f4c-8d3a-65257b1fec6d/1/kwd6mXyVvQGmTUCK_PVU2ItNteU.mft
rsync://rpki.ripe.net/repository/DEFAULT/kwd6mXyVvQGmTUCK_PVU2ItNteU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 17:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:58:32:d7:93:d6:c2:40:bd:79:f8:8c:9d:74:6e:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93077a997c95bd01a64d408afcf554d88b4db5e5
Validity
Not Before: Mar 1 17:00:32 2026 GMT
Not After : Mar 2 17:00:32 2026 GMT
Subject: CN=9f8e475d6c1347ab33a02548720ffd59a1a8df56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:35:6d:fd:18:17:d2:76:0c:5b:d7:3a:46:78:
18:4e:25:f6:cd:af:aa:cb:4c:43:0d:f0:6f:c3:38:
3d:8d:a5:64:f5:b8:c7:3c:e1:04:49:bc:b0:aa:3d:
ba:eb:0e:27:b0:61:f3:3a:02:6b:ea:a6:4b:c5:64:
9c:01:3a:6a:21:0d:ed:e2:e9:3c:eb:c0:f6:be:3c:
2a:52:2e:40:25:98:87:d1:20:61:3e:30:62:e0:29:
d2:2a:e3:1d:3d:1a:9d:96:ee:84:26:62:2f:7e:09:
cb:a1:9b:c5:9f:0f:c6:82:23:0a:58:e7:d1:bc:99:
50:c0:0a:69:ac:28:69:db:40:2a:d7:fb:4b:12:21:
7c:71:bc:e4:4e:e9:30:66:97:0e:2c:d0:58:25:27:
40:01:12:71:b6:1a:8e:0b:f8:72:f4:0d:70:43:99:
6a:0f:40:ee:23:56:b6:df:aa:ad:ba:c2:93:f2:f0:
75:84:37:2d:1c:bb:18:e9:48:dc:56:64:63:2d:59:
12:71:c4:45:05:ce:b0:11:59:af:39:f6:0e:3f:3f:
17:d0:05:79:0f:c2:47:20:26:9e:30:5c:1a:b5:73:
8e:d1:e6:e9:6b:53:48:66:8a:59:b4:f0:13:97:52:
f2:e7:9c:e4:a4:2f:21:52:fb:04:86:76:cd:86:09:
a7:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:8E:47:5D:6C:13:47:AB:33:A0:25:48:72:0F:FD:59:A1:A8:DF:56
X509v3 Authority Key Identifier:
keyid:93:07:7A:99:7C:95:BD:01:A6:4D:40:8A:FC:F5:54:D8:8B:4D:B5:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kwd6mXyVvQGmTUCK_PVU2ItNteU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/1bac01-212c-4f4c-8d3a-65257b1fec6d/1/kwd6mXyVvQGmTUCK_PVU2ItNteU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/1bac01-212c-4f4c-8d3a-65257b1fec6d/1/kwd6mXyVvQGmTUCK_PVU2ItNteU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:04:de:56:8d:89:64:c5:0a:63:75:25:7b:fc:17:21:71:14:
82:22:d6:72:ce:9a:52:16:7c:f0:16:e3:95:3d:77:ea:62:f4:
54:d3:ab:5e:1e:eb:f0:5f:ea:39:f4:92:c1:ab:68:0c:e1:e6:
6b:8f:ca:f2:45:4c:60:66:23:07:d2:58:42:1b:2b:fd:24:75:
89:7b:4e:91:ff:49:83:8a:9e:0c:6c:c9:d9:30:c4:34:52:14:
ca:fb:67:55:63:0d:bd:92:35:64:18:2a:c7:e0:f2:bd:fa:29:
fc:19:62:88:74:84:7d:15:34:02:13:07:86:cd:72:8b:a9:34:
92:88:67:cb:da:c4:58:ad:ec:89:3c:5e:24:12:b3:c2:d7:14:
43:08:b4:3f:fd:72:35:0d:67:3e:77:ce:d5:94:66:19:6c:fe:
43:e6:fa:a1:a7:19:02:a9:61:19:40:fa:55:71:37:f3:b2:5a:
ce:3f:2c:4d:e9:e8:8b:d9:85:63:ba:d2:a8:25:84:9f:b9:ca:
5b:18:e3:d8:17:47:51:c1:42:b3:01:77:52:7f:51:e7:6c:26:
20:31:90:77:0a:d0:af:60:24:79:07:e2:32:ec:98:c3:75:7b:
98:c0:a1:cc:da:90:4d:da:35:96:97:1f:40:e7:5a:cd:42:f0:
ff:b7:3f:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:19:23 2026 by rpki-client