Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/077a50-45b6-4a38-9db9-950c7e73245c/1/kwNiKzxU5F9BZvMBeY-G27pHGAw.mft
File: kwNiKzxU5F9BZvMBeY-G27pHGAw.mft (raw, json)
Hash identifier: 94YWBxklS4Q6pU8/EXbo1Kr49ILPsG8qJ90B4jIJfe4=
Subject key identifier: C0:07:13:DC:98:CD:3A:7C:12:30:1E:57:25:10:73:AF:F3:9F:EF:9D
Authority key identifier: 93:03:62:2B:3C:54:E4:5F:41:66:F3:01:79:8F:86:DB:BA:47:18:0C
Certificate issuer: /CN=9303622b3c54e45f4166f301798f86dbba47180c
Certificate serial: 019D9C2D481390FEB3437CC29EACD57CC949
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kwNiKzxU5F9BZvMBeY-G27pHGAw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/077a50-45b6-4a38-9db9-950c7e73245c/1/kwNiKzxU5F9BZvMBeY-G27pHGAw.mft
Manifest number: 0A5D
Signing time: Fri 17 Apr 2026 16:01:46 +0000
Manifest this update: Fri 17 Apr 2026 16:01:46 +0000
Manifest next update: Sat 18 Apr 2026 16:01:46 +0000
Files and hashes: 1: kwNiKzxU5F9BZvMBeY-G27pHGAw.crl (hash: hXiycocwwHyx9YoPfbc/qm4WaNtwbqaOcjUmK5QReaU=)
2: oEI10F1yOzZXTlBBBvzIeX5OXog.roa (hash: QNwI0l8coi9XbWot/ryVzcBU4wEtxZkGadr7asLldw8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/077a50-45b6-4a38-9db9-950c7e73245c/1/kwNiKzxU5F9BZvMBeY-G27pHGAw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/077a50-45b6-4a38-9db9-950c7e73245c/1/kwNiKzxU5F9BZvMBeY-G27pHGAw.mft
rsync://rpki.ripe.net/repository/DEFAULT/kwNiKzxU5F9BZvMBeY-G27pHGAw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9c:2d:48:13:90:fe:b3:43:7c:c2:9e:ac:d5:7c:c9:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9303622b3c54e45f4166f301798f86dbba47180c
Validity
Not Before: Apr 17 16:01:46 2026 GMT
Not After : Apr 18 16:01:46 2026 GMT
Subject: CN=c00713dc98cd3a7c12301e57251073aff39fef9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:5a:12:3a:9a:50:d2:80:06:73:f7:9d:6f:c3:
10:f9:c5:f6:bb:75:5d:1b:dc:5c:c9:59:fb:fa:33:
ff:b5:2b:ab:18:a4:27:c7:a6:9e:42:68:ec:42:b2:
f7:f1:6d:d1:69:67:0b:74:4d:7d:32:aa:1c:a7:8f:
8b:dd:b5:0e:10:40:27:d5:57:04:c1:6c:d5:0e:69:
75:99:98:c4:ff:59:21:a5:99:fa:2c:f6:e9:ed:ac:
64:ea:f3:7c:9c:d8:87:fc:66:02:78:d0:35:d5:d7:
08:3f:9f:47:d2:f0:fe:60:21:59:99:7c:52:8f:bc:
00:11:47:1f:85:c1:f6:9c:bd:1f:1d:c0:2e:d8:07:
b7:f3:98:a0:83:af:77:ce:c2:a6:1a:02:f0:d7:fa:
e3:c7:8f:dd:cf:18:e1:6a:d2:b2:4f:52:93:92:70:
33:ae:e4:20:58:14:74:b1:1c:28:24:b9:f0:a5:5c:
b8:63:8c:64:f0:e5:77:6e:f1:14:1d:6d:80:54:34:
0d:66:1a:39:94:2c:74:12:63:51:a7:e0:25:dd:fb:
27:a3:05:00:09:3a:92:2e:02:49:0f:e6:aa:b8:cb:
e5:f8:b2:30:fe:de:90:9b:f1:d2:40:77:17:2b:eb:
91:2a:95:d0:23:d5:1c:a5:24:f4:15:c0:84:4a:f8:
64:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:07:13:DC:98:CD:3A:7C:12:30:1E:57:25:10:73:AF:F3:9F:EF:9D
X509v3 Authority Key Identifier:
keyid:93:03:62:2B:3C:54:E4:5F:41:66:F3:01:79:8F:86:DB:BA:47:18:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kwNiKzxU5F9BZvMBeY-G27pHGAw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/077a50-45b6-4a38-9db9-950c7e73245c/1/kwNiKzxU5F9BZvMBeY-G27pHGAw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/077a50-45b6-4a38-9db9-950c7e73245c/1/kwNiKzxU5F9BZvMBeY-G27pHGAw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:66:30:b6:d8:3b:c6:34:37:a7:21:76:36:fc:48:be:0e:12:
f2:e4:dc:f1:52:da:88:f1:56:79:12:42:cb:fb:62:a0:af:5e:
2c:d5:18:9a:36:6e:30:21:46:49:f2:0d:36:46:2a:54:dc:1a:
f7:a7:df:12:57:f9:c4:cb:f2:c1:6a:60:dd:93:10:31:02:62:
42:a3:ca:71:ed:8e:49:5a:df:7c:57:d3:e3:be:a6:5c:6a:e2:
a2:40:1d:4f:70:ac:53:eb:b1:d9:7d:2c:db:1e:92:ca:6f:7b:
e9:0a:87:51:1b:c9:f3:0f:b2:3e:c9:04:df:de:66:68:a2:74:
e2:d1:aa:22:e2:f8:4b:cd:aa:5f:51:6f:e3:a5:fe:a1:28:9f:
82:b5:b0:af:89:af:62:9a:86:a9:1c:d1:a8:aa:e6:3e:79:ba:
32:2f:7c:0a:f4:87:1c:9d:91:fe:e6:ad:71:3e:aa:a5:e0:6e:
25:84:c5:53:50:25:3a:b2:6b:1e:7e:5c:a1:a5:d5:8b:2f:28:
50:e1:74:64:cf:2a:00:a1:71:07:bc:5b:96:6d:14:da:00:02:
5c:d6:25:09:1b:27:a2:8c:2f:78:21:b3:3c:64:f5:14:8c:fe:
b4:2f:b0:f5:d6:f7:1c:ec:ba:5f:55:a9:96:5e:ae:02:81:35:
88:cf:90:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:56:42 2026 by rpki-client