Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/89c3e4-b613-49ec-ae25-2e75228f9261/1/KwFArTlBTE6rAqxVQitEFj7TSw8.mft
File: KwFArTlBTE6rAqxVQitEFj7TSw8.mft (raw, json)
Hash identifier: //6CFWq+A9rs2HOJDkLmXbxmeuduU1RgQWyb4Fe4TrI=
Subject key identifier: A4:5C:40:6B:D1:86:59:D4:1A:1B:39:B0:D9:98:43:2D:0D:6F:42:70
Authority key identifier: 2B:01:40:AD:39:41:4C:4E:AB:02:AC:55:42:2B:44:16:3E:D3:4B:0F
Certificate issuer: /CN=2b0140ad39414c4eab02ac55422b44163ed34b0f
Certificate serial: 019ED53E0AE8BE0F77E9C4264C1DAE2FFBBF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KwFArTlBTE6rAqxVQitEFj7TSw8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/89c3e4-b613-49ec-ae25-2e75228f9261/1/KwFArTlBTE6rAqxVQitEFj7TSw8.mft
Manifest number: 06BC
Signing time: Wed 17 Jun 2026 11:01:13 +0000
Manifest this update: Wed 17 Jun 2026 11:01:13 +0000
Manifest next update: Thu 18 Jun 2026 11:01:13 +0000
Files and hashes: 1: KwFArTlBTE6rAqxVQitEFj7TSw8.crl (hash: E7z1FJjhrFjq+xj7MCZRkvMP4OLTvBB0r0Pwr8pLKlY=)
2: ir9SuLduq8J9bIwWBVKAyAFiwvk.roa (hash: LeNR5QQthmrMSFvWNxLjb0RXrLTd6w9z7OeC3M8gneo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/89c3e4-b613-49ec-ae25-2e75228f9261/1/KwFArTlBTE6rAqxVQitEFj7TSw8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/89c3e4-b613-49ec-ae25-2e75228f9261/1/KwFArTlBTE6rAqxVQitEFj7TSw8.mft
rsync://rpki.ripe.net/repository/DEFAULT/KwFArTlBTE6rAqxVQitEFj7TSw8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 18 Jun 2026 08:33:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:d5:3e:0a:e8:be:0f:77:e9:c4:26:4c:1d:ae:2f:fb:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b0140ad39414c4eab02ac55422b44163ed34b0f
Validity
Not Before: Jun 17 11:01:13 2026 GMT
Not After : Jun 18 11:01:13 2026 GMT
Subject: CN=a45c406bd18659d41a1b39b0d998432d0d6f4270
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:13:87:ed:7e:d5:08:9d:b8:81:be:00:cb:02:
33:38:c6:13:2d:e9:38:56:fe:89:d6:e7:05:cc:64:
86:a6:16:4c:7e:9c:06:5e:1e:4d:13:f6:f6:28:8a:
96:64:33:c6:39:4a:30:20:49:01:3f:5c:3b:8d:97:
08:86:22:20:ad:8e:9c:3f:bc:66:da:69:c8:c5:6f:
52:e9:e6:a0:7d:aa:17:1f:29:df:5e:22:23:cb:9a:
2a:2a:32:3c:c6:d9:2b:24:d8:7f:6d:f8:53:dc:e1:
99:84:65:ca:f9:a0:14:f5:c6:4b:68:73:d1:a9:15:
a5:fc:12:08:ad:70:71:c1:bd:9d:c4:b7:df:b7:1a:
51:c1:ea:3d:4b:b4:c2:f4:ff:1c:9a:a5:7d:39:df:
27:c5:53:f7:f7:b8:a2:86:b7:3c:c1:bc:cd:ed:2e:
55:7b:a7:c9:e8:b8:26:5b:32:da:98:63:f1:16:0c:
61:84:1f:d2:11:c9:90:2c:80:a0:9c:2a:1b:e7:7b:
9c:a7:49:2d:71:88:4e:bb:cf:ef:92:49:68:ce:0f:
c6:82:1f:6a:32:c9:5a:d6:c2:62:55:de:a8:dd:7a:
f4:6f:53:af:49:59:69:50:ed:a1:5a:8e:bf:6d:20:
67:b9:66:e7:0b:cc:b0:fe:48:f2:54:33:1f:ea:0b:
33:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:5C:40:6B:D1:86:59:D4:1A:1B:39:B0:D9:98:43:2D:0D:6F:42:70
X509v3 Authority Key Identifier:
keyid:2B:01:40:AD:39:41:4C:4E:AB:02:AC:55:42:2B:44:16:3E:D3:4B:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KwFArTlBTE6rAqxVQitEFj7TSw8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/89c3e4-b613-49ec-ae25-2e75228f9261/1/KwFArTlBTE6rAqxVQitEFj7TSw8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/89c3e4-b613-49ec-ae25-2e75228f9261/1/KwFArTlBTE6rAqxVQitEFj7TSw8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:63:c5:0e:17:9e:45:91:c3:9e:66:e7:13:fe:56:0d:25:b5:
85:0b:a9:6e:03:d1:a5:49:84:6c:6a:62:f2:16:5d:44:d9:98:
69:c9:8b:30:04:49:2c:b7:19:a0:56:dd:b7:9b:ba:a1:c6:1b:
ab:c4:0b:83:03:d2:d9:e4:23:0f:d4:a3:e7:2c:45:09:56:12:
7d:a6:a2:cd:c8:e3:59:fe:45:9b:27:97:5c:53:17:e0:b0:da:
e9:06:f5:56:69:5e:36:30:74:27:91:a5:26:93:e6:6b:f7:89:
7f:62:14:0d:d0:b3:f3:b8:ae:43:d0:79:dc:8d:4b:9f:6c:e3:
dd:4b:26:95:47:34:e2:bd:5d:b2:36:19:7a:66:d4:e5:ea:89:
87:8d:b8:7a:af:9f:1b:df:d3:bd:6b:b6:bb:a4:e2:9a:9e:5d:
91:f1:3a:c0:42:aa:3a:f2:68:63:ce:eb:7b:de:cb:34:77:2b:
5e:76:de:23:4e:7f:10:75:d1:3a:33:70:3a:6e:32:89:81:bc:
e4:56:fd:b9:b9:a0:98:6e:63:96:a1:0d:9e:37:40:48:5a:f4:
9f:3d:de:34:be:18:c1:5e:9e:0e:42:88:a0:4a:05:a7:88:aa:
65:1b:90:23:70:ab:cb:fe:2d:67:55:b4:44:d5:91:7a:54:b7:
48:fe:f4:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 14:10:04 2026 by rpki-client