Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/89c3e4-b613-49ec-ae25-2e75228f9261/1/KwFArTlBTE6rAqxVQitEFj7TSw8.mft
File: KwFArTlBTE6rAqxVQitEFj7TSw8.mft (raw, json)
Hash identifier: Kp5GJnInN/NznHNjSJeEolRE6LmruoxSM9RR2Hz2DEY=
Subject key identifier: A3:13:0D:94:C8:4F:F2:95:33:AF:85:81:F6:32:B7:8B:4A:94:72:85
Authority key identifier: 2B:01:40:AD:39:41:4C:4E:AB:02:AC:55:42:2B:44:16:3E:D3:4B:0F
Certificate issuer: /CN=2b0140ad39414c4eab02ac55422b44163ed34b0f
Certificate serial: 019D9A750FFCF34D833ED6B58625464BFFD1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KwFArTlBTE6rAqxVQitEFj7TSw8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/89c3e4-b613-49ec-ae25-2e75228f9261/1/KwFArTlBTE6rAqxVQitEFj7TSw8.mft
Manifest number: 0619
Signing time: Fri 17 Apr 2026 08:00:56 +0000
Manifest this update: Fri 17 Apr 2026 08:00:56 +0000
Manifest next update: Sat 18 Apr 2026 08:00:56 +0000
Files and hashes: 1: KwFArTlBTE6rAqxVQitEFj7TSw8.crl (hash: uzcifeqfgJ04aauJXGTSv4ps+9yO+5TFrRMufUvQAaY=)
2: ir9SuLduq8J9bIwWBVKAyAFiwvk.roa (hash: LeNR5QQthmrMSFvWNxLjb0RXrLTd6w9z7OeC3M8gneo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/89c3e4-b613-49ec-ae25-2e75228f9261/1/KwFArTlBTE6rAqxVQitEFj7TSw8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/89c3e4-b613-49ec-ae25-2e75228f9261/1/KwFArTlBTE6rAqxVQitEFj7TSw8.mft
rsync://rpki.ripe.net/repository/DEFAULT/KwFArTlBTE6rAqxVQitEFj7TSw8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:75:0f:fc:f3:4d:83:3e:d6:b5:86:25:46:4b:ff:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b0140ad39414c4eab02ac55422b44163ed34b0f
Validity
Not Before: Apr 17 08:00:56 2026 GMT
Not After : Apr 18 08:00:56 2026 GMT
Subject: CN=a3130d94c84ff29533af8581f632b78b4a947285
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:c8:3a:a3:aa:c4:2a:f3:cd:d2:59:05:ce:b7:
b4:7a:17:8d:82:35:80:e4:0d:7d:fd:8b:99:3f:d1:
49:42:d7:87:ad:75:cd:fc:55:46:52:d3:7a:21:a9:
b8:6d:1c:79:22:7c:f6:56:15:1c:66:4a:33:e1:03:
fa:5b:14:62:73:ed:53:05:f9:f1:4c:d9:e5:a9:c3:
fd:60:11:7a:51:88:24:63:d6:7e:18:e3:2f:97:13:
39:08:15:0d:75:ba:61:e3:85:b1:33:f3:60:73:09:
09:00:36:74:e5:d2:49:1e:3f:29:55:95:5f:d1:6a:
83:aa:6c:bc:12:e7:4e:ae:76:36:6f:70:57:e9:a3:
fc:91:09:41:df:c4:75:49:65:5c:51:4e:b1:a0:3d:
09:4b:57:68:49:38:af:88:3a:0f:1e:5b:55:21:92:
b8:f4:82:93:59:0a:ea:13:df:7e:e0:a7:a3:f6:13:
56:3c:91:e0:0b:99:5c:54:f9:21:21:1d:d9:95:ac:
74:09:3b:a7:11:94:63:5f:10:fd:fa:0e:64:9d:af:
d0:27:6c:f5:95:bc:c9:1c:54:f8:0e:29:c6:79:41:
01:1b:22:e6:40:ef:24:d1:09:30:c7:26:57:05:80:
77:8b:fa:f1:be:f7:77:35:98:81:1a:82:d2:0f:6a:
3b:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:13:0D:94:C8:4F:F2:95:33:AF:85:81:F6:32:B7:8B:4A:94:72:85
X509v3 Authority Key Identifier:
keyid:2B:01:40:AD:39:41:4C:4E:AB:02:AC:55:42:2B:44:16:3E:D3:4B:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KwFArTlBTE6rAqxVQitEFj7TSw8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/89c3e4-b613-49ec-ae25-2e75228f9261/1/KwFArTlBTE6rAqxVQitEFj7TSw8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/89c3e4-b613-49ec-ae25-2e75228f9261/1/KwFArTlBTE6rAqxVQitEFj7TSw8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:e5:d4:c5:95:d4:94:2f:df:73:c0:f1:30:fc:fb:e2:4f:a6:
7c:7a:75:ae:44:6c:7b:ba:b5:eb:c8:61:da:19:3d:28:7d:69:
12:18:66:d9:54:87:79:07:4d:74:f2:de:d8:e1:0d:2a:e5:14:
c2:12:7d:8d:e6:f1:2d:e7:8a:04:65:c4:ec:a3:fd:84:8b:70:
e5:c4:78:fa:65:42:80:9f:ac:ad:98:ec:b5:79:ae:e0:2a:09:
a5:f4:ca:a0:eb:7c:5b:6f:51:19:ec:1a:c2:47:d3:a6:3e:52:
4c:09:73:fc:81:57:af:07:ee:a8:52:3c:90:fa:cc:83:90:d3:
a5:2f:e5:5b:ba:40:b9:23:1f:28:e9:77:81:82:1c:db:5f:d1:
24:ba:be:8a:5e:75:02:b3:ba:df:20:4f:e4:a6:c1:b6:ec:49:
d0:7a:a9:79:24:a8:d9:96:d6:60:2b:a6:2f:8a:15:d6:74:f9:
b5:44:6e:d3:a9:19:c0:0d:0a:e2:d1:aa:04:14:44:cf:2d:83:
97:ad:ad:4b:24:ae:0a:6a:68:00:47:3a:36:89:1f:db:a0:c8:
14:76:9a:8f:5e:30:78:88:ac:ea:47:ae:ad:23:33:dc:8b:97:
ed:d8:72:e5:bd:ba:a0:5d:09:cc:6a:04:84:57:6c:af:15:73:
e4:a0:9b:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:16:36 2026 by rpki-client