
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/481637-6c1c-45e8-8fbd-44f8ed5d61d7/1/KWi04O-BBvDhKrjlAdKqTja3g8I.mft
File: KWi04O-BBvDhKrjlAdKqTja3g8I.mft (raw, json)
Hash identifier: Fv1MBOE5jMy2XEkWzrUIxDU8/o3Saz4YzIIXpnceLPQ=
Subject key identifier: 08:DF:9F:AE:93:7F:2A:91:FA:F4:B8:C5:ED:79:93:29:C9:C4:AF:5B
Authority key identifier: 29:68:B4:E0:EF:81:06:F0:E1:2A:B8:E5:01:D2:AA:4E:36:B7:83:C2
Certificate issuer: /CN=2968b4e0ef8106f0e12ab8e501d2aa4e36b783c2
Certificate serial: 019D996255FFE63E62E58658BEC1CEE7C7F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KWi04O-BBvDhKrjlAdKqTja3g8I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/481637-6c1c-45e8-8fbd-44f8ed5d61d7/1/KWi04O-BBvDhKrjlAdKqTja3g8I.mft
Manifest number: 0679
Signing time: Fri 17 Apr 2026 03:00:51 +0000
Manifest this update: Fri 17 Apr 2026 03:00:51 +0000
Manifest next update: Sat 18 Apr 2026 03:00:51 +0000
Files and hashes: 1: 0hpieyXYpLMjxyT6mWgC5hB6md0.roa (hash: kAt+7z9pm070nauT+nqQ0kqKEN21nUOuAvbTxD+QIxY=)
2: 1-BeXqPwf4wGqQf8BMkvATSMUSvg.roa (hash: sHCQTjP4DGWRR+9EwPFQEYOJ1YUo6fNUrBWZXp0K9lU=)
3: 1npgJu3da2DJY-gYNC0mp_D7cA8.roa (hash: hTdQzo7dggejXQGIdEULc8F5CFOgeJzoVvTDCzsb0Pw=)
4: 1nu_yHaz4a9cC9ZPSse62hEV7z4.roa (hash: JbDziZ7Tgxvff3ssi+tWGZ4dDDxpjWqXNx9DdzoeJIs=)
5: 4J-3un-Yz1yl1SRrxlOCEySqXvc.asa (hash: sWD+AvZgpViJHkE0RVHOakA+EiK/FgLRtqxvsse3Zp0=)
6: 6FnJdPGW5pvMSXpTXx-nurrcFJ0.roa (hash: Neuse6+sPgHinhaJ6KBCDHKqQY1zJXc/3mtpYtYxBEE=)
7: 7urWinFGpaQwu4q2NACNc33Uqc0.roa (hash: /0y45l7uncJz+6g4k7MjIHbXj2ToXe8FU4Al2yYxxrk=)
8: AAf-UhAAKKoX99e1y-clL2vF5MI.roa (hash: CvmT5xM2HshaiNzJabgceSJQyGF24/yyH24K3t935zc=)
9: AGIcyv6akkuecB-WP_iweJslK-o.roa (hash: kZrndDnlcrxedsLlgmQqLvVG/016dDI5arID3t6+DWA=)
10: B8H6VmxfJXD2bVcz9lqwmFV8ya0.roa (hash: NunX4yChBXH4mlq5nGv56BR4PCufDfN3zLv9ymhyXpc=)
11: KWi04O-BBvDhKrjlAdKqTja3g8I.crl (hash: tqjPkj0iKyP37YjmKFjWuhcbvDcaWChM78C50UMuOks=)
12: OqFJQmWIWlUgwt4wauu6KZcowmw.roa (hash: 5cgutzLvwloFkAKb42SaluRwnKatUxb+LuqQKWj5zbk=)
13: PJdBUbgKBhgSdoiiMeIPTyM59kM.roa (hash: +cAcRGvopCgB6nUW8hVTRtRILfXgI80D1d6TR///UD8=)
14: S-PfT7x9rr1Key3l24FiMn_GM3M.roa (hash: 69f7peYT5HVTCqDrHMvYQn0aPJJ6z/N2GfKv65UX+FI=)
15: S0f4eJQFFpAJU7gBmRif1cCdYzE.roa (hash: dMXse4/XYRfPD3fvc6eTVZmcZ4FGksUwnohMDVBgvc0=)
16: X9PkKl2cefOx63qVtTaYdrkzxd0.roa (hash: giM5kvZJx533XVrawIuRkLj+sL+9hAPHNii8Ak6qshk=)
17: YUks2Od0XGVs_0qy4zM64qK2ilc.roa (hash: fOJKj898k6XkbbvQ0FoOeL9v44eRzqi39qmYuSLOEko=)
18: dJLZ82woz9osVRfBLK_-niCyNj8.roa (hash: gbJMkN3Qke1KrYB5jhYzib+ht/WJlZL8orB4ISUMuEE=)
19: eU8i6nPKMWqCsVdPFp89hHhQ_hs.roa (hash: rNMI3gPO9pm+cF0NT/diCkjrM2NOj9L9A6LND/aPFyw=)
20: fnpBuXApf2KSN0_I10e4uBBef4I.roa (hash: mg7y4ym55PhF1uqywLWBK6bXIQO52AVjtO1tHb0Miig=)
21: mHSeWUrjc6YX-rsHgTi0XW2FRBg.roa (hash: t5nE21qjW3DJQIzH2j04n4MZU2wBAB1tTQYoPBXsr7U=)
22: mscT-yjpefQxwhiAkQBK5LU9YNI.roa (hash: AFKqRZpefBn2UqJLZfz5iAvOxe4M4XZCr9/bNjwQOC4=)
23: oq1t9a6_NvskvBAPm9-FRhVY4b8.roa (hash: Qrnl/t8muiKf2rVgb3xH0a4B7FWa64wS6nhiWVd6iLY=)
24: pc6siy3_DxYAwddcJOSIg7X07Yc.roa (hash: 2HJWbABktGThGQHpV8qMPjcUrVEey5pJp9pmV+aft3c=)
25: q5OHsMnoclPtZxTfFFLO8V7xM_A.roa (hash: kRnxJnfbBG687+x3M5t+/g6fKT4I4zdzsfRk/nUF+bo=)
26: rq7JejW5a3_irbw_aBIqgmSBTqc.roa (hash: wxuzzzOzEBqdMOCvC7XteOmfCNZ5CNJjs+MU2tOaWDY=)
27: vZNbnCQJNucOJmHvAwRz35uFqM4.roa (hash: qlxRyQlm7/P4XD2LyXkJPHShRipWPQgw8VPLfmMcrGE=)
28: wnxy5V-1cEegaxJtKVAMut3benM.roa (hash: sUdU5a1rnsEdOVKYhJDEO/xTx4mzMBYqk5k2KepP1tw=)
29: wwaY0WuQZFQx_lqyW2jSnUb7Uno.roa (hash: hC+e2pC0Y+hwrr9gw3/mXUJ159/dSRXVbIamUE8ySl8=)
30: xdd7SEG9mLRxhUdaoUG1DLRpkPI.roa (hash: GW2iR1Svx+wKk5VPTDs/4jldiJuhITkDvE5OyBpw0WA=)
31: y_hFsBFw5TnwZzUPUVeY_JDobJw.roa (hash: Yw4KTjxopDUyK/440NIIBj8AANnYLxlC6/L3kGPhoos=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/481637-6c1c-45e8-8fbd-44f8ed5d61d7/1/KWi04O-BBvDhKrjlAdKqTja3g8I.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/481637-6c1c-45e8-8fbd-44f8ed5d61d7/1/KWi04O-BBvDhKrjlAdKqTja3g8I.mft
rsync://rpki.ripe.net/repository/DEFAULT/KWi04O-BBvDhKrjlAdKqTja3g8I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 03:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:62:55:ff:e6:3e:62:e5:86:58:be:c1:ce:e7:c7:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2968b4e0ef8106f0e12ab8e501d2aa4e36b783c2
Validity
Not Before: Apr 17 03:00:51 2026 GMT
Not After : Apr 18 03:00:51 2026 GMT
Subject: CN=08df9fae937f2a91faf4b8c5ed799329c9c4af5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:f2:26:c3:ef:9f:ed:83:cc:f8:51:50:8c:37:
e0:7d:4c:87:dc:eb:b2:3e:63:d8:d0:69:c0:90:ec:
af:3f:b7:a0:b4:51:e2:7d:11:d7:91:53:f9:5f:a7:
2a:5e:36:ae:a0:6a:9c:63:a9:9f:41:6c:5d:b1:e2:
d2:f1:50:f5:7e:00:3c:fb:be:61:96:a9:8f:5e:82:
3c:9a:31:b9:62:c1:7c:f3:46:cf:23:0e:17:77:32:
c7:f6:ce:d6:7b:17:7e:9a:49:ef:0c:4c:e6:8c:9c:
3d:df:f7:79:dd:4b:1f:30:03:37:a9:ac:c2:b4:06:
68:46:5b:f6:3c:fb:e3:6f:98:ef:4e:f8:67:14:d2:
86:e2:1d:81:dc:60:bb:20:b1:5c:f2:f2:6a:f4:f9:
65:77:cb:00:23:bb:4e:b6:f7:91:c3:bd:ea:9a:7c:
30:df:7e:f0:84:5f:35:29:3f:78:f4:75:00:b0:1f:
64:c0:16:e9:ee:fc:6f:2e:2b:11:c9:03:bd:04:9e:
e5:91:23:aa:c7:d8:3c:28:40:0f:9c:2a:a8:9e:d7:
70:65:d4:fb:fc:2e:76:7a:fd:43:d9:6e:a1:0d:55:
22:2c:72:90:9f:41:8d:67:d1:bc:7b:5a:f7:f9:73:
41:ef:b7:d6:28:cf:fa:5d:31:cc:82:bc:90:04:1e:
0f:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:DF:9F:AE:93:7F:2A:91:FA:F4:B8:C5:ED:79:93:29:C9:C4:AF:5B
X509v3 Authority Key Identifier:
keyid:29:68:B4:E0:EF:81:06:F0:E1:2A:B8:E5:01:D2:AA:4E:36:B7:83:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KWi04O-BBvDhKrjlAdKqTja3g8I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/481637-6c1c-45e8-8fbd-44f8ed5d61d7/1/KWi04O-BBvDhKrjlAdKqTja3g8I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/481637-6c1c-45e8-8fbd-44f8ed5d61d7/1/KWi04O-BBvDhKrjlAdKqTja3g8I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:61:28:3f:7c:94:1a:67:27:7b:38:69:c2:e8:ce:8e:6d:a6:
39:61:ad:41:e5:62:cb:c0:71:b9:a8:81:01:32:38:9d:1e:4c:
28:65:13:ff:3f:36:2a:e0:82:30:1e:3a:64:9c:d5:4a:0c:be:
33:c8:3e:5a:d7:54:57:ba:a3:6e:22:c9:04:1d:6f:b5:ab:c7:
96:a1:92:ec:08:cb:c9:f3:57:df:22:12:5f:2b:42:57:d2:6b:
a2:31:ae:02:23:a7:5f:d6:5a:f2:7e:ea:fa:f2:b0:3f:c5:e7:
91:4a:42:5a:6f:17:8b:d1:e2:16:11:c2:14:e1:e2:d9:ae:83:
90:ad:ee:00:67:68:83:05:28:ec:59:d6:9c:e5:e2:26:4d:66:
7e:b7:ac:12:9b:c9:61:ca:19:09:33:ea:ac:82:3a:58:8b:0c:
39:32:35:ae:38:4e:ff:f6:ad:b9:c6:95:b6:4a:95:08:df:c9:
46:2b:06:ff:3c:01:da:b1:e6:06:66:da:f5:d4:14:61:0e:08:
9e:04:b3:01:1d:9e:3f:e1:1f:2e:eb:9c:1b:4a:7c:3f:70:fd:
50:39:66:83:b3:cd:8a:9a:4d:21:27:e6:12:53:dc:b2:f0:7b:
ad:92:1e:2e:34:42:3b:ca:e9:67:93:ed:b1:ee:c5:5a:be:22:
90:6c:cc:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:23:47 2026 by rpki-client