
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/481637-6c1c-45e8-8fbd-44f8ed5d61d7/1/KWi04O-BBvDhKrjlAdKqTja3g8I.mft
File: KWi04O-BBvDhKrjlAdKqTja3g8I.mft (raw, json)
Hash identifier: a2gnYdYKrC0qix9PMJpjFsbdZhLmwYaGbu27POLxJGQ=
Subject key identifier: 25:C0:7E:75:1C:07:31:34:63:1A:13:E8:82:CE:69:1B:D0:E7:3F:2A
Authority key identifier: 29:68:B4:E0:EF:81:06:F0:E1:2A:B8:E5:01:D2:AA:4E:36:B7:83:C2
Certificate issuer: /CN=2968b4e0ef8106f0e12ab8e501d2aa4e36b783c2
Certificate serial: 019CA946210B8112B6DF069B8B9484F309CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KWi04O-BBvDhKrjlAdKqTja3g8I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/481637-6c1c-45e8-8fbd-44f8ed5d61d7/1/KWi04O-BBvDhKrjlAdKqTja3g8I.mft
Manifest number: 05FC
Signing time: Sun 01 Mar 2026 12:01:11 +0000
Manifest this update: Sun 01 Mar 2026 12:01:11 +0000
Manifest next update: Mon 02 Mar 2026 12:01:11 +0000
Files and hashes: 1: 0hpieyXYpLMjxyT6mWgC5hB6md0.roa (hash: kAt+7z9pm070nauT+nqQ0kqKEN21nUOuAvbTxD+QIxY=)
2: 1-BeXqPwf4wGqQf8BMkvATSMUSvg.roa (hash: sHCQTjP4DGWRR+9EwPFQEYOJ1YUo6fNUrBWZXp0K9lU=)
3: 1npgJu3da2DJY-gYNC0mp_D7cA8.roa (hash: hTdQzo7dggejXQGIdEULc8F5CFOgeJzoVvTDCzsb0Pw=)
4: 1nu_yHaz4a9cC9ZPSse62hEV7z4.roa (hash: JbDziZ7Tgxvff3ssi+tWGZ4dDDxpjWqXNx9DdzoeJIs=)
5: 4J-3un-Yz1yl1SRrxlOCEySqXvc.asa (hash: sWD+AvZgpViJHkE0RVHOakA+EiK/FgLRtqxvsse3Zp0=)
6: 6FnJdPGW5pvMSXpTXx-nurrcFJ0.roa (hash: Neuse6+sPgHinhaJ6KBCDHKqQY1zJXc/3mtpYtYxBEE=)
7: 7urWinFGpaQwu4q2NACNc33Uqc0.roa (hash: /0y45l7uncJz+6g4k7MjIHbXj2ToXe8FU4Al2yYxxrk=)
8: AGIcyv6akkuecB-WP_iweJslK-o.roa (hash: kZrndDnlcrxedsLlgmQqLvVG/016dDI5arID3t6+DWA=)
9: B8H6VmxfJXD2bVcz9lqwmFV8ya0.roa (hash: NunX4yChBXH4mlq5nGv56BR4PCufDfN3zLv9ymhyXpc=)
10: KWi04O-BBvDhKrjlAdKqTja3g8I.crl (hash: z63/L66W5U2yPLEBmMBeIH6/E8/txTpfIYD5eDMuC4M=)
11: OqFJQmWIWlUgwt4wauu6KZcowmw.roa (hash: 5cgutzLvwloFkAKb42SaluRwnKatUxb+LuqQKWj5zbk=)
12: PJdBUbgKBhgSdoiiMeIPTyM59kM.roa (hash: +cAcRGvopCgB6nUW8hVTRtRILfXgI80D1d6TR///UD8=)
13: S-PfT7x9rr1Key3l24FiMn_GM3M.roa (hash: 69f7peYT5HVTCqDrHMvYQn0aPJJ6z/N2GfKv65UX+FI=)
14: S0f4eJQFFpAJU7gBmRif1cCdYzE.roa (hash: dMXse4/XYRfPD3fvc6eTVZmcZ4FGksUwnohMDVBgvc0=)
15: X9PkKl2cefOx63qVtTaYdrkzxd0.roa (hash: giM5kvZJx533XVrawIuRkLj+sL+9hAPHNii8Ak6qshk=)
16: YUks2Od0XGVs_0qy4zM64qK2ilc.roa (hash: fOJKj898k6XkbbvQ0FoOeL9v44eRzqi39qmYuSLOEko=)
17: dJLZ82woz9osVRfBLK_-niCyNj8.roa (hash: gbJMkN3Qke1KrYB5jhYzib+ht/WJlZL8orB4ISUMuEE=)
18: eU8i6nPKMWqCsVdPFp89hHhQ_hs.roa (hash: rNMI3gPO9pm+cF0NT/diCkjrM2NOj9L9A6LND/aPFyw=)
19: fnpBuXApf2KSN0_I10e4uBBef4I.roa (hash: mg7y4ym55PhF1uqywLWBK6bXIQO52AVjtO1tHb0Miig=)
20: mHSeWUrjc6YX-rsHgTi0XW2FRBg.roa (hash: t5nE21qjW3DJQIzH2j04n4MZU2wBAB1tTQYoPBXsr7U=)
21: mscT-yjpefQxwhiAkQBK5LU9YNI.roa (hash: AFKqRZpefBn2UqJLZfz5iAvOxe4M4XZCr9/bNjwQOC4=)
22: oq1t9a6_NvskvBAPm9-FRhVY4b8.roa (hash: Qrnl/t8muiKf2rVgb3xH0a4B7FWa64wS6nhiWVd6iLY=)
23: pc6siy3_DxYAwddcJOSIg7X07Yc.roa (hash: 2HJWbABktGThGQHpV8qMPjcUrVEey5pJp9pmV+aft3c=)
24: phIldGr0t0uwTW-BuSAmzN6XhjE.roa (hash: raVegt7yKtN8ZFOUbeTVHlJ8PtEpgoSSdoNKxRXXN5Y=)
25: q5OHsMnoclPtZxTfFFLO8V7xM_A.roa (hash: kRnxJnfbBG687+x3M5t+/g6fKT4I4zdzsfRk/nUF+bo=)
26: rq7JejW5a3_irbw_aBIqgmSBTqc.roa (hash: wxuzzzOzEBqdMOCvC7XteOmfCNZ5CNJjs+MU2tOaWDY=)
27: vZNbnCQJNucOJmHvAwRz35uFqM4.roa (hash: qlxRyQlm7/P4XD2LyXkJPHShRipWPQgw8VPLfmMcrGE=)
28: wnxy5V-1cEegaxJtKVAMut3benM.roa (hash: sUdU5a1rnsEdOVKYhJDEO/xTx4mzMBYqk5k2KepP1tw=)
29: wwaY0WuQZFQx_lqyW2jSnUb7Uno.roa (hash: hC+e2pC0Y+hwrr9gw3/mXUJ159/dSRXVbIamUE8ySl8=)
30: xdd7SEG9mLRxhUdaoUG1DLRpkPI.roa (hash: GW2iR1Svx+wKk5VPTDs/4jldiJuhITkDvE5OyBpw0WA=)
31: y_hFsBFw5TnwZzUPUVeY_JDobJw.roa (hash: Yw4KTjxopDUyK/440NIIBj8AANnYLxlC6/L3kGPhoos=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/481637-6c1c-45e8-8fbd-44f8ed5d61d7/1/KWi04O-BBvDhKrjlAdKqTja3g8I.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/481637-6c1c-45e8-8fbd-44f8ed5d61d7/1/KWi04O-BBvDhKrjlAdKqTja3g8I.mft
rsync://rpki.ripe.net/repository/DEFAULT/KWi04O-BBvDhKrjlAdKqTja3g8I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 06:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:46:21:0b:81:12:b6:df:06:9b:8b:94:84:f3:09:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2968b4e0ef8106f0e12ab8e501d2aa4e36b783c2
Validity
Not Before: Mar 1 12:01:11 2026 GMT
Not After : Mar 2 12:01:11 2026 GMT
Subject: CN=25c07e751c073134631a13e882ce691bd0e73f2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:8c:c5:66:fc:54:82:e4:97:6d:a6:ab:c6:78:
8d:b5:e9:27:58:a0:0a:2a:47:0a:31:28:7b:d6:81:
1e:22:3b:b5:b1:89:3e:9e:b1:67:12:d6:a7:f7:ef:
2d:e4:3e:c6:30:68:ed:56:1a:60:5b:6b:85:56:15:
4f:03:dc:f3:c5:bf:ff:8d:9c:0d:9d:f3:87:6c:34:
6e:95:54:a1:58:84:c6:50:ed:1e:c2:4d:ab:3d:cb:
ea:e7:65:b9:37:04:19:96:68:56:9f:18:4c:80:70:
a5:15:77:d4:5b:71:9a:08:23:38:5a:58:97:a2:8c:
42:32:4c:f7:76:d4:d7:79:65:c4:4e:20:dd:85:81:
c2:fb:c0:36:1e:da:e2:96:e7:11:cf:b5:6d:97:51:
f4:16:06:63:8b:83:67:47:7f:c8:7b:01:97:75:9c:
89:b5:87:35:b0:b3:19:94:79:ec:b2:64:88:00:54:
6d:10:6b:08:c7:fe:5f:54:33:d2:2f:37:1f:60:e2:
47:1c:85:d5:8b:7f:49:25:84:d4:79:3c:17:73:c0:
d5:23:04:2e:94:90:52:06:5d:dc:b8:9c:12:6d:38:
a3:04:bd:db:6f:91:b4:63:27:82:0a:0e:ac:b2:de:
a5:c0:10:17:0f:11:ea:59:45:d0:3c:bc:31:24:80:
a9:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:C0:7E:75:1C:07:31:34:63:1A:13:E8:82:CE:69:1B:D0:E7:3F:2A
X509v3 Authority Key Identifier:
keyid:29:68:B4:E0:EF:81:06:F0:E1:2A:B8:E5:01:D2:AA:4E:36:B7:83:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KWi04O-BBvDhKrjlAdKqTja3g8I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/481637-6c1c-45e8-8fbd-44f8ed5d61d7/1/KWi04O-BBvDhKrjlAdKqTja3g8I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/481637-6c1c-45e8-8fbd-44f8ed5d61d7/1/KWi04O-BBvDhKrjlAdKqTja3g8I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:f4:a4:4f:c7:be:f1:94:2f:a0:f9:69:17:8f:51:6e:84:b6:
e4:19:e9:a4:98:d3:07:2c:ce:63:10:a8:63:10:21:67:60:34:
1e:f9:55:e4:12:51:7b:8b:cd:67:d6:5e:e8:4a:fb:87:5a:89:
fb:f1:b7:39:40:8f:00:94:5a:43:58:99:07:53:ae:61:b0:61:
8a:5e:76:46:21:39:90:83:4c:f9:28:42:3a:c3:fe:31:ce:f2:
f3:0b:62:5e:27:5d:04:3d:43:c0:19:02:8d:8a:51:dc:8f:ad:
7b:9c:3e:b0:f3:71:b9:f1:3d:c4:df:33:70:1d:a3:6e:0e:0c:
d9:ca:d0:36:84:0a:5d:31:17:8e:7f:7e:eb:cb:db:56:5f:af:
31:53:02:96:e3:8a:94:23:83:c1:16:cc:b4:20:c0:fe:82:7a:
89:64:e4:0f:55:ad:1d:01:af:b3:45:3a:1f:bd:de:25:48:5c:
91:9d:04:3e:9e:06:b0:bf:53:70:2b:d1:4a:b1:fc:65:92:0f:
0f:01:df:c8:4f:06:4a:53:f0:2c:b8:2e:da:90:b0:8d:4b:2b:
95:ed:82:3f:0d:64:6c:fc:17:38:90:50:75:a2:73:1e:df:57:
bc:0e:ba:06:b0:8c:7a:81:94:79:a6:da:ae:91:d7:b5:58:a8:
66:1e:30:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 14:46:38 2026 by rpki-client