Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/aa55a2-e33e-4dc0-9d87-8cc6579415da/1/kwpXLBbQxE93Zlh9kth4ujBUHR4.mft
File: kwpXLBbQxE93Zlh9kth4ujBUHR4.mft (raw, json)
Hash identifier: 5G2TKannXtdhzCDiEmN2djiZXp4kYh4GoOpD/IN5M3Q=
Subject key identifier: C7:C7:77:70:AF:54:E2:67:70:DA:E2:47:8C:0D:8A:3E:D1:DC:95:E5
Authority key identifier: 93:0A:57:2C:16:D0:C4:4F:77:66:58:7D:92:D8:78:BA:30:54:1D:1E
Certificate issuer: /CN=930a572c16d0c44f7766587d92d878ba30541d1e
Certificate serial: 019CAB341BBFA5E795740850D8906A1C2869
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kwpXLBbQxE93Zlh9kth4ujBUHR4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/aa55a2-e33e-4dc0-9d87-8cc6579415da/1/kwpXLBbQxE93Zlh9kth4ujBUHR4.mft
Manifest number: 0A1C
Signing time: Sun 01 Mar 2026 21:00:44 +0000
Manifest this update: Sun 01 Mar 2026 21:00:44 +0000
Manifest next update: Mon 02 Mar 2026 21:00:44 +0000
Files and hashes: 1: HmYrDKd2yjYmZLmWzYz7se6Li1c.roa (hash: 2E+4PcgEvP7v29a2K/Pql8IKPHh2ZcXb/x/xhB+Fnbs=)
2: kwpXLBbQxE93Zlh9kth4ujBUHR4.crl (hash: n+CeE/sUXi5QSPKw6blcOmt5ovBZda54DSGKPp42Oyw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/aa55a2-e33e-4dc0-9d87-8cc6579415da/1/kwpXLBbQxE93Zlh9kth4ujBUHR4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/aa55a2-e33e-4dc0-9d87-8cc6579415da/1/kwpXLBbQxE93Zlh9kth4ujBUHR4.mft
rsync://rpki.ripe.net/repository/DEFAULT/kwpXLBbQxE93Zlh9kth4ujBUHR4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 21:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:34:1b:bf:a5:e7:95:74:08:50:d8:90:6a:1c:28:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=930a572c16d0c44f7766587d92d878ba30541d1e
Validity
Not Before: Mar 1 21:00:44 2026 GMT
Not After : Mar 2 21:00:44 2026 GMT
Subject: CN=c7c77770af54e26770dae2478c0d8a3ed1dc95e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:89:2d:04:c2:6b:d9:0e:9f:0c:21:11:7a:20:
17:e6:3c:a1:c0:1c:7e:81:1f:1e:2f:f3:36:da:3a:
fb:65:24:00:54:a8:6e:48:d8:9a:71:b8:a8:de:21:
27:98:ad:e0:2f:47:20:84:10:fd:e7:c0:e7:78:8f:
a0:f9:47:ff:38:5a:06:8c:f5:ae:ce:74:69:cd:33:
c3:65:01:1d:a8:45:94:e3:5c:e1:28:b8:8b:31:8f:
eb:c4:6a:75:fd:7e:d3:9a:ab:93:7a:95:36:6b:5a:
3d:10:55:b0:c4:61:9b:b7:6c:3c:43:1a:1c:12:84:
f7:67:e8:7e:38:70:58:35:e1:ea:a5:10:e2:15:8d:
77:16:af:5e:63:09:25:db:f9:7f:37:13:1e:56:4b:
0d:55:6a:1b:bf:fb:2a:5d:8c:02:a2:ea:66:61:95:
3a:df:68:79:4c:fa:62:3f:d9:ea:16:8b:fc:25:2c:
05:2a:9f:12:8d:8d:b7:45:94:06:f5:d1:dc:9a:15:
84:93:dd:7a:4d:9d:e3:6d:b3:93:1e:d3:a8:9c:3c:
78:0b:17:7b:86:94:7b:9c:1a:c1:af:c9:1c:f3:73:
9b:00:35:6c:6e:1a:88:72:50:4e:0b:af:03:5c:75:
23:31:95:d0:d3:14:0f:77:5d:b3:da:f1:fb:c6:cf:
5d:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:C7:77:70:AF:54:E2:67:70:DA:E2:47:8C:0D:8A:3E:D1:DC:95:E5
X509v3 Authority Key Identifier:
keyid:93:0A:57:2C:16:D0:C4:4F:77:66:58:7D:92:D8:78:BA:30:54:1D:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kwpXLBbQxE93Zlh9kth4ujBUHR4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/aa55a2-e33e-4dc0-9d87-8cc6579415da/1/kwpXLBbQxE93Zlh9kth4ujBUHR4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/aa55a2-e33e-4dc0-9d87-8cc6579415da/1/kwpXLBbQxE93Zlh9kth4ujBUHR4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:0b:c3:a4:d4:b2:b0:33:cb:07:f3:bf:09:c6:57:50:00:1a:
22:e7:d4:e2:87:e0:52:19:a2:d0:1d:33:17:c1:c5:b8:12:bd:
71:a9:d4:69:a0:92:0d:9f:ce:b8:bb:2b:dc:a7:37:ea:05:18:
16:75:b9:2f:4d:26:8e:97:54:7a:69:d3:a7:59:d6:de:58:1f:
28:f1:03:08:a1:cf:1e:20:b6:b2:08:a3:8c:5c:cb:30:a9:b3:
93:d6:0e:04:a2:0c:40:f3:28:b5:ca:f5:55:0c:c1:9f:6e:17:
e3:3e:db:e1:9f:87:13:14:81:b7:af:d3:67:61:1f:b0:62:54:
7c:0c:03:76:1a:0e:ee:45:ee:db:a6:ac:4c:66:12:65:3f:67:
bc:74:10:52:13:5e:ac:fd:15:f7:2c:5e:25:fe:eb:fa:99:d2:
26:cc:76:df:43:46:76:3e:b1:a9:cc:b6:06:8c:88:7a:49:a2:
dc:10:28:df:f6:fa:43:95:44:dc:82:80:90:bc:29:f6:cc:a7:
69:31:66:57:ce:36:8b:e6:4c:24:a6:c8:77:0f:f6:1c:de:29:
1d:cf:5d:5e:2d:9f:ca:2f:bc:1f:03:0e:bb:e3:97:98:5a:25:
a3:24:2b:ae:97:68:35:8f:1b:c7:3b:2c:76:a7:c5:60:07:32:
1e:16:13:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:11:21 2026 by rpki-client