Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/194f22-8689-4fdb-9c41-058bbf9d5e27/1/KwA-WDvbJRH_V6t6MvznQTNLNDs.mft
File: KwA-WDvbJRH_V6t6MvznQTNLNDs.mft (raw, json)
Hash identifier: pDXRkJ7jelOeXS5Ei/+DQt2mxOdW/pe7XQ+qlgQNDQY=
Subject key identifier: 0A:F9:25:F2:24:39:3E:0F:ED:33:5E:59:83:D8:F1:07:43:B1:AA:36
Authority key identifier: 2B:00:3E:58:3B:DB:25:11:FF:57:AB:7A:32:FC:E7:41:33:4B:34:3B
Certificate issuer: /CN=2b003e583bdb2511ff57ab7a32fce741334b343b
Certificate serial: 019D99620F2D3519FC35531D828E0B3E1150
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KwA-WDvbJRH_V6t6MvznQTNLNDs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/194f22-8689-4fdb-9c41-058bbf9d5e27/1/KwA-WDvbJRH_V6t6MvznQTNLNDs.mft
Manifest number: 18C3
Signing time: Fri 17 Apr 2026 03:00:33 +0000
Manifest this update: Fri 17 Apr 2026 03:00:33 +0000
Manifest next update: Sat 18 Apr 2026 03:00:33 +0000
Files and hashes: 1: KZ7bDRNwTfIEQWY_jhARUR9DHxI.roa (hash: eyE+qcEsEBDUoKEFoqctNchUZLkDzCl+DcFXWEI/yFY=)
2: KwA-WDvbJRH_V6t6MvznQTNLNDs.crl (hash: Oqmveuyn7YTmP5FA55khZfm69patS4ciorqcIUPluII=)
3: NzKx6KcOHXw58MEojB9ud-uaBro.roa (hash: a9iaY6BAt3IsnsebJ+05WFxE0TvGeWD+djHy5NWOc0U=)
4: WVIppZ-adXM0RCbFNu2ZaCBfuZQ.roa (hash: hwZIh3ZVsKyRI6oFuWtqGMKZtqEO+xpper2aZGmlvQM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/194f22-8689-4fdb-9c41-058bbf9d5e27/1/KwA-WDvbJRH_V6t6MvznQTNLNDs.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/194f22-8689-4fdb-9c41-058bbf9d5e27/1/KwA-WDvbJRH_V6t6MvznQTNLNDs.mft
rsync://rpki.ripe.net/repository/DEFAULT/KwA-WDvbJRH_V6t6MvznQTNLNDs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 03:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:62:0f:2d:35:19:fc:35:53:1d:82:8e:0b:3e:11:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b003e583bdb2511ff57ab7a32fce741334b343b
Validity
Not Before: Apr 17 03:00:33 2026 GMT
Not After : Apr 18 03:00:33 2026 GMT
Subject: CN=0af925f224393e0fed335e5983d8f10743b1aa36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:58:a8:e6:d9:d1:a2:d5:d2:9b:b7:b3:3c:ff:
80:2d:23:15:03:87:94:d4:ee:bc:32:4f:db:62:0d:
1a:7c:4b:29:ca:93:3a:35:a9:b4:47:89:7f:28:ee:
0e:0d:21:e8:e5:7a:87:dc:f1:a9:53:03:11:56:89:
21:36:77:f2:77:a2:5c:ef:75:7b:96:60:a7:40:e2:
87:1f:0d:8b:a3:69:bb:d5:69:bd:d0:4e:bf:22:ba:
71:e0:fc:a0:d0:09:4d:fa:00:e2:c3:4d:2a:18:c6:
ca:b6:af:65:c6:ca:d2:49:65:c1:9d:5a:87:fc:47:
2a:db:c5:98:da:1f:1b:24:b0:b7:41:c3:d5:96:65:
02:43:f5:a4:57:8b:3c:ac:56:4c:28:ec:c0:6d:54:
94:b4:c9:29:7b:36:95:a7:20:3c:7d:94:ce:b9:f6:
77:01:54:f7:66:41:fa:5c:ba:47:e7:19:a1:ec:0f:
69:9c:30:3b:8c:9c:1e:3c:6b:b1:dd:5b:f4:68:68:
e2:69:ae:ec:3c:d4:38:4e:3f:00:47:fd:a7:c1:07:
a5:90:7c:bf:65:6f:7f:c1:7a:46:58:a4:62:ef:51:
db:2a:ef:31:e7:2f:f8:a4:10:85:a7:33:8b:25:7b:
c0:37:2c:5e:75:25:bc:c6:5d:22:bc:31:96:2b:85:
b9:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:F9:25:F2:24:39:3E:0F:ED:33:5E:59:83:D8:F1:07:43:B1:AA:36
X509v3 Authority Key Identifier:
keyid:2B:00:3E:58:3B:DB:25:11:FF:57:AB:7A:32:FC:E7:41:33:4B:34:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KwA-WDvbJRH_V6t6MvznQTNLNDs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/194f22-8689-4fdb-9c41-058bbf9d5e27/1/KwA-WDvbJRH_V6t6MvznQTNLNDs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/194f22-8689-4fdb-9c41-058bbf9d5e27/1/KwA-WDvbJRH_V6t6MvznQTNLNDs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:c5:91:d3:f3:16:68:01:25:c8:b2:b6:c5:03:c5:e9:28:37:
ca:42:4f:9e:3b:9f:d6:9c:c3:93:2b:6f:78:5b:6d:0c:d6:08:
12:1e:c2:d6:02:2b:35:38:eb:44:6e:4b:e9:98:13:a8:54:9b:
a3:be:fd:94:ba:26:54:ea:ff:ab:b5:02:9b:6e:39:77:44:81:
b2:e8:98:7a:56:07:05:f1:b0:38:ec:5e:ad:76:26:ed:0d:ca:
c0:c1:b9:63:cd:41:15:46:d6:de:8e:b9:41:22:30:a5:34:dd:
ee:77:c5:66:06:54:a3:ba:11:84:5f:c3:2d:73:b6:7c:2a:65:
70:63:12:ca:50:c9:77:a2:6a:35:19:27:66:a1:9f:fd:1e:98:
ab:b7:fa:20:8a:7a:e3:f4:71:79:70:a6:e0:b4:6c:f7:9d:43:
19:2f:08:12:6d:57:d4:fb:85:96:17:76:34:8d:d0:a4:e5:81:
2a:e7:0e:98:7a:73:b5:93:23:a9:48:9d:40:7c:d4:75:9e:2c:
de:31:cb:a1:b2:cf:22:7a:23:30:28:e9:69:a3:04:80:ee:57:
80:ab:ab:fd:4b:53:5b:ab:76:a4:84:01:d1:18:60:f5:01:5d:
e7:aa:05:c6:de:f6:ed:42:15:01:01:52:ac:d6:9a:f8:0b:f5:
99:c5:c7:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:01:24 2026 by rpki-client