
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/545258-f8a9-4ceb-b01b-c8df84e7ae29/1/KWJHhUnYzCZMLMV9znGQXRdvuIo.mft
File: KWJHhUnYzCZMLMV9znGQXRdvuIo.mft (raw, json)
Hash identifier: awEsdK8b2KQcL81xHBmH3vfdaaA2hNj0qZ887qJKepE=
Subject key identifier: EA:49:A6:20:F8:61:7F:63:B7:4E:DB:E4:A7:64:5F:0C:54:70:8E:38
Authority key identifier: 29:62:47:85:49:D8:CC:26:4C:2C:C5:7D:CE:71:90:5D:17:6F:B8:8A
Certificate issuer: /CN=2962478549d8cc264c2cc57dce71905d176fb88a
Certificate serial: 019DA41C84854C93C07874BB0C1D3F632447
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KWJHhUnYzCZMLMV9znGQXRdvuIo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/545258-f8a9-4ceb-b01b-c8df84e7ae29/1/KWJHhUnYzCZMLMV9znGQXRdvuIo.mft
Manifest number: 1858
Signing time: Sun 19 Apr 2026 05:00:25 +0000
Manifest this update: Sun 19 Apr 2026 05:00:25 +0000
Manifest next update: Mon 20 Apr 2026 05:00:25 +0000
Files and hashes: 1: DcG15XyhdtPXOoAizwXiwS-vgWk.roa (hash: 03f0uMllqGm3yVnRgDCB+1RlKyMTqkNgfPJ+f2YUXH4=)
2: KWJHhUnYzCZMLMV9znGQXRdvuIo.crl (hash: J0UQHwslsELH/KbkkKth8WS9dlMljXvOKXtjn8geIOM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/545258-f8a9-4ceb-b01b-c8df84e7ae29/1/KWJHhUnYzCZMLMV9znGQXRdvuIo.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/545258-f8a9-4ceb-b01b-c8df84e7ae29/1/KWJHhUnYzCZMLMV9znGQXRdvuIo.mft
rsync://rpki.ripe.net/repository/DEFAULT/KWJHhUnYzCZMLMV9znGQXRdvuIo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 04:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:1c:84:85:4c:93:c0:78:74:bb:0c:1d:3f:63:24:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2962478549d8cc264c2cc57dce71905d176fb88a
Validity
Not Before: Apr 19 05:00:25 2026 GMT
Not After : Apr 20 05:00:25 2026 GMT
Subject: CN=ea49a620f8617f63b74edbe4a7645f0c54708e38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:9f:0b:19:99:b4:c9:b7:62:d6:58:65:39:12:
1f:02:07:61:5b:66:4f:d0:e5:77:95:58:92:14:a6:
96:54:f9:03:53:e8:32:9a:e8:7d:31:9f:87:d5:ee:
2b:1d:11:59:e3:65:b1:65:a6:f4:96:d2:d0:8b:3d:
13:0b:1f:01:6b:2e:05:3e:6c:99:35:f6:0e:31:b1:
42:ea:5e:a6:07:ca:30:e5:9b:5f:32:cd:28:ee:11:
89:7e:20:4b:b6:c2:5d:82:f6:38:45:09:d4:eb:a7:
79:d1:01:c5:a4:bb:8b:f1:ab:dc:16:c1:3c:ff:b4:
b0:9a:e9:cb:25:91:36:cf:6e:e0:d5:29:6b:b6:47:
21:1c:73:e8:07:20:d9:e7:1c:8f:bc:51:d6:38:11:
21:d1:44:7a:0e:9e:64:89:97:6e:d7:8c:4c:db:fc:
fd:eb:5e:56:a3:ee:aa:da:83:31:b3:54:96:33:3d:
02:65:a3:ea:fa:16:03:7a:89:d4:7b:4b:0f:e1:fc:
cc:68:39:89:6b:6c:73:b4:0f:43:9b:28:65:25:27:
b6:39:e3:46:dd:e1:7f:5f:38:ed:9f:43:30:2c:a3:
5b:2a:26:59:41:da:a8:8f:4c:6f:cc:e2:88:c3:3d:
c0:09:bd:52:dc:f1:f0:0e:31:12:11:01:b7:ac:f9:
87:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:49:A6:20:F8:61:7F:63:B7:4E:DB:E4:A7:64:5F:0C:54:70:8E:38
X509v3 Authority Key Identifier:
keyid:29:62:47:85:49:D8:CC:26:4C:2C:C5:7D:CE:71:90:5D:17:6F:B8:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KWJHhUnYzCZMLMV9znGQXRdvuIo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/545258-f8a9-4ceb-b01b-c8df84e7ae29/1/KWJHhUnYzCZMLMV9znGQXRdvuIo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/545258-f8a9-4ceb-b01b-c8df84e7ae29/1/KWJHhUnYzCZMLMV9znGQXRdvuIo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:de:3c:e9:c9:63:b6:a3:87:59:e1:a5:43:ce:4e:2f:44:f1:
d9:2d:36:fc:03:32:b4:25:d9:e5:fc:f0:b5:cd:3d:50:f6:17:
19:ae:69:ea:5c:70:05:5b:f2:08:15:0b:90:00:90:1b:c4:ba:
fb:9c:df:00:24:03:ad:3e:0a:40:bd:f4:6d:ea:b9:f0:55:21:
c0:39:94:2b:74:44:33:e7:e2:85:7a:20:45:8c:9b:05:18:23:
48:d7:2d:3b:f9:1c:29:05:3d:77:b1:d7:5f:11:40:ae:dd:a0:
a4:92:8d:07:f8:69:be:de:10:f6:49:70:3e:18:ba:d2:06:20:
cc:8e:0c:91:a5:93:32:38:3e:0d:88:af:b3:ad:91:d2:64:e7:
48:70:50:e6:35:bf:a9:a2:b6:b7:9d:27:f2:98:22:15:08:eb:
83:a1:51:4b:bf:d5:fe:a2:0a:a9:f4:42:c1:5b:60:ca:ee:37:
ac:6c:26:33:66:86:5d:42:cb:ab:c7:c7:be:37:18:cf:84:c9:
62:5f:07:76:9e:28:fb:28:80:b8:23:6e:ac:94:06:fb:79:66:
18:fa:24:60:1e:e1:f6:24:8b:04:20:5e:b1:59:12:b7:98:76:
6e:b9:47:16:e6:04:c8:98:61:46:fa:5e:b7:ef:07:93:b5:6a:
7b:af:df:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 12:59:38 2026 by rpki-client