Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/545258-f8a9-4ceb-b01b-c8df84e7ae29/1/KWJHhUnYzCZMLMV9znGQXRdvuIo.mft
File: KWJHhUnYzCZMLMV9znGQXRdvuIo.mft (raw, json)
Hash identifier: GcKZMFpfaha/vA3dltTidhXn8GW5ddakcfgBlMfBSX8=
Subject key identifier: AA:60:64:6E:06:4D:3D:CD:01:D2:CC:15:50:20:AD:BB:3E:BB:0D:95
Authority key identifier: 29:62:47:85:49:D8:CC:26:4C:2C:C5:7D:CE:71:90:5D:17:6F:B8:8A
Certificate issuer: /CN=2962478549d8cc264c2cc57dce71905d176fb88a
Certificate serial: 019CAEDA1117D6617A7C5CA190B013EAEDFF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KWJHhUnYzCZMLMV9znGQXRdvuIo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/545258-f8a9-4ceb-b01b-c8df84e7ae29/1/KWJHhUnYzCZMLMV9znGQXRdvuIo.mft
Manifest number: 17D9
Signing time: Mon 02 Mar 2026 14:00:52 +0000
Manifest this update: Mon 02 Mar 2026 14:00:52 +0000
Manifest next update: Tue 03 Mar 2026 14:00:52 +0000
Files and hashes: 1: DcG15XyhdtPXOoAizwXiwS-vgWk.roa (hash: 03f0uMllqGm3yVnRgDCB+1RlKyMTqkNgfPJ+f2YUXH4=)
2: KWJHhUnYzCZMLMV9znGQXRdvuIo.crl (hash: KjEIVHVLBFcmTTFH4Ok164wu+LPLF4H5/qa+xrBopMA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/545258-f8a9-4ceb-b01b-c8df84e7ae29/1/KWJHhUnYzCZMLMV9znGQXRdvuIo.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/545258-f8a9-4ceb-b01b-c8df84e7ae29/1/KWJHhUnYzCZMLMV9znGQXRdvuIo.mft
rsync://rpki.ripe.net/repository/DEFAULT/KWJHhUnYzCZMLMV9znGQXRdvuIo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 14:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:da:11:17:d6:61:7a:7c:5c:a1:90:b0:13:ea:ed:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2962478549d8cc264c2cc57dce71905d176fb88a
Validity
Not Before: Mar 2 14:00:52 2026 GMT
Not After : Mar 3 14:00:52 2026 GMT
Subject: CN=aa60646e064d3dcd01d2cc155020adbb3ebb0d95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:52:8b:b2:09:8d:0d:9a:c2:b1:e1:6c:ba:e1:
50:db:a2:30:b3:d7:e1:df:14:b9:6f:dc:60:b6:69:
27:d0:f4:a5:bb:60:63:e5:16:cf:f4:b0:97:58:54:
a4:be:3d:a9:d6:fa:e5:f7:5a:61:11:1d:54:ed:88:
1c:e9:c3:f0:0c:e1:a5:03:dc:73:97:f6:9b:d9:fa:
1b:d9:38:bc:8c:b8:ae:1e:bc:5f:8e:86:e6:d8:f7:
b3:42:bc:2d:17:6c:40:7e:b0:d2:3d:e8:08:19:e6:
84:92:e8:38:b1:9f:80:ce:0d:03:19:2b:68:d1:ad:
14:b2:9e:06:17:61:88:df:7f:b0:69:6a:9e:9f:44:
63:74:bc:b0:52:f9:6d:f9:7f:0b:1e:54:c5:fa:68:
a9:3c:f4:40:ce:2f:2d:e0:92:4e:a0:ad:2e:f1:62:
4a:df:56:cb:1b:e4:cc:e5:9e:64:ef:6d:85:11:71:
b9:02:8a:33:37:57:6a:b1:be:a1:f7:ca:67:a0:2c:
1a:02:57:32:77:64:46:97:13:d2:38:a2:f2:2a:4d:
99:4f:d0:14:cb:43:0b:20:8d:40:fb:1e:4b:6c:51:
3f:07:29:3c:86:45:41:e7:1f:2c:11:9a:3b:9a:f9:
50:3b:80:f3:a8:fc:49:d3:1d:76:a6:3b:12:8b:20:
1c:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:60:64:6E:06:4D:3D:CD:01:D2:CC:15:50:20:AD:BB:3E:BB:0D:95
X509v3 Authority Key Identifier:
keyid:29:62:47:85:49:D8:CC:26:4C:2C:C5:7D:CE:71:90:5D:17:6F:B8:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KWJHhUnYzCZMLMV9znGQXRdvuIo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/545258-f8a9-4ceb-b01b-c8df84e7ae29/1/KWJHhUnYzCZMLMV9znGQXRdvuIo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/545258-f8a9-4ceb-b01b-c8df84e7ae29/1/KWJHhUnYzCZMLMV9znGQXRdvuIo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:7b:7a:38:3d:87:a9:cb:c4:b2:f7:3b:c2:af:6e:a0:84:fc:
26:b1:35:be:bf:65:47:bd:11:46:b6:dd:4a:ab:b6:f2:a9:ae:
3e:d1:eb:25:23:dd:a7:75:bf:d0:33:65:6e:ea:b7:fb:d4:41:
0d:c5:39:73:50:a3:e0:da:10:61:70:66:86:fd:d7:8d:b9:58:
f8:d4:83:6a:9e:dc:76:74:fa:ec:13:f8:d0:10:80:e9:97:03:
43:72:bb:2d:2b:79:40:8a:0b:44:c0:3f:a3:12:1b:41:bb:69:
3d:cb:32:b8:4d:86:bb:ed:7c:ea:92:3a:1b:d8:d7:82:36:60:
df:e9:a5:ce:eb:04:ec:89:b3:cd:2d:ba:b8:82:a5:54:a2:33:
a3:19:63:e3:d2:f4:9b:75:fd:58:cf:d3:15:09:d8:4d:37:a5:
33:cc:c2:f2:e3:ed:3b:50:cd:1a:d2:4e:27:af:a8:1f:60:b5:
ec:8d:50:8b:c5:d6:a0:8f:db:89:2e:15:ae:9c:af:4c:f2:18:
d6:f8:49:f9:38:cc:1b:f8:3c:68:0f:4f:0a:d3:d4:df:9e:4f:
f1:e7:62:77:66:71:8c:59:6c:a4:8f:b7:40:1d:e3:02:e8:8f:
e7:65:70:f9:28:86:49:26:57:ce:94:8e:f8:6f:54:9f:6f:4f:
c2:56:dd:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 19:09:07 2026 by rpki-client