Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/37b63e-9c88-42dc-b043-de844964f5ee/1/kwpGPWfktC2GOazfDRVCT4LxmmA.mft
File: kwpGPWfktC2GOazfDRVCT4LxmmA.mft (raw, json)
Hash identifier: zzpAjbdJncZmiun6B0cZ1ywlCSWW9nKQyNdtvDb7l+o=
Subject key identifier: D3:C7:6C:0D:A8:F1:C2:88:E4:4C:F6:59:EE:63:DA:16:52:5C:17:5F
Authority key identifier: 93:0A:46:3D:67:E4:B4:2D:86:39:AC:DF:0D:15:42:4F:82:F1:9A:60
Certificate issuer: /CN=930a463d67e4b42d8639acdf0d15424f82f19a60
Certificate serial: 019CAA8F5BAAF29CF3F66C8BEDF49F23121A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kwpGPWfktC2GOazfDRVCT4LxmmA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/37b63e-9c88-42dc-b043-de844964f5ee/1/kwpGPWfktC2GOazfDRVCT4LxmmA.mft
Manifest number: 17DA
Signing time: Sun 01 Mar 2026 18:00:47 +0000
Manifest this update: Sun 01 Mar 2026 18:00:47 +0000
Manifest next update: Mon 02 Mar 2026 18:00:47 +0000
Files and hashes: 1: izkOI9oY18uKSV4FRgb611Hp7mU.roa (hash: QUMFHyKky+C4/Hhg2gnIkNny4unJriThfo8M2jzgsDs=)
2: kwpGPWfktC2GOazfDRVCT4LxmmA.crl (hash: IGACBInqYlDxgqAUcHCaGcTzj/2RPZidQnSixCPd1E8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/37b63e-9c88-42dc-b043-de844964f5ee/1/kwpGPWfktC2GOazfDRVCT4LxmmA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/37b63e-9c88-42dc-b043-de844964f5ee/1/kwpGPWfktC2GOazfDRVCT4LxmmA.mft
rsync://rpki.ripe.net/repository/DEFAULT/kwpGPWfktC2GOazfDRVCT4LxmmA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:8f:5b:aa:f2:9c:f3:f6:6c:8b:ed:f4:9f:23:12:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=930a463d67e4b42d8639acdf0d15424f82f19a60
Validity
Not Before: Mar 1 18:00:47 2026 GMT
Not After : Mar 2 18:00:47 2026 GMT
Subject: CN=d3c76c0da8f1c288e44cf659ee63da16525c175f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:ed:1e:de:90:a7:f0:9a:e2:b1:c0:97:6d:65:
59:b1:c7:90:76:f5:c9:c6:9e:cd:e4:aa:98:5b:08:
8c:9f:09:db:d8:06:98:ed:2c:37:77:31:63:9c:3c:
ad:a7:e4:38:a4:90:89:aa:5b:d5:0f:66:b4:c8:e9:
f9:af:65:20:c9:a1:a4:a6:81:66:e8:ee:a7:c1:f5:
66:36:be:77:73:8c:74:4a:81:70:24:16:b9:8c:72:
a1:8e:ff:66:1f:f7:6c:fa:80:de:5e:19:c0:4a:fa:
10:f7:20:f4:90:8a:03:9a:c3:71:9a:63:64:34:6f:
71:af:d2:8b:4f:8f:51:8b:3d:79:d9:b1:c9:9f:75:
9c:e1:5f:93:42:a0:f1:df:64:1a:7d:d1:c9:dd:18:
1d:df:e4:2a:9e:64:37:8d:21:cc:d1:47:78:b7:08:
6d:12:0e:bd:08:e2:9b:cd:a0:50:d8:8b:f9:50:7d:
66:00:e9:9e:dc:7a:26:b9:b0:d8:42:ad:b8:a9:d2:
73:5c:2b:03:52:15:72:aa:61:e0:aa:7b:32:31:1d:
48:72:6e:da:ec:31:42:40:4d:a5:8a:bf:3f:3b:f3:
cc:20:cb:b7:09:05:79:36:88:f5:12:04:12:bf:d2:
86:9f:a7:a4:7e:3b:53:8e:85:64:c0:0c:fd:f6:a0:
5c:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:C7:6C:0D:A8:F1:C2:88:E4:4C:F6:59:EE:63:DA:16:52:5C:17:5F
X509v3 Authority Key Identifier:
keyid:93:0A:46:3D:67:E4:B4:2D:86:39:AC:DF:0D:15:42:4F:82:F1:9A:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kwpGPWfktC2GOazfDRVCT4LxmmA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/37b63e-9c88-42dc-b043-de844964f5ee/1/kwpGPWfktC2GOazfDRVCT4LxmmA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/37b63e-9c88-42dc-b043-de844964f5ee/1/kwpGPWfktC2GOazfDRVCT4LxmmA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:25:29:f1:29:f7:c0:c8:43:65:be:a8:60:ad:7f:cf:8a:4b:
df:be:bb:ab:af:d3:a5:22:db:f2:65:ca:15:3c:ce:0f:a1:a9:
61:2f:18:58:de:26:67:c0:be:1b:ee:c4:d3:09:c8:d4:50:88:
12:fb:8f:06:c7:c8:6d:7f:ec:51:3e:b2:8f:69:f5:b2:26:eb:
b7:d3:8d:21:bd:92:c5:d8:b7:c2:c6:4f:ae:06:dd:f5:8b:b3:
ba:76:c8:47:f4:8e:78:40:65:0e:4a:00:77:02:c8:2b:e8:31:
8c:67:a3:9d:28:03:b4:01:3a:6e:0f:b5:34:25:19:a8:d1:cf:
7d:f1:be:aa:b4:7d:36:2d:a7:8b:00:0b:91:20:3b:38:ce:ad:
7f:a0:79:ae:aa:c5:1b:47:0a:c7:8f:cf:f4:95:43:c5:5a:d8:
c0:0b:c1:c3:02:4d:b1:2a:f6:d9:84:47:4e:38:6c:3a:3d:22:
47:8d:e7:fd:7d:1d:8d:ad:ab:94:9d:87:2f:73:a0:d6:4a:92:
b9:50:8a:b8:6f:d7:36:0f:79:eb:66:a6:43:21:c8:83:ef:75:
db:d2:0b:3f:52:80:34:ae:2c:7d:f0:da:f6:aa:d4:c9:d5:ea:
d3:4d:09:eb:a9:56:44:ca:27:9b:13:84:a8:c6:44:5e:b0:ae:
7d:c5:be:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:30:03 2026 by rpki-client