Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c5/37b63e-9c88-42dc-b043-de844964f5ee/1/kwpGPWfktC2GOazfDRVCT4LxmmA.mft
File: kwpGPWfktC2GOazfDRVCT4LxmmA.mft (raw, json)
Hash identifier: r7cApgkrwFnLIZTiizyckGsCMPdr20lb8G1T5cXD1Lc=
Subject key identifier: 76:90:D7:FA:E6:96:C7:ED:53:4B:C1:B8:47:E3:25:48:B4:1D:08:67
Authority key identifier: 93:0A:46:3D:67:E4:B4:2D:86:39:AC:DF:0D:15:42:4F:82:F1:9A:60
Certificate issuer: /CN=930a463d67e4b42d8639acdf0d15424f82f19a60
Certificate serial: 01A13CDC4FD07CB39FD502D0336C73D3AE13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kwpGPWfktC2GOazfDRVCT4LxmmA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/37b63e-9c88-42dc-b043-de844964f5ee/1/kwpGPWfktC2GOazfDRVCT4LxmmA.mft
Manifest number: 1A38
Signing time: Thu 15 Oct 2026 00:00:33 +0000
Manifest this update: Thu 15 Oct 2026 00:00:33 +0000
Manifest next update: Fri 16 Oct 2026 00:00:33 +0000
Files and hashes: 1: izkOI9oY18uKSV4FRgb611Hp7mU.roa (hash: QUMFHyKky+C4/Hhg2gnIkNny4unJriThfo8M2jzgsDs=)
2: kwpGPWfktC2GOazfDRVCT4LxmmA.crl (hash: B1VQHBKfJaT3Ce0oI0TCQPDXA4sVyaqNpoHhTC8SePw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/37b63e-9c88-42dc-b043-de844964f5ee/1/kwpGPWfktC2GOazfDRVCT4LxmmA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/37b63e-9c88-42dc-b043-de844964f5ee/1/kwpGPWfktC2GOazfDRVCT4LxmmA.mft
rsync://rpki.ripe.net/repository/DEFAULT/kwpGPWfktC2GOazfDRVCT4LxmmA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 22:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3c:dc:4f:d0:7c:b3:9f:d5:02:d0:33:6c:73:d3:ae:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=930a463d67e4b42d8639acdf0d15424f82f19a60
Validity
Not Before: Oct 15 00:00:33 2026 GMT
Not After : Oct 16 00:00:33 2026 GMT
Subject: CN=7690d7fae696c7ed534bc1b847e32548b41d0867
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:df:e6:02:a1:a1:c0:e3:4e:23:db:fa:63:e7:
3c:93:8b:ed:9d:ac:e6:e9:62:51:8a:b1:e8:50:e2:
6c:ce:de:2c:65:66:1e:e9:ae:5d:4f:c1:b3:6e:03:
92:d5:74:8f:5c:e5:d9:87:18:2f:13:f1:57:f5:21:
bc:d8:10:1f:d3:5c:7d:3e:60:3b:3c:31:f5:bb:cd:
ff:55:22:07:96:33:99:e9:39:a5:d5:ff:f9:f5:50:
a7:d0:d6:61:2a:6b:8a:a6:80:40:29:01:a1:9b:55:
8f:57:81:5d:56:7c:f4:a9:8e:88:29:6c:9a:9a:90:
91:ff:21:24:a1:1d:e8:16:0b:19:a3:e0:2c:3b:6a:
0f:96:a4:44:0a:21:c7:e2:75:dd:ce:a6:6b:20:f9:
ef:0e:30:fd:2f:41:dc:59:bc:19:b6:7c:60:a5:da:
b0:94:13:fd:d2:bd:21:19:0b:28:3d:d9:79:79:e3:
b4:32:f7:c4:a0:06:e9:70:79:fd:7a:9a:b2:f3:6b:
51:7a:ff:b5:74:e8:0b:dc:62:7a:ae:de:f1:3f:20:
83:0b:f1:fa:f2:38:fd:3a:41:0d:45:f9:cf:91:5d:
7c:cb:31:ca:f1:9b:d6:04:f2:49:e6:12:50:00:9c:
22:02:96:12:57:74:09:e3:72:ac:59:db:ce:7d:1b:
68:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:90:D7:FA:E6:96:C7:ED:53:4B:C1:B8:47:E3:25:48:B4:1D:08:67
X509v3 Authority Key Identifier:
keyid:93:0A:46:3D:67:E4:B4:2D:86:39:AC:DF:0D:15:42:4F:82:F1:9A:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kwpGPWfktC2GOazfDRVCT4LxmmA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/37b63e-9c88-42dc-b043-de844964f5ee/1/kwpGPWfktC2GOazfDRVCT4LxmmA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/37b63e-9c88-42dc-b043-de844964f5ee/1/kwpGPWfktC2GOazfDRVCT4LxmmA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:78:93:50:aa:3a:24:26:80:e1:26:37:f9:f8:c0:93:22:62:
1e:0f:a3:5b:b7:f2:fe:a7:b7:37:17:43:63:42:4b:c1:4b:30:
37:2f:20:38:40:1b:b8:e0:b9:ae:d8:7e:9d:1d:b7:59:3e:eb:
ce:8a:56:e1:84:64:42:5a:c5:c3:34:a2:b6:31:b9:8a:6a:60:
3b:3b:a0:a4:61:c5:64:58:e6:51:21:cc:6e:d7:67:17:5b:7b:
b8:60:80:a9:53:c4:37:1a:21:ce:0d:f6:eb:06:86:12:b4:60:
08:b6:bb:57:84:76:fb:cf:d8:1e:d5:79:95:ef:d2:18:ed:d1:
25:40:9f:dc:c5:7d:24:42:bb:ab:8a:20:8c:e0:e9:d3:e4:06:
12:49:58:3c:e4:d3:da:3b:ad:4c:81:ed:ff:08:e6:18:26:2f:
c5:ea:46:9a:86:71:90:66:7e:40:74:ce:2a:63:98:40:d2:66:
67:8b:13:59:38:e4:87:98:47:97:b1:3c:45:84:a1:ca:6c:cd:
73:98:db:58:05:61:39:c4:72:71:71:13:20:6d:78:0a:a3:12:
dd:91:bd:02:e8:8e:c0:92:14:9c:dc:ae:f7:03:2c:14:35:e3:
fe:85:01:c6:24:94:4f:15:dd:c9:0b:2b:b9:44:79:70:39:25:
d4:64:13:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 02:19:31 2026 by rpki-client