Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/37b63e-9c88-42dc-b043-de844964f5ee/1/kwpGPWfktC2GOazfDRVCT4LxmmA.mft
File: kwpGPWfktC2GOazfDRVCT4LxmmA.mft (raw, json)
Hash identifier: crhfWW4Hho0GGToWYkQuQOHdzHx+ZpBqr3+d0LYyTv4=
Subject key identifier: 52:F5:93:F7:E1:A2:99:BD:2F:DE:3C:B5:AB:C8:9B:F0:71:74:AA:EE
Authority key identifier: 93:0A:46:3D:67:E4:B4:2D:86:39:AC:DF:0D:15:42:4F:82:F1:9A:60
Certificate issuer: /CN=930a463d67e4b42d8639acdf0d15424f82f19a60
Certificate serial: 019D9DE3828416D8DE4CE2E34CA8929ADFBB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kwpGPWfktC2GOazfDRVCT4LxmmA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/37b63e-9c88-42dc-b043-de844964f5ee/1/kwpGPWfktC2GOazfDRVCT4LxmmA.mft
Manifest number: 1858
Signing time: Sat 18 Apr 2026 00:00:26 +0000
Manifest this update: Sat 18 Apr 2026 00:00:26 +0000
Manifest next update: Sun 19 Apr 2026 00:00:26 +0000
Files and hashes: 1: izkOI9oY18uKSV4FRgb611Hp7mU.roa (hash: QUMFHyKky+C4/Hhg2gnIkNny4unJriThfo8M2jzgsDs=)
2: kwpGPWfktC2GOazfDRVCT4LxmmA.crl (hash: B5jIC/8DLgA0ZsOZ/qx67qiEqylxfMbza6oXLLeHxNI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/37b63e-9c88-42dc-b043-de844964f5ee/1/kwpGPWfktC2GOazfDRVCT4LxmmA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/37b63e-9c88-42dc-b043-de844964f5ee/1/kwpGPWfktC2GOazfDRVCT4LxmmA.mft
rsync://rpki.ripe.net/repository/DEFAULT/kwpGPWfktC2GOazfDRVCT4LxmmA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9d:e3:82:84:16:d8:de:4c:e2:e3:4c:a8:92:9a:df:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=930a463d67e4b42d8639acdf0d15424f82f19a60
Validity
Not Before: Apr 18 00:00:26 2026 GMT
Not After : Apr 19 00:00:26 2026 GMT
Subject: CN=52f593f7e1a299bd2fde3cb5abc89bf07174aaee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:1c:6d:73:bb:96:5a:6a:cc:d9:9d:d5:91:e9:
80:05:7a:d0:76:b6:f4:fd:08:b1:9d:bc:a2:f5:98:
e0:03:d4:85:26:6c:d3:f0:16:90:d2:24:e4:29:5c:
c6:cc:3e:45:86:1a:c5:14:e5:74:f7:f8:e5:25:60:
5f:07:53:0f:f3:14:ff:14:38:3d:22:a3:28:09:03:
ed:15:07:a5:ca:e0:67:1a:74:fe:d5:8a:86:40:bf:
fc:a9:04:d7:2a:d9:95:60:88:43:ab:f8:65:13:8c:
d2:ae:a9:56:44:24:a8:20:94:5e:62:61:d0:76:25:
07:e4:45:46:91:dd:2d:1c:98:74:1c:40:b7:8a:20:
dd:cb:73:9b:a0:0d:10:46:ba:37:d0:a2:26:0d:82:
a5:6e:83:9d:bb:04:9a:f2:af:d8:09:39:09:a9:fb:
77:af:ba:fb:00:78:91:f9:64:84:07:8f:4e:1f:03:
81:93:c4:dd:39:1f:70:b6:11:dd:5c:48:e8:95:8b:
2d:07:67:6c:46:f3:64:8f:99:ce:43:96:92:9f:80:
b1:5a:9b:9b:07:54:8e:8f:7c:2b:82:9f:74:7d:ea:
59:2f:60:48:ef:b3:69:9a:f6:42:a8:99:b6:21:b8:
e1:e7:4b:4a:5d:70:3c:f2:ad:93:a7:bf:51:ea:85:
0b:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:F5:93:F7:E1:A2:99:BD:2F:DE:3C:B5:AB:C8:9B:F0:71:74:AA:EE
X509v3 Authority Key Identifier:
keyid:93:0A:46:3D:67:E4:B4:2D:86:39:AC:DF:0D:15:42:4F:82:F1:9A:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kwpGPWfktC2GOazfDRVCT4LxmmA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/37b63e-9c88-42dc-b043-de844964f5ee/1/kwpGPWfktC2GOazfDRVCT4LxmmA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/37b63e-9c88-42dc-b043-de844964f5ee/1/kwpGPWfktC2GOazfDRVCT4LxmmA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:2d:11:80:bc:5e:e9:84:be:dd:cb:2b:8d:58:0c:dc:95:27:
38:a5:b5:4b:84:c3:e2:1e:ac:7c:e2:e3:02:4c:34:44:9a:b4:
42:c1:88:c6:5c:51:2e:b8:f8:5b:4e:43:cb:95:9e:46:35:48:
2c:cf:b9:be:60:e6:27:98:fb:8e:cb:b4:6d:4a:e5:27:49:d0:
95:6e:6a:4c:fb:c1:d4:84:42:17:f1:e2:74:d8:eb:9b:4d:e1:
e9:59:e1:bf:8e:cc:66:45:f9:2a:3b:d9:75:f8:d5:ef:81:ca:
45:93:7f:d4:16:74:d6:e8:e0:86:63:e6:e4:52:2d:9d:a5:4e:
2e:01:5c:0f:a7:23:1e:ab:5e:78:09:1a:0e:1b:e9:68:33:e2:
8b:72:51:e4:69:46:28:ab:35:ac:41:93:f5:81:8f:a6:ce:7d:
c0:c0:af:a1:cc:11:68:bf:c7:49:12:73:f2:d7:c9:06:51:bd:
3a:e9:d6:d6:7d:d8:f1:96:e1:a2:43:9d:2e:d5:c7:1b:eb:b7:
c9:6b:47:c8:44:a9:53:a5:cc:13:a3:76:81:24:fc:0b:85:9a:
23:f6:bc:6f:e5:73:fc:7e:de:71:d3:d8:6e:a5:06:8f:8c:54:
32:6e:10:a0:65:0e:7d:40:38:46:1f:65:cb:fc:cb:39:63:f2:
2e:22:32:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 01:49:07 2026 by rpki-client