
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/37b63e-9c88-42dc-b043-de844964f5ee/1/kwpGPWfktC2GOazfDRVCT4LxmmA.mft
File: kwpGPWfktC2GOazfDRVCT4LxmmA.mft (raw, json)
Hash identifier: M5YwKcI+nd3qyELFybD8YNraG99iRU9krCV7aDedLYE=
Subject key identifier: 17:87:DE:1A:83:8F:3B:23:2E:05:17:91:14:CD:62:D6:9C:EE:02:B3
Authority key identifier: 93:0A:46:3D:67:E4:B4:2D:86:39:AC:DF:0D:15:42:4F:82:F1:9A:60
Certificate issuer: /CN=930a463d67e4b42d8639acdf0d15424f82f19a60
Certificate serial: 019DA3AF1378B00ED3A69CB7604994132F6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kwpGPWfktC2GOazfDRVCT4LxmmA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/37b63e-9c88-42dc-b043-de844964f5ee/1/kwpGPWfktC2GOazfDRVCT4LxmmA.mft
Manifest number: 185B
Signing time: Sun 19 Apr 2026 03:00:53 +0000
Manifest this update: Sun 19 Apr 2026 03:00:53 +0000
Manifest next update: Mon 20 Apr 2026 03:00:53 +0000
Files and hashes: 1: izkOI9oY18uKSV4FRgb611Hp7mU.roa (hash: QUMFHyKky+C4/Hhg2gnIkNny4unJriThfo8M2jzgsDs=)
2: kwpGPWfktC2GOazfDRVCT4LxmmA.crl (hash: 8yEGwU7Q03rg8CQFJqFJRMMeWORLVzK5HgZp8/4yz5o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/37b63e-9c88-42dc-b043-de844964f5ee/1/kwpGPWfktC2GOazfDRVCT4LxmmA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/37b63e-9c88-42dc-b043-de844964f5ee/1/kwpGPWfktC2GOazfDRVCT4LxmmA.mft
rsync://rpki.ripe.net/repository/DEFAULT/kwpGPWfktC2GOazfDRVCT4LxmmA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:af:13:78:b0:0e:d3:a6:9c:b7:60:49:94:13:2f:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=930a463d67e4b42d8639acdf0d15424f82f19a60
Validity
Not Before: Apr 19 03:00:53 2026 GMT
Not After : Apr 20 03:00:53 2026 GMT
Subject: CN=1787de1a838f3b232e05179114cd62d69cee02b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:3d:9d:11:d5:5c:e7:cc:d6:14:b8:d5:1f:2a:
5e:42:04:e8:47:f6:97:6e:43:38:8c:be:dd:16:b0:
47:9e:51:d7:a6:41:36:38:49:02:4f:e5:0f:5e:a9:
b3:13:8b:cd:ea:1e:0d:dc:c3:d0:7f:bd:a8:f4:4d:
ba:b5:cf:4f:ed:c5:10:7f:d0:90:c3:e6:de:59:b9:
72:be:22:3f:75:c2:73:1d:ac:1b:cd:9b:35:6b:a2:
df:cc:8d:85:ed:55:d3:83:74:c1:31:e1:ce:9f:20:
b9:79:d7:53:2f:e2:30:e8:72:b1:1c:e8:a7:3c:8a:
4b:32:26:94:50:43:06:1c:77:b0:6e:04:9a:08:ce:
59:76:79:49:98:58:38:a6:31:13:68:84:6b:64:f3:
b7:10:25:43:4f:bc:6f:b1:c7:44:39:b5:4d:34:60:
e8:0f:df:29:98:17:87:34:03:05:76:14:52:7c:e4:
79:a1:98:da:8a:8e:bd:01:3b:5c:5a:b4:64:c8:ff:
eb:d7:fc:88:aa:76:7c:f8:a4:96:d1:bc:41:3e:d2:
d6:f4:9b:bc:f2:a2:73:2a:42:47:b8:df:b1:35:3e:
5e:11:a6:b6:f5:1d:4c:05:c8:86:6d:03:6a:35:3c:
4b:cf:ef:b7:05:dd:8b:3a:c2:d4:5c:28:f7:e8:31:
cb:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:87:DE:1A:83:8F:3B:23:2E:05:17:91:14:CD:62:D6:9C:EE:02:B3
X509v3 Authority Key Identifier:
keyid:93:0A:46:3D:67:E4:B4:2D:86:39:AC:DF:0D:15:42:4F:82:F1:9A:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kwpGPWfktC2GOazfDRVCT4LxmmA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/37b63e-9c88-42dc-b043-de844964f5ee/1/kwpGPWfktC2GOazfDRVCT4LxmmA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/37b63e-9c88-42dc-b043-de844964f5ee/1/kwpGPWfktC2GOazfDRVCT4LxmmA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:57:0b:4e:49:b5:7c:9b:c7:21:36:38:20:53:76:39:80:5c:
40:86:0e:31:9a:1a:5e:6e:a7:2a:d6:e9:9a:70:3f:a2:a5:56:
64:bf:c9:19:95:2e:f2:91:fa:b6:d6:fb:11:15:77:a0:3a:6a:
5f:cd:d0:00:07:01:e8:95:66:b5:71:a0:f4:2d:24:04:86:95:
64:95:eb:c5:66:74:3b:69:5f:dd:30:bf:d2:90:df:58:7f:26:
90:14:ee:73:79:cd:5b:f1:02:d8:57:79:2c:51:f5:f4:7d:5e:
f1:e1:62:fe:4d:79:e7:32:67:9c:86:90:12:3b:3b:26:e8:68:
67:a8:9e:cd:d2:da:3c:f9:6a:4e:3a:70:37:fe:c8:d8:5f:6a:
7c:cc:ad:5e:c5:8f:8a:af:5b:c6:e7:a3:94:5d:71:f4:89:a0:
7f:35:4c:00:4f:d4:51:b4:c9:05:54:e3:80:12:2f:e7:2e:4b:
b4:07:9d:fa:4b:01:bb:62:27:3c:39:23:e3:c5:ba:e8:83:54:
e8:c5:ca:43:f3:94:22:d9:8e:17:fc:c2:3b:9b:8f:9b:10:20:
88:59:1a:63:e3:56:6a:b8:a0:09:bd:f7:52:7a:b6:aa:3c:0b:
87:fc:5a:13:b7:ec:48:b5:9c:4c:9f:c8:cd:25:d5:d7:2d:5f:
fd:b9:cb:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 11:28:37 2026 by rpki-client