Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/d0a3dc-7d9a-4375-b2fd-c7542f88e797/1/KwTVVXY_uqCU3KepPaqnj9QAhVQ.mft
File: KwTVVXY_uqCU3KepPaqnj9QAhVQ.mft (raw, json)
Hash identifier: o1Godeps+ZqhMw0hbQF5NAMGt9mghf3/C6JmO1PQGS4=
Subject key identifier: 75:C4:96:38:B8:9C:34:88:31:50:28:66:14:92:25:C7:2F:04:57:6C
Authority key identifier: 2B:04:D5:55:76:3F:BA:A0:94:DC:A7:A9:3D:AA:A7:8F:D4:00:85:54
Certificate issuer: /CN=2b04d555763fbaa094dca7a93daaa78fd4008554
Certificate serial: 019CACEB5187205FBBECA3E07E6A58842D22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KwTVVXY_uqCU3KepPaqnj9QAhVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/d0a3dc-7d9a-4375-b2fd-c7542f88e797/1/KwTVVXY_uqCU3KepPaqnj9QAhVQ.mft
Manifest number: 0711
Signing time: Mon 02 Mar 2026 05:00:28 +0000
Manifest this update: Mon 02 Mar 2026 05:00:28 +0000
Manifest next update: Tue 03 Mar 2026 05:00:28 +0000
Files and hashes: 1: KwTVVXY_uqCU3KepPaqnj9QAhVQ.crl (hash: Wmj041TjZ0EhBfRdlew89PIZqI2PKki87/yfSruERO4=)
2: tiNn6V7lQJwEPwSpBpmzpIlCOkk.roa (hash: PLDBgRQOKr/iKYlhIFX9U/GkSjb6UcvWrO34uaV/xLA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/d0a3dc-7d9a-4375-b2fd-c7542f88e797/1/KwTVVXY_uqCU3KepPaqnj9QAhVQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/d0a3dc-7d9a-4375-b2fd-c7542f88e797/1/KwTVVXY_uqCU3KepPaqnj9QAhVQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/KwTVVXY_uqCU3KepPaqnj9QAhVQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 05:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:eb:51:87:20:5f:bb:ec:a3:e0:7e:6a:58:84:2d:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b04d555763fbaa094dca7a93daaa78fd4008554
Validity
Not Before: Mar 2 05:00:28 2026 GMT
Not After : Mar 3 05:00:28 2026 GMT
Subject: CN=75c49638b89c348831502866149225c72f04576c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:db:05:ec:fb:81:c2:02:82:94:cf:2b:89:23:
0c:66:ab:62:70:cd:ba:d1:5d:3e:7a:54:a0:34:1d:
96:6a:10:f6:4d:95:b7:a4:03:b7:07:7c:b8:83:a6:
5b:2d:db:7b:d1:46:57:45:13:9d:e5:59:c4:98:a7:
f7:e8:63:75:ad:d1:1d:8a:92:c9:41:ab:76:23:b9:
7d:6b:71:80:4f:9b:b4:3a:06:c9:54:19:98:3e:2f:
d2:17:65:8c:38:b7:e1:17:66:59:f7:d9:f8:fd:da:
31:57:7f:84:73:f0:4e:4c:ca:28:fe:d6:55:78:dd:
18:9f:c3:76:1b:6f:24:ad:b9:44:0a:20:5f:44:26:
4c:fa:19:57:0d:ad:2c:dc:9f:74:04:b4:49:e6:d5:
f6:fd:76:31:9b:55:04:ec:1c:a0:1c:e8:c3:30:02:
b8:db:35:40:fc:fe:ff:82:ca:65:37:43:08:9b:f8:
dd:75:ea:90:ff:99:c4:34:e3:83:82:7f:db:6f:89:
08:ab:9c:c5:ea:74:51:a3:e7:3c:3b:c2:38:7e:9e:
c4:7e:98:c5:ad:29:2e:c2:36:e7:84:e3:c9:e4:43:
22:5b:f4:5f:ee:82:f5:b8:11:e5:30:d6:c9:ef:5c:
2d:49:9f:7f:0e:67:74:be:14:37:1f:a6:56:16:d0:
97:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:C4:96:38:B8:9C:34:88:31:50:28:66:14:92:25:C7:2F:04:57:6C
X509v3 Authority Key Identifier:
keyid:2B:04:D5:55:76:3F:BA:A0:94:DC:A7:A9:3D:AA:A7:8F:D4:00:85:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KwTVVXY_uqCU3KepPaqnj9QAhVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/d0a3dc-7d9a-4375-b2fd-c7542f88e797/1/KwTVVXY_uqCU3KepPaqnj9QAhVQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/d0a3dc-7d9a-4375-b2fd-c7542f88e797/1/KwTVVXY_uqCU3KepPaqnj9QAhVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:a5:a1:3c:f1:2d:22:d0:39:16:f0:cd:08:30:f0:b8:95:6f:
74:d5:87:a8:45:14:ab:e6:46:6e:5e:86:83:09:ed:94:57:d7:
25:28:50:cc:3c:d7:d3:4e:70:2d:5e:da:e2:7e:b2:04:f0:1f:
be:a5:ab:42:c1:5d:bc:2c:df:23:b4:82:b4:75:8d:c1:9f:28:
8b:33:db:f6:b0:ff:88:e3:b9:42:39:ce:e6:0b:59:8f:3a:14:
4f:9e:b8:81:2a:5d:85:8f:02:a3:34:b6:8f:05:4a:bb:6b:5f:
75:a2:38:bd:b1:74:fd:50:83:b7:ab:b8:14:43:11:74:54:84:
a9:e4:bb:ed:33:67:5e:d9:d4:54:d9:b7:7f:6b:70:98:3d:b0:
e7:50:4e:7f:86:90:82:26:32:a0:17:c5:03:39:e8:53:28:46:
fc:df:4a:a5:64:2f:06:0b:7f:d7:2a:33:ad:94:ca:5e:77:72:
44:5e:ff:88:da:69:6c:ee:c7:3e:74:eb:c0:cb:66:a6:91:f1:
21:c7:4c:05:42:93:19:3f:69:a1:75:7e:df:d2:ae:19:46:2e:
0e:ee:1d:57:1e:d7:54:63:40:46:26:b7:69:94:27:ee:e7:05:
b1:7d:c7:c9:db:29:92:aa:43:43:11:98:ea:f9:47:9c:f0:65:
e2:6f:a7:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:48:24 2026 by rpki-client