Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/66c025-53a2-4219-9f39-f18d0c1b8bee/1/Kwprx2i2FVjqweWekEUR_F3Yu8E.mft
File: Kwprx2i2FVjqweWekEUR_F3Yu8E.mft (raw, json)
Hash identifier: PF13cfzlLB8wecoViGbtYygu8WquTbWxXVs4p8ca+E0=
Subject key identifier: E7:94:DB:AA:CA:73:2B:B0:66:40:A4:1E:7D:E2:76:B8:AE:0D:CE:12
Authority key identifier: 2B:0A:6B:C7:68:B6:15:58:EA:C1:E5:9E:90:45:11:FC:5D:D8:BB:C1
Certificate issuer: /CN=2b0a6bc768b61558eac1e59e904511fc5dd8bbc1
Certificate serial: 019D382E42A6A09B34077063ED8B6F6BFD73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Kwprx2i2FVjqweWekEUR_F3Yu8E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/66c025-53a2-4219-9f39-f18d0c1b8bee/1/Kwprx2i2FVjqweWekEUR_F3Yu8E.mft
Manifest number: 087B
Signing time: Sun 29 Mar 2026 06:00:48 +0000
Manifest this update: Sun 29 Mar 2026 06:00:48 +0000
Manifest next update: Mon 30 Mar 2026 06:00:48 +0000
Files and hashes: 1: Kwprx2i2FVjqweWekEUR_F3Yu8E.crl (hash: BBtQcQGqCri0DLjKrIb+zg6PcKjXPSi3Rk/tZBXRtf8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/66c025-53a2-4219-9f39-f18d0c1b8bee/1/Kwprx2i2FVjqweWekEUR_F3Yu8E.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/66c025-53a2-4219-9f39-f18d0c1b8bee/1/Kwprx2i2FVjqweWekEUR_F3Yu8E.mft
rsync://rpki.ripe.net/repository/DEFAULT/Kwprx2i2FVjqweWekEUR_F3Yu8E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:42:a6:a0:9b:34:07:70:63:ed:8b:6f:6b:fd:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b0a6bc768b61558eac1e59e904511fc5dd8bbc1
Validity
Not Before: Mar 29 06:00:48 2026 GMT
Not After : Mar 30 06:00:48 2026 GMT
Subject: CN=e794dbaaca732bb06640a41e7de276b8ae0dce12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:e7:32:ba:46:b8:cf:77:3f:8e:fa:f5:d2:da:
00:b0:30:be:59:66:2d:68:17:bf:2e:48:33:fc:b0:
c2:b3:ed:8a:c6:2d:ec:e6:5f:32:e9:36:5d:f8:7e:
b9:2d:d3:f1:55:c0:66:b7:54:98:85:a7:3b:98:3e:
97:2b:ef:c2:02:a6:9b:2b:ac:fc:38:0d:3d:32:7d:
e9:a3:a9:94:7f:22:6e:21:f1:35:22:13:9b:e2:e6:
7d:82:77:31:dc:0e:aa:66:da:8c:71:d0:fb:41:4e:
3f:94:8a:92:c7:eb:48:9e:7b:38:95:5f:87:09:71:
17:fe:83:88:f2:8c:5a:40:4d:84:9a:0c:92:9a:e9:
da:e3:e2:2d:92:fb:01:73:be:f0:ea:24:ae:3a:35:
80:6e:c7:81:02:f6:e0:ce:f1:e6:b8:fb:ae:2f:6d:
80:22:1f:56:22:b1:6c:1f:ed:cc:e2:80:e7:0c:60:
34:15:8f:c4:8b:5f:28:1f:e6:f3:2c:62:ad:bc:e5:
34:21:33:92:12:a4:5c:82:a2:fa:17:57:9e:dc:a0:
be:e9:38:85:97:a0:97:3a:fc:26:f7:c0:93:f5:fb:
7a:c2:4c:49:c1:19:1a:4c:80:1e:5d:fa:80:99:3a:
9b:f8:10:5d:33:80:99:47:92:99:47:36:e9:65:e4:
67:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:94:DB:AA:CA:73:2B:B0:66:40:A4:1E:7D:E2:76:B8:AE:0D:CE:12
X509v3 Authority Key Identifier:
keyid:2B:0A:6B:C7:68:B6:15:58:EA:C1:E5:9E:90:45:11:FC:5D:D8:BB:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kwprx2i2FVjqweWekEUR_F3Yu8E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/66c025-53a2-4219-9f39-f18d0c1b8bee/1/Kwprx2i2FVjqweWekEUR_F3Yu8E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/66c025-53a2-4219-9f39-f18d0c1b8bee/1/Kwprx2i2FVjqweWekEUR_F3Yu8E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:d1:42:db:85:ec:a2:03:d3:5f:f7:12:0f:d8:f6:74:22:35:
a0:85:2b:9c:a3:6f:57:db:a5:d7:f0:15:56:ba:28:34:63:16:
bf:05:e8:3d:80:1e:93:4f:23:4c:7d:cc:5c:70:11:f5:b8:a7:
1b:47:6b:a0:c4:ac:83:42:3f:fc:fe:16:68:59:ef:b8:ff:7d:
88:0a:1b:70:61:04:a0:05:85:16:26:d1:ff:d1:f7:fa:20:d2:
19:ce:29:51:da:12:9a:e7:05:8e:f5:f6:08:e8:a4:48:85:1b:
c3:5b:cd:39:72:5b:5f:06:58:04:cd:fd:d9:1a:03:18:c4:43:
72:9d:92:82:f1:da:ab:cc:77:82:28:db:b5:9d:83:8c:55:20:
2f:86:db:e8:e0:b4:6d:df:1f:64:23:04:d0:e3:91:b0:cb:2a:
b1:2d:e7:50:f8:b6:22:e9:d0:4c:af:81:40:76:95:82:79:4e:
4e:25:65:53:28:34:53:c2:d7:5f:55:6c:77:c4:06:a9:ec:6a:
b0:44:dd:26:af:c7:47:66:01:40:f7:07:ae:42:0b:29:94:6b:
3d:bf:d1:f5:36:6a:2b:e9:89:17:d0:74:8d:ef:d4:4f:31:13:
96:d3:96:b7:f0:0c:5e:45:b3:9d:96:38:79:76:e4:f6:c8:a9:
cd:7a:bc:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:48:29 2026 by rpki-client