Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/0f1ed9-09a1-4e14-9b17-8bc37a64e6c7/1/k2wlHaPujjr0MZWo-Amao8bOLHw.mft
File: k2wlHaPujjr0MZWo-Amao8bOLHw.mft (raw, json)
Hash identifier: cLFVnC8P8DcoPgQ2HaedYk8tZYpx4kCuST2nFXGf1dE=
Subject key identifier: 83:C7:D1:B5:A2:37:3A:EB:8A:1D:D8:D6:8F:69:AD:08:74:F4:FE:82
Authority key identifier: 93:6C:25:1D:A3:EE:8E:3A:F4:31:95:A8:F8:09:9A:A3:C6:CE:2C:7C
Certificate issuer: /CN=936c251da3ee8e3af43195a8f8099aa3c6ce2c7c
Certificate serial: 019D38659F3E71B768D30D400BF1AC3F76B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2wlHaPujjr0MZWo-Amao8bOLHw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/0f1ed9-09a1-4e14-9b17-8bc37a64e6c7/1/k2wlHaPujjr0MZWo-Amao8bOLHw.mft
Manifest number: 015B
Signing time: Sun 29 Mar 2026 07:01:17 +0000
Manifest this update: Sun 29 Mar 2026 07:01:17 +0000
Manifest next update: Mon 30 Mar 2026 07:01:17 +0000
Files and hashes: 1: k2wlHaPujjr0MZWo-Amao8bOLHw.crl (hash: ynZ6LVkz5g42+QUNNWmSis/NL71/XbiCYLlVXrany78=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/0f1ed9-09a1-4e14-9b17-8bc37a64e6c7/1/k2wlHaPujjr0MZWo-Amao8bOLHw.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/0f1ed9-09a1-4e14-9b17-8bc37a64e6c7/1/k2wlHaPujjr0MZWo-Amao8bOLHw.mft
rsync://rpki.ripe.net/repository/DEFAULT/k2wlHaPujjr0MZWo-Amao8bOLHw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:9f:3e:71:b7:68:d3:0d:40:0b:f1:ac:3f:76:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=936c251da3ee8e3af43195a8f8099aa3c6ce2c7c
Validity
Not Before: Mar 29 07:01:17 2026 GMT
Not After : Mar 30 07:01:17 2026 GMT
Subject: CN=83c7d1b5a2373aeb8a1dd8d68f69ad0874f4fe82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:0d:92:83:53:e6:72:b2:9c:b9:ed:1f:fe:94:
ca:c5:18:e4:a5:24:06:77:64:a7:89:ab:08:24:e5:
a3:13:57:89:11:5c:03:03:71:80:ab:e1:e7:24:b1:
cd:d8:7a:e6:a6:53:c0:e6:bc:b9:6b:0a:58:c0:4a:
b8:54:f8:7c:39:44:27:64:d0:a7:b7:c4:8b:66:79:
b3:b7:b1:01:18:b4:0e:80:1a:29:e3:eb:b2:72:7b:
b1:01:74:bd:52:37:52:d9:75:ae:f3:31:e9:91:38:
b5:55:0f:73:d3:b9:43:e0:f5:cf:6e:73:a4:67:ea:
a5:96:91:32:e6:51:b5:97:45:23:03:c8:d6:41:8c:
55:9a:48:98:15:a1:00:2c:e5:ec:06:3c:4f:25:32:
7c:73:63:c5:31:a4:7f:d3:bf:7d:d3:d8:15:71:41:
05:24:e6:e6:13:eb:b5:ec:aa:65:03:90:d7:77:5d:
ae:96:ea:6d:fb:74:e3:49:0c:f8:b1:b5:d3:46:64:
52:db:83:8e:73:bb:de:3d:9a:29:86:aa:c9:0b:66:
e7:f7:9f:ef:91:3c:4a:b5:81:9e:a3:58:e4:14:6e:
a4:92:7a:11:b1:8d:1a:7f:79:44:77:c5:c2:5c:d4:
db:d7:a4:ce:4e:ca:34:79:c2:65:ec:ee:e7:67:a6:
4f:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:C7:D1:B5:A2:37:3A:EB:8A:1D:D8:D6:8F:69:AD:08:74:F4:FE:82
X509v3 Authority Key Identifier:
keyid:93:6C:25:1D:A3:EE:8E:3A:F4:31:95:A8:F8:09:9A:A3:C6:CE:2C:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2wlHaPujjr0MZWo-Amao8bOLHw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/0f1ed9-09a1-4e14-9b17-8bc37a64e6c7/1/k2wlHaPujjr0MZWo-Amao8bOLHw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/0f1ed9-09a1-4e14-9b17-8bc37a64e6c7/1/k2wlHaPujjr0MZWo-Amao8bOLHw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cf:e2:f6:0c:c0:9f:6a:0c:e2:71:c7:7c:95:b1:49:ca:da:90:
49:c4:4a:4f:09:d8:73:1f:79:26:e6:0b:ef:96:6c:bb:22:ef:
3c:4d:d2:99:f0:5e:bb:c5:bc:06:c7:b7:19:59:39:93:22:86:
76:8d:a5:ca:9b:2d:bf:b6:d2:a2:ee:41:8d:c9:52:5f:e0:d3:
57:39:cb:85:a6:9f:8b:da:8c:35:5a:49:17:3c:39:39:ea:9c:
95:3a:ca:09:5c:1f:81:dc:45:f2:bb:a8:0f:ad:d1:43:62:d2:
bb:2f:79:f8:0d:31:f3:35:75:db:32:9f:91:c3:e4:c3:0a:7d:
9a:7d:f2:bc:12:40:6e:bb:74:6b:89:15:f7:69:0c:45:ab:a4:
b0:12:ff:fd:bb:53:f5:87:3a:21:88:63:76:2b:30:d7:31:22:
d8:20:01:7a:83:e2:0c:54:a7:34:3b:26:f7:f8:7f:1e:8f:e6:
e7:5d:6d:94:6b:4c:ae:08:d4:da:b3:d6:36:c0:53:7e:c1:5c:
db:b6:70:2b:dd:ad:bf:0f:f8:fd:6e:ef:02:b9:fc:bc:b9:b9:
d2:0d:88:4e:67:31:07:d1:75:f6:6c:51:3a:3a:0d:bc:0c:ab:
20:74:a2:cc:81:55:bb:0c:45:ef:de:83:2c:cc:11:fb:2e:ed:
76:2b:25:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:30:35 2026 by rpki-client