Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/ecfafc-9115-4ec2-ae11-07f1259feb13/1/kwk3JGTFmj3Y7NYyFbAYGXBlWKY.mft
File: kwk3JGTFmj3Y7NYyFbAYGXBlWKY.mft (raw, json)
Hash identifier: vQ4lVc65JxS9T8K7qwA2dgxbspE+Qwm/Vin12hwXCC8=
Subject key identifier: 93:2B:86:0C:FF:7C:86:A1:66:2E:4C:F9:D4:88:42:A7:37:02:76:CE
Authority key identifier: 93:09:37:24:64:C5:9A:3D:D8:EC:D6:32:15:B0:18:19:70:65:58:A6
Certificate issuer: /CN=9309372464c59a3dd8ecd63215b01819706558a6
Certificate serial: 019D2772E6ED6FEE0F5A1FCFEDDF77DF53EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kwk3JGTFmj3Y7NYyFbAYGXBlWKY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/ecfafc-9115-4ec2-ae11-07f1259feb13/1/kwk3JGTFmj3Y7NYyFbAYGXBlWKY.mft
Manifest number: 08B0
Signing time: Thu 26 Mar 2026 00:02:14 +0000
Manifest this update: Thu 26 Mar 2026 00:02:14 +0000
Manifest next update: Fri 27 Mar 2026 00:02:14 +0000
Files and hashes: 1: kwk3JGTFmj3Y7NYyFbAYGXBlWKY.crl (hash: pqnaisb+OQNagDiux3f0moWPnf/8BEjooO+dYW8Hjho=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/ecfafc-9115-4ec2-ae11-07f1259feb13/1/kwk3JGTFmj3Y7NYyFbAYGXBlWKY.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/ecfafc-9115-4ec2-ae11-07f1259feb13/1/kwk3JGTFmj3Y7NYyFbAYGXBlWKY.mft
rsync://rpki.ripe.net/repository/DEFAULT/kwk3JGTFmj3Y7NYyFbAYGXBlWKY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:e6:ed:6f:ee:0f:5a:1f:cf:ed:df:77:df:53:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9309372464c59a3dd8ecd63215b01819706558a6
Validity
Not Before: Mar 26 00:02:14 2026 GMT
Not After : Mar 27 00:02:14 2026 GMT
Subject: CN=932b860cff7c86a1662e4cf9d48842a7370276ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:bc:e7:b0:57:5e:84:13:f3:eb:f5:ec:17:92:
cd:bc:98:07:c6:94:f1:9c:37:61:b1:12:87:9e:f1:
27:a4:05:31:f4:a9:cb:e1:8f:4e:b9:85:df:de:99:
7a:1c:04:8e:c9:ce:8a:ab:1f:97:85:4a:cc:60:2c:
99:80:93:5a:58:ed:be:a7:25:92:23:cc:2b:a0:7e:
48:27:c8:62:9a:bb:5a:cc:0a:a9:b3:43:ab:c7:42:
cb:c2:0a:74:8c:4c:45:7d:84:84:d0:d4:b5:e2:3f:
58:7e:b3:e8:77:1f:ca:36:bd:fb:5a:3c:94:66:7a:
74:8b:f5:c2:99:2d:4d:76:63:e3:be:ce:08:87:0e:
ef:b9:e7:3d:3e:1d:27:d1:4a:44:55:2c:9e:14:8c:
67:5c:86:70:fc:b3:4d:0a:82:e9:df:d8:e9:8a:c9:
83:fc:a8:e8:48:bd:10:60:14:0c:93:92:b9:2a:70:
e9:22:1a:83:d7:6f:6f:84:d3:d8:34:36:34:9c:3c:
79:d5:c8:5e:7c:dc:ac:4d:c9:5a:3d:8d:52:55:0a:
cf:a4:1c:1b:e2:e2:7c:96:ca:c2:48:b3:8c:09:f3:
f3:32:f8:4a:c9:1f:a6:70:81:2c:75:a9:c0:b8:f2:
87:d6:17:50:f8:0c:0d:08:a1:4c:44:66:c3:c2:e8:
4c:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:2B:86:0C:FF:7C:86:A1:66:2E:4C:F9:D4:88:42:A7:37:02:76:CE
X509v3 Authority Key Identifier:
keyid:93:09:37:24:64:C5:9A:3D:D8:EC:D6:32:15:B0:18:19:70:65:58:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kwk3JGTFmj3Y7NYyFbAYGXBlWKY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/ecfafc-9115-4ec2-ae11-07f1259feb13/1/kwk3JGTFmj3Y7NYyFbAYGXBlWKY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/ecfafc-9115-4ec2-ae11-07f1259feb13/1/kwk3JGTFmj3Y7NYyFbAYGXBlWKY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:8d:7c:8e:c3:34:f6:7d:1c:2c:ce:85:86:d1:96:4a:37:71:
42:ec:99:a3:6f:31:35:ef:7e:cb:8f:ae:c7:29:88:3b:61:bd:
11:69:29:ea:00:0c:70:ee:b5:43:0e:6f:3c:d0:45:68:8a:e7:
ea:86:d4:68:38:f0:0f:0e:a0:f9:72:52:0d:a3:77:c0:d9:e2:
d2:03:b6:03:e4:b1:8c:bc:2b:17:98:bb:ce:09:75:04:1b:aa:
9f:9c:27:d4:98:06:2c:58:d6:09:72:fb:91:3c:fd:d4:6f:55:
41:0d:93:5b:95:ca:3e:c9:24:c5:07:22:a6:b5:58:63:45:a1:
bd:68:a6:a3:5e:ab:bf:9b:07:a6:e0:fc:ac:b8:cd:d2:ca:3a:
3a:a2:a2:46:0f:f7:b9:77:a2:86:37:34:a3:a9:7f:9d:29:38:
25:44:d2:a5:d7:28:d7:81:c0:eb:a6:a0:fc:a4:dc:fa:32:24:
e0:b4:d0:c4:82:3e:1f:17:8d:b9:1e:f4:18:a3:a5:92:6f:21:
6f:3c:43:6b:a9:40:40:54:f1:80:a1:28:4b:08:67:31:44:dc:
07:0d:67:40:e2:d1:24:e8:58:34:41:22:48:be:0c:c6:be:98:
a8:26:46:cc:0d:96:70:d1:b3:8f:8c:d7:d2:5e:af:ea:09:46:
75:0c:ea:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:35:38 2026 by rpki-client