Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/66c025-53a2-4219-9f39-f18d0c1b8bee/1/Kwprx2i2FVjqweWekEUR_F3Yu8E.mft
File: Kwprx2i2FVjqweWekEUR_F3Yu8E.mft (raw, json)
Hash identifier: i9Ul5+ygn3RMYlGXBOH7SpTi+2QvEEkQ4xmGCWm1rgY=
Subject key identifier: A7:5B:F1:FF:92:64:49:37:9D:AB:CE:07:86:AA:89:CE:41:A3:5A:3A
Authority key identifier: 2B:0A:6B:C7:68:B6:15:58:EA:C1:E5:9E:90:45:11:FC:5D:D8:BB:C1
Certificate issuer: /CN=2b0a6bc768b61558eac1e59e904511fc5dd8bbc1
Certificate serial: 019D2AA92EFF154F6FDD542E4720C6C78784
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Kwprx2i2FVjqweWekEUR_F3Yu8E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/66c025-53a2-4219-9f39-f18d0c1b8bee/1/Kwprx2i2FVjqweWekEUR_F3Yu8E.mft
Manifest number: 0874
Signing time: Thu 26 Mar 2026 15:00:23 +0000
Manifest this update: Thu 26 Mar 2026 15:00:23 +0000
Manifest next update: Fri 27 Mar 2026 15:00:23 +0000
Files and hashes: 1: Kwprx2i2FVjqweWekEUR_F3Yu8E.crl (hash: TWZ3BFpM5kLZPG3GVq6gAYfJtEKSWX6xQ75I5tlexww=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/66c025-53a2-4219-9f39-f18d0c1b8bee/1/Kwprx2i2FVjqweWekEUR_F3Yu8E.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/66c025-53a2-4219-9f39-f18d0c1b8bee/1/Kwprx2i2FVjqweWekEUR_F3Yu8E.mft
rsync://rpki.ripe.net/repository/DEFAULT/Kwprx2i2FVjqweWekEUR_F3Yu8E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 15:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:a9:2e:ff:15:4f:6f:dd:54:2e:47:20:c6:c7:87:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b0a6bc768b61558eac1e59e904511fc5dd8bbc1
Validity
Not Before: Mar 26 15:00:23 2026 GMT
Not After : Mar 27 15:00:23 2026 GMT
Subject: CN=a75bf1ff926449379dabce0786aa89ce41a35a3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:97:69:c8:7b:ec:7e:53:b7:d5:3b:55:3d:b1:
2b:48:63:ff:56:2b:58:32:0b:e8:49:3a:9a:28:99:
e3:b0:6b:16:92:c0:84:63:9d:a2:3b:a6:6e:3e:69:
60:08:90:71:d2:cd:ec:d1:ff:13:ba:e3:64:21:c4:
ca:35:b1:78:5e:40:ad:9a:9f:95:8a:06:e8:fc:1e:
65:db:f4:f2:8e:01:76:b8:a0:e2:61:49:ba:1b:37:
f0:10:12:99:06:e9:01:bc:0b:4b:55:1b:2f:e5:bc:
df:52:be:53:07:91:d5:24:a7:b5:3f:d3:2e:33:d9:
ab:62:79:63:89:89:d5:59:cb:8a:12:55:23:63:69:
41:63:8a:33:5f:3d:3d:f9:37:bd:48:a3:b4:af:2c:
b0:23:8c:f5:8b:d8:c6:11:b0:76:f3:73:9a:08:f2:
f3:bc:3d:ed:8e:99:31:d5:e0:4b:78:ce:b9:88:18:
9f:b3:f2:4e:47:e1:38:da:39:93:83:85:c0:d8:4c:
91:1e:7f:7c:db:01:8b:b4:dd:fe:ac:49:d3:45:5e:
2c:44:77:b3:4e:a0:76:7e:27:12:c7:fa:34:a7:62:
7b:60:3d:69:cd:c5:cd:18:c4:f6:d0:84:c8:0c:3f:
7d:65:d6:c6:99:b4:28:81:1a:4c:52:17:67:9d:d6:
b3:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:5B:F1:FF:92:64:49:37:9D:AB:CE:07:86:AA:89:CE:41:A3:5A:3A
X509v3 Authority Key Identifier:
keyid:2B:0A:6B:C7:68:B6:15:58:EA:C1:E5:9E:90:45:11:FC:5D:D8:BB:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kwprx2i2FVjqweWekEUR_F3Yu8E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/66c025-53a2-4219-9f39-f18d0c1b8bee/1/Kwprx2i2FVjqweWekEUR_F3Yu8E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/66c025-53a2-4219-9f39-f18d0c1b8bee/1/Kwprx2i2FVjqweWekEUR_F3Yu8E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:85:d4:66:ab:e9:04:40:f8:10:70:8e:f3:41:9f:b9:c6:67:
e2:43:28:d4:d1:0b:b4:40:db:f1:75:04:23:e4:92:50:0c:dc:
64:fc:9a:b3:06:df:3c:07:f6:99:ae:97:d2:1a:ca:e4:79:33:
3f:4c:6a:07:a7:f6:9b:51:01:2e:1d:83:08:45:59:f4:cc:3f:
bf:93:1d:ab:8a:89:25:5b:80:4d:ec:fd:a6:03:d8:8c:c3:24:
2d:26:86:5d:9a:d3:21:39:21:8a:b0:10:ee:b0:56:64:b3:5a:
a3:89:70:40:27:39:37:c6:ba:cd:35:a4:b0:ec:32:68:7f:a7:
e9:45:11:93:46:08:fd:2d:08:f3:1e:75:1f:e1:f0:d5:65:d8:
86:bc:71:af:40:ed:1b:f5:37:82:01:26:33:fe:7f:c5:c8:69:
5a:bb:63:a7:8c:c4:0b:2e:c3:12:0a:fa:85:d6:58:0a:a7:ea:
70:b3:3c:c1:6f:20:a1:15:a9:ba:f2:36:26:fd:11:8c:5b:e5:
95:0c:e6:2f:41:6e:7c:19:c8:94:3f:17:ec:2b:89:c8:a9:7d:
6f:6a:c3:dc:ef:94:21:40:21:e8:fa:2d:f4:09:eb:f7:06:55:
ed:f5:6b:20:9e:fe:85:2b:85:8e:52:0b:98:dd:2e:f9:97:3c:
e4:8c:98:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 01:56:21 2026 by rpki-client