Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/bde818-c0ed-4924-8d7b-6ec40c85a2ae/1/KWLmoTNMnKnJPtV_9K1y2ZzpGtA.mft
File: KWLmoTNMnKnJPtV_9K1y2ZzpGtA.mft (raw, json)
Hash identifier: qgiat+7GGGlLXKq4w1lMw8UpmlVzTsHTglwh11u1eC8=
Subject key identifier: 17:E4:78:C1:5C:1B:0B:36:60:E5:3B:BC:4F:8A:6B:B7:68:51:33:8C
Authority key identifier: 29:62:E6:A1:33:4C:9C:A9:C9:3E:D5:7F:F4:AD:72:D9:9C:E9:1A:D0
Certificate issuer: /CN=2962e6a1334c9ca9c93ed57ff4ad72d99ce91ad0
Certificate serial: 019D27DF5FC9C55ED3BABBF04C5CA97218DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KWLmoTNMnKnJPtV_9K1y2ZzpGtA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/bde818-c0ed-4924-8d7b-6ec40c85a2ae/1/KWLmoTNMnKnJPtV_9K1y2ZzpGtA.mft
Manifest number: 096B
Signing time: Thu 26 Mar 2026 02:00:43 +0000
Manifest this update: Thu 26 Mar 2026 02:00:43 +0000
Manifest next update: Fri 27 Mar 2026 02:00:43 +0000
Files and hashes: 1: KWLmoTNMnKnJPtV_9K1y2ZzpGtA.crl (hash: If29HVj0fZoYVmTUxVH0KcWq1OLSwA0JtJCdQDCwyKY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/bde818-c0ed-4924-8d7b-6ec40c85a2ae/1/KWLmoTNMnKnJPtV_9K1y2ZzpGtA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/bde818-c0ed-4924-8d7b-6ec40c85a2ae/1/KWLmoTNMnKnJPtV_9K1y2ZzpGtA.mft
rsync://rpki.ripe.net/repository/DEFAULT/KWLmoTNMnKnJPtV_9K1y2ZzpGtA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 02:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:df:5f:c9:c5:5e:d3:ba:bb:f0:4c:5c:a9:72:18:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2962e6a1334c9ca9c93ed57ff4ad72d99ce91ad0
Validity
Not Before: Mar 26 02:00:43 2026 GMT
Not After : Mar 27 02:00:43 2026 GMT
Subject: CN=17e478c15c1b0b3660e53bbc4f8a6bb76851338c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:8c:72:24:f3:f5:57:52:5a:66:1a:64:82:2d:
6e:8e:bc:a7:e3:07:d3:3a:92:7b:0c:48:41:85:85:
55:7e:6c:1d:18:a7:9b:f3:bb:53:a0:64:3c:f4:99:
12:ad:bf:35:2b:ca:1c:92:61:46:cb:51:a3:c8:77:
dd:22:2f:21:f4:94:31:8d:f0:69:4e:da:e0:63:1d:
d3:27:83:c5:14:38:be:8b:b2:f4:30:0b:2d:bd:70:
2e:55:f5:d6:08:64:40:af:ae:af:7f:82:89:61:26:
5a:11:90:eb:f4:9a:80:15:fd:9f:bc:19:cf:cb:e2:
5e:88:3c:a3:bd:86:d2:40:12:cc:1e:cb:9a:6d:0b:
2a:a8:c3:49:b7:06:27:94:4f:ea:f6:87:a2:d0:e5:
ec:62:d7:a8:6d:35:dc:0c:1b:a2:77:71:71:fe:38:
c8:12:24:f6:7a:0f:10:7a:db:ca:8d:73:44:fa:91:
6d:e0:c8:d6:3c:40:22:0c:c6:81:7f:83:ca:c2:5e:
b5:87:65:c1:11:15:44:3e:e0:66:e0:fd:67:03:3c:
de:a9:bd:9e:c0:e9:ef:8b:f3:40:82:1d:c4:bd:a5:
eb:b3:d1:99:d7:91:15:2b:2c:03:48:33:76:16:84:
a5:8f:4a:6a:40:f6:59:b4:93:71:f9:fa:75:cb:f4:
7b:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:E4:78:C1:5C:1B:0B:36:60:E5:3B:BC:4F:8A:6B:B7:68:51:33:8C
X509v3 Authority Key Identifier:
keyid:29:62:E6:A1:33:4C:9C:A9:C9:3E:D5:7F:F4:AD:72:D9:9C:E9:1A:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KWLmoTNMnKnJPtV_9K1y2ZzpGtA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/bde818-c0ed-4924-8d7b-6ec40c85a2ae/1/KWLmoTNMnKnJPtV_9K1y2ZzpGtA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/bde818-c0ed-4924-8d7b-6ec40c85a2ae/1/KWLmoTNMnKnJPtV_9K1y2ZzpGtA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:75:d3:0c:c8:08:00:85:94:d7:cf:1e:af:da:9a:4a:1f:20:
03:d8:2e:ad:1f:60:f9:b3:8e:da:22:e3:36:74:6f:e7:60:c3:
92:83:3b:a9:9c:dc:2b:4c:ee:fb:3d:d1:8f:cd:68:26:20:ac:
a5:22:86:11:0e:cc:7f:03:df:4c:1d:bc:49:98:18:3f:fa:19:
de:55:dd:2f:ae:8d:8d:42:a1:92:eb:3c:79:49:ad:41:3e:6d:
d3:9f:a5:fb:60:68:1f:64:8b:4b:7f:b3:ab:66:f8:71:bc:1b:
15:8d:83:5e:38:c6:51:fb:4a:5e:8e:a1:f4:5d:97:88:3d:b7:
0b:67:e2:ff:a7:91:86:ad:bb:dd:99:0a:ee:c3:2a:57:de:c3:
c9:ee:19:1a:ba:ce:f4:fa:0b:be:ff:80:e9:6b:34:1a:20:07:
df:a5:cc:7c:68:e4:82:38:3c:db:55:e7:b2:b5:ec:a3:e0:0b:
4f:b4:15:20:03:ff:ee:83:69:2d:d9:5e:24:ac:86:41:9f:ea:
c4:e8:e3:2b:ae:4e:e9:a1:e9:88:9d:65:b6:35:78:19:84:0c:
e8:60:d4:6a:b8:6d:c3:3f:7b:20:7d:c2:b8:08:86:a4:53:c5:
69:bb:c9:40:f2:3c:c1:6c:fc:38:14:6e:fd:9a:32:e9:90:7f:
99:4b:99:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:59:25 2026 by rpki-client