Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/d0a3dc-7d9a-4375-b2fd-c7542f88e797/1/KwTVVXY_uqCU3KepPaqnj9QAhVQ.mft
File: KwTVVXY_uqCU3KepPaqnj9QAhVQ.mft (raw, json)
Hash identifier: dn+LIs+7t4FffCthAQ7m2wIBcyMahVd5ZbSvir0SUEs=
Subject key identifier: 2C:2E:7D:90:9A:58:09:5F:D1:DC:C3:3A:F2:02:6D:3F:24:A0:6B:25
Authority key identifier: 2B:04:D5:55:76:3F:BA:A0:94:DC:A7:A9:3D:AA:A7:8F:D4:00:85:54
Certificate issuer: /CN=2b04d555763fbaa094dca7a93daaa78fd4008554
Certificate serial: 019D26967254F38789CB3979A5BB534E8976
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KwTVVXY_uqCU3KepPaqnj9QAhVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/d0a3dc-7d9a-4375-b2fd-c7542f88e797/1/KwTVVXY_uqCU3KepPaqnj9QAhVQ.mft
Manifest number: 0750
Signing time: Wed 25 Mar 2026 20:01:26 +0000
Manifest this update: Wed 25 Mar 2026 20:01:26 +0000
Manifest next update: Thu 26 Mar 2026 20:01:26 +0000
Files and hashes: 1: KwTVVXY_uqCU3KepPaqnj9QAhVQ.crl (hash: p7vUBomYLb/hIW+K5qMH9wkdRue8whV8rEuRpwHWcB8=)
2: tiNn6V7lQJwEPwSpBpmzpIlCOkk.roa (hash: PLDBgRQOKr/iKYlhIFX9U/GkSjb6UcvWrO34uaV/xLA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/d0a3dc-7d9a-4375-b2fd-c7542f88e797/1/KwTVVXY_uqCU3KepPaqnj9QAhVQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/d0a3dc-7d9a-4375-b2fd-c7542f88e797/1/KwTVVXY_uqCU3KepPaqnj9QAhVQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/KwTVVXY_uqCU3KepPaqnj9QAhVQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 20:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:96:72:54:f3:87:89:cb:39:79:a5:bb:53:4e:89:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b04d555763fbaa094dca7a93daaa78fd4008554
Validity
Not Before: Mar 25 20:01:26 2026 GMT
Not After : Mar 26 20:01:26 2026 GMT
Subject: CN=2c2e7d909a58095fd1dcc33af2026d3f24a06b25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:bc:e8:72:57:18:8c:08:56:5a:09:2e:80:ac:
2f:dd:ce:a2:7e:8c:06:10:ef:42:e0:4e:6e:88:b7:
5d:cc:60:a3:8c:6b:82:ce:40:65:36:ff:e0:5e:36:
f6:b7:3a:02:5c:b5:6b:1f:da:6b:97:b9:b9:79:e5:
d2:2a:47:83:ab:17:28:49:eb:15:50:d0:28:4a:dd:
2b:33:c0:33:ea:73:87:25:1d:d2:f1:f4:7e:db:de:
37:2f:8d:28:ab:64:03:78:a7:15:5d:1b:0b:45:1c:
73:be:f1:35:e2:7b:c3:a7:cb:e1:86:8c:f6:e3:c9:
50:69:62:ff:ee:6e:12:98:5c:5b:c4:73:e2:a4:3a:
84:df:0a:e3:25:66:26:3d:3e:b9:b1:50:8f:18:ee:
d9:df:d1:79:f9:dd:14:b6:8d:02:dd:20:1c:4b:14:
d5:90:43:a5:b7:83:79:2c:4e:83:ad:5c:1b:02:d4:
f8:b7:33:2d:d3:eb:71:f0:ab:3f:b6:5e:fb:a1:4b:
99:8b:a7:fb:6d:03:58:55:d1:17:42:a0:39:99:88:
39:05:31:bf:f6:18:ec:b2:b6:38:4e:c3:8b:cf:0f:
1c:21:42:cb:3c:04:b4:6d:03:96:20:6a:36:f8:12:
73:0b:26:ae:98:ae:4e:6c:82:18:b9:b8:a0:16:8f:
31:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:2E:7D:90:9A:58:09:5F:D1:DC:C3:3A:F2:02:6D:3F:24:A0:6B:25
X509v3 Authority Key Identifier:
keyid:2B:04:D5:55:76:3F:BA:A0:94:DC:A7:A9:3D:AA:A7:8F:D4:00:85:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KwTVVXY_uqCU3KepPaqnj9QAhVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/d0a3dc-7d9a-4375-b2fd-c7542f88e797/1/KwTVVXY_uqCU3KepPaqnj9QAhVQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/d0a3dc-7d9a-4375-b2fd-c7542f88e797/1/KwTVVXY_uqCU3KepPaqnj9QAhVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:8e:b0:f1:51:00:ff:29:a7:03:de:9c:b7:47:42:8f:93:e5:
64:de:a6:df:b9:64:7b:88:33:e6:d4:88:e3:11:3a:fb:fb:2d:
93:4c:e2:00:cf:b6:5e:9c:4f:d5:87:a7:57:69:42:d3:c2:81:
e2:e8:47:a5:32:c7:c2:bf:a0:4f:e2:49:31:1e:e6:c2:58:da:
29:ca:77:af:e0:8e:79:13:0b:e5:a2:81:e7:61:1c:1f:c7:d6:
86:ae:3c:82:83:41:65:64:a2:1e:13:c4:fb:3c:f7:cd:83:61:
9e:a5:4f:13:56:88:40:18:29:60:a5:3a:8d:03:a9:66:4a:46:
50:33:f7:15:02:1f:10:9a:c2:e7:41:d5:52:9f:f0:e8:17:20:
e3:40:5d:bd:08:22:1c:42:21:e3:9c:bf:9a:37:2f:ce:16:8b:
a3:e5:27:7e:24:b8:d5:3f:ce:5a:e5:f4:ee:0a:d2:25:a3:28:
8f:d8:3f:95:2a:e6:08:e9:75:33:aa:39:80:67:89:51:1d:cb:
2c:11:2c:cc:9e:90:b0:c4:c1:3b:be:18:62:57:29:2c:2a:e5:
bc:e5:b8:de:46:5f:db:d2:6c:f8:a1:50:06:97:e7:d6:95:c1:
95:bf:c7:fe:b9:ae:8f:39:cc:64:e4:31:79:b2:df:a5:0b:3b:
05:12:33:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:42:16 2026 by rpki-client