Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/0f1ed9-09a1-4e14-9b17-8bc37a64e6c7/1/k2wlHaPujjr0MZWo-Amao8bOLHw.mft
File: k2wlHaPujjr0MZWo-Amao8bOLHw.mft (raw, json)
Hash identifier: o3CVlR4Ky9kTB29bCR5IIeLbD95I0OCzlcR86yX93vA=
Subject key identifier: 55:0C:3B:FB:44:12:48:B9:54:66:F8:C5:5D:5B:9C:42:86:E3:36:83
Authority key identifier: 93:6C:25:1D:A3:EE:8E:3A:F4:31:95:A8:F8:09:9A:A3:C6:CE:2C:7C
Certificate issuer: /CN=936c251da3ee8e3af43195a8f8099aa3c6ce2c7c
Certificate serial: 019D27048275608A97CC7092FB7B282C4633
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2wlHaPujjr0MZWo-Amao8bOLHw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/0f1ed9-09a1-4e14-9b17-8bc37a64e6c7/1/k2wlHaPujjr0MZWo-Amao8bOLHw.mft
Manifest number: 0152
Signing time: Wed 25 Mar 2026 22:01:40 +0000
Manifest this update: Wed 25 Mar 2026 22:01:40 +0000
Manifest next update: Thu 26 Mar 2026 22:01:40 +0000
Files and hashes: 1: k2wlHaPujjr0MZWo-Amao8bOLHw.crl (hash: aJMO7W2MtyRN6otEDwBuP5UuVKJatdr6cuVubzYQyvo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/0f1ed9-09a1-4e14-9b17-8bc37a64e6c7/1/k2wlHaPujjr0MZWo-Amao8bOLHw.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/0f1ed9-09a1-4e14-9b17-8bc37a64e6c7/1/k2wlHaPujjr0MZWo-Amao8bOLHw.mft
rsync://rpki.ripe.net/repository/DEFAULT/k2wlHaPujjr0MZWo-Amao8bOLHw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:82:75:60:8a:97:cc:70:92:fb:7b:28:2c:46:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=936c251da3ee8e3af43195a8f8099aa3c6ce2c7c
Validity
Not Before: Mar 25 22:01:40 2026 GMT
Not After : Mar 26 22:01:40 2026 GMT
Subject: CN=550c3bfb441248b95466f8c55d5b9c4286e33683
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:d5:e7:82:25:d1:15:36:c9:21:7e:ca:95:6c:
82:be:7c:14:9b:e4:47:97:54:9e:1b:0e:af:ce:d3:
77:3e:1f:9c:34:0e:c6:23:5a:3a:e9:1b:2b:d9:af:
e7:9c:ff:4e:e7:a5:da:f8:92:ef:d5:39:82:79:62:
bf:d5:f6:3c:fe:dc:49:6c:bc:f2:b5:8d:19:5a:40:
7c:4a:a4:6f:5e:91:e8:6f:3b:d5:cb:16:ae:53:7b:
75:0a:69:6d:7b:56:67:02:f5:2d:1c:80:e8:80:d9:
30:9c:99:7b:77:0d:80:c7:04:27:b3:7d:4e:3f:f8:
27:20:6d:49:1d:4c:c1:d4:f8:5d:f5:66:37:60:4a:
8a:2c:ce:3e:d8:fd:67:00:66:b1:91:6e:7c:ca:b8:
9b:ab:54:d0:f4:c6:35:58:7a:51:eb:1c:82:22:18:
78:f5:ed:20:9c:c6:bf:d6:7d:d5:1c:6d:19:12:fb:
00:2f:aa:c9:1d:09:f3:16:c4:bf:79:84:6d:30:dd:
4c:02:e4:0e:ff:7d:72:4f:7b:c5:ea:3f:8b:67:1b:
ce:2f:be:ea:0f:0c:25:53:0d:03:d0:ec:69:a2:33:
f8:10:63:01:74:1a:ec:5d:4b:2a:8d:40:b7:3a:93:
b9:86:8e:12:1f:b3:f9:d1:a7:a3:a6:78:51:48:ee:
78:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:0C:3B:FB:44:12:48:B9:54:66:F8:C5:5D:5B:9C:42:86:E3:36:83
X509v3 Authority Key Identifier:
keyid:93:6C:25:1D:A3:EE:8E:3A:F4:31:95:A8:F8:09:9A:A3:C6:CE:2C:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2wlHaPujjr0MZWo-Amao8bOLHw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/0f1ed9-09a1-4e14-9b17-8bc37a64e6c7/1/k2wlHaPujjr0MZWo-Amao8bOLHw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/0f1ed9-09a1-4e14-9b17-8bc37a64e6c7/1/k2wlHaPujjr0MZWo-Amao8bOLHw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:a9:bc:14:27:0f:2d:ad:62:88:53:08:18:3e:51:eb:28:5a:
e3:70:63:96:67:0e:19:10:f7:b2:f7:89:e6:15:f5:a4:6d:57:
fe:38:a5:f7:2c:ec:7e:77:54:0c:0f:18:94:e8:28:8f:02:a5:
70:15:7e:a8:35:d8:fe:7a:8d:50:ff:bd:eb:cc:de:d0:ec:eb:
a4:30:4b:5b:eb:b4:69:b8:d6:ef:3e:8a:83:97:e6:74:68:23:
39:f7:36:c6:6b:06:cd:12:3b:e0:e2:f9:55:39:b2:51:91:5a:
82:1e:3b:aa:d8:33:1f:87:3c:08:e1:d2:80:54:c8:48:7a:9a:
0e:92:c2:06:af:f4:56:46:ca:e0:41:c4:ec:46:12:d7:05:78:
6e:03:9b:e8:3a:8d:3f:50:ba:9e:25:f3:29:43:46:33:69:20:
77:1a:e2:96:66:b8:79:e7:41:57:6f:ec:e3:7d:7a:c5:ad:1a:
86:82:30:7a:87:63:13:ef:8a:c3:99:27:da:57:7c:89:e5:54:
c4:43:bd:94:94:2f:83:85:cd:2e:cb:58:f1:0c:15:a4:e2:a3:
59:46:13:c5:17:18:7e:d9:23:7e:53:c4:a5:06:9a:a5:8b:0d:
cd:35:63:32:99:84:47:80:5c:72:0e:eb:d3:07:44:d3:c8:0a:
66:12:6f:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:45:29 2026 by rpki-client