Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/ecfafc-9115-4ec2-ae11-07f1259feb13/1/kwk3JGTFmj3Y7NYyFbAYGXBlWKY.mft
File: kwk3JGTFmj3Y7NYyFbAYGXBlWKY.mft (raw, json)
Hash identifier: 6BO1IEs6dq9bpue3S3miokbfXCq9hAshEKwT4bPgJ2w=
Subject key identifier: 56:31:8E:79:3E:00:CA:75:AC:20:9C:E6:15:00:D3:A0:FE:AE:BF:62
Authority key identifier: 93:09:37:24:64:C5:9A:3D:D8:EC:D6:32:15:B0:18:19:70:65:58:A6
Certificate issuer: /CN=9309372464c59a3dd8ecd63215b01819706558a6
Certificate serial: 019D9961F7FEBEC2F7F0EBF16BFF76E3B4AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kwk3JGTFmj3Y7NYyFbAYGXBlWKY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/ecfafc-9115-4ec2-ae11-07f1259feb13/1/kwk3JGTFmj3Y7NYyFbAYGXBlWKY.mft
Manifest number: 08EB
Signing time: Fri 17 Apr 2026 03:00:27 +0000
Manifest this update: Fri 17 Apr 2026 03:00:27 +0000
Manifest next update: Sat 18 Apr 2026 03:00:27 +0000
Files and hashes: 1: kwk3JGTFmj3Y7NYyFbAYGXBlWKY.crl (hash: KAIupXcqbmE7UtdACfkrHcmkNtXzXd8oo5IY4m5/EsA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/ecfafc-9115-4ec2-ae11-07f1259feb13/1/kwk3JGTFmj3Y7NYyFbAYGXBlWKY.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/ecfafc-9115-4ec2-ae11-07f1259feb13/1/kwk3JGTFmj3Y7NYyFbAYGXBlWKY.mft
rsync://rpki.ripe.net/repository/DEFAULT/kwk3JGTFmj3Y7NYyFbAYGXBlWKY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:61:f7:fe:be:c2:f7:f0:eb:f1:6b:ff:76:e3:b4:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9309372464c59a3dd8ecd63215b01819706558a6
Validity
Not Before: Apr 17 03:00:27 2026 GMT
Not After : Apr 18 03:00:27 2026 GMT
Subject: CN=56318e793e00ca75ac209ce61500d3a0feaebf62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:0b:ef:92:1e:4f:d7:95:f1:95:35:57:89:6b:
77:36:5a:1c:ab:49:18:1f:fb:79:41:23:56:60:91:
df:d5:d9:7b:49:c5:d0:77:97:29:96:9b:0f:30:6d:
4a:5b:95:da:88:2e:89:a6:f4:c5:5e:80:b7:f2:67:
93:7e:86:13:92:98:6c:c2:15:1d:8b:3d:ce:81:51:
58:a0:75:0f:d9:03:46:b0:ab:57:6d:f9:be:8e:25:
f6:ed:7b:3f:48:01:15:3a:87:eb:bb:e8:df:7d:14:
fb:5e:b3:7f:c7:63:ad:b8:8d:a0:be:25:c5:32:68:
00:09:fb:19:14:d8:db:04:8d:9d:a9:04:10:69:5a:
3a:b2:9f:7c:07:69:2d:bc:1b:c9:7a:e4:59:0f:8a:
bf:c2:96:9c:4c:65:cb:05:9d:a0:93:9a:0d:d3:6c:
7b:24:20:95:3e:76:d6:24:2c:5e:c1:c7:30:a9:63:
1d:dd:7d:83:e2:73:ad:51:df:73:a0:a3:90:d2:c0:
23:cb:b3:6e:78:97:d6:83:9a:ec:1f:a3:18:d1:bc:
5a:9a:d6:90:15:d4:de:cd:c6:ab:79:6d:c7:46:69:
1f:1b:65:80:d7:05:1f:ff:2a:04:a7:85:b2:e9:d7:
a7:bd:5c:da:cc:7f:e8:b0:92:a2:ab:bd:d9:db:fc:
2d:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:31:8E:79:3E:00:CA:75:AC:20:9C:E6:15:00:D3:A0:FE:AE:BF:62
X509v3 Authority Key Identifier:
keyid:93:09:37:24:64:C5:9A:3D:D8:EC:D6:32:15:B0:18:19:70:65:58:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kwk3JGTFmj3Y7NYyFbAYGXBlWKY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/ecfafc-9115-4ec2-ae11-07f1259feb13/1/kwk3JGTFmj3Y7NYyFbAYGXBlWKY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/ecfafc-9115-4ec2-ae11-07f1259feb13/1/kwk3JGTFmj3Y7NYyFbAYGXBlWKY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:a6:0f:65:db:fb:cb:26:26:02:3b:35:7e:f1:7c:f9:c5:6f:
7f:83:67:80:59:1f:08:07:c3:3c:05:71:8c:5e:7d:33:8b:97:
57:a6:46:80:b8:51:5d:61:56:58:fa:fd:42:b7:31:39:e1:61:
47:c9:c1:68:fd:62:88:e6:69:e5:27:df:f0:3e:a7:d5:48:2c:
e5:a5:65:2d:b2:c8:ca:c6:da:61:ad:c7:38:a0:f2:4e:b1:5c:
8d:98:77:a1:9f:53:e3:38:a4:36:d6:91:75:a5:b1:74:df:18:
92:bf:45:c4:8d:d5:2e:c9:06:51:5b:2c:3e:b8:f2:08:b5:e8:
a5:35:c9:b6:5c:76:fb:2e:50:24:b7:20:9e:fd:12:25:b4:42:
9a:58:40:95:a5:0e:9b:a1:dc:8d:aa:81:c0:7e:d1:43:38:31:
68:33:1a:4c:21:c5:93:16:df:81:98:4b:a6:e5:64:a1:d0:05:
f2:a2:e4:82:19:96:3f:0b:c2:d5:70:e1:a6:5e:ff:eb:79:59:
c5:48:f6:04:41:38:21:59:f1:91:61:36:1e:37:31:4a:2d:d8:
46:b9:b1:76:90:a8:58:bc:31:de:14:38:cc:bc:75:c1:01:b6:
a1:f5:75:fd:d2:21:c1:c1:3b:f2:9c:48:04:78:79:dc:80:55:
34:cf:31:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:30:37 2026 by rpki-client