Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/66c025-53a2-4219-9f39-f18d0c1b8bee/1/Kwprx2i2FVjqweWekEUR_F3Yu8E.mft
File: Kwprx2i2FVjqweWekEUR_F3Yu8E.mft (raw, json)
Hash identifier: alDHBpJcK5JHX4MB4ifka3ybfgh8DSgx2l9VUMNEwaQ=
Subject key identifier: 46:F1:DF:6C:8B:7E:1A:72:2A:D9:6B:CD:F9:5A:5B:55:BE:9F:DE:E1
Authority key identifier: 2B:0A:6B:C7:68:B6:15:58:EA:C1:E5:9E:90:45:11:FC:5D:D8:BB:C1
Certificate issuer: /CN=2b0a6bc768b61558eac1e59e904511fc5dd8bbc1
Certificate serial: 019D9C9A6CAE3DCF2BF0F1AEE7EDA552699D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Kwprx2i2FVjqweWekEUR_F3Yu8E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/66c025-53a2-4219-9f39-f18d0c1b8bee/1/Kwprx2i2FVjqweWekEUR_F3Yu8E.mft
Manifest number: 08AF
Signing time: Fri 17 Apr 2026 18:00:59 +0000
Manifest this update: Fri 17 Apr 2026 18:00:59 +0000
Manifest next update: Sat 18 Apr 2026 18:00:59 +0000
Files and hashes: 1: Kwprx2i2FVjqweWekEUR_F3Yu8E.crl (hash: 0Lq11r3ct16eV8UJCBlpZFa8WoH2K2FnijFBKcKEU4M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/66c025-53a2-4219-9f39-f18d0c1b8bee/1/Kwprx2i2FVjqweWekEUR_F3Yu8E.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/66c025-53a2-4219-9f39-f18d0c1b8bee/1/Kwprx2i2FVjqweWekEUR_F3Yu8E.mft
rsync://rpki.ripe.net/repository/DEFAULT/Kwprx2i2FVjqweWekEUR_F3Yu8E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9c:9a:6c:ae:3d:cf:2b:f0:f1:ae:e7:ed:a5:52:69:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b0a6bc768b61558eac1e59e904511fc5dd8bbc1
Validity
Not Before: Apr 17 18:00:59 2026 GMT
Not After : Apr 18 18:00:59 2026 GMT
Subject: CN=46f1df6c8b7e1a722ad96bcdf95a5b55be9fdee1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:9b:ea:57:e7:02:31:1b:61:b0:02:e2:ab:57:
7f:da:8b:da:7b:82:54:3f:3c:69:97:33:37:3a:aa:
c4:f5:54:d0:67:ea:1d:fa:bb:fd:84:74:c6:92:8c:
44:17:a1:55:26:8a:2f:3a:3e:6e:28:bf:96:be:43:
63:52:dc:0b:27:7e:b0:08:4a:8d:92:91:63:a0:e1:
20:a8:c5:28:79:f1:ea:e6:86:d2:2c:db:df:a1:47:
4e:d1:ed:3c:05:1f:61:7c:fc:47:e7:65:6c:39:08:
79:df:2c:e8:5f:94:07:99:53:0c:8b:01:d7:d3:9d:
31:f9:0c:98:86:3a:b2:49:71:66:f8:7d:77:a9:ac:
14:d6:d2:ce:88:ad:cd:ec:d4:0a:94:2d:af:06:36:
8e:ee:b0:57:47:e4:f0:5c:ee:a9:e0:85:6b:87:6b:
5d:d3:1b:c6:04:7e:4a:01:7f:1f:b1:17:a6:d1:3f:
e6:2a:a8:5f:33:92:0b:ab:96:aa:86:b9:f7:f0:e5:
ea:0f:c1:3d:62:f4:54:24:0e:2d:5b:1b:48:74:15:
f9:7d:a9:e0:fb:d5:c2:8d:f2:d9:4a:5d:fb:02:56:
bb:28:54:ad:22:83:c2:35:62:a2:64:6d:cb:0d:89:
50:9d:52:58:96:7c:1f:44:14:7b:88:f4:68:6c:5c:
70:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:F1:DF:6C:8B:7E:1A:72:2A:D9:6B:CD:F9:5A:5B:55:BE:9F:DE:E1
X509v3 Authority Key Identifier:
keyid:2B:0A:6B:C7:68:B6:15:58:EA:C1:E5:9E:90:45:11:FC:5D:D8:BB:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kwprx2i2FVjqweWekEUR_F3Yu8E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/66c025-53a2-4219-9f39-f18d0c1b8bee/1/Kwprx2i2FVjqweWekEUR_F3Yu8E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/66c025-53a2-4219-9f39-f18d0c1b8bee/1/Kwprx2i2FVjqweWekEUR_F3Yu8E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:15:5b:31:7e:75:35:99:a7:36:a7:50:0d:cd:7f:8a:84:68:
7b:f3:68:4e:31:21:cd:70:1e:fd:78:d0:af:c6:80:9e:30:92:
96:a3:c8:4a:82:dc:90:58:fb:06:ca:64:59:43:72:5a:b5:30:
b8:f4:f0:cb:03:93:8e:37:6a:2b:df:bb:d5:9d:d4:c8:30:85:
d6:ba:46:cd:fb:3d:ac:14:8d:1b:dd:8d:02:25:be:88:ff:6c:
53:81:72:93:de:c1:b6:3c:ae:91:12:1d:41:b6:fe:48:aa:a5:
88:0b:53:ec:6f:20:93:56:4b:2b:23:d4:c7:39:d5:d3:95:52:
2b:b8:e5:7b:d5:65:35:a5:ed:43:36:68:7b:b2:fb:e6:3e:e4:
4b:02:8a:3e:09:52:12:22:09:6f:45:47:0e:47:f1:d1:af:05:
5a:85:5f:73:62:cc:a5:04:18:df:bc:23:91:0c:43:d8:5a:0c:
13:a2:e3:1e:97:ac:25:9d:f2:c0:1c:88:f8:5d:36:68:9a:13:
bb:61:c4:e3:b5:01:57:4f:45:56:6a:91:4f:e0:79:9b:8f:38:
8b:4f:8b:64:dc:ff:d6:59:c1:ac:1b:d1:b9:2e:e3:51:f7:b7:
f4:ce:b5:1f:9a:88:78:c9:7e:23:39:fe:3a:c1:38:a1:09:ab:
cb:00:b4:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 23:40:42 2026 by rpki-client