Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/0b0b33-98a1-4818-ad18-95f27d3e8abb/1/KCssuXcVO6rR3ZnuwUzgykbiIZ8.mft
File: KCssuXcVO6rR3ZnuwUzgykbiIZ8.mft (raw, json)
Hash identifier: FsirOiM9F8VZNxLH24d/9ntOd6lMTm0x6wpZRnxrXdU=
Subject key identifier: C6:26:29:73:83:7A:E8:F3:9A:12:08:14:47:0E:60:D1:05:8F:3D:CF
Authority key identifier: 28:2B:2C:B9:77:15:3B:AA:D1:DD:99:EE:C1:4C:E0:CA:46:E2:21:9F
Certificate issuer: /CN=282b2cb977153baad1dd99eec14ce0ca46e2219f
Certificate serial: 019D25F1E5D3F0A4ABB2E01468C46705669C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KCssuXcVO6rR3ZnuwUzgykbiIZ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/0b0b33-98a1-4818-ad18-95f27d3e8abb/1/KCssuXcVO6rR3ZnuwUzgykbiIZ8.mft
Manifest number: 0A5C
Signing time: Wed 25 Mar 2026 17:01:43 +0000
Manifest this update: Wed 25 Mar 2026 17:01:43 +0000
Manifest next update: Thu 26 Mar 2026 17:01:43 +0000
Files and hashes: 1: KCssuXcVO6rR3ZnuwUzgykbiIZ8.crl (hash: E+uErF5c12EH82xSu60ImBWoiGPAYU2ATwdOd3PBBns=)
2: kwICd-Vs81pcwvCcYZ6zEK19fBw.roa (hash: zy91annv+5k1uAmsY5PH/4r77C+x0cRwRxEdrlowj+8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/0b0b33-98a1-4818-ad18-95f27d3e8abb/1/KCssuXcVO6rR3ZnuwUzgykbiIZ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/0b0b33-98a1-4818-ad18-95f27d3e8abb/1/KCssuXcVO6rR3ZnuwUzgykbiIZ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/KCssuXcVO6rR3ZnuwUzgykbiIZ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f1:e5:d3:f0:a4:ab:b2:e0:14:68:c4:67:05:66:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=282b2cb977153baad1dd99eec14ce0ca46e2219f
Validity
Not Before: Mar 25 17:01:43 2026 GMT
Not After : Mar 26 17:01:43 2026 GMT
Subject: CN=c6262973837ae8f39a120814470e60d1058f3dcf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:6b:32:7a:70:ec:55:63:58:1a:d8:09:62:ec:
1a:d3:7a:b4:30:74:60:15:b4:0e:f4:4c:ba:5d:a6:
24:87:c9:73:ae:f8:29:1f:0c:2d:9e:f3:55:e7:1a:
ce:85:74:cd:4b:eb:98:a6:67:eb:db:01:06:01:f3:
54:c7:7a:52:02:d7:22:50:5e:2d:c4:2c:89:6e:41:
49:d3:90:c7:ca:c9:1c:c0:50:d6:0d:6b:47:35:7a:
a8:99:8c:7a:46:ae:a4:e8:e2:4a:f6:71:9c:25:f3:
04:3f:4a:7b:9d:97:c8:25:5a:d3:83:06:75:0e:bb:
f0:40:79:be:73:e8:ae:07:66:cd:40:52:75:da:2d:
10:67:18:07:41:d3:3a:6a:c5:70:d1:d6:c3:a8:08:
db:d1:9b:40:4c:59:7c:81:b2:77:6a:70:4e:26:4f:
3f:07:7e:76:c7:cf:ee:f5:9d:21:60:f4:ef:27:8d:
cf:cb:57:33:a5:fe:11:91:4f:51:27:25:8b:fe:ae:
56:8e:bc:b0:f7:f8:ea:15:41:ef:90:10:e4:62:e3:
c0:be:c0:24:fe:42:3d:80:af:31:52:50:b5:c1:70:
8d:e5:0d:ce:2b:6b:ba:81:61:2e:c6:8c:0b:71:93:
95:9c:f2:b5:8b:b3:4f:17:f5:a9:58:f7:ad:4a:41:
df:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:26:29:73:83:7A:E8:F3:9A:12:08:14:47:0E:60:D1:05:8F:3D:CF
X509v3 Authority Key Identifier:
keyid:28:2B:2C:B9:77:15:3B:AA:D1:DD:99:EE:C1:4C:E0:CA:46:E2:21:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KCssuXcVO6rR3ZnuwUzgykbiIZ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/0b0b33-98a1-4818-ad18-95f27d3e8abb/1/KCssuXcVO6rR3ZnuwUzgykbiIZ8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/0b0b33-98a1-4818-ad18-95f27d3e8abb/1/KCssuXcVO6rR3ZnuwUzgykbiIZ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:1d:b2:ec:12:33:8c:c9:76:5d:b3:c0:18:12:3e:74:1e:0f:
4a:5b:99:92:c1:52:31:3d:63:71:dc:07:c7:a5:df:be:51:37:
b9:31:0f:1b:3c:f3:37:33:cf:46:7d:92:e6:87:73:64:90:45:
5a:56:9b:15:cc:3d:99:6b:05:59:56:83:a1:8d:50:1c:b3:4b:
31:85:bb:a1:a3:b4:1a:31:b4:72:39:5d:d6:91:2b:3e:34:33:
4b:c9:a5:0d:c0:dd:66:ce:d8:ec:c9:fe:ac:54:4a:97:bf:38:
d2:f8:3e:5e:c5:93:a1:82:35:38:69:22:64:89:c6:0b:ea:26:
4d:b9:96:24:9e:8d:dd:35:74:85:46:a3:60:a1:aa:e8:5e:60:
0d:2d:fa:8c:0f:9d:c7:05:3a:e8:cf:21:14:bf:d6:f3:b8:ba:
c9:97:ee:89:73:34:7e:0f:fc:ec:c8:95:1c:64:b6:c7:6d:ef:
08:24:12:dd:6e:15:41:b3:1f:f3:5b:3d:a0:5f:df:a9:6f:df:
29:38:8e:a7:d8:80:7e:5e:9e:7a:7c:02:d4:72:93:76:f1:07:
2a:53:97:40:af:1d:6d:af:36:7e:f6:8a:2f:08:0d:8b:3e:b5:
a8:18:16:a1:91:98:5f:77:a2:03:81:62:31:7f:e4:fc:6b:91:
d3:cd:7b:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:10:29 2026 by rpki-client