Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/0b0b33-98a1-4818-ad18-95f27d3e8abb/1/KCssuXcVO6rR3ZnuwUzgykbiIZ8.mft
File: KCssuXcVO6rR3ZnuwUzgykbiIZ8.mft (raw, json)
Hash identifier: 8AT4JttxcDqRCwyPProzMu35zY3GAbehZkClSTbqYTw=
Subject key identifier: 4B:BD:6F:E9:52:0E:3E:ED:63:7D:D2:86:74:BE:0A:32:12:02:A9:3A
Authority key identifier: 28:2B:2C:B9:77:15:3B:AA:D1:DD:99:EE:C1:4C:E0:CA:46:E2:21:9F
Certificate issuer: /CN=282b2cb977153baad1dd99eec14ce0ca46e2219f
Certificate serial: 019F91DA3415B1011DF56A3EEF3458827D33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KCssuXcVO6rR3ZnuwUzgykbiIZ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/0b0b33-98a1-4818-ad18-95f27d3e8abb/1/KCssuXcVO6rR3ZnuwUzgykbiIZ8.mft
Manifest number: 0B9D
Signing time: Fri 24 Jul 2026 02:00:24 +0000
Manifest this update: Fri 24 Jul 2026 02:00:24 +0000
Manifest next update: Sat 25 Jul 2026 02:00:24 +0000
Files and hashes: 1: KCssuXcVO6rR3ZnuwUzgykbiIZ8.crl (hash: RCgMwEnNh+A3I5lvfUmf9hj8LNMg7J6EccEvqbWdhVA=)
2: kwICd-Vs81pcwvCcYZ6zEK19fBw.roa (hash: zy91annv+5k1uAmsY5PH/4r77C+x0cRwRxEdrlowj+8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/0b0b33-98a1-4818-ad18-95f27d3e8abb/1/KCssuXcVO6rR3ZnuwUzgykbiIZ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/0b0b33-98a1-4818-ad18-95f27d3e8abb/1/KCssuXcVO6rR3ZnuwUzgykbiIZ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/KCssuXcVO6rR3ZnuwUzgykbiIZ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:da:34:15:b1:01:1d:f5:6a:3e:ef:34:58:82:7d:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=282b2cb977153baad1dd99eec14ce0ca46e2219f
Validity
Not Before: Jul 24 02:00:24 2026 GMT
Not After : Jul 25 02:00:24 2026 GMT
Subject: CN=4bbd6fe9520e3eed637dd28674be0a321202a93a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:ca:71:1a:0c:5e:fa:a0:a2:ac:77:b4:d7:24:
3a:07:7b:5e:87:a1:28:13:3e:2d:2d:b6:e3:fc:b4:
89:4a:bb:c5:79:8d:84:64:20:e5:4e:13:01:3b:59:
27:45:df:9a:7a:d5:62:c2:2d:90:5b:87:65:d6:15:
21:ce:69:0b:66:29:f4:4b:d0:db:f7:17:7a:b9:c0:
69:99:e7:58:03:c7:aa:7b:67:90:71:15:29:16:dd:
0d:1c:70:d2:31:cf:15:60:aa:4c:8e:74:3c:e3:1e:
da:f2:27:a2:dc:2a:0a:9c:02:0b:00:51:4f:81:aa:
2a:bf:5e:f4:25:3c:ee:b2:9e:6c:0f:55:8c:3d:19:
02:92:50:2f:5b:95:c4:c2:c0:ea:d6:78:ef:f2:69:
d2:9e:bc:59:3a:4f:d5:0c:16:bf:ae:36:cb:c1:bd:
1e:80:e7:07:b5:75:6a:92:b2:38:c3:ff:95:23:82:
1c:1f:39:e7:a9:96:b2:17:25:0f:8d:e8:6c:2f:0e:
e1:69:80:1b:84:05:19:e8:90:2c:0b:f4:46:c0:36:
38:81:02:d8:c0:2f:33:5d:e6:c7:d5:1b:dd:ee:68:
06:25:35:43:ff:41:c8:eb:6d:74:ff:8c:54:f6:f2:
1d:cb:7f:5a:db:5b:d2:28:1b:d1:0d:08:8d:98:4e:
c3:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:BD:6F:E9:52:0E:3E:ED:63:7D:D2:86:74:BE:0A:32:12:02:A9:3A
X509v3 Authority Key Identifier:
keyid:28:2B:2C:B9:77:15:3B:AA:D1:DD:99:EE:C1:4C:E0:CA:46:E2:21:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KCssuXcVO6rR3ZnuwUzgykbiIZ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/0b0b33-98a1-4818-ad18-95f27d3e8abb/1/KCssuXcVO6rR3ZnuwUzgykbiIZ8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/0b0b33-98a1-4818-ad18-95f27d3e8abb/1/KCssuXcVO6rR3ZnuwUzgykbiIZ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:c6:bd:e5:64:fe:9c:f5:19:f6:89:97:18:73:03:ff:41:bc:
3f:17:a4:de:fd:9c:55:81:24:c4:0f:d3:c2:52:b3:f4:e0:3f:
81:6f:9a:18:a6:54:c3:e0:bc:68:7e:b1:c9:4b:50:ed:6b:52:
09:47:64:01:33:af:16:bc:d6:d3:ba:de:0d:3a:e5:72:52:78:
fb:69:03:a8:0b:00:a8:46:d0:4e:37:62:89:82:7f:df:d6:25:
e5:f3:f1:b2:d7:ab:3e:83:4e:72:af:e8:97:ef:35:bc:8f:6b:
c4:79:3c:56:ff:b0:40:80:54:1d:bf:f1:19:9a:ae:21:2e:ad:
17:56:57:6f:b4:6a:a5:f3:02:50:97:28:f5:b6:e4:be:35:09:
c8:ad:a9:57:66:43:f9:c1:79:c9:7e:54:e2:bc:8b:49:67:c7:
18:a3:ad:df:8a:1b:3b:fe:7a:32:9a:e3:aa:8d:47:06:d9:33:
f8:19:01:41:a1:57:2a:62:e7:f3:db:26:2b:f1:41:7d:a8:91:
ed:da:5b:4e:49:bc:07:c0:50:d1:d9:26:90:09:6c:83:67:d3:
04:f7:1b:0a:87:aa:2c:99:b0:b9:99:5c:bc:b8:ef:4c:62:da:
82:ae:ad:a6:6d:8d:e2:a6:b8:0a:97:b6:20:a2:c3:75:be:40:
61:49:15:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 09:11:35 2026 by rpki-client