Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fc/0b0b33-98a1-4818-ad18-95f27d3e8abb/1/KCssuXcVO6rR3ZnuwUzgykbiIZ8.mft
File: KCssuXcVO6rR3ZnuwUzgykbiIZ8.mft (raw, json)
Hash identifier: Sv/0q5KalnQjeoquMf4Nv9RGBNADddWq8RaktNWwA68=
Subject key identifier: AA:46:D0:DF:6C:38:B7:80:E5:E9:90:8C:7A:F1:5A:AC:49:98:EB:E9
Authority key identifier: 28:2B:2C:B9:77:15:3B:AA:D1:DD:99:EE:C1:4C:E0:CA:46:E2:21:9F
Certificate issuer: /CN=282b2cb977153baad1dd99eec14ce0ca46e2219f
Certificate serial: 01A119E234D9098AD3661F83F51BD68C76DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KCssuXcVO6rR3ZnuwUzgykbiIZ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/0b0b33-98a1-4818-ad18-95f27d3e8abb/1/KCssuXcVO6rR3ZnuwUzgykbiIZ8.mft
Manifest number: 0C68
Signing time: Thu 08 Oct 2026 05:00:17 +0000
Manifest this update: Thu 08 Oct 2026 05:00:17 +0000
Manifest next update: Fri 09 Oct 2026 05:00:17 +0000
Files and hashes: 1: KCssuXcVO6rR3ZnuwUzgykbiIZ8.crl (hash: H0KF5mjaqRFalL0SU76Ka+qtnYFlAlHz7zWmVH+fAZw=)
2: kwICd-Vs81pcwvCcYZ6zEK19fBw.roa (hash: zy91annv+5k1uAmsY5PH/4r77C+x0cRwRxEdrlowj+8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/0b0b33-98a1-4818-ad18-95f27d3e8abb/1/KCssuXcVO6rR3ZnuwUzgykbiIZ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/0b0b33-98a1-4818-ad18-95f27d3e8abb/1/KCssuXcVO6rR3ZnuwUzgykbiIZ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/KCssuXcVO6rR3ZnuwUzgykbiIZ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 Oct 2026 05:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:19:e2:34:d9:09:8a:d3:66:1f:83:f5:1b:d6:8c:76:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=282b2cb977153baad1dd99eec14ce0ca46e2219f
Validity
Not Before: Oct 8 05:00:17 2026 GMT
Not After : Oct 9 05:00:17 2026 GMT
Subject: CN=aa46d0df6c38b780e5e9908c7af15aac4998ebe9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:72:e7:e1:d3:67:f5:9a:71:ae:38:43:9d:7f:
67:0d:71:e7:33:bf:46:68:c0:86:48:35:58:87:80:
f1:fe:19:1c:d6:a3:4a:b8:71:21:b5:86:70:fb:a5:
a1:59:15:fa:86:8d:1a:5c:f4:d1:fb:94:ba:ae:3c:
3e:8a:a2:a8:97:e8:b1:cf:69:34:bc:17:7c:7b:37:
03:5c:db:ec:62:94:de:85:c0:28:b1:72:cd:24:d2:
ca:b5:2d:f7:5a:fc:00:70:25:8d:92:f8:37:a3:94:
f7:50:8b:2f:7c:86:f5:86:e5:44:0f:26:70:fe:90:
fc:41:98:f9:1f:ab:81:ae:f8:36:ef:f9:bc:a8:41:
5a:c7:c1:20:5b:e2:7b:7c:19:e5:73:cc:2e:f1:94:
bf:1f:7d:4f:f9:42:7e:7c:c5:81:65:15:e0:a9:25:
bb:d0:b4:a0:a3:53:a8:bc:dc:14:10:dd:75:e3:89:
68:30:72:e7:55:3a:54:ee:26:63:bc:3e:9b:ca:5f:
1b:e5:c3:57:c8:49:fb:d3:54:1e:44:3b:e5:8c:69:
a6:3a:a9:8c:73:c8:66:9f:00:a0:c7:3e:74:8e:6a:
59:15:37:58:f8:78:33:02:5e:72:a8:4a:44:c5:fa:
26:d2:4d:b6:fb:ec:36:fd:f7:30:0b:e5:2b:a7:c8:
46:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:46:D0:DF:6C:38:B7:80:E5:E9:90:8C:7A:F1:5A:AC:49:98:EB:E9
X509v3 Authority Key Identifier:
keyid:28:2B:2C:B9:77:15:3B:AA:D1:DD:99:EE:C1:4C:E0:CA:46:E2:21:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KCssuXcVO6rR3ZnuwUzgykbiIZ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/0b0b33-98a1-4818-ad18-95f27d3e8abb/1/KCssuXcVO6rR3ZnuwUzgykbiIZ8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/0b0b33-98a1-4818-ad18-95f27d3e8abb/1/KCssuXcVO6rR3ZnuwUzgykbiIZ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:aa:79:eb:24:4c:02:ec:d9:21:ad:44:33:e4:7e:0a:ab:70:
1c:d7:fe:59:d1:af:19:21:52:97:97:0d:6a:01:a8:59:1d:c7:
87:35:34:f0:c3:a0:83:91:f6:3f:4d:50:a5:3e:66:49:0f:11:
5a:6c:69:1e:b0:7a:c9:ab:6f:0b:2e:74:6d:b4:f8:e8:c3:2f:
7a:ea:7c:68:fb:ce:87:5c:3c:92:84:7a:88:3e:25:c4:8a:92:
8a:d8:aa:ad:3d:89:8a:01:e4:e5:18:48:25:94:62:34:e9:77:
63:6e:60:3e:7c:c1:03:91:d2:79:4f:55:c6:b4:15:7c:c7:5d:
50:30:79:ed:4f:d0:1b:22:03:b7:6d:76:9e:d1:36:33:26:fb:
32:42:4d:99:25:e5:30:0e:fa:46:d2:3f:36:89:b7:fe:cf:f0:
fd:12:7a:d0:4f:53:12:b9:f2:04:a0:68:42:55:21:d3:72:80:
16:50:dc:83:0a:35:9b:8c:8c:ff:12:db:ed:94:82:47:f3:75:
ab:ea:f6:d2:fe:3b:98:ee:b1:29:2b:4a:eb:6d:a4:ce:4d:47:
10:5d:e3:91:85:d7:74:46:2b:df:eb:6e:64:30:76:d3:62:47:
23:d7:aa:bf:1e:da:7f:01:c5:36:77:9f:54:76:d5:6a:18:0e:
5e:11:d8:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 11:42:58 2026 by rpki-client