Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/0b0b33-98a1-4818-ad18-95f27d3e8abb/1/KCssuXcVO6rR3ZnuwUzgykbiIZ8.mft
File: KCssuXcVO6rR3ZnuwUzgykbiIZ8.mft (raw, json)
Hash identifier: g5q3Seq51ObtCyX3yO2/ewYksqBspCOU3+c5gY0j3LI=
Subject key identifier: 7E:C8:4E:90:A0:C0:92:E4:CE:72:6A:4F:BD:93:CC:A9:43:68:8B:7C
Authority key identifier: 28:2B:2C:B9:77:15:3B:AA:D1:DD:99:EE:C1:4C:E0:CA:46:E2:21:9F
Certificate issuer: /CN=282b2cb977153baad1dd99eec14ce0ca46e2219f
Certificate serial: 019E1F1181824ED8433357534A0085BA5A08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KCssuXcVO6rR3ZnuwUzgykbiIZ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/0b0b33-98a1-4818-ad18-95f27d3e8abb/1/KCssuXcVO6rR3ZnuwUzgykbiIZ8.mft
Manifest number: 0ADD
Signing time: Wed 13 May 2026 02:01:41 +0000
Manifest this update: Wed 13 May 2026 02:01:41 +0000
Manifest next update: Thu 14 May 2026 02:01:41 +0000
Files and hashes: 1: KCssuXcVO6rR3ZnuwUzgykbiIZ8.crl (hash: DdnHgjJcwa+L1jM0+sMg9p4AVD3K36v5OsTCB2lhqo8=)
2: kwICd-Vs81pcwvCcYZ6zEK19fBw.roa (hash: zy91annv+5k1uAmsY5PH/4r77C+x0cRwRxEdrlowj+8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/0b0b33-98a1-4818-ad18-95f27d3e8abb/1/KCssuXcVO6rR3ZnuwUzgykbiIZ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/0b0b33-98a1-4818-ad18-95f27d3e8abb/1/KCssuXcVO6rR3ZnuwUzgykbiIZ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/KCssuXcVO6rR3ZnuwUzgykbiIZ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 02:01:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:11:81:82:4e:d8:43:33:57:53:4a:00:85:ba:5a:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=282b2cb977153baad1dd99eec14ce0ca46e2219f
Validity
Not Before: May 13 02:01:41 2026 GMT
Not After : May 14 02:01:41 2026 GMT
Subject: CN=7ec84e90a0c092e4ce726a4fbd93cca943688b7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:33:17:c5:00:d0:38:17:cf:70:99:35:08:75:
5c:a4:10:53:5b:d5:97:00:0d:4d:56:c1:e0:77:67:
e4:b5:35:37:c8:49:ef:3c:b5:8c:b6:92:19:d1:60:
a0:a8:04:4c:38:a1:93:c7:0b:f2:55:42:1e:79:7d:
40:85:f7:d4:7d:ee:f1:c6:00:43:85:1c:48:97:f7:
a2:ef:74:96:6c:ee:f5:7a:10:8c:21:17:ce:1a:16:
7d:dc:50:67:80:ec:fa:6c:63:c2:a4:09:2b:7c:3e:
72:84:e0:cb:69:55:e5:8e:6c:a8:28:ce:12:0c:24:
4c:db:2f:c9:c4:d6:16:a4:12:02:70:f7:3e:57:0f:
3e:b9:64:25:ea:95:8e:e4:70:f2:9d:ba:8d:eb:c8:
ec:c3:ab:3e:84:09:17:0b:d8:fa:67:bb:d0:1a:e7:
0f:67:38:3e:29:ad:48:d0:14:25:18:da:a4:f8:6d:
d2:c3:10:da:9f:aa:7c:fb:26:73:13:ad:84:5f:2a:
4d:80:40:ad:5d:18:70:94:c2:18:0e:a8:ff:e5:ba:
7d:6b:a2:aa:ae:46:a0:99:16:9f:2d:fa:4d:30:69:
86:1c:1c:9e:8b:ba:e4:60:0d:5a:da:50:80:9f:54:
99:20:60:fc:0c:94:d6:b7:82:c4:99:8e:a0:c2:c2:
b1:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:C8:4E:90:A0:C0:92:E4:CE:72:6A:4F:BD:93:CC:A9:43:68:8B:7C
X509v3 Authority Key Identifier:
keyid:28:2B:2C:B9:77:15:3B:AA:D1:DD:99:EE:C1:4C:E0:CA:46:E2:21:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KCssuXcVO6rR3ZnuwUzgykbiIZ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/0b0b33-98a1-4818-ad18-95f27d3e8abb/1/KCssuXcVO6rR3ZnuwUzgykbiIZ8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/0b0b33-98a1-4818-ad18-95f27d3e8abb/1/KCssuXcVO6rR3ZnuwUzgykbiIZ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:00:dd:d8:ab:26:4b:99:41:58:f1:b5:eb:24:24:85:65:1a:
5a:f0:65:33:3b:ca:69:4d:6d:62:4c:4b:8e:4d:9b:ae:14:ce:
79:71:f1:7f:08:e7:63:31:71:81:68:62:b5:70:6c:7b:d5:b7:
5c:1c:b9:c1:12:e2:55:65:8c:bb:8f:af:c0:90:c7:1f:2c:a4:
c8:e4:9e:0d:bb:26:a7:5c:68:03:5f:07:03:7e:29:5a:17:88:
61:f4:32:a5:85:b2:3d:9e:73:a5:59:4b:c2:27:c5:80:fd:2d:
fa:e1:d2:cb:2b:99:40:88:20:4d:fe:81:12:84:c0:8f:9b:38:
89:19:e8:18:e5:44:00:0e:a2:1a:24:b5:89:45:04:27:ff:ce:
a5:ab:4b:dc:2f:7d:df:ec:f2:0b:5a:a7:0c:fc:b2:f9:d3:07:
c0:37:05:1c:cf:d3:8d:a6:b5:75:f2:d2:f0:d4:b3:61:f4:5b:
db:7b:ea:15:87:c3:c4:2d:c1:da:90:06:f9:f0:24:fb:e2:e1:
03:44:9c:2a:e8:5a:9d:5b:c8:5b:a9:68:e6:22:35:60:98:b9:
85:b8:d9:69:b5:45:64:9c:4d:25:26:99:03:a4:a2:9c:be:07:
38:46:fe:c5:3b:f0:e8:bf:d0:7e:aa:db:fc:b1:23:8e:c7:05:
fa:2b:d0:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:40:45 2026 by rpki-client