Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/551847-332d-4e27-b47a-1d591bbd4060/1/KcmwQBb28CGDMHwX32MKAonsW7U.mft
File: KcmwQBb28CGDMHwX32MKAonsW7U.mft (raw, json)
Hash identifier: Cek/x5h8xLvbU4SoUzUPcj0hKDMBDtfr1MTt2f9PnaU=
Subject key identifier: 6D:0A:C4:69:70:D3:02:9D:86:34:AA:D4:F2:33:03:28:82:37:55:AD
Authority key identifier: 29:C9:B0:40:16:F6:F0:21:83:30:7C:17:DF:63:0A:02:89:EC:5B:B5
Certificate issuer: /CN=29c9b04016f6f02183307c17df630a0289ec5bb5
Certificate serial: 019EB8B404B31248F2DD571108CF423841E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KcmwQBb28CGDMHwX32MKAonsW7U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/551847-332d-4e27-b47a-1d591bbd4060/1/KcmwQBb28CGDMHwX32MKAonsW7U.mft
Manifest number: 11B8
Signing time: Thu 11 Jun 2026 22:01:05 +0000
Manifest this update: Thu 11 Jun 2026 22:01:05 +0000
Manifest next update: Fri 12 Jun 2026 22:01:05 +0000
Files and hashes: 1: KcmwQBb28CGDMHwX32MKAonsW7U.crl (hash: I6yrlKAtB2U95wsP8DR4Y+VAZ+gDJtXSoPKIC9zD31I=)
2: hTiJ6cCS_TiS4eI7qxisMIha6WA.roa (hash: RYMk/98nEg7OxXi5y6LpcIy05kfPWnp4XSK+7SVu8ys=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/551847-332d-4e27-b47a-1d591bbd4060/1/KcmwQBb28CGDMHwX32MKAonsW7U.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/551847-332d-4e27-b47a-1d591bbd4060/1/KcmwQBb28CGDMHwX32MKAonsW7U.mft
rsync://rpki.ripe.net/repository/DEFAULT/KcmwQBb28CGDMHwX32MKAonsW7U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 20:26:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b8:b4:04:b3:12:48:f2:dd:57:11:08:cf:42:38:41:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29c9b04016f6f02183307c17df630a0289ec5bb5
Validity
Not Before: Jun 11 22:01:05 2026 GMT
Not After : Jun 12 22:01:05 2026 GMT
Subject: CN=6d0ac46970d3029d8634aad4f2330328823755ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:d5:ac:b0:7f:e3:99:a1:b4:eb:b6:17:72:85:
98:17:5b:7d:59:88:b3:bb:46:31:ec:eb:c1:af:78:
27:97:09:88:11:f9:c8:1c:73:e7:c3:d1:64:98:76:
1e:c3:71:60:a6:0d:33:68:31:0b:75:18:d1:de:d8:
a6:39:a3:2c:e9:ba:77:09:05:6b:f4:f5:b1:ae:4b:
5f:04:e1:e8:56:4f:ed:36:4e:31:37:ac:48:3d:52:
24:ce:94:b2:73:22:29:b4:a2:1c:81:33:05:f1:93:
62:d7:14:4f:22:ad:90:9c:e1:96:64:30:60:ab:a2:
16:66:ef:7e:29:3c:c3:96:5a:96:2c:82:7c:1f:a8:
9d:aa:22:44:f7:66:84:d9:00:a1:e4:a3:ef:93:49:
5f:ea:bb:21:83:2b:04:f4:97:4b:86:28:31:a0:52:
f4:99:c6:6f:31:aa:f0:e6:e9:0f:c7:22:7d:14:d7:
21:03:60:7b:41:4a:85:66:c7:4b:e5:3e:20:52:ed:
00:bb:c3:51:e8:36:83:07:6f:42:f1:bf:df:45:8d:
01:ad:09:38:b0:58:b8:13:b0:cf:d9:9c:31:d0:a4:
5d:4b:6d:c8:44:09:7b:c4:4f:d6:1f:72:d0:23:60:
63:17:11:d0:34:9b:7c:c1:26:70:54:fd:d0:9c:a3:
d5:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:0A:C4:69:70:D3:02:9D:86:34:AA:D4:F2:33:03:28:82:37:55:AD
X509v3 Authority Key Identifier:
keyid:29:C9:B0:40:16:F6:F0:21:83:30:7C:17:DF:63:0A:02:89:EC:5B:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KcmwQBb28CGDMHwX32MKAonsW7U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/551847-332d-4e27-b47a-1d591bbd4060/1/KcmwQBb28CGDMHwX32MKAonsW7U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/551847-332d-4e27-b47a-1d591bbd4060/1/KcmwQBb28CGDMHwX32MKAonsW7U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:37:c8:76:d7:eb:d8:23:3d:61:32:7d:cf:63:dd:ab:05:4a:
c4:82:81:f9:b9:8c:b8:a7:e4:42:76:bd:e0:10:b9:df:f3:9c:
f1:ab:ad:9f:3d:76:ff:cb:a2:59:d6:0c:b3:49:af:de:32:ea:
7a:bd:eb:92:12:ca:f1:5e:e6:67:5b:cc:5e:17:d0:da:8e:b6:
be:b6:b8:c7:f7:5f:d5:33:1e:00:e1:0e:c9:9e:7b:c3:2e:85:
d8:ac:76:ed:f8:57:1f:3d:37:f0:a8:81:e1:ec:24:a1:10:2c:
58:0f:26:07:21:d4:c2:1d:ab:d2:f6:26:75:a2:ea:0f:24:91:
06:c7:0c:4d:10:53:ab:4a:9b:77:19:1c:40:c5:6a:4f:0b:6f:
2d:e1:62:f5:bc:e7:a6:24:04:65:d2:22:b1:f7:96:52:35:20:
36:47:7b:a3:b9:bd:70:db:7b:00:6f:90:a5:89:3b:6b:8b:71:
f2:7f:75:49:bd:6a:b1:70:18:d4:fe:17:ec:53:d6:9c:5e:b1:
4d:c3:4c:88:e1:4e:cc:01:3f:30:f7:7b:12:d4:17:69:b7:18:
fa:73:8e:3a:ce:1c:a0:4b:02:45:1f:8f:95:82:dd:91:65:e9:
3a:01:8d:ff:d8:3b:f3:fd:57:eb:6b:d1:8c:fe:4b:11:18:48:
75:55:76:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 23:53:41 2026 by rpki-client