Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/551847-332d-4e27-b47a-1d591bbd4060/1/KcmwQBb28CGDMHwX32MKAonsW7U.mft
File: KcmwQBb28CGDMHwX32MKAonsW7U.mft (raw, json)
Hash identifier: BAp+K9lVvT2qox6tAW2a0ba8p7zH50W20ue4HcnqSXE=
Subject key identifier: 39:D4:87:55:6A:01:7B:65:D8:6A:C0:7B:59:BB:1D:AD:80:A7:9B:C8
Authority key identifier: 29:C9:B0:40:16:F6:F0:21:83:30:7C:17:DF:63:0A:02:89:EC:5B:B5
Certificate issuer: /CN=29c9b04016f6f02183307c17df630a0289ec5bb5
Certificate serial: 019D3865C71A2F53486F91CF231C94FEC0F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KcmwQBb28CGDMHwX32MKAonsW7U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/551847-332d-4e27-b47a-1d591bbd4060/1/KcmwQBb28CGDMHwX32MKAonsW7U.mft
Manifest number: 10F1
Signing time: Sun 29 Mar 2026 07:01:27 +0000
Manifest this update: Sun 29 Mar 2026 07:01:27 +0000
Manifest next update: Mon 30 Mar 2026 07:01:27 +0000
Files and hashes: 1: KcmwQBb28CGDMHwX32MKAonsW7U.crl (hash: j+zumoqX6RF/LeNJ1iotNmQtptykp5Ux+9rgrMry3N8=)
2: hTiJ6cCS_TiS4eI7qxisMIha6WA.roa (hash: RYMk/98nEg7OxXi5y6LpcIy05kfPWnp4XSK+7SVu8ys=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/551847-332d-4e27-b47a-1d591bbd4060/1/KcmwQBb28CGDMHwX32MKAonsW7U.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/551847-332d-4e27-b47a-1d591bbd4060/1/KcmwQBb28CGDMHwX32MKAonsW7U.mft
rsync://rpki.ripe.net/repository/DEFAULT/KcmwQBb28CGDMHwX32MKAonsW7U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:c7:1a:2f:53:48:6f:91:cf:23:1c:94:fe:c0:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29c9b04016f6f02183307c17df630a0289ec5bb5
Validity
Not Before: Mar 29 07:01:27 2026 GMT
Not After : Mar 30 07:01:27 2026 GMT
Subject: CN=39d487556a017b65d86ac07b59bb1dad80a79bc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:18:ed:36:b9:c2:3c:9e:3f:5a:a3:7c:fd:3c:
92:a8:8f:c7:0d:0c:c8:75:04:c7:33:4a:ba:be:76:
1c:26:58:dc:ed:1b:39:64:20:f6:1d:95:79:bc:9a:
f3:e0:cd:c5:c7:fa:d9:81:2a:ca:74:b5:b0:91:e5:
98:59:1d:5a:49:4b:b2:ac:85:02:14:8a:3c:1e:cd:
be:f5:49:e8:57:3b:47:4a:5f:cf:1f:8d:76:08:b9:
3f:6f:30:d0:d3:d2:f0:b1:19:49:22:c4:40:8c:41:
60:f6:c6:3b:db:e5:3c:27:88:a3:bb:e0:7e:63:d9:
7e:9b:f0:aa:b7:60:de:2e:f5:e3:42:1d:9e:fe:59:
af:17:14:d7:9c:2d:d7:2a:53:df:8a:ad:98:0f:19:
48:44:9a:e7:6b:c9:6e:6b:7b:e3:d6:f7:2a:3a:92:
99:2c:92:8a:0c:13:9e:2b:be:dd:d4:c7:60:1a:d2:
15:1e:10:fc:57:63:e7:36:52:14:aa:22:9b:ee:8c:
6a:72:08:32:c9:eb:b6:cb:4a:1c:9e:b3:04:94:35:
dc:f7:8b:a8:87:da:3c:2f:cd:4d:e1:23:96:3a:c2:
c8:8b:46:52:ba:7d:d5:ea:16:82:92:75:2e:9b:f6:
d0:66:c9:66:91:79:47:f5:a9:cb:eb:94:6c:31:13:
ec:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:D4:87:55:6A:01:7B:65:D8:6A:C0:7B:59:BB:1D:AD:80:A7:9B:C8
X509v3 Authority Key Identifier:
keyid:29:C9:B0:40:16:F6:F0:21:83:30:7C:17:DF:63:0A:02:89:EC:5B:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KcmwQBb28CGDMHwX32MKAonsW7U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/551847-332d-4e27-b47a-1d591bbd4060/1/KcmwQBb28CGDMHwX32MKAonsW7U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/551847-332d-4e27-b47a-1d591bbd4060/1/KcmwQBb28CGDMHwX32MKAonsW7U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:80:f3:b3:b6:94:ed:6d:a7:a3:73:6e:89:84:91:23:ea:2a:
90:d1:b3:96:92:65:33:62:4d:a8:e9:86:a0:0a:21:05:70:ea:
19:5b:20:c1:d3:f1:b3:f9:80:16:c6:1e:c3:6d:f2:14:57:57:
22:ee:4a:59:01:89:76:44:64:5e:fb:99:43:e5:8b:ce:d4:12:
31:be:8f:2a:71:ee:09:42:0d:cf:14:05:22:20:b0:19:6e:87:
47:c7:cd:3c:ce:cb:02:50:5b:c4:a4:bf:95:21:1c:84:a3:aa:
63:cf:71:78:7d:16:43:55:98:b7:5e:30:ee:be:36:6f:f4:3b:
dd:e3:78:e7:3d:2f:d7:00:26:75:bb:5c:d4:47:12:cf:27:45:
41:87:86:95:f9:92:36:72:df:43:1b:ba:77:c2:78:5a:18:c0:
60:16:4b:d6:75:38:87:46:8a:99:c2:ce:2e:b2:dc:7a:eb:8a:
63:f8:99:98:bc:bf:3d:1c:5c:b5:a6:94:2a:b0:a8:77:91:49:
d7:86:2a:4d:5d:c7:f5:a0:fc:e3:3d:39:e6:0d:64:8c:cd:0b:
e3:23:ef:83:11:f2:5f:ed:b2:87:fc:1b:a5:a1:59:78:9f:4f:
f8:52:22:8e:72:ae:02:cb:77:4d:b2:44:40:10:e2:1e:19:ee:
08:fd:44:39
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04ZccaL1NIb5HPIxyU/sD0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI5YzliMDQwMTZmNmYwMjE4MzMwN2MxN2RmNjMwYTAyODll
YzViYjUwHhcNMjYwMzI5MDcwMTI3WhcNMjYwMzMwMDcwMTI3WjAzMTEwLwYDVQQD
EygzOWQ0ODc1NTZhMDE3YjY1ZDg2YWMwN2I1OWJiMWRhZDgwYTc5YmM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsxjtNrnCPJ4/WqN8/TySqI/HDQzI
dQTHM0q6vnYcJljc7Rs5ZCD2HZV5vJrz4M3Fx/rZgSrKdLWwkeWYWR1aSUuyrIUC
FIo8Hs2+9UnoVztHSl/PH412CLk/bzDQ09LwsRlJIsRAjEFg9sY72+U8J4iju+B+
Y9l+m/Cqt2DeLvXjQh2e/lmvFxTXnC3XKlPfiq2YDxlIRJrna8lua3vj1vcqOpKZ
LJKKDBOeK77d1MdgGtIVHhD8V2PnNlIUqiKb7oxqcggyyeu2y0ocnrMElDXc94uo
h9o8L81N4SOWOsLIi0ZSun3V6haCknUum/bQZslmkXlH9anL65RsMRPsFwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDnUh1VqAXtl2GrAe1m7Ha2Ap5vIMB8GA1UdIwQY
MBaAFCnJsEAW9vAhgzB8F99jCgKJ7Fu1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS2Ntd1FCYjI4Q0dETUh3WDMyTUtBb25zVzdVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy81NTE4NDctMzMyZC00ZTI3LWI0N2Et
MWQ1OTFiYmQ0MDYwLzEvS2Ntd1FCYjI4Q0dETUh3WDMyTUtBb25zVzdVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYy81NTE4NDctMzMyZC00ZTI3LWI0N2EtMWQ1OTFiYmQ0MDYw
LzEvS2Ntd1FCYjI4Q0dETUh3WDMyTUtBb25zVzdVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVYDzs7aU
7W2no3NuiYSRI+oqkNGzlpJlM2JNqOmGoAohBXDqGVsgwdPxs/mAFsYew23yFFdX
Iu5KWQGJdkRkXvuZQ+WLztQSMb6PKnHuCUINzxQFIiCwGW6HR8fNPM7LAlBbxKS/
lSEchKOqY89xeH0WQ1WYt14w7r42b/Q73eN45z0v1wAmdbtc1EcSzydFQYeGlfmS
NnLfQxu6d8J4WhjAYBZL1nU4h0aKmcLOLrLceuuKY/iZmLy/PRxctaaUKrCod5FJ
14YqTV3H9aD84z055g1kjM0L4yPvgxHyX+2yh/wbpaFZeJ9P+FIijnKuAst3TbJE
QBDiHhnuCP1EOQ==
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:31:04 2026 by rpki-client