Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/0b0b33-98a1-4818-ad18-95f27d3e8abb/1/KCssuXcVO6rR3ZnuwUzgykbiIZ8.mft
File: KCssuXcVO6rR3ZnuwUzgykbiIZ8.mft (raw, json)
Hash identifier: +JjuGx/7vead1P8E3BxqnJHKmzr9C6s2tO0/KpT2GgQ=
Subject key identifier: 54:44:86:5D:4C:28:26:82:ED:DF:8F:92:37:F3:FB:C1:3D:0E:23:4A
Authority key identifier: 28:2B:2C:B9:77:15:3B:AA:D1:DD:99:EE:C1:4C:E0:CA:46:E2:21:9F
Certificate issuer: /CN=282b2cb977153baad1dd99eec14ce0ca46e2219f
Certificate serial: 019D394178FE74DA95FDBC4AABF85B1D07D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KCssuXcVO6rR3ZnuwUzgykbiIZ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/0b0b33-98a1-4818-ad18-95f27d3e8abb/1/KCssuXcVO6rR3ZnuwUzgykbiIZ8.mft
Manifest number: 0A66
Signing time: Sun 29 Mar 2026 11:01:24 +0000
Manifest this update: Sun 29 Mar 2026 11:01:24 +0000
Manifest next update: Mon 30 Mar 2026 11:01:24 +0000
Files and hashes: 1: KCssuXcVO6rR3ZnuwUzgykbiIZ8.crl (hash: aWu6Bo4gQACDOWKo5+r2EcEp3G9ixwReLigjc+vCcEc=)
2: kwICd-Vs81pcwvCcYZ6zEK19fBw.roa (hash: zy91annv+5k1uAmsY5PH/4r77C+x0cRwRxEdrlowj+8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/0b0b33-98a1-4818-ad18-95f27d3e8abb/1/KCssuXcVO6rR3ZnuwUzgykbiIZ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/0b0b33-98a1-4818-ad18-95f27d3e8abb/1/KCssuXcVO6rR3ZnuwUzgykbiIZ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/KCssuXcVO6rR3ZnuwUzgykbiIZ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:41:78:fe:74:da:95:fd:bc:4a:ab:f8:5b:1d:07:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=282b2cb977153baad1dd99eec14ce0ca46e2219f
Validity
Not Before: Mar 29 11:01:24 2026 GMT
Not After : Mar 30 11:01:24 2026 GMT
Subject: CN=5444865d4c282682eddf8f9237f3fbc13d0e234a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:0b:75:3b:19:d7:a5:ee:17:8c:c0:a4:df:9b:
f5:bc:54:1c:4d:00:4d:8b:cf:1a:a2:24:2d:ec:7b:
35:d3:ee:09:fd:21:e5:9f:c9:b4:f0:5a:a3:13:33:
0e:f4:00:8a:32:2d:e0:79:f3:15:69:e5:ce:e2:9f:
9c:47:a5:12:22:97:2d:56:79:6c:16:87:f4:c3:46:
ab:8f:6d:dc:87:39:09:d3:ab:1a:aa:46:df:38:72:
20:12:43:56:5a:df:42:47:1d:6c:6d:b5:cd:e5:f4:
12:02:13:44:5d:b5:b6:2e:32:bc:86:a2:9e:d4:df:
17:af:bd:7c:5b:dc:fa:e3:cf:86:f3:dd:9e:21:f1:
0b:4f:5c:58:e8:7b:8b:88:08:8b:35:4c:58:c2:5a:
e6:9c:42:ce:ce:dc:0f:99:c3:31:70:3b:e4:f5:03:
5e:f2:df:60:68:5e:80:85:c8:d4:05:7e:b8:bb:b7:
99:c5:17:20:90:8f:1e:4c:dd:35:bf:31:7f:d1:e1:
97:e5:ee:1c:cf:13:da:94:65:06:21:03:16:95:a4:
15:63:0d:9c:24:23:9f:ba:e5:81:c2:56:67:8a:3e:
88:b0:c6:72:61:9b:67:fb:96:1a:c9:53:1d:59:03:
1e:e1:c9:38:0e:d9:86:ee:a4:e8:12:11:67:a8:2d:
68:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:44:86:5D:4C:28:26:82:ED:DF:8F:92:37:F3:FB:C1:3D:0E:23:4A
X509v3 Authority Key Identifier:
keyid:28:2B:2C:B9:77:15:3B:AA:D1:DD:99:EE:C1:4C:E0:CA:46:E2:21:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KCssuXcVO6rR3ZnuwUzgykbiIZ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/0b0b33-98a1-4818-ad18-95f27d3e8abb/1/KCssuXcVO6rR3ZnuwUzgykbiIZ8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/0b0b33-98a1-4818-ad18-95f27d3e8abb/1/KCssuXcVO6rR3ZnuwUzgykbiIZ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:22:e8:ff:fa:38:fb:13:38:99:77:39:bb:8c:8b:b6:5c:8a:
e8:24:d7:28:a7:ab:e6:61:4a:71:5a:1f:83:79:42:c8:3b:2a:
cb:bd:ae:16:15:7f:e0:01:62:4d:ad:6d:64:d9:92:ad:6d:36:
92:83:1f:cd:c5:4c:40:ff:d1:09:68:a1:05:bc:eb:0d:df:44:
7a:be:fe:c3:42:7c:e7:76:f7:41:83:62:d0:c7:ea:ef:f3:df:
1a:a6:2a:16:db:66:3c:ef:fb:4f:e7:40:1f:19:be:d5:7a:20:
44:3e:b9:d6:9c:8b:91:bb:2e:d3:15:41:9a:b7:ea:80:6b:ae:
c1:cf:bc:3f:b1:76:19:d8:92:c3:cb:97:22:fa:ba:74:c2:6f:
1f:79:9b:74:fa:ce:42:f8:a2:df:66:2d:b2:23:60:18:85:a9:
33:e1:56:cc:0d:1e:09:15:81:67:a4:c8:95:fd:3c:e5:a6:f6:
0a:ce:d9:1b:f1:94:cb:54:6c:73:88:9e:5c:ca:0b:79:04:f5:
6f:fc:a8:d9:ab:85:92:6b:61:d7:9d:30:63:58:4e:f9:d6:79:
24:a9:98:52:ff:94:a2:1e:bf:1c:fe:6e:9b:bf:2d:4b:69:41:
7e:ec:57:8a:4f:12:c7:42:53:54:4e:2a:12:14:ac:30:a4:3d:
23:3d:d9:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:47:21 2026 by rpki-client