Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/0b0b33-98a1-4818-ad18-95f27d3e8abb/1/KCssuXcVO6rR3ZnuwUzgykbiIZ8.mft
File: KCssuXcVO6rR3ZnuwUzgykbiIZ8.mft (raw, json)
Hash identifier: OeEZYmHzU3LJHPrNn0dowrur5Ik8ME9SlDtDVGD1ueg=
Subject key identifier: D3:BD:43:D6:24:2C:F6:45:B3:DB:52:36:6A:AE:B0:6F:C2:E1:61:13
Authority key identifier: 28:2B:2C:B9:77:15:3B:AA:D1:DD:99:EE:C1:4C:E0:CA:46:E2:21:9F
Certificate issuer: /CN=282b2cb977153baad1dd99eec14ce0ca46e2219f
Certificate serial: 019F42ACDD3602AEEBEEF0133BF927125220
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KCssuXcVO6rR3ZnuwUzgykbiIZ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/0b0b33-98a1-4818-ad18-95f27d3e8abb/1/KCssuXcVO6rR3ZnuwUzgykbiIZ8.mft
Manifest number: 0B74
Signing time: Wed 08 Jul 2026 17:00:52 +0000
Manifest this update: Wed 08 Jul 2026 17:00:52 +0000
Manifest next update: Thu 09 Jul 2026 17:00:52 +0000
Files and hashes: 1: KCssuXcVO6rR3ZnuwUzgykbiIZ8.crl (hash: eGra3SFdQn8xFxgjancKrinVVmW2LXvvNJ9V5pHhMew=)
2: kwICd-Vs81pcwvCcYZ6zEK19fBw.roa (hash: zy91annv+5k1uAmsY5PH/4r77C+x0cRwRxEdrlowj+8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/0b0b33-98a1-4818-ad18-95f27d3e8abb/1/KCssuXcVO6rR3ZnuwUzgykbiIZ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/0b0b33-98a1-4818-ad18-95f27d3e8abb/1/KCssuXcVO6rR3ZnuwUzgykbiIZ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/KCssuXcVO6rR3ZnuwUzgykbiIZ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 Jul 2026 13:45:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:42:ac:dd:36:02:ae:eb:ee:f0:13:3b:f9:27:12:52:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=282b2cb977153baad1dd99eec14ce0ca46e2219f
Validity
Not Before: Jul 8 17:00:52 2026 GMT
Not After : Jul 9 17:00:52 2026 GMT
Subject: CN=d3bd43d6242cf645b3db52366aaeb06fc2e16113
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:21:8c:6f:b1:c5:a0:1c:0a:20:d6:dd:f1:62:
79:11:49:22:f8:50:b2:ca:47:1a:9a:0d:6c:93:b2:
38:08:76:8e:ac:71:94:ee:d3:45:4c:59:fe:26:6d:
c5:c6:ff:80:38:b9:d6:53:72:74:5e:30:87:89:a4:
bd:86:d2:79:d8:a8:21:ba:98:e3:f6:dd:22:02:27:
c1:92:8c:ca:2c:29:e5:82:b9:2c:f3:95:14:f2:fe:
51:57:cb:4f:f5:70:7f:27:f0:c4:7f:43:60:2f:a2:
a0:1e:75:be:fb:51:b2:cd:d9:4c:6c:cf:19:f9:e8:
ff:8a:0a:bf:95:94:fb:e4:eb:8d:04:e9:f0:e0:5e:
0c:f3:94:7c:c0:dc:20:d6:ca:0e:1e:52:a5:02:4f:
be:ce:12:d4:ae:f0:6c:02:38:17:3c:de:36:2b:71:
1c:36:23:88:cd:2c:f0:a6:b1:37:98:1a:2f:bc:ee:
54:68:ff:75:bb:b7:12:f5:d9:be:45:ff:08:45:a8:
9e:fd:e9:54:12:e5:4e:1e:77:35:3c:cd:b4:eb:a6:
a5:a2:af:7c:a1:e0:85:6e:7e:31:35:5a:34:3d:b3:
3d:75:32:43:6f:65:96:cf:42:05:42:dc:c1:3a:df:
03:b8:1b:0d:90:0a:9b:ad:25:57:e6:87:d8:d0:99:
0c:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:BD:43:D6:24:2C:F6:45:B3:DB:52:36:6A:AE:B0:6F:C2:E1:61:13
X509v3 Authority Key Identifier:
keyid:28:2B:2C:B9:77:15:3B:AA:D1:DD:99:EE:C1:4C:E0:CA:46:E2:21:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KCssuXcVO6rR3ZnuwUzgykbiIZ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/0b0b33-98a1-4818-ad18-95f27d3e8abb/1/KCssuXcVO6rR3ZnuwUzgykbiIZ8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/0b0b33-98a1-4818-ad18-95f27d3e8abb/1/KCssuXcVO6rR3ZnuwUzgykbiIZ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:22:68:6d:d1:35:e0:66:76:4c:fb:ca:5b:d7:1a:9a:50:ed:
b7:5c:81:ee:2f:5d:6f:6d:ca:d4:b6:f0:26:94:ae:f0:50:56:
19:f6:79:06:11:a7:b0:ca:e0:be:3f:61:f5:b8:44:61:ce:35:
37:45:31:d1:fa:16:4f:d0:1c:fb:20:ae:ce:14:c5:b7:bc:c4:
f0:8d:17:7f:4e:43:51:ea:a2:c0:a4:db:69:9a:d8:83:3a:64:
3b:63:06:10:c4:77:f4:a2:de:90:c6:6e:13:05:75:00:73:5d:
d7:72:dc:a3:74:b1:ad:c5:66:43:b3:9f:31:4c:2e:f8:ae:58:
6d:e3:2a:20:ba:48:54:c7:a4:0f:e6:ca:f9:3a:cb:76:c3:8a:
33:e1:ac:90:3b:02:01:11:d4:39:85:fc:6c:14:24:87:27:dc:
4c:06:28:06:8c:04:3a:eb:54:b8:0e:ea:41:d9:81:32:07:f6:
83:51:df:20:a6:35:b6:d9:12:8f:98:ab:a5:cf:c3:00:ee:f0:
6c:f1:ad:f2:4e:75:3b:07:08:5c:07:78:8d:1b:f0:b9:8f:6e:
ae:7d:1f:06:84:c5:16:67:f4:f4:f2:a6:78:41:20:a3:2f:71:
3b:3d:a4:ab:f2:06:fc:96:80:df:f2:e1:0e:14:b3:07:7b:bc:
b3:fc:7f:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 19:40:02 2026 by rpki-client