Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/0b0b33-98a1-4818-ad18-95f27d3e8abb/1/KCssuXcVO6rR3ZnuwUzgykbiIZ8.mft
File: KCssuXcVO6rR3ZnuwUzgykbiIZ8.mft (raw, json)
Hash identifier: RmI/OU6OzT8JsemowP5mVWPOr1nP6MzJE+rFfc0Qwjk=
Subject key identifier: D0:77:2A:87:C5:49:A4:5D:9E:2C:84:24:99:8E:61:01:7E:B1:D1:05
Authority key identifier: 28:2B:2C:B9:77:15:3B:AA:D1:DD:99:EE:C1:4C:E0:CA:46:E2:21:9F
Certificate issuer: /CN=282b2cb977153baad1dd99eec14ce0ca46e2219f
Certificate serial: 019E57131B53B046EAF81AF312BB2D93C1BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KCssuXcVO6rR3ZnuwUzgykbiIZ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/0b0b33-98a1-4818-ad18-95f27d3e8abb/1/KCssuXcVO6rR3ZnuwUzgykbiIZ8.mft
Manifest number: 0AFA
Signing time: Sat 23 May 2026 23:02:10 +0000
Manifest this update: Sat 23 May 2026 23:02:10 +0000
Manifest next update: Sun 24 May 2026 23:02:10 +0000
Files and hashes: 1: KCssuXcVO6rR3ZnuwUzgykbiIZ8.crl (hash: 4V3MBF/O6BWOK0CD8uYEUpVTwIgheJlO8Zr6BEQPfUM=)
2: kwICd-Vs81pcwvCcYZ6zEK19fBw.roa (hash: zy91annv+5k1uAmsY5PH/4r77C+x0cRwRxEdrlowj+8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/0b0b33-98a1-4818-ad18-95f27d3e8abb/1/KCssuXcVO6rR3ZnuwUzgykbiIZ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/0b0b33-98a1-4818-ad18-95f27d3e8abb/1/KCssuXcVO6rR3ZnuwUzgykbiIZ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/KCssuXcVO6rR3ZnuwUzgykbiIZ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 May 2026 20:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:57:13:1b:53:b0:46:ea:f8:1a:f3:12:bb:2d:93:c1:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=282b2cb977153baad1dd99eec14ce0ca46e2219f
Validity
Not Before: May 23 23:02:10 2026 GMT
Not After : May 24 23:02:10 2026 GMT
Subject: CN=d0772a87c549a45d9e2c8424998e61017eb1d105
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:cf:a4:04:4e:20:61:d2:71:67:cd:b6:d3:dd:
b8:82:1e:c8:dc:ac:cc:b1:d1:3c:7e:43:7a:06:c2:
59:c3:c6:d2:16:17:7a:75:20:00:13:96:b0:65:95:
67:6a:ee:50:4f:a5:b1:54:33:6d:e5:fd:2c:c4:04:
2c:27:8a:2e:00:62:e1:c8:84:8c:df:9c:9b:62:98:
f8:b8:5b:0b:88:f8:48:b4:bf:95:b0:a2:c7:d8:45:
f9:d9:38:1f:71:ef:9d:35:9e:10:a3:d2:4e:d8:3e:
8d:b6:09:12:3f:e5:c0:05:a7:93:b4:1d:1c:09:66:
92:20:ee:8a:a5:ea:d5:5e:54:2b:3d:80:66:9c:a9:
b7:b6:05:21:1e:e4:fe:b0:2f:ef:f9:12:9c:26:49:
ff:2b:d0:ae:4e:76:07:91:c5:be:3f:c3:62:12:79:
76:42:62:7e:2c:a8:d4:36:87:78:c4:ff:04:49:f1:
40:28:d9:dd:38:0d:dc:d5:63:ab:b5:f8:e7:81:54:
ce:b7:d9:d3:cf:39:61:97:df:7b:cf:96:ae:c5:55:
a1:0c:00:f2:f7:d7:52:f5:01:3b:b3:80:e3:30:16:
9a:bd:d4:74:86:e8:22:42:2d:61:23:74:c8:f2:fa:
ec:f2:7e:b8:6a:b9:2d:93:2b:54:8b:47:ce:8f:0b:
37:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:77:2A:87:C5:49:A4:5D:9E:2C:84:24:99:8E:61:01:7E:B1:D1:05
X509v3 Authority Key Identifier:
keyid:28:2B:2C:B9:77:15:3B:AA:D1:DD:99:EE:C1:4C:E0:CA:46:E2:21:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KCssuXcVO6rR3ZnuwUzgykbiIZ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/0b0b33-98a1-4818-ad18-95f27d3e8abb/1/KCssuXcVO6rR3ZnuwUzgykbiIZ8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/0b0b33-98a1-4818-ad18-95f27d3e8abb/1/KCssuXcVO6rR3ZnuwUzgykbiIZ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:9d:a5:49:f1:92:f9:6d:a7:22:3f:c4:64:15:d6:71:27:22:
6d:e0:a7:0f:85:48:07:78:ba:72:b0:28:66:d2:49:98:e2:15:
73:28:9b:ce:4f:27:fd:2e:95:8b:06:14:e0:d2:a2:0d:27:67:
a3:83:4d:5c:a2:2c:d4:d6:ca:8e:55:c8:ad:15:20:28:4d:7c:
db:57:e3:d5:b3:83:24:cd:77:16:8e:f4:c0:5e:ea:ca:8e:81:
98:44:35:12:26:4f:46:11:02:5f:9f:58:41:c6:09:7b:bb:40:
aa:28:9a:7d:17:ea:01:64:85:b4:e9:8f:58:16:81:4d:39:a1:
22:94:9f:aa:12:29:54:85:be:25:c7:e8:49:68:17:6c:ae:40:
63:f1:3c:37:c9:cd:7a:38:78:79:e7:1e:1b:b0:b5:3b:a1:ab:
6f:70:6d:96:66:55:29:cd:c2:61:64:33:24:e6:b6:ec:77:0f:
df:f0:14:2b:47:de:7c:7f:7a:24:81:b2:0e:7d:c4:b9:d2:ff:
58:8a:2a:06:2d:38:1c:15:1c:d1:7d:fd:3a:e3:de:17:ba:8c:
51:8b:87:be:01:74:58:7c:18:c0:d7:bd:ce:dd:4d:0f:8e:2d:
81:f8:b8:e3:ec:42:97:b3:90:a4:95:b9:63:7a:15:c6:cc:d5:
0a:04:7d:42
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ5XExtTsEbq+BrzErstk8G+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI4MmIyY2I5NzcxNTNiYWFkMWRkOTllZWMxNGNlMGNhNDZl
MjIxOWYwHhcNMjYwNTIzMjMwMjEwWhcNMjYwNTI0MjMwMjEwWjAzMTEwLwYDVQQD
EyhkMDc3MmE4N2M1NDlhNDVkOWUyYzg0MjQ5OThlNjEwMTdlYjFkMTA1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0c+kBE4gYdJxZ8220924gh7I3KzM
sdE8fkN6BsJZw8bSFhd6dSAAE5awZZVnau5QT6WxVDNt5f0sxAQsJ4ouAGLhyISM
35ybYpj4uFsLiPhItL+VsKLH2EX52Tgfce+dNZ4Qo9JO2D6NtgkSP+XABaeTtB0c
CWaSIO6KperVXlQrPYBmnKm3tgUhHuT+sC/v+RKcJkn/K9CuTnYHkcW+P8NiEnl2
QmJ+LKjUNod4xP8ESfFAKNndOA3c1WOrtfjngVTOt9nTzzlhl997z5auxVWhDADy
99dS9QE7s4DjMBaavdR0hugiQi1hI3TI8vrs8n64arktkytUi0fOjws37wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNB3KofFSaRdniyEJJmOYQF+sdEFMB8GA1UdIwQY
MBaAFCgrLLl3FTuq0d2Z7sFM4MpG4iGfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS0Nzc3VYY1ZPNnJSM1pudXdVemd5a2JpSVo4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy8wYjBiMzMtOThhMS00ODE4LWFkMTgt
OTVmMjdkM2U4YWJiLzEvS0Nzc3VYY1ZPNnJSM1pudXdVemd5a2JpSVo4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYy8wYjBiMzMtOThhMS00ODE4LWFkMTgtOTVmMjdkM2U4YWJi
LzEvS0Nzc3VYY1ZPNnJSM1pudXdVemd5a2JpSVo4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPZ2lSfGS
+W2nIj/EZBXWcScibeCnD4VIB3i6crAoZtJJmOIVcyibzk8n/S6ViwYU4NKiDSdn
o4NNXKIs1NbKjlXIrRUgKE1821fj1bODJM13Fo70wF7qyo6BmEQ1EiZPRhECX59Y
QcYJe7tAqiiafRfqAWSFtOmPWBaBTTmhIpSfqhIpVIW+JcfoSWgXbK5AY/E8N8nN
ejh4eeceG7C1O6Grb3BtlmZVKc3CYWQzJOa27HcP3/AUK0fefH96JIGyDn3EudL/
WIoqBi04HBUc0X39OuPeF7qMUYuHvgF0WHwYwNe9zt1ND44tgfi44+xCl7OQpJW5
Y3oVxszVCgR9Qg==
-----END CERTIFICATE-----
Generated at Sun May 24 04:38:14 2026 by rpki-client