Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/551847-332d-4e27-b47a-1d591bbd4060/1/KcmwQBb28CGDMHwX32MKAonsW7U.mft
File: KcmwQBb28CGDMHwX32MKAonsW7U.mft (raw, json)
Hash identifier: w53Nu3zxrLkoREu2DLlS5eg9dBGHihdq9IwUsoYP9Xc=
Subject key identifier: C2:40:19:C5:60:E0:10:09:8E:3A:45:6E:28:99:95:9F:CC:95:50:F2
Authority key identifier: 29:C9:B0:40:16:F6:F0:21:83:30:7C:17:DF:63:0A:02:89:EC:5B:B5
Certificate issuer: /CN=29c9b04016f6f02183307c17df630a0289ec5bb5
Certificate serial: 019EC06E471B109F0F836A5174062D00034D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KcmwQBb28CGDMHwX32MKAonsW7U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/551847-332d-4e27-b47a-1d591bbd4060/1/KcmwQBb28CGDMHwX32MKAonsW7U.mft
Manifest number: 11BC
Signing time: Sat 13 Jun 2026 10:01:53 +0000
Manifest this update: Sat 13 Jun 2026 10:01:53 +0000
Manifest next update: Sun 14 Jun 2026 10:01:53 +0000
Files and hashes: 1: KcmwQBb28CGDMHwX32MKAonsW7U.crl (hash: D4fxH6yvmLeOXmIBXujMzs5fnOUAcHqWfHRmUZhoP3M=)
2: hTiJ6cCS_TiS4eI7qxisMIha6WA.roa (hash: RYMk/98nEg7OxXi5y6LpcIy05kfPWnp4XSK+7SVu8ys=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/551847-332d-4e27-b47a-1d591bbd4060/1/KcmwQBb28CGDMHwX32MKAonsW7U.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/551847-332d-4e27-b47a-1d591bbd4060/1/KcmwQBb28CGDMHwX32MKAonsW7U.mft
rsync://rpki.ripe.net/repository/DEFAULT/KcmwQBb28CGDMHwX32MKAonsW7U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c0:6e:47:1b:10:9f:0f:83:6a:51:74:06:2d:00:03:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29c9b04016f6f02183307c17df630a0289ec5bb5
Validity
Not Before: Jun 13 10:01:53 2026 GMT
Not After : Jun 14 10:01:53 2026 GMT
Subject: CN=c24019c560e010098e3a456e2899959fcc9550f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:a7:f7:84:ce:c7:fc:e4:06:d6:03:13:a0:ea:
4d:dd:55:77:f9:9a:5d:99:b4:6f:ed:28:45:d2:e7:
04:44:ff:ed:28:b4:41:b0:de:98:fb:b7:69:e6:a0:
b7:37:d7:91:34:4e:8c:a9:2f:c5:e8:46:25:be:0a:
e3:ef:ba:aa:8a:38:4c:6a:ca:a1:e5:32:aa:b7:2f:
99:5f:3e:e8:54:d9:8e:dc:7d:97:58:79:6a:8e:e9:
61:2a:6e:ad:7e:7c:76:d9:75:36:5f:71:12:e2:53:
f4:77:22:a5:3f:d9:b9:a1:cc:f8:0d:69:21:e6:5c:
bd:7d:b5:da:0e:9f:92:3c:9d:c9:cf:e5:4f:9f:93:
cd:c9:88:1f:57:fb:e6:21:88:e4:25:37:27:58:ce:
94:63:f2:e2:d3:9f:dc:e3:b7:9b:e4:01:11:91:6a:
f7:0f:7b:6f:a2:0b:75:4f:eb:19:7e:a3:2f:7f:21:
35:81:7f:f4:0c:08:48:d7:51:c7:44:31:87:f4:29:
9b:ca:f5:6e:33:ed:3a:a0:4d:a4:2b:e6:18:c9:29:
ad:0c:ed:87:6f:b2:27:87:80:4c:2e:76:1d:e5:aa:
d2:5d:a9:7f:87:19:6b:ed:15:a0:30:79:ec:0f:02:
5d:4f:43:ad:89:0b:07:6d:cc:89:eb:1c:13:d0:38:
13:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:40:19:C5:60:E0:10:09:8E:3A:45:6E:28:99:95:9F:CC:95:50:F2
X509v3 Authority Key Identifier:
keyid:29:C9:B0:40:16:F6:F0:21:83:30:7C:17:DF:63:0A:02:89:EC:5B:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KcmwQBb28CGDMHwX32MKAonsW7U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/551847-332d-4e27-b47a-1d591bbd4060/1/KcmwQBb28CGDMHwX32MKAonsW7U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/551847-332d-4e27-b47a-1d591bbd4060/1/KcmwQBb28CGDMHwX32MKAonsW7U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:3c:6b:86:69:c0:b9:9c:d2:ab:93:a9:95:64:5f:1d:98:22:
87:5e:4c:79:8c:b3:f6:cc:00:f0:5c:9a:5d:57:d2:11:d4:ca:
c4:45:ae:bb:17:93:bb:dd:ae:1b:d9:2f:c4:10:2b:7f:73:70:
dd:9b:a3:27:a2:f4:1b:36:03:f8:74:60:ba:e7:7c:0c:73:04:
74:b6:ca:4f:d0:9e:22:c2:24:fd:1c:7c:41:b2:84:6f:27:38:
db:0f:af:25:47:ea:e9:26:1d:bc:7e:5d:6d:e2:56:ab:6b:56:
88:45:9c:86:25:0c:d0:cd:48:ff:38:c2:d1:05:a0:f6:c5:7c:
02:ae:83:23:9c:8b:d7:05:54:0b:de:fa:24:a1:a6:ad:1f:e3:
28:18:3b:96:0b:e4:d0:1d:ff:b3:a2:8e:b0:8f:cc:6d:a7:e1:
32:66:b6:83:0b:be:6c:67:aa:d9:be:dc:08:ad:ae:35:3d:c8:
64:1f:76:ff:0e:9a:55:23:85:40:eb:27:51:4c:11:b3:71:ff:
6b:f7:7a:64:b3:b9:bd:53:3e:21:4a:7d:7c:ea:0a:06:ac:17:
0d:25:57:3b:06:4c:b3:72:16:ee:ff:a7:36:6e:ab:67:de:e1:
2d:51:fb:15:25:88:0b:68:16:b0:bb:ce:4f:2a:e5:60:c7:ba:
2f:7f:ed:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:03:15 2026 by rpki-client