Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/551847-332d-4e27-b47a-1d591bbd4060/1/KcmwQBb28CGDMHwX32MKAonsW7U.mft
File: KcmwQBb28CGDMHwX32MKAonsW7U.mft (raw, json)
Hash identifier: YvL6H6iqnoPNeap2emRxNHAkZA0OCJbpBOyIB4hkZuE=
Subject key identifier: 3C:CE:FB:CD:AB:FA:23:FE:C4:F0:3C:15:C9:41:E2:7A:15:19:48:58
Authority key identifier: 29:C9:B0:40:16:F6:F0:21:83:30:7C:17:DF:63:0A:02:89:EC:5B:B5
Certificate issuer: /CN=29c9b04016f6f02183307c17df630a0289ec5bb5
Certificate serial: 019D98F49911C4D1B241AB35EDD21CA647E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KcmwQBb28CGDMHwX32MKAonsW7U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/551847-332d-4e27-b47a-1d591bbd4060/1/KcmwQBb28CGDMHwX32MKAonsW7U.mft
Manifest number: 1123
Signing time: Fri 17 Apr 2026 01:00:59 +0000
Manifest this update: Fri 17 Apr 2026 01:00:59 +0000
Manifest next update: Sat 18 Apr 2026 01:00:59 +0000
Files and hashes: 1: KcmwQBb28CGDMHwX32MKAonsW7U.crl (hash: ZTHc+oF4XnpD9IAaiI/wgZfr38dNhHdtZjD0bjkmGHI=)
2: hTiJ6cCS_TiS4eI7qxisMIha6WA.roa (hash: RYMk/98nEg7OxXi5y6LpcIy05kfPWnp4XSK+7SVu8ys=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/551847-332d-4e27-b47a-1d591bbd4060/1/KcmwQBb28CGDMHwX32MKAonsW7U.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/551847-332d-4e27-b47a-1d591bbd4060/1/KcmwQBb28CGDMHwX32MKAonsW7U.mft
rsync://rpki.ripe.net/repository/DEFAULT/KcmwQBb28CGDMHwX32MKAonsW7U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 01:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f4:99:11:c4:d1:b2:41:ab:35:ed:d2:1c:a6:47:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29c9b04016f6f02183307c17df630a0289ec5bb5
Validity
Not Before: Apr 17 01:00:59 2026 GMT
Not After : Apr 18 01:00:59 2026 GMT
Subject: CN=3ccefbcdabfa23fec4f03c15c941e27a15194858
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:36:93:65:5a:3e:8f:4d:a8:dd:52:72:a1:51:
eb:31:fb:a1:71:99:ca:32:f2:b8:cf:0f:9f:40:43:
8a:25:44:cf:ef:53:d9:23:96:50:cc:c3:b6:50:fb:
d9:34:8c:a9:52:9f:8e:d8:54:a4:da:f8:1d:15:e4:
43:26:f5:e3:6e:c3:f6:81:11:43:e8:99:20:1d:6e:
a4:ed:22:91:92:cc:c1:2d:df:f9:66:2f:b0:8d:f3:
c3:79:24:a9:f8:b2:68:1f:0d:3c:c3:8e:d2:8e:3e:
74:5f:a8:96:e9:41:05:ec:f9:5e:f3:18:d5:bf:d9:
ce:42:e0:02:30:13:e5:95:7e:10:ad:1a:2f:d2:61:
79:83:5b:7e:96:a5:15:7b:1c:1c:79:ea:03:05:27:
cd:f4:1e:18:fb:58:37:a1:a0:ff:e7:bf:9c:b2:82:
5c:76:dc:3e:b4:12:de:41:9f:c7:eb:87:45:a1:6e:
c8:16:5e:8f:e4:9a:af:87:d2:b2:7f:e2:b4:fc:7e:
0e:0f:8d:44:e0:65:3d:2d:f4:43:8b:9c:1e:2d:51:
8a:8a:6b:50:89:77:63:4d:83:d2:e4:9c:57:35:7d:
01:e2:58:93:31:9d:2b:d3:ab:fe:89:f2:03:5b:d4:
7c:a3:25:80:98:15:99:11:b6:80:a7:fa:8d:28:92:
b2:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:CE:FB:CD:AB:FA:23:FE:C4:F0:3C:15:C9:41:E2:7A:15:19:48:58
X509v3 Authority Key Identifier:
keyid:29:C9:B0:40:16:F6:F0:21:83:30:7C:17:DF:63:0A:02:89:EC:5B:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KcmwQBb28CGDMHwX32MKAonsW7U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/551847-332d-4e27-b47a-1d591bbd4060/1/KcmwQBb28CGDMHwX32MKAonsW7U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/551847-332d-4e27-b47a-1d591bbd4060/1/KcmwQBb28CGDMHwX32MKAonsW7U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:48:ed:9b:3e:b2:8f:73:fd:76:f9:ba:b8:5f:61:01:65:ee:
0d:d5:10:24:38:f6:92:a8:f7:b3:6f:ca:04:b1:78:c9:4e:8e:
69:31:a3:92:3f:d7:61:91:04:41:81:82:59:f4:7b:93:6c:3a:
49:aa:f3:5f:5a:a1:59:c1:4b:67:8c:65:c9:03:21:d8:67:8a:
ef:83:2c:11:d2:7a:e1:c1:d3:39:1d:4c:dc:8e:da:03:bb:7b:
cf:59:57:82:08:ba:d4:fe:ce:88:f0:bb:26:6f:c7:da:e3:6d:
9f:d7:0d:40:c6:7f:05:d0:3f:4e:10:61:83:f1:d5:c5:0a:9b:
2b:6a:77:1b:33:59:10:8c:ba:cb:ed:ad:e8:51:2c:64:85:de:
e8:44:26:f8:a6:53:c9:71:87:66:82:32:dd:09:01:ad:0a:e2:
f5:c8:f4:92:c7:61:98:da:4c:95:c4:11:97:7c:c6:7f:58:d1:
f6:0c:b1:08:2e:0a:87:78:4c:00:1c:f6:e7:0b:16:9f:e4:8c:
07:79:ef:da:fb:9f:1f:55:80:3e:89:b9:61:bc:97:a7:c6:5f:
87:89:8e:2d:c1:f9:71:85:c7:11:be:e1:8a:83:31:2b:f7:43:
23:fc:50:16:65:60:19:96:23:ab:e3:55:0d:98:06:e8:61:3f:
dd:71:f5:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:37:00 2026 by rpki-client