Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/0b0b33-98a1-4818-ad18-95f27d3e8abb/1/KCssuXcVO6rR3ZnuwUzgykbiIZ8.mft
File: KCssuXcVO6rR3ZnuwUzgykbiIZ8.mft (raw, json)
Hash identifier: ckRFZLe6TLX2eTjTRW2LHdpe5ozSYw4Zkx/Rid/dWss=
Subject key identifier: 8F:F0:05:63:6F:26:CC:9D:54:BD:24:6F:2A:CD:57:96:B2:A9:50:98
Authority key identifier: 28:2B:2C:B9:77:15:3B:AA:D1:DD:99:EE:C1:4C:E0:CA:46:E2:21:9F
Certificate issuer: /CN=282b2cb977153baad1dd99eec14ce0ca46e2219f
Certificate serial: 019D9BBF17BEE1003EF9C9841ACA61898F3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KCssuXcVO6rR3ZnuwUzgykbiIZ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/0b0b33-98a1-4818-ad18-95f27d3e8abb/1/KCssuXcVO6rR3ZnuwUzgykbiIZ8.mft
Manifest number: 0A99
Signing time: Fri 17 Apr 2026 14:01:25 +0000
Manifest this update: Fri 17 Apr 2026 14:01:25 +0000
Manifest next update: Sat 18 Apr 2026 14:01:25 +0000
Files and hashes: 1: KCssuXcVO6rR3ZnuwUzgykbiIZ8.crl (hash: ykeeyuKDx9/wSSL4HzNVxNzU5G+/aopu3t8Fc3HY6aY=)
2: kwICd-Vs81pcwvCcYZ6zEK19fBw.roa (hash: zy91annv+5k1uAmsY5PH/4r77C+x0cRwRxEdrlowj+8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/0b0b33-98a1-4818-ad18-95f27d3e8abb/1/KCssuXcVO6rR3ZnuwUzgykbiIZ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/0b0b33-98a1-4818-ad18-95f27d3e8abb/1/KCssuXcVO6rR3ZnuwUzgykbiIZ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/KCssuXcVO6rR3ZnuwUzgykbiIZ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 14:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:bf:17:be:e1:00:3e:f9:c9:84:1a:ca:61:89:8f:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=282b2cb977153baad1dd99eec14ce0ca46e2219f
Validity
Not Before: Apr 17 14:01:25 2026 GMT
Not After : Apr 18 14:01:25 2026 GMT
Subject: CN=8ff005636f26cc9d54bd246f2acd5796b2a95098
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:00:9d:32:d0:bd:ff:73:cd:66:4f:e5:72:eb:
3b:e3:0a:7d:06:7d:48:4a:22:28:58:74:2e:44:af:
86:89:30:64:b8:9a:cc:3e:08:fb:43:25:99:10:c1:
61:04:71:4b:6d:c3:8c:42:9e:15:47:98:99:5d:5d:
b4:5d:b5:d8:38:6f:0d:82:63:2f:e6:86:04:b2:01:
0a:fa:f2:3f:8c:ff:49:cd:8c:73:0d:e3:88:68:30:
dc:44:4d:2e:82:c7:22:34:0e:45:06:04:39:f3:8e:
87:42:56:1d:f7:cc:2a:43:0a:eb:f2:99:99:56:8a:
12:9e:54:b3:7d:60:b8:a6:db:ef:ed:59:73:01:5d:
75:e1:43:2d:a1:b7:d0:35:0d:f9:2e:46:89:ca:b8:
ca:b9:7f:af:2e:44:15:d9:f3:1d:8c:46:96:14:5c:
c4:b9:65:44:aa:14:5f:b1:ca:1a:f5:10:70:f8:55:
7d:55:80:30:1f:46:3c:79:d4:9d:1c:ee:4f:9a:37:
2e:71:5f:7a:64:61:db:13:3c:04:45:cc:2c:09:ac:
b1:88:11:49:75:1c:f9:91:f1:eb:ac:78:dc:04:7b:
17:18:8a:07:21:4b:9a:6a:11:f0:de:33:c3:a6:29:
94:1d:e3:25:60:6b:14:79:6e:e8:66:a8:c3:e5:4a:
2e:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:F0:05:63:6F:26:CC:9D:54:BD:24:6F:2A:CD:57:96:B2:A9:50:98
X509v3 Authority Key Identifier:
keyid:28:2B:2C:B9:77:15:3B:AA:D1:DD:99:EE:C1:4C:E0:CA:46:E2:21:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KCssuXcVO6rR3ZnuwUzgykbiIZ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/0b0b33-98a1-4818-ad18-95f27d3e8abb/1/KCssuXcVO6rR3ZnuwUzgykbiIZ8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/0b0b33-98a1-4818-ad18-95f27d3e8abb/1/KCssuXcVO6rR3ZnuwUzgykbiIZ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:45:0d:74:b4:f7:d6:eb:3b:b4:e2:99:15:f0:94:64:52:90:
34:9c:46:de:99:e0:d8:e8:d9:bc:c7:c2:f2:d1:59:e8:06:b4:
5c:70:58:e5:08:62:fb:f3:af:9f:51:64:5f:bd:1a:46:97:db:
f1:81:0e:e2:08:b0:da:6d:4b:7d:fd:fe:37:a1:09:bf:9f:80:
4a:08:12:56:49:14:1e:a5:a8:06:9d:ec:69:47:57:ea:84:07:
49:f8:65:7d:0c:f6:95:1e:d8:1d:ff:5a:0e:be:61:9b:36:df:
f5:cb:25:af:4c:d5:fc:13:38:b7:a7:bf:34:c5:1d:d6:e0:95:
22:55:79:87:ce:56:a2:e1:ed:1d:69:10:4a:a5:99:20:65:e3:
d4:02:aa:45:16:99:90:fd:ea:7a:7c:5b:6d:cb:f2:b5:ca:34:
0f:72:08:d5:3b:fc:ac:f0:b6:bf:80:04:88:08:e2:c6:7d:3a:
d6:41:42:1f:0a:36:11:69:87:34:fc:91:6c:23:dd:1e:cb:14:
20:86:88:01:b9:37:ad:f0:57:f7:39:e1:cf:fe:57:19:bb:73:
90:1c:b2:43:1d:ac:84:94:66:52:d3:ca:a3:0f:e6:33:2e:82:
7d:c8:5c:17:7a:d8:df:e3:d1:e7:51:fc:a9:6a:ff:25:46:7d:
01:ff:b6:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:26:17 2026 by rpki-client