Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fc/0b0b33-98a1-4818-ad18-95f27d3e8abb/1/KCssuXcVO6rR3ZnuwUzgykbiIZ8.mft
File: KCssuXcVO6rR3ZnuwUzgykbiIZ8.mft (raw, json)
Hash identifier: ZR2B1zlcjbxoozI8z7duwb31P7s6ye4TaQvhGDJoWDg=
Subject key identifier: 7E:35:91:09:21:02:C6:0A:13:4E:79:CF:11:9D:9E:0D:21:DF:0D:14
Authority key identifier: 28:2B:2C:B9:77:15:3B:AA:D1:DD:99:EE:C1:4C:E0:CA:46:E2:21:9F
Certificate issuer: /CN=282b2cb977153baad1dd99eec14ce0ca46e2219f
Certificate serial: 01A10693DC4D641EDCE0E69019BCF6328619
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KCssuXcVO6rR3ZnuwUzgykbiIZ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/0b0b33-98a1-4818-ad18-95f27d3e8abb/1/KCssuXcVO6rR3ZnuwUzgykbiIZ8.mft
Manifest number: 0C5E
Signing time: Sun 04 Oct 2026 11:01:55 +0000
Manifest this update: Sun 04 Oct 2026 11:01:55 +0000
Manifest next update: Mon 05 Oct 2026 11:01:55 +0000
Files and hashes: 1: KCssuXcVO6rR3ZnuwUzgykbiIZ8.crl (hash: M4QRnx4/8Vpi/ueEMrvPNEF9wNF/18O2CrUre7FrX3Y=)
2: kwICd-Vs81pcwvCcYZ6zEK19fBw.roa (hash: zy91annv+5k1uAmsY5PH/4r77C+x0cRwRxEdrlowj+8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/0b0b33-98a1-4818-ad18-95f27d3e8abb/1/KCssuXcVO6rR3ZnuwUzgykbiIZ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/0b0b33-98a1-4818-ad18-95f27d3e8abb/1/KCssuXcVO6rR3ZnuwUzgykbiIZ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/KCssuXcVO6rR3ZnuwUzgykbiIZ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 11:01:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:06:93:dc:4d:64:1e:dc:e0:e6:90:19:bc:f6:32:86:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=282b2cb977153baad1dd99eec14ce0ca46e2219f
Validity
Not Before: Oct 4 11:01:55 2026 GMT
Not After : Oct 5 11:01:55 2026 GMT
Subject: CN=7e3591092102c60a134e79cf119d9e0d21df0d14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:c5:9f:56:4d:77:c3:a0:43:4f:f6:d6:cc:4f:
a6:51:3a:0f:1e:d0:6a:2c:b2:bd:db:02:0e:d3:2b:
79:fb:47:35:aa:aa:51:fa:26:bd:25:4a:6e:db:a7:
76:16:44:c6:8e:ba:bd:cc:2a:b9:99:27:1d:4f:51:
88:da:a5:83:b6:bf:47:e3:34:38:ab:d5:50:eb:b6:
3d:d7:c0:96:7a:b0:09:1c:9c:30:5c:e3:40:c3:fc:
0f:81:78:ff:19:e8:47:1a:82:54:31:3e:05:73:dc:
87:35:27:32:cc:6f:ff:a0:c5:2e:4f:f1:57:46:dc:
b9:fb:9f:24:14:00:2a:63:15:d0:bc:26:0e:66:ce:
b1:5a:42:8e:6e:45:ec:d0:c4:6b:42:48:c9:4d:8f:
e7:0e:e3:cb:51:97:5a:36:77:7b:f0:97:a8:fd:f7:
f1:f9:3f:a0:c3:d7:6e:24:c5:89:34:3f:0c:d7:6b:
7c:1f:2a:e7:8d:4e:3b:29:28:88:1c:5b:81:b5:22:
f7:56:42:4a:f0:91:d7:66:29:a7:03:46:c9:b9:18:
c8:67:e1:6e:34:f9:6f:a7:bb:14:24:e8:bf:ae:49:
92:18:31:8c:21:8c:7c:5e:4e:bc:f8:08:4b:6c:15:
0e:81:c3:87:e5:c9:b0:63:d9:bf:71:61:2a:fb:5c:
89:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:35:91:09:21:02:C6:0A:13:4E:79:CF:11:9D:9E:0D:21:DF:0D:14
X509v3 Authority Key Identifier:
keyid:28:2B:2C:B9:77:15:3B:AA:D1:DD:99:EE:C1:4C:E0:CA:46:E2:21:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KCssuXcVO6rR3ZnuwUzgykbiIZ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/0b0b33-98a1-4818-ad18-95f27d3e8abb/1/KCssuXcVO6rR3ZnuwUzgykbiIZ8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/0b0b33-98a1-4818-ad18-95f27d3e8abb/1/KCssuXcVO6rR3ZnuwUzgykbiIZ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:0d:00:99:32:94:63:e2:5c:7e:58:3d:bd:41:c8:6b:6f:f6:
e5:45:79:a1:8f:a9:a5:f9:e9:f8:fa:25:be:22:a5:99:f5:32:
44:b9:8e:3e:24:ff:1a:58:80:35:3f:43:32:4e:50:1c:74:03:
e3:8c:3a:5d:bc:f6:1e:cc:2a:eb:70:60:a8:ff:fc:df:fa:8b:
27:a9:bc:8f:65:41:eb:91:dd:bc:9c:3e:b4:f8:a7:e3:f7:fd:
b6:49:21:20:84:ab:4b:5c:3e:08:44:35:f0:29:63:05:47:97:
f3:ba:e2:c5:7b:4c:50:65:84:3e:a1:76:7c:61:7c:ae:c5:68:
7b:c0:2b:17:f9:4d:fa:58:d3:fb:c5:4e:4d:28:a7:fb:6e:9e:
71:33:86:f3:8a:27:53:25:ac:48:5d:ef:08:6c:c2:b5:5a:76:
2c:17:dc:a6:fc:17:4d:9e:e2:0a:5f:94:a2:b7:b9:48:80:66:
8b:a1:79:41:42:bb:92:a2:d0:76:60:e2:d1:58:ec:ee:eb:3f:
36:00:3c:c9:cd:84:d9:0f:09:8c:eb:97:ef:e2:5d:3a:1e:85:
8f:cb:9c:1c:78:fa:5a:7a:be:ed:37:60:c4:e5:82:c6:05:12:
7d:d7:7d:c7:0c:62:9d:ec:79:4b:07:f4:6f:ca:48:b7:7b:e9:
7b:84:68:15
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEGk9xNZB7c4OaQGbz2MoYZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI4MmIyY2I5NzcxNTNiYWFkMWRkOTllZWMxNGNlMGNhNDZl
MjIxOWYwHhcNMjYxMDA0MTEwMTU1WhcNMjYxMDA1MTEwMTU1WjAzMTEwLwYDVQQD
Eyg3ZTM1OTEwOTIxMDJjNjBhMTM0ZTc5Y2YxMTlkOWUwZDIxZGYwZDE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiMWfVk13w6BDT/bWzE+mUToPHtBq
LLK92wIO0yt5+0c1qqpR+ia9JUpu26d2FkTGjrq9zCq5mScdT1GI2qWDtr9H4zQ4
q9VQ67Y918CWerAJHJwwXONAw/wPgXj/GehHGoJUMT4Fc9yHNScyzG//oMUuT/FX
Rty5+58kFAAqYxXQvCYOZs6xWkKObkXs0MRrQkjJTY/nDuPLUZdaNnd78Jeo/ffx
+T+gw9duJMWJND8M12t8HyrnjU47KSiIHFuBtSL3VkJK8JHXZimnA0bJuRjIZ+Fu
NPlvp7sUJOi/rkmSGDGMIYx8Xk68+AhLbBUOgcOH5cmwY9m/cWEq+1yJvQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH41kQkhAsYKE055zxGdng0h3w0UMB8GA1UdIwQY
MBaAFCgrLLl3FTuq0d2Z7sFM4MpG4iGfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS0Nzc3VYY1ZPNnJSM1pudXdVemd5a2JpSVo4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy8wYjBiMzMtOThhMS00ODE4LWFkMTgt
OTVmMjdkM2U4YWJiLzEvS0Nzc3VYY1ZPNnJSM1pudXdVemd5a2JpSVo4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYy8wYjBiMzMtOThhMS00ODE4LWFkMTgtOTVmMjdkM2U4YWJi
LzEvS0Nzc3VYY1ZPNnJSM1pudXdVemd5a2JpSVo4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGg0AmTKU
Y+Jcflg9vUHIa2/25UV5oY+ppfnp+PolviKlmfUyRLmOPiT/GliANT9DMk5QHHQD
44w6Xbz2Hswq63BgqP/83/qLJ6m8j2VB65HdvJw+tPin4/f9tkkhIISrS1w+CEQ1
8CljBUeX87rixXtMUGWEPqF2fGF8rsVoe8ArF/lN+ljT+8VOTSin+26ecTOG84on
UyWsSF3vCGzCtVp2LBfcpvwXTZ7iCl+Uore5SIBmi6F5QUK7kqLQdmDi0Vjs7us/
NgA8yc2E2Q8JjOuX7+JdOh6Fj8ucHHj6Wnq+7TdgxOWCxgUSfdd9xwxinex5Swf0
b8pIt3vpe4RoFQ==
-----END CERTIFICATE-----
Generated at Sun Oct 4 17:54:42 2026 by rpki-client