Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/d5e9f6-3f6d-4694-89b8-a093d100874c/1/KuLHRej2hPuArBnM3AierFgUZUo.mft
File: KuLHRej2hPuArBnM3AierFgUZUo.mft (raw, json)
Hash identifier: TC8Cfm8YjLLhiFxG8+6LkNnVj2UZxEn27wPxWibeR2w=
Subject key identifier: C7:53:E0:0B:04:24:7B:89:22:03:44:1B:76:88:6E:E7:7E:2A:EF:F5
Authority key identifier: 2A:E2:C7:45:E8:F6:84:FB:80:AC:19:CC:DC:08:9E:AC:58:14:65:4A
Certificate issuer: /CN=2ae2c745e8f684fb80ac19ccdc089eac5814654a
Certificate serial: 019F8F7E2DE608BC5D51888D98A949802511
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KuLHRej2hPuArBnM3AierFgUZUo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/d5e9f6-3f6d-4694-89b8-a093d100874c/1/KuLHRej2hPuArBnM3AierFgUZUo.mft
Manifest number: 3F
Signing time: Thu 23 Jul 2026 15:00:38 +0000
Manifest this update: Thu 23 Jul 2026 15:00:38 +0000
Manifest next update: Fri 24 Jul 2026 15:00:38 +0000
Files and hashes: 1: C7BgJU1RJsS8-1WKTqX6V7kq4y0.roa (hash: SGtJrPMic2ON9eWUe2+fmPnOCxoU1rHwRo66TB4f67w=)
2: KuLHRej2hPuArBnM3AierFgUZUo.crl (hash: gp76kMTrcQQDt6mWNmbPwo90ac0TiKFSrCqF9kwBLuk=)
3: WgjIu8S97FBry8IBJX7BijRh0UE.asa (hash: plmhVkPEVtHqmyaviSWaVdRoyVEm1YYRYzj6w9pBiLw=)
4: sXYBYOzWape5FZOss1s2gbpkzzU.roa (hash: KREfilkta372D7Yqg/hHtPffqvz0AiEw0qbCO9glSQM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/d5e9f6-3f6d-4694-89b8-a093d100874c/1/KuLHRej2hPuArBnM3AierFgUZUo.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/d5e9f6-3f6d-4694-89b8-a093d100874c/1/KuLHRej2hPuArBnM3AierFgUZUo.mft
rsync://rpki.ripe.net/repository/DEFAULT/KuLHRej2hPuArBnM3AierFgUZUo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:7e:2d:e6:08:bc:5d:51:88:8d:98:a9:49:80:25:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ae2c745e8f684fb80ac19ccdc089eac5814654a
Validity
Not Before: Jul 23 15:00:38 2026 GMT
Not After : Jul 24 15:00:38 2026 GMT
Subject: CN=c753e00b04247b892203441b76886ee77e2aeff5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:39:76:21:44:20:64:71:da:b6:5f:b3:56:c0:
08:fb:9c:19:31:39:90:0b:21:d4:d5:fa:34:1a:6e:
24:0b:76:e3:af:ee:63:8f:9c:f1:fd:35:a0:d1:a4:
87:f3:d9:c0:34:8d:0c:31:11:51:5b:74:52:fd:eb:
76:a4:cd:7b:0d:66:c4:3a:b2:57:46:6a:3a:c5:5d:
02:95:5b:32:a3:52:6b:e3:17:21:3e:b2:e1:80:3f:
c9:e6:fe:d2:7c:a9:22:04:08:39:f9:bb:6e:29:66:
20:10:7a:be:73:57:ff:f1:7d:df:58:90:94:67:ae:
f2:d6:84:77:06:79:46:b1:df:0a:6f:70:ce:c8:0f:
79:68:1c:c6:af:6d:00:99:ef:20:d2:aa:34:fe:05:
ec:53:21:6c:03:5e:2e:dd:05:69:1e:4b:47:c6:26:
35:94:36:9f:e2:ec:af:fc:87:3e:f6:cc:0a:d9:98:
52:c5:77:7e:5c:5b:9f:4d:f3:f9:fd:8c:03:b3:57:
60:67:a4:a9:e3:76:70:20:d9:ae:68:2d:5b:46:91:
aa:ac:f2:d2:88:47:fc:4b:60:03:be:ee:60:bd:0f:
ce:0c:fb:36:c1:b5:85:00:a7:5e:f0:78:68:42:7a:
32:14:61:87:e3:48:27:47:a8:d8:25:22:fd:6e:c4:
fb:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:53:E0:0B:04:24:7B:89:22:03:44:1B:76:88:6E:E7:7E:2A:EF:F5
X509v3 Authority Key Identifier:
keyid:2A:E2:C7:45:E8:F6:84:FB:80:AC:19:CC:DC:08:9E:AC:58:14:65:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KuLHRej2hPuArBnM3AierFgUZUo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/d5e9f6-3f6d-4694-89b8-a093d100874c/1/KuLHRej2hPuArBnM3AierFgUZUo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/d5e9f6-3f6d-4694-89b8-a093d100874c/1/KuLHRej2hPuArBnM3AierFgUZUo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:91:9a:f9:4d:a9:b1:ec:f9:2f:b0:ac:2e:76:90:09:11:ee:
89:51:a5:d1:15:cd:c5:ca:c3:63:c5:34:85:39:61:12:c8:2c:
62:ab:7e:72:5d:6a:26:2e:57:de:c2:e7:a3:39:f3:ae:6d:c2:
36:56:22:c1:ce:c0:4e:cc:31:93:84:c7:6c:34:28:d9:04:f2:
76:3d:e0:50:96:b8:af:f6:7c:de:77:19:8b:7b:09:6f:54:99:
d0:cb:5d:ff:28:79:0c:87:d5:3b:99:d6:f1:bc:00:4b:75:e7:
9e:10:2d:9b:23:8a:2e:e3:fb:19:9f:5e:30:15:09:c3:26:27:
98:8f:cd:56:ff:96:15:35:ba:6c:d9:59:27:3b:0d:e1:3e:8b:
d7:27:7c:aa:ad:39:10:c1:91:66:74:7e:f1:58:db:6c:6d:21:
df:1d:33:d8:e8:4e:f3:8d:3d:98:9b:10:2f:f0:79:8a:75:a2:
4b:1a:fb:07:cb:b1:b9:bb:00:b1:62:28:ca:d8:18:f1:82:24:
5b:4e:4f:ff:b3:96:0d:80:40:97:59:04:06:d2:4b:e9:46:0e:
fe:b0:11:b4:ae:f8:46:94:fd:55:5d:63:c6:d8:7c:bc:d7:16:
24:60:7e:96:db:e5:c7:4f:b8:73:00:aa:69:1a:37:39:2c:65:
f6:b9:d3:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 18:59:29 2026 by rpki-client