Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/40a276-8515-442c-816e-38eed6df053b/1/KuK_S6R9cV5T4us9AS0_y80bDsA.mft
File: KuK_S6R9cV5T4us9AS0_y80bDsA.mft (raw, json)
Hash identifier: gASjPbdEzlNf01nDZjjkOFyz1Q6v9wR+ctQv3Iik84g=
Subject key identifier: 5E:37:77:CB:E9:F2:B3:B3:A4:88:14:4A:F6:E6:6D:88:12:34:B5:6F
Authority key identifier: 2A:E2:BF:4B:A4:7D:71:5E:53:E2:EB:3D:01:2D:3F:CB:CD:1B:0E:C0
Certificate issuer: /CN=2ae2bf4ba47d715e53e2eb3d012d3fcbcd1b0ec0
Certificate serial: 019E1EDA71D6A292A57B6FB638C36FD3A3EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KuK_S6R9cV5T4us9AS0_y80bDsA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/40a276-8515-442c-816e-38eed6df053b/1/KuK_S6R9cV5T4us9AS0_y80bDsA.mft
Manifest number: 0349
Signing time: Wed 13 May 2026 01:01:32 +0000
Manifest this update: Wed 13 May 2026 01:01:32 +0000
Manifest next update: Thu 14 May 2026 01:01:32 +0000
Files and hashes: 1: KuK_S6R9cV5T4us9AS0_y80bDsA.crl (hash: 92df35eU3mEzghf2vYh7CW1xVEAH6AXu9q99pHQikMY=)
2: uPCaDDec9QKPaddyi8Q6i4Q7q7k.roa (hash: n+pffEHjG87ngAjTdw3F82UnpSjTNX/RT+SqH5AesLg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/40a276-8515-442c-816e-38eed6df053b/1/KuK_S6R9cV5T4us9AS0_y80bDsA.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/40a276-8515-442c-816e-38eed6df053b/1/KuK_S6R9cV5T4us9AS0_y80bDsA.mft
rsync://rpki.ripe.net/repository/DEFAULT/KuK_S6R9cV5T4us9AS0_y80bDsA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 01:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:da:71:d6:a2:92:a5:7b:6f:b6:38:c3:6f:d3:a3:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ae2bf4ba47d715e53e2eb3d012d3fcbcd1b0ec0
Validity
Not Before: May 13 01:01:32 2026 GMT
Not After : May 14 01:01:32 2026 GMT
Subject: CN=5e3777cbe9f2b3b3a488144af6e66d881234b56f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:7c:63:40:fa:a7:c6:31:75:bd:2f:1c:eb:ed:
5a:8b:61:95:65:3e:63:1d:d0:57:85:0c:26:82:bb:
46:47:49:e6:53:6d:7e:9e:43:eb:d4:b5:a0:55:c6:
ff:6e:7f:90:a6:56:61:cf:0a:b1:4e:ec:62:0a:33:
d7:2a:c0:ca:62:81:cb:42:c0:bd:6d:d7:65:e2:d4:
bb:b6:b7:2f:6d:4b:c0:4d:bb:9b:da:2c:89:0c:80:
eb:03:de:2f:a5:0b:c3:29:0d:23:4b:19:0b:24:44:
13:a4:76:f9:e6:bd:b3:5d:07:e4:a1:26:b6:c5:6d:
a6:8b:d8:bf:2c:a7:35:9b:fe:91:eb:39:65:c5:b8:
32:76:90:df:a4:d9:db:5c:c4:3e:ce:74:e9:80:39:
ae:be:ed:85:87:e3:e1:eb:76:3d:df:82:15:78:f5:
51:a3:ea:50:8a:28:ac:9a:0c:fa:fc:aa:73:1b:b4:
ca:77:2f:d6:67:ad:b5:c8:29:53:ea:98:47:bb:bc:
88:cd:5c:dd:60:d5:ba:36:01:3d:48:3d:3c:36:bd:
29:7d:d2:90:f9:1a:d7:bb:29:90:cd:94:c4:41:a2:
0e:15:34:10:d6:ec:31:a5:72:a6:4d:ad:3b:69:71:
b1:37:66:40:9a:43:a5:e9:8f:3c:a0:07:23:85:f6:
13:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:37:77:CB:E9:F2:B3:B3:A4:88:14:4A:F6:E6:6D:88:12:34:B5:6F
X509v3 Authority Key Identifier:
keyid:2A:E2:BF:4B:A4:7D:71:5E:53:E2:EB:3D:01:2D:3F:CB:CD:1B:0E:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KuK_S6R9cV5T4us9AS0_y80bDsA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/40a276-8515-442c-816e-38eed6df053b/1/KuK_S6R9cV5T4us9AS0_y80bDsA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/40a276-8515-442c-816e-38eed6df053b/1/KuK_S6R9cV5T4us9AS0_y80bDsA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:04:40:01:04:9a:a0:9b:89:ca:cb:dc:93:62:d9:9e:d0:f5:
9f:7c:e4:5e:56:5c:eb:b7:f1:10:74:80:68:05:5d:26:c2:ef:
f3:e1:36:7f:2c:63:1b:0a:0b:6a:9e:c6:fb:08:3c:51:bc:bf:
c2:72:7e:ef:32:0d:bc:d4:12:01:7d:d2:59:95:1f:eb:8a:35:
24:d0:79:ae:ef:2b:14:92:16:e4:ea:a0:e9:11:ca:70:0e:ff:
66:5f:da:57:16:ff:8f:cf:f6:ee:0d:a2:d8:38:85:6c:b2:70:
f3:7c:a6:7b:86:de:86:11:64:ba:dd:dc:69:76:83:05:49:78:
11:ce:08:c3:96:cd:1b:78:07:07:61:78:34:ef:b8:d0:f4:cb:
da:b0:2f:ff:3b:db:35:3d:bd:22:4a:55:fd:1c:0f:59:dd:cc:
d4:ea:ab:ee:48:08:33:78:fe:53:ef:11:52:49:77:04:41:54:
01:e8:6b:65:4c:30:06:f0:6f:ca:43:2a:dc:4f:34:1a:ed:03:
fb:bc:76:08:63:de:c5:4d:eb:e9:ba:9d:a4:74:cb:0f:4c:40:
30:e6:47:77:a6:5b:8b:a4:e6:79:ce:d7:d0:66:65:ea:8f:79:
2a:d0:90:c5:9d:3a:89:bc:84:28:e4:62:da:17:87:f0:d9:04:
95:f2:5c:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:19:54 2026 by rpki-client