Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/40a276-8515-442c-816e-38eed6df053b/1/KuK_S6R9cV5T4us9AS0_y80bDsA.mft
File: KuK_S6R9cV5T4us9AS0_y80bDsA.mft (raw, json)
Hash identifier: ojinnirszhGWEsvHkSaR1t6f2zAkgLaey5OwJ7loNto=
Subject key identifier: EA:C9:48:C6:3F:F1:57:55:2B:B1:E6:BB:EE:CF:84:65:14:92:B8:EE
Authority key identifier: 2A:E2:BF:4B:A4:7D:71:5E:53:E2:EB:3D:01:2D:3F:CB:CD:1B:0E:C0
Certificate issuer: /CN=2ae2bf4ba47d715e53e2eb3d012d3fcbcd1b0ec0
Certificate serial: 019F91A44387F15FC173EB255DB8A177114C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KuK_S6R9cV5T4us9AS0_y80bDsA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/40a276-8515-442c-816e-38eed6df053b/1/KuK_S6R9cV5T4us9AS0_y80bDsA.mft
Manifest number: 0409
Signing time: Fri 24 Jul 2026 01:01:29 +0000
Manifest this update: Fri 24 Jul 2026 01:01:29 +0000
Manifest next update: Sat 25 Jul 2026 01:01:29 +0000
Files and hashes: 1: KuK_S6R9cV5T4us9AS0_y80bDsA.crl (hash: +rt2TpmCsuqW1QEV2VVxKGaSG57Py4tNl0SBlVvwFAg=)
2: uPCaDDec9QKPaddyi8Q6i4Q7q7k.roa (hash: n+pffEHjG87ngAjTdw3F82UnpSjTNX/RT+SqH5AesLg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/40a276-8515-442c-816e-38eed6df053b/1/KuK_S6R9cV5T4us9AS0_y80bDsA.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/40a276-8515-442c-816e-38eed6df053b/1/KuK_S6R9cV5T4us9AS0_y80bDsA.mft
rsync://rpki.ripe.net/repository/DEFAULT/KuK_S6R9cV5T4us9AS0_y80bDsA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:a4:43:87:f1:5f:c1:73:eb:25:5d:b8:a1:77:11:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ae2bf4ba47d715e53e2eb3d012d3fcbcd1b0ec0
Validity
Not Before: Jul 24 01:01:29 2026 GMT
Not After : Jul 25 01:01:29 2026 GMT
Subject: CN=eac948c63ff157552bb1e6bbeecf84651492b8ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:5f:f6:14:6f:b9:87:ec:b9:ec:63:a4:a9:b3:
fc:ae:a9:92:cd:69:e4:7a:55:78:be:6f:2e:fe:b0:
08:b1:f6:6a:ab:3f:72:2b:c7:b3:7c:6d:71:08:5c:
86:23:4d:2f:bf:c5:0f:e9:e7:85:0b:9f:60:ee:78:
7c:c8:42:50:59:6c:50:fb:41:d3:00:b7:e1:3a:e2:
bc:b1:e5:87:d0:c1:ae:81:0b:24:8d:7b:8a:ac:5f:
89:85:d5:37:39:c9:6c:bd:d7:a2:0f:75:8c:a5:f1:
ac:46:1b:f4:7c:0e:e3:72:ba:4b:57:a7:80:14:17:
1f:f9:0c:72:49:56:38:a7:aa:b2:fb:35:70:83:3c:
fa:7a:ab:ec:a5:07:00:87:cc:72:3c:f7:8e:95:37:
c2:8d:c2:0f:94:af:4d:6d:93:bf:ec:fe:2a:5c:81:
e1:ef:4c:ff:03:bb:5c:8e:d2:3b:2c:7e:27:90:f2:
1d:70:64:c2:4b:77:fd:d3:70:c4:1d:7d:87:06:0d:
20:03:51:b2:09:a4:10:41:9c:75:2a:40:40:78:a4:
85:3c:d5:7f:a9:68:4a:80:be:a7:e1:50:df:c8:a1:
76:5e:e6:fa:f2:8e:71:de:52:2b:56:23:a5:a7:26:
bc:9f:33:7e:6e:31:49:17:2f:fb:f5:1d:9e:d6:bc:
5f:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:C9:48:C6:3F:F1:57:55:2B:B1:E6:BB:EE:CF:84:65:14:92:B8:EE
X509v3 Authority Key Identifier:
keyid:2A:E2:BF:4B:A4:7D:71:5E:53:E2:EB:3D:01:2D:3F:CB:CD:1B:0E:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KuK_S6R9cV5T4us9AS0_y80bDsA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/40a276-8515-442c-816e-38eed6df053b/1/KuK_S6R9cV5T4us9AS0_y80bDsA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/40a276-8515-442c-816e-38eed6df053b/1/KuK_S6R9cV5T4us9AS0_y80bDsA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:01:98:66:a5:ec:c1:bd:69:c0:64:ef:55:55:c4:d4:1c:7c:
ad:58:a0:72:b8:02:65:09:38:93:f9:b6:a8:7d:f9:17:01:51:
74:40:44:24:79:1a:1c:3c:ea:ef:11:85:60:69:91:4e:bf:78:
fe:f0:da:0c:3b:16:05:52:75:1e:40:17:4b:02:06:78:f0:ff:
cc:f2:1c:ef:99:4f:68:c0:21:7a:49:f2:d2:88:a7:88:cd:1b:
4d:4f:0a:af:11:0e:00:54:81:38:6c:be:3c:e4:4f:f2:c2:a7:
3c:db:47:70:75:98:1b:0f:87:36:3a:56:6b:2d:a0:67:c7:58:
bf:51:f4:d8:ab:a2:c7:b7:83:b8:17:77:59:99:5d:7e:1c:e4:
7d:33:e5:f4:71:d5:fc:4e:b9:80:0f:b8:aa:93:f9:30:34:1c:
ff:0e:63:f8:af:96:b7:aa:dc:05:f2:2c:15:53:72:f0:38:89:
9e:2c:38:3e:39:82:2d:f3:9d:50:79:f7:f7:ae:5d:7d:cb:7b:
d0:68:06:86:e8:69:2e:78:12:82:12:17:cf:23:86:2a:6c:01:
6a:a8:5d:4f:8e:e4:de:8e:57:5e:12:f0:e4:4d:d4:6b:d9:7a:
f2:f5:84:d1:29:6c:b2:90:ce:10:c3:9d:cd:68:b8:b4:1a:3f:
81:1e:6b:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:39:59 2026 by rpki-client