Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/27/40a276-8515-442c-816e-38eed6df053b/1/KuK_S6R9cV5T4us9AS0_y80bDsA.mft
File: KuK_S6R9cV5T4us9AS0_y80bDsA.mft (raw, json)
Hash identifier: hqHIXEHC48T7goJtmJnWr1zlOGxMbYcly+eHzyDTyLE=
Subject key identifier: 3C:CB:E0:3B:C8:E2:90:33:39:82:6C:A8:B7:A5:BC:B7:D1:B1:97:85
Authority key identifier: 2A:E2:BF:4B:A4:7D:71:5E:53:E2:EB:3D:01:2D:3F:CB:CD:1B:0E:C0
Certificate issuer: /CN=2ae2bf4ba47d715e53e2eb3d012d3fcbcd1b0ec0
Certificate serial: 01A0D8042508B6DDA49C3CC4CB629015C844
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KuK_S6R9cV5T4us9AS0_y80bDsA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/40a276-8515-442c-816e-38eed6df053b/1/KuK_S6R9cV5T4us9AS0_y80bDsA.mft
Manifest number: 04B2
Signing time: Fri 25 Sep 2026 10:02:25 +0000
Manifest this update: Fri 25 Sep 2026 10:02:25 +0000
Manifest next update: Sat 26 Sep 2026 10:02:25 +0000
Files and hashes: 1: KuK_S6R9cV5T4us9AS0_y80bDsA.crl (hash: vIXkGFyQbh5sFMG6yAkcM2Rm6f/W3H6vgXp0i3z/w3E=)
2: uPCaDDec9QKPaddyi8Q6i4Q7q7k.roa (hash: n+pffEHjG87ngAjTdw3F82UnpSjTNX/RT+SqH5AesLg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/40a276-8515-442c-816e-38eed6df053b/1/KuK_S6R9cV5T4us9AS0_y80bDsA.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/40a276-8515-442c-816e-38eed6df053b/1/KuK_S6R9cV5T4us9AS0_y80bDsA.mft
rsync://rpki.ripe.net/repository/DEFAULT/KuK_S6R9cV5T4us9AS0_y80bDsA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 08:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d8:04:25:08:b6:dd:a4:9c:3c:c4:cb:62:90:15:c8:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ae2bf4ba47d715e53e2eb3d012d3fcbcd1b0ec0
Validity
Not Before: Sep 25 10:02:25 2026 GMT
Not After : Sep 26 10:02:25 2026 GMT
Subject: CN=3ccbe03bc8e2903339826ca8b7a5bcb7d1b19785
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:59:4e:ba:41:0b:e1:d8:0b:13:57:0c:e3:5a:
cc:23:9d:24:5a:c7:12:31:23:f3:5b:80:00:f3:3a:
73:d9:0b:4b:03:bd:3b:09:d0:ab:97:f0:11:37:8e:
1a:e9:f4:e6:06:a0:14:e2:b7:3e:f3:7d:8a:53:dd:
ed:e2:0c:35:31:61:32:2e:21:de:f6:2e:d1:f7:a6:
f7:a6:ae:3e:6d:88:e2:2b:98:65:8f:97:a3:94:a9:
ae:95:40:d6:af:ed:9e:c9:72:67:0e:19:28:10:51:
49:15:cf:67:09:1d:48:f9:ee:05:0a:1a:54:55:f5:
b6:bc:31:b0:81:31:d7:0a:b4:be:73:62:d6:7a:15:
a2:cf:ea:47:65:a3:59:1b:53:bc:cc:14:0a:e7:25:
12:95:4a:35:09:7c:d1:00:0e:fa:f8:e6:e5:c1:90:
fd:2f:dc:36:4c:c0:d1:93:0a:b6:a7:bb:dc:68:4e:
65:4c:83:97:73:15:1a:1b:71:63:51:a2:06:90:eb:
50:79:77:4f:c8:2f:04:30:f3:84:f2:b4:83:8e:6d:
74:51:fb:f9:b9:85:e5:05:b8:93:44:ee:19:fb:51:
d4:18:50:00:0e:c0:d5:de:bd:2f:f9:34:78:01:79:
9a:b2:30:66:54:9c:de:b0:8d:b0:d4:de:df:45:78:
22:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:CB:E0:3B:C8:E2:90:33:39:82:6C:A8:B7:A5:BC:B7:D1:B1:97:85
X509v3 Authority Key Identifier:
keyid:2A:E2:BF:4B:A4:7D:71:5E:53:E2:EB:3D:01:2D:3F:CB:CD:1B:0E:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KuK_S6R9cV5T4us9AS0_y80bDsA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/40a276-8515-442c-816e-38eed6df053b/1/KuK_S6R9cV5T4us9AS0_y80bDsA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/40a276-8515-442c-816e-38eed6df053b/1/KuK_S6R9cV5T4us9AS0_y80bDsA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:c2:66:99:b9:06:95:39:d6:e6:e1:94:44:17:0a:4a:28:ac:
01:ac:0a:ba:91:81:df:53:70:57:16:46:88:d8:8f:1c:cb:cb:
12:55:d3:c9:a0:08:77:ca:bd:ac:2f:38:f4:eb:a8:fa:c0:85:
57:c8:68:d8:0c:96:ee:9f:d7:08:5e:28:ee:ff:ec:6a:6a:3b:
1d:e4:7e:cb:9f:7d:b0:9b:94:fa:34:c1:d5:4f:62:ca:89:5d:
e9:d4:f0:e1:4f:29:b0:87:8d:17:b9:60:30:70:ba:46:37:ab:
00:78:b1:20:c7:1b:eb:9b:a8:78:81:dd:7e:29:01:7c:c2:a5:
34:e8:62:82:58:ca:12:16:4b:85:69:7e:80:72:44:54:d7:94:
b4:10:24:7b:62:5a:f1:36:97:e9:d2:8b:e8:ad:81:ba:31:cc:
f2:f2:17:84:fe:47:a7:8f:86:b5:f3:28:45:9f:ab:b6:b8:f8:
4c:b8:69:33:6d:ec:84:79:ac:fb:30:45:38:b2:80:5f:3e:2d:
a9:ca:66:ca:d9:77:45:dd:d8:d0:19:5f:12:3a:35:39:c0:03:
c8:3d:00:6e:03:88:10:79:37:87:f0:bb:d9:a2:a4:06:d5:d6:
13:57:1b:85:b2:2d:38:80:c5:d3:7c:1f:75:64:3f:50:7a:64:
bc:c1:95:7c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDYBCUItt2knDzEy2KQFchEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhZTJiZjRiYTQ3ZDcxNWU1M2UyZWIzZDAxMmQzZmNiY2Qx
YjBlYzAwHhcNMjYwOTI1MTAwMjI1WhcNMjYwOTI2MTAwMjI1WjAzMTEwLwYDVQQD
EygzY2NiZTAzYmM4ZTI5MDMzMzk4MjZjYThiN2E1YmNiN2QxYjE5Nzg1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyFlOukEL4dgLE1cM41rMI50kWscS
MSPzW4AA8zpz2QtLA707CdCrl/ARN44a6fTmBqAU4rc+832KU93t4gw1MWEyLiHe
9i7R96b3pq4+bYjiK5hlj5ejlKmulUDWr+2eyXJnDhkoEFFJFc9nCR1I+e4FChpU
VfW2vDGwgTHXCrS+c2LWehWiz+pHZaNZG1O8zBQK5yUSlUo1CXzRAA76+OblwZD9
L9w2TMDRkwq2p7vcaE5lTIOXcxUaG3FjUaIGkOtQeXdPyC8EMPOE8rSDjm10Ufv5
uYXlBbiTRO4Z+1HUGFAADsDV3r0v+TR4AXmasjBmVJzesI2w1N7fRXgiuwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDzL4DvI4pAzOYJsqLelvLfRsZeFMB8GA1UdIwQY
MBaAFCriv0ukfXFeU+LrPQEtP8vNGw7AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS3VLX1M2UjljVjVUNHVzOUFTMF95ODBiRHNBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy80MGEyNzYtODUxNS00NDJjLTgxNmUt
MzhlZWQ2ZGYwNTNiLzEvS3VLX1M2UjljVjVUNHVzOUFTMF95ODBiRHNBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNy80MGEyNzYtODUxNS00NDJjLTgxNmUtMzhlZWQ2ZGYwNTNi
LzEvS3VLX1M2UjljVjVUNHVzOUFTMF95ODBiRHNBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZsJmmbkG
lTnW5uGURBcKSiisAawKupGB31NwVxZGiNiPHMvLElXTyaAId8q9rC849Ouo+sCF
V8ho2AyW7p/XCF4o7v/samo7HeR+y599sJuU+jTB1U9iyold6dTw4U8psIeNF7lg
MHC6RjerAHixIMcb65uoeIHdfikBfMKlNOhigljKEhZLhWl+gHJEVNeUtBAke2Ja
8TaX6dKL6K2BujHM8vIXhP5Hp4+GtfMoRZ+rtrj4TLhpM23shHms+zBFOLKAXz4t
qcpmytl3Rd3Y0BlfEjo1OcADyD0AbgOIEHk3h/C72aKkBtXWE1cbhbItOIDF03wf
dWQ/UHpkvMGVfA==
-----END CERTIFICATE-----
Generated at Fri Sep 25 20:09:49 2026 by rpki-client