Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/40a276-8515-442c-816e-38eed6df053b/1/KuK_S6R9cV5T4us9AS0_y80bDsA.mft
File: KuK_S6R9cV5T4us9AS0_y80bDsA.mft (raw, json)
Hash identifier: IV72dsm+F4zlXdrkZjbNxwTa/jfx8eMQI+IYYgvY9CI=
Subject key identifier: A5:0E:40:17:AF:F3:FD:AD:F0:87:73:BC:46:66:13:FC:EC:D1:32:C5
Authority key identifier: 2A:E2:BF:4B:A4:7D:71:5E:53:E2:EB:3D:01:2D:3F:CB:CD:1B:0E:C0
Certificate issuer: /CN=2ae2bf4ba47d715e53e2eb3d012d3fcbcd1b0ec0
Certificate serial: 019D27A89E40BD62366FCF66EBB373A909E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KuK_S6R9cV5T4us9AS0_y80bDsA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/40a276-8515-442c-816e-38eed6df053b/1/KuK_S6R9cV5T4us9AS0_y80bDsA.mft
Manifest number: 02C9
Signing time: Thu 26 Mar 2026 01:00:55 +0000
Manifest this update: Thu 26 Mar 2026 01:00:55 +0000
Manifest next update: Fri 27 Mar 2026 01:00:55 +0000
Files and hashes: 1: KuK_S6R9cV5T4us9AS0_y80bDsA.crl (hash: jRNrx5uUl5R+FiZV723pTWXMepofMZo9mJhjwuoZulo=)
2: uPCaDDec9QKPaddyi8Q6i4Q7q7k.roa (hash: n+pffEHjG87ngAjTdw3F82UnpSjTNX/RT+SqH5AesLg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/40a276-8515-442c-816e-38eed6df053b/1/KuK_S6R9cV5T4us9AS0_y80bDsA.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/40a276-8515-442c-816e-38eed6df053b/1/KuK_S6R9cV5T4us9AS0_y80bDsA.mft
rsync://rpki.ripe.net/repository/DEFAULT/KuK_S6R9cV5T4us9AS0_y80bDsA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a8:9e:40:bd:62:36:6f:cf:66:eb:b3:73:a9:09:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ae2bf4ba47d715e53e2eb3d012d3fcbcd1b0ec0
Validity
Not Before: Mar 26 01:00:55 2026 GMT
Not After : Mar 27 01:00:55 2026 GMT
Subject: CN=a50e4017aff3fdadf08773bc466613fcecd132c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:31:05:46:3c:b8:23:b4:67:50:9e:f6:41:9d:
9a:8c:bc:2e:17:1d:89:56:2c:b7:de:e2:b1:dd:76:
04:1d:b3:13:2d:0b:90:15:75:60:99:62:c7:d3:15:
4e:92:40:fc:6b:c8:4f:07:c5:d1:36:b6:96:7a:b7:
2d:43:72:8c:12:5f:40:64:33:8b:fb:24:fc:59:1f:
4b:1e:4b:1c:62:7d:27:cc:ed:be:9f:3a:4c:43:16:
a8:80:a4:7d:b0:12:71:25:64:c4:69:5d:2c:4b:e2:
4b:3b:5d:cc:48:18:b5:e5:13:01:d4:f2:10:85:a0:
74:8d:78:5a:ee:5d:90:c1:a1:8a:a0:e8:1d:7a:79:
ac:d5:e1:90:20:91:4d:00:d3:da:55:20:f7:22:67:
63:f8:ac:66:7a:ca:d2:55:15:6a:74:0f:bf:fa:4d:
b4:b3:bf:83:54:ff:1a:d8:28:50:1e:b9:b5:80:e6:
6a:dd:5e:0f:11:53:b3:40:5c:3a:87:5d:04:e6:22:
45:71:2e:6f:71:ad:76:18:68:e1:f7:0d:f5:48:fb:
b8:cd:04:c1:d7:d1:de:06:ee:9e:9b:6e:1f:e6:13:
ca:3c:c4:cc:40:11:08:af:04:1d:69:bf:7c:16:e0:
96:22:6b:96:19:f0:88:ab:e0:5c:35:56:ea:b0:c3:
92:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:0E:40:17:AF:F3:FD:AD:F0:87:73:BC:46:66:13:FC:EC:D1:32:C5
X509v3 Authority Key Identifier:
keyid:2A:E2:BF:4B:A4:7D:71:5E:53:E2:EB:3D:01:2D:3F:CB:CD:1B:0E:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KuK_S6R9cV5T4us9AS0_y80bDsA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/40a276-8515-442c-816e-38eed6df053b/1/KuK_S6R9cV5T4us9AS0_y80bDsA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/40a276-8515-442c-816e-38eed6df053b/1/KuK_S6R9cV5T4us9AS0_y80bDsA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:41:14:15:d4:7c:db:65:f4:78:39:04:75:fe:df:85:b5:d1:
00:29:4e:34:6a:10:77:ba:d1:e9:70:0e:e5:70:4d:f6:de:d3:
79:ae:9d:a4:58:d8:d1:3f:83:4c:1b:40:03:a4:47:80:bf:3b:
f5:06:f0:f9:4c:3d:67:3e:78:23:3a:3c:3d:ea:0b:60:7a:b7:
58:93:aa:d5:4c:92:15:15:03:a5:09:b6:32:2a:29:8f:2a:e8:
2c:86:3a:93:e5:bc:a6:7b:22:ae:c1:80:44:f6:22:72:38:2a:
81:c6:10:81:99:c0:cf:9a:6c:b3:b2:e7:e8:3c:4d:ac:07:03:
9b:01:71:da:d1:c7:45:77:40:c7:64:0e:f5:7a:2e:60:02:36:
f0:26:b4:23:05:10:af:85:ea:05:d7:32:ec:2c:c8:26:ae:f3:
5e:f9:30:d5:3b:87:4a:91:b7:5d:d8:f2:5b:94:bf:fd:c9:25:
81:e4:44:de:16:2d:7d:f3:d3:81:cf:7f:b4:82:3e:97:3b:b6:
cf:a8:19:bb:de:fd:f5:20:97:98:d9:bd:a7:07:d2:9e:75:74:
3f:44:64:d9:67:5e:07:4a:fd:01:5d:0e:18:54:f5:29:2c:4b:
0a:88:2e:06:b3:ab:6f:17:47:b5:5a:d7:91:81:f5:b6:25:42:
0e:48:24:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:58:00 2026 by rpki-client