Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/7943a0-ccab-4260-bd51-afe89aacc492/1/ku_2FiUC6jtS_YyjrhCNE9a_9lI.mft
File: ku_2FiUC6jtS_YyjrhCNE9a_9lI.mft (raw, json)
Hash identifier: VC57k1U0TMGI3gZ1SHHytXmWAceb6on8d1QPAgsp/Bw=
Subject key identifier: 52:5C:6F:6C:D6:D1:25:A6:FD:DC:CF:B2:51:0B:66:49:99:55:30:5A
Authority key identifier: 92:EF:F6:16:25:02:EA:3B:52:FD:8C:A3:AE:10:8D:13:D6:BF:F6:52
Certificate issuer: /CN=92eff6162502ea3b52fd8ca3ae108d13d6bff652
Certificate serial: 019D28BB1FBF4BB55F2F86762EDEEBBD9137
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ku_2FiUC6jtS_YyjrhCNE9a_9lI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/7943a0-ccab-4260-bd51-afe89aacc492/1/ku_2FiUC6jtS_YyjrhCNE9a_9lI.mft
Manifest number: 1887
Signing time: Thu 26 Mar 2026 06:00:44 +0000
Manifest this update: Thu 26 Mar 2026 06:00:44 +0000
Manifest next update: Fri 27 Mar 2026 06:00:44 +0000
Files and hashes: 1: BK2ktyU34ofrpamQZgAZgS1SDAw.roa (hash: UFCcNLAPVlBtUduNktGFZUuUL/6s5iN6F5JFOmjmPCk=)
2: ku_2FiUC6jtS_YyjrhCNE9a_9lI.crl (hash: 508/93SpjbAhwhcP9x4rO9eUWpy4VZSxqhuN6x13pJE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/7943a0-ccab-4260-bd51-afe89aacc492/1/ku_2FiUC6jtS_YyjrhCNE9a_9lI.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/7943a0-ccab-4260-bd51-afe89aacc492/1/ku_2FiUC6jtS_YyjrhCNE9a_9lI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ku_2FiUC6jtS_YyjrhCNE9a_9lI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 06:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:bb:1f:bf:4b:b5:5f:2f:86:76:2e:de:eb:bd:91:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92eff6162502ea3b52fd8ca3ae108d13d6bff652
Validity
Not Before: Mar 26 06:00:44 2026 GMT
Not After : Mar 27 06:00:44 2026 GMT
Subject: CN=525c6f6cd6d125a6fddccfb2510b66499955305a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:e1:2a:1b:85:44:e1:0e:ab:ab:b8:06:ea:b6:
c3:58:2b:7d:26:cd:3f:5d:9f:84:38:02:b3:0e:7d:
d8:af:38:18:a1:ca:96:e9:14:3f:38:05:0f:ce:fb:
f0:40:4f:29:2d:f9:92:c7:51:74:72:d9:ad:0a:14:
18:1b:15:3c:8c:26:98:ed:54:8f:ad:10:f7:30:21:
a8:5e:8f:b2:32:9d:f0:a8:27:32:3f:5f:ab:46:11:
21:3b:ad:6d:b1:76:e0:0b:0b:9d:53:07:9e:86:de:
aa:39:d5:0b:f6:4f:86:a7:5d:f4:cc:38:dd:15:13:
dd:3e:9a:3f:29:c1:2a:cf:70:00:6b:9b:47:fc:27:
41:51:2a:88:f3:38:11:df:06:21:62:17:64:20:6b:
94:9b:61:ae:fd:0a:a3:35:fc:35:77:8b:d4:35:19:
7e:44:6d:cc:3e:69:21:22:b5:b3:69:60:b9:c5:d8:
3f:c6:17:37:7b:01:13:0a:e3:f3:13:66:21:14:66:
04:d9:52:ee:8d:32:60:fb:05:78:0b:98:86:dd:f2:
ae:90:84:a5:9b:3b:3d:1c:3a:81:90:44:d7:26:40:
8c:f6:86:bb:38:36:6e:72:6b:c5:2a:6d:27:03:34:
a9:b9:bb:76:07:cc:51:c9:81:2d:49:7d:4d:15:52:
9e:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:5C:6F:6C:D6:D1:25:A6:FD:DC:CF:B2:51:0B:66:49:99:55:30:5A
X509v3 Authority Key Identifier:
keyid:92:EF:F6:16:25:02:EA:3B:52:FD:8C:A3:AE:10:8D:13:D6:BF:F6:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ku_2FiUC6jtS_YyjrhCNE9a_9lI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/7943a0-ccab-4260-bd51-afe89aacc492/1/ku_2FiUC6jtS_YyjrhCNE9a_9lI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/7943a0-ccab-4260-bd51-afe89aacc492/1/ku_2FiUC6jtS_YyjrhCNE9a_9lI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:c4:0a:3f:45:2e:65:a7:a0:0e:63:80:b6:64:dd:1a:66:65:
3c:4e:2e:4a:ce:58:f8:85:05:49:81:81:23:f1:71:eb:73:3a:
5a:f2:d9:66:bd:a0:10:c4:a4:53:6b:d6:52:9b:76:f3:87:d0:
14:da:b7:bc:be:47:dd:44:9e:20:e0:ea:ff:66:23:7a:69:1b:
d2:69:27:b0:13:10:32:7a:fa:0f:be:41:00:9e:7d:c0:85:f2:
1d:e9:96:cf:d1:84:90:6a:e9:98:29:9f:e1:9c:af:fc:cc:ce:
dc:9d:cf:0d:cc:bf:74:80:52:5f:58:38:23:53:2d:b3:28:44:
e0:e7:c2:77:21:88:62:e7:60:b6:58:0e:bb:92:78:35:bb:6e:
9b:97:0c:cf:a9:0d:2f:91:56:20:92:85:29:f4:89:24:66:0e:
05:f7:f0:be:35:36:87:30:ac:50:b7:16:e5:82:75:df:29:65:
58:7d:c2:f1:be:a2:bb:22:28:5a:3d:21:b8:8d:ef:d1:43:e6:
18:62:34:68:21:77:bd:6b:63:d9:14:fc:5a:b0:53:b0:8a:bf:
23:ce:4a:99:88:ac:7b:05:31:32:4d:d8:1b:70:75:d9:49:40:
c3:86:36:4f:95:7a:9a:46:7c:45:8c:84:38:3d:1a:ed:65:57:
0c:c6:9b:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:02:48 2026 by rpki-client