Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/7508cf-4198-42cc-9f25-821db0026738/1/kUJchq_U--IqaeAELgB2I0IxwpM.mft
File: kUJchq_U--IqaeAELgB2I0IxwpM.mft (raw, json)
Hash identifier: /UMvdO+WUwBBAQc29MbBMkAYZLz2KlI+SW4IHd5XCl4=
Subject key identifier: 4D:23:6A:D7:9A:4D:18:92:10:86:2A:87:26:B3:C5:DF:D8:15:D2:7A
Authority key identifier: 91:42:5C:86:AF:D4:FB:E2:2A:69:E0:04:2E:00:76:23:42:31:C2:93
Certificate issuer: /CN=91425c86afd4fbe22a69e0042e0076234231c293
Certificate serial: 019D2583CEF7AD3F1ADD07F313584B3209A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kUJchq_U--IqaeAELgB2I0IxwpM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/7508cf-4198-42cc-9f25-821db0026738/1/kUJchq_U--IqaeAELgB2I0IxwpM.mft
Manifest number: 01AD
Signing time: Wed 25 Mar 2026 15:01:28 +0000
Manifest this update: Wed 25 Mar 2026 15:01:28 +0000
Manifest next update: Thu 26 Mar 2026 15:01:28 +0000
Files and hashes: 1: i5hoQe1WYdmDRK93QhXSWo5DbcA.asa (hash: g4XW1rM0XwOC9gNiLBr0l5Eh7TR7jPk/IHmrYLGtPAk=)
2: kUJchq_U--IqaeAELgB2I0IxwpM.crl (hash: zr7kTXvbv0u11v9pAaa4mw3TrIooUTbTiQO+Pvr6NxY=)
3: koj8nEAhEbwLOtJWdl4dLHaxVeU.roa (hash: //uRIlijDFSI2Idtl9AfpbSmA1tZpNH4c/UlKhrcxxc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/7508cf-4198-42cc-9f25-821db0026738/1/kUJchq_U--IqaeAELgB2I0IxwpM.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/7508cf-4198-42cc-9f25-821db0026738/1/kUJchq_U--IqaeAELgB2I0IxwpM.mft
rsync://rpki.ripe.net/repository/DEFAULT/kUJchq_U--IqaeAELgB2I0IxwpM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:83:ce:f7:ad:3f:1a:dd:07:f3:13:58:4b:32:09:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91425c86afd4fbe22a69e0042e0076234231c293
Validity
Not Before: Mar 25 15:01:28 2026 GMT
Not After : Mar 26 15:01:28 2026 GMT
Subject: CN=4d236ad79a4d189210862a8726b3c5dfd815d27a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:98:47:82:19:da:ec:e4:ed:48:8f:44:3c:6c:
51:e2:5a:55:2c:15:09:95:de:a2:0a:95:10:23:92:
4e:e3:25:68:33:6c:94:97:5d:70:c4:35:48:91:e1:
85:f0:db:80:2f:75:52:a1:f6:e2:3a:93:3a:cc:b6:
f2:11:06:21:3d:ae:b8:85:9f:d2:4d:37:8b:19:5b:
2c:7a:10:40:6a:46:8d:e2:f0:bc:19:76:d3:86:dc:
f7:e3:df:29:f0:0b:1b:89:51:13:4f:a5:33:e5:6b:
b3:e0:f9:c1:42:55:7e:90:99:e8:16:8d:f2:6a:6d:
a0:97:5f:26:3a:b7:b7:a3:bf:d4:54:03:27:bd:48:
66:d7:26:dd:df:e8:cf:01:61:f5:48:0f:d6:37:8e:
d5:fb:0a:e5:6e:b6:72:9e:99:55:23:e9:41:ba:8b:
01:ce:47:60:41:d3:2a:76:72:7f:70:0f:a0:c1:24:
f1:44:11:9d:a8:80:99:ad:c4:1c:04:97:4e:fd:3c:
df:be:3f:d2:fa:dc:60:a1:c8:36:ad:64:c5:f9:3e:
c1:4a:08:22:31:c3:15:4a:6c:df:14:db:e8:ae:17:
36:e8:79:54:83:a9:1e:4c:99:c1:ad:63:af:a8:51:
e6:50:53:80:20:29:2c:fc:0d:9a:b0:db:8a:8d:8e:
5a:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:23:6A:D7:9A:4D:18:92:10:86:2A:87:26:B3:C5:DF:D8:15:D2:7A
X509v3 Authority Key Identifier:
keyid:91:42:5C:86:AF:D4:FB:E2:2A:69:E0:04:2E:00:76:23:42:31:C2:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kUJchq_U--IqaeAELgB2I0IxwpM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/7508cf-4198-42cc-9f25-821db0026738/1/kUJchq_U--IqaeAELgB2I0IxwpM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/7508cf-4198-42cc-9f25-821db0026738/1/kUJchq_U--IqaeAELgB2I0IxwpM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:5c:24:a7:0a:49:2b:a6:ad:a3:c5:e4:77:3a:44:b6:ab:6f:
bf:5b:d1:7b:60:4c:7b:42:1d:14:f3:9c:78:90:bd:ae:27:d8:
52:56:ed:77:28:04:c5:7a:61:c4:1d:df:32:76:34:ca:81:4a:
1a:43:1d:08:39:a3:76:bc:22:43:38:63:c0:61:ab:ba:f9:71:
9c:e0:9c:27:49:57:2b:78:31:bc:83:0c:ef:f0:26:83:0a:1c:
e5:b5:87:5d:1e:af:4a:cd:e1:73:fb:d2:af:8f:44:6c:03:88:
ed:37:1e:e3:f4:3f:de:49:d6:9c:e6:6b:2e:c7:35:d3:4e:b8:
b2:14:a2:f9:ad:a8:2f:be:4e:af:42:23:04:86:53:f3:df:0e:
ca:7e:2d:89:6e:6c:76:dd:85:1a:37:41:07:8f:3f:6c:ac:2a:
ad:31:68:24:ee:a6:4b:90:64:c4:06:f1:d3:a4:f6:b7:e8:b1:
64:95:9f:14:45:51:f1:0f:ea:60:5c:20:cf:9d:17:ef:32:00:
4a:ce:a9:2d:3d:60:79:1f:af:e5:fc:70:24:09:0d:63:9f:3d:
7d:78:d4:68:44:7c:ae:bc:67:2c:20:cd:4b:66:51:ee:df:94:
27:d6:34:8c:06:78:25:41:79:c0:7f:e5:3b:cd:40:c0:4a:4a:
2c:c7:f1:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 23:21:23 2026 by rpki-client