Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/7508cf-4198-42cc-9f25-821db0026738/1/kUJchq_U--IqaeAELgB2I0IxwpM.mft
File: kUJchq_U--IqaeAELgB2I0IxwpM.mft (raw, json)
Hash identifier: uCXi1F4wu9qNZwl2mL44X/S1zxU93PNU+hLKfK+oUYQ=
Subject key identifier: 64:32:FE:17:80:33:A9:03:53:C3:1F:A1:68:25:97:AC:E5:CF:F2:0C
Authority key identifier: 91:42:5C:86:AF:D4:FB:E2:2A:69:E0:04:2E:00:76:23:42:31:C2:93
Certificate issuer: /CN=91425c86afd4fbe22a69e0042e0076234231c293
Certificate serial: 019E1CB57B1765E3052EF9D3790949B4CF9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kUJchq_U--IqaeAELgB2I0IxwpM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/7508cf-4198-42cc-9f25-821db0026738/1/kUJchq_U--IqaeAELgB2I0IxwpM.mft
Manifest number: 022D
Signing time: Tue 12 May 2026 15:01:55 +0000
Manifest this update: Tue 12 May 2026 15:01:55 +0000
Manifest next update: Wed 13 May 2026 15:01:55 +0000
Files and hashes: 1: i5hoQe1WYdmDRK93QhXSWo5DbcA.asa (hash: g4XW1rM0XwOC9gNiLBr0l5Eh7TR7jPk/IHmrYLGtPAk=)
2: kUJchq_U--IqaeAELgB2I0IxwpM.crl (hash: kPtfwGZw8isjFSFDm9xcT/CKFTPDRbtiukOZoFd4WzY=)
3: koj8nEAhEbwLOtJWdl4dLHaxVeU.roa (hash: //uRIlijDFSI2Idtl9AfpbSmA1tZpNH4c/UlKhrcxxc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/7508cf-4198-42cc-9f25-821db0026738/1/kUJchq_U--IqaeAELgB2I0IxwpM.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/7508cf-4198-42cc-9f25-821db0026738/1/kUJchq_U--IqaeAELgB2I0IxwpM.mft
rsync://rpki.ripe.net/repository/DEFAULT/kUJchq_U--IqaeAELgB2I0IxwpM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:b5:7b:17:65:e3:05:2e:f9:d3:79:09:49:b4:cf:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91425c86afd4fbe22a69e0042e0076234231c293
Validity
Not Before: May 12 15:01:55 2026 GMT
Not After : May 13 15:01:55 2026 GMT
Subject: CN=6432fe178033a90353c31fa1682597ace5cff20c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:45:2c:34:d2:12:59:59:49:1b:02:7c:2f:28:
5b:19:a2:a9:83:01:fb:da:67:7e:42:c3:39:b4:3a:
8c:5f:e6:4f:3e:cc:06:6c:17:45:c0:ed:cb:ec:78:
29:2c:32:5d:c2:17:b8:65:bb:3a:19:49:99:21:1d:
b8:de:91:64:27:5e:bb:da:c3:37:58:95:de:78:71:
dd:ff:03:6c:58:e2:58:5d:a6:03:39:a6:e5:b5:ad:
a3:17:b9:e9:5b:ab:1e:c5:32:a3:ff:da:af:32:7d:
ff:ff:71:2a:a2:db:be:c5:53:d4:d2:c5:9f:dd:70:
71:40:50:df:73:bb:50:91:3c:29:03:45:f5:c9:cd:
72:5a:46:b4:5e:44:07:20:6e:40:10:cf:30:89:7d:
0a:1e:ea:d7:cd:9b:9d:5e:d6:12:d3:8d:76:7e:a5:
41:67:7e:14:ff:a4:61:65:f9:65:63:58:3d:3e:6d:
3c:65:ac:fd:58:00:cf:e5:c8:92:d1:98:03:23:32:
04:b4:dd:88:56:09:20:44:e0:9f:e8:be:c3:e7:19:
a3:25:cf:dc:45:89:a2:27:d3:56:07:fa:bf:9d:c0:
43:5c:5c:b9:4f:19:2a:f8:90:f4:55:ff:13:3d:7d:
a5:70:60:ea:9f:0a:7b:db:dc:a7:12:81:6e:2e:de:
12:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:32:FE:17:80:33:A9:03:53:C3:1F:A1:68:25:97:AC:E5:CF:F2:0C
X509v3 Authority Key Identifier:
keyid:91:42:5C:86:AF:D4:FB:E2:2A:69:E0:04:2E:00:76:23:42:31:C2:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kUJchq_U--IqaeAELgB2I0IxwpM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/7508cf-4198-42cc-9f25-821db0026738/1/kUJchq_U--IqaeAELgB2I0IxwpM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/7508cf-4198-42cc-9f25-821db0026738/1/kUJchq_U--IqaeAELgB2I0IxwpM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:42:41:b8:33:73:37:48:24:33:5b:b6:ea:52:f5:8e:3c:75:
ef:74:05:e9:ae:70:c7:53:4d:29:ad:b7:83:4f:68:01:42:51:
1e:65:0e:05:de:33:37:86:6e:82:93:34:eb:c3:e5:8a:7d:3e:
bd:e7:c5:e6:f4:db:59:46:1f:ee:d6:18:e2:3e:8b:1a:0b:9d:
6d:83:b2:45:1a:35:14:fe:d1:c9:36:6f:94:f3:06:f8:90:d1:
30:10:f0:59:d2:6e:2b:05:c2:32:c3:93:5d:41:88:dd:f2:70:
52:ab:98:92:5b:3c:c4:bf:a1:ef:cb:ee:96:cc:e9:5b:59:bb:
03:a1:46:c7:93:b6:24:5c:11:fa:6d:65:fb:6c:ad:fc:59:1b:
90:db:16:41:b2:b5:45:8f:d6:09:c7:6e:77:2b:49:95:e5:1d:
9d:f8:8b:7f:d9:87:72:e2:7e:ff:7f:9a:d2:36:22:e4:05:d4:
91:ec:57:ce:75:e6:46:32:fb:8b:09:e0:f5:bc:73:9d:e5:cd:
d9:6c:2a:15:ff:be:2c:c8:70:ea:6b:0c:37:02:53:4a:b6:44:
51:33:24:a8:b3:1b:1b:43:87:22:69:fa:7e:2b:86:b2:1b:52:
33:cb:97:8d:60:2d:04:4f:fe:02:76:d5:d2:a6:97:89:e5:e1:
ee:28:9d:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:27:26 2026 by rpki-client