Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/52/7508cf-4198-42cc-9f25-821db0026738/1/kUJchq_U--IqaeAELgB2I0IxwpM.mft
File: kUJchq_U--IqaeAELgB2I0IxwpM.mft (raw, json)
Hash identifier: JCDLmBcpLYtxfRufPW89E7MfTNQ5wzd1b0LWfysf8s8=
Subject key identifier: 91:97:02:BA:35:EB:7B:20:8F:34:93:5A:0B:8A:8C:BB:5D:3F:11:62
Authority key identifier: 91:42:5C:86:AF:D4:FB:E2:2A:69:E0:04:2E:00:76:23:42:31:C2:93
Certificate issuer: /CN=91425c86afd4fbe22a69e0042e0076234231c293
Certificate serial: 01A0DF85F0B9698BE2D6C25B0BFDB9504ED6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kUJchq_U--IqaeAELgB2I0IxwpM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/7508cf-4198-42cc-9f25-821db0026738/1/kUJchq_U--IqaeAELgB2I0IxwpM.mft
Manifest number: 039B
Signing time: Sat 26 Sep 2026 21:01:32 +0000
Manifest this update: Sat 26 Sep 2026 21:01:32 +0000
Manifest next update: Sun 27 Sep 2026 21:01:32 +0000
Files and hashes: 1: i5hoQe1WYdmDRK93QhXSWo5DbcA.asa (hash: g4XW1rM0XwOC9gNiLBr0l5Eh7TR7jPk/IHmrYLGtPAk=)
2: kUJchq_U--IqaeAELgB2I0IxwpM.crl (hash: 4LNBgQi4Z73KphElDr5LR6ptwo3NphJfNUjUA2eyNqY=)
3: koj8nEAhEbwLOtJWdl4dLHaxVeU.roa (hash: //uRIlijDFSI2Idtl9AfpbSmA1tZpNH4c/UlKhrcxxc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/7508cf-4198-42cc-9f25-821db0026738/1/kUJchq_U--IqaeAELgB2I0IxwpM.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/7508cf-4198-42cc-9f25-821db0026738/1/kUJchq_U--IqaeAELgB2I0IxwpM.mft
rsync://rpki.ripe.net/repository/DEFAULT/kUJchq_U--IqaeAELgB2I0IxwpM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 19:30:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:df:85:f0:b9:69:8b:e2:d6:c2:5b:0b:fd:b9:50:4e:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91425c86afd4fbe22a69e0042e0076234231c293
Validity
Not Before: Sep 26 21:01:32 2026 GMT
Not After : Sep 27 21:01:32 2026 GMT
Subject: CN=919702ba35eb7b208f34935a0b8a8cbb5d3f1162
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:57:ab:54:f4:71:b3:11:6e:76:4a:34:2e:9a:
39:b0:d0:4f:72:6f:16:28:88:1b:85:f9:5d:ce:e9:
50:de:1e:d8:67:0d:50:2b:8f:5f:ae:67:46:6c:61:
5a:bc:3c:8b:2a:a8:85:3f:79:52:99:db:c0:47:4d:
c8:d4:9c:01:a1:c9:2c:f5:b4:b4:94:a9:19:af:99:
2c:c8:e9:ec:03:ab:66:e0:85:84:65:93:b1:7b:56:
ab:3f:19:19:00:8b:f3:0c:37:ee:a9:da:ff:a0:a8:
eb:75:27:c0:6d:77:39:5b:d3:9c:6f:9a:87:14:4c:
fd:8a:56:ff:27:85:73:bc:db:0b:31:35:ec:f3:d9:
ca:84:04:b9:3b:5a:dc:b4:9f:5e:a0:70:70:81:1b:
1d:f8:dc:03:52:66:a9:31:19:5d:6b:03:2c:49:e5:
a0:18:2a:64:1a:06:71:96:96:72:67:7f:65:a1:96:
16:39:51:28:3e:0d:b2:62:e8:3a:e2:9c:3e:e3:67:
4d:e9:cd:a7:1e:67:09:ef:b2:a9:13:16:21:88:60:
cc:de:4f:d3:d5:93:c7:ea:12:cf:61:c1:9e:66:0a:
f8:3e:cd:db:7c:bc:23:fd:43:f3:6a:bb:59:77:c9:
4b:e9:22:e7:e6:c5:57:bf:f8:d7:8a:cc:a3:7c:07:
d4:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:97:02:BA:35:EB:7B:20:8F:34:93:5A:0B:8A:8C:BB:5D:3F:11:62
X509v3 Authority Key Identifier:
keyid:91:42:5C:86:AF:D4:FB:E2:2A:69:E0:04:2E:00:76:23:42:31:C2:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kUJchq_U--IqaeAELgB2I0IxwpM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/7508cf-4198-42cc-9f25-821db0026738/1/kUJchq_U--IqaeAELgB2I0IxwpM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/7508cf-4198-42cc-9f25-821db0026738/1/kUJchq_U--IqaeAELgB2I0IxwpM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:9a:e7:02:cb:53:06:77:30:61:69:4a:b5:64:f2:fe:5a:d7:
54:df:47:15:ec:3d:a4:34:38:18:9c:f4:1c:0a:66:9e:50:35:
80:b7:00:be:62:23:0d:6b:cb:bd:13:04:bc:eb:e3:9d:ed:6c:
05:8b:94:01:82:d0:bf:e0:f2:d6:ff:70:4a:f7:9b:8f:d2:ee:
30:09:15:5a:02:3a:02:5f:df:d4:d5:e9:80:22:e9:60:2a:97:
51:48:0f:7e:d1:e6:76:d2:b2:c8:d4:52:a5:7c:56:88:a6:9d:
b4:af:b8:2d:99:e5:9d:c0:64:99:17:24:8a:08:00:63:66:84:
58:a6:df:56:e1:aa:d3:31:f5:70:55:ad:aa:1c:88:b1:fb:95:
ea:a8:23:ea:2f:17:a4:6d:94:ba:02:df:2e:ba:8a:24:12:b7:
56:51:14:4d:8d:f3:e3:71:36:33:71:53:9d:c0:47:bf:83:f7:
3d:d1:ab:e5:df:f4:96:ce:49:92:83:21:75:d5:9b:7e:9e:ac:
ee:e0:90:f8:bc:c4:ed:00:67:39:55:af:a3:15:af:a1:c2:7c:
3d:b7:0b:88:53:e0:e6:a6:10:ed:36:c7:eb:4c:0b:ea:85:1a:
fc:fa:17:41:2f:a3:23:c4:eb:13:c4:1a:2b:a0:e1:98:5e:ee:
a9:be:1e:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 04:49:12 2026 by rpki-client