Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/d5e9f6-3f6d-4694-89b8-a093d100874c/1/KuLHRej2hPuArBnM3AierFgUZUo.mft
File: KuLHRej2hPuArBnM3AierFgUZUo.mft (raw, json)
Hash identifier: NVQeYiZzPO2ZDrJzqQQA4oZGybSgLN4RjyZsRwqQH+w=
Subject key identifier: C1:0C:D5:99:47:8C:DA:C3:7E:D2:14:4C:95:7C:B4:E8:F1:64:54:5D
Authority key identifier: 2A:E2:C7:45:E8:F6:84:FB:80:AC:19:CC:DC:08:9E:AC:58:14:65:4A
Certificate issuer: /CN=2ae2c745e8f684fb80ac19ccdc089eac5814654a
Certificate serial: 019FA8991646A1BCB2376DCDFCBE6D417537
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KuLHRej2hPuArBnM3AierFgUZUo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/d5e9f6-3f6d-4694-89b8-a093d100874c/1/KuLHRej2hPuArBnM3AierFgUZUo.mft
Manifest number: 4C
Signing time: Tue 28 Jul 2026 12:00:32 +0000
Manifest this update: Tue 28 Jul 2026 12:00:32 +0000
Manifest next update: Wed 29 Jul 2026 12:00:32 +0000
Files and hashes: 1: C7BgJU1RJsS8-1WKTqX6V7kq4y0.roa (hash: SGtJrPMic2ON9eWUe2+fmPnOCxoU1rHwRo66TB4f67w=)
2: KuLHRej2hPuArBnM3AierFgUZUo.crl (hash: KJZkZsRHHDtimduwREpuNL8a5pRS07CT95DuqFUd85A=)
3: WgjIu8S97FBry8IBJX7BijRh0UE.asa (hash: plmhVkPEVtHqmyaviSWaVdRoyVEm1YYRYzj6w9pBiLw=)
4: sXYBYOzWape5FZOss1s2gbpkzzU.roa (hash: KREfilkta372D7Yqg/hHtPffqvz0AiEw0qbCO9glSQM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/d5e9f6-3f6d-4694-89b8-a093d100874c/1/KuLHRej2hPuArBnM3AierFgUZUo.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/d5e9f6-3f6d-4694-89b8-a093d100874c/1/KuLHRej2hPuArBnM3AierFgUZUo.mft
rsync://rpki.ripe.net/repository/DEFAULT/KuLHRej2hPuArBnM3AierFgUZUo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 07:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:99:16:46:a1:bc:b2:37:6d:cd:fc:be:6d:41:75:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ae2c745e8f684fb80ac19ccdc089eac5814654a
Validity
Not Before: Jul 28 12:00:32 2026 GMT
Not After : Jul 29 12:00:32 2026 GMT
Subject: CN=c10cd599478cdac37ed2144c957cb4e8f164545d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:5b:0c:64:e7:fa:b4:d2:11:d6:89:0f:bc:8b:
09:7a:f8:3a:60:e9:aa:b5:0b:4e:60:a4:14:ae:70:
1b:4c:8c:fe:18:fd:7d:15:6c:d9:16:dd:a2:39:bc:
9d:bf:ab:f6:6c:2a:d4:b9:e2:79:1b:47:7d:61:c1:
b4:61:53:7c:21:45:16:1f:e6:c6:44:c6:01:8d:21:
3f:91:f0:6f:73:10:a4:db:8a:1e:9c:ac:a8:f3:0e:
d0:89:e5:f4:17:71:a0:74:28:bd:62:96:07:e3:8a:
be:66:90:15:65:cb:0d:1b:58:a0:d8:d8:1b:9c:82:
57:8a:47:30:04:40:57:c5:90:56:e2:0f:05:9e:8d:
89:bb:59:08:68:10:19:23:e9:77:ca:36:c6:c4:f6:
36:48:c7:44:f6:e8:db:d0:b0:3e:b9:68:80:09:db:
42:37:14:b4:b7:3e:d8:35:5f:e9:e2:d4:75:98:d1:
fe:95:4c:cb:c1:54:c2:41:65:1b:1e:73:a9:c1:12:
1f:aa:44:f3:00:3f:7a:14:7f:5d:7e:d6:ca:ff:75:
67:82:2b:e7:17:be:a8:73:9d:d2:7f:b8:75:a8:ea:
b4:79:44:da:82:11:9a:e2:ce:14:90:3d:c5:38:2d:
93:7a:7e:ea:55:b5:5a:5b:35:07:2f:6a:cb:7a:13:
e7:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:0C:D5:99:47:8C:DA:C3:7E:D2:14:4C:95:7C:B4:E8:F1:64:54:5D
X509v3 Authority Key Identifier:
keyid:2A:E2:C7:45:E8:F6:84:FB:80:AC:19:CC:DC:08:9E:AC:58:14:65:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KuLHRej2hPuArBnM3AierFgUZUo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/d5e9f6-3f6d-4694-89b8-a093d100874c/1/KuLHRej2hPuArBnM3AierFgUZUo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/d5e9f6-3f6d-4694-89b8-a093d100874c/1/KuLHRej2hPuArBnM3AierFgUZUo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:9e:45:57:47:05:c0:30:45:b5:1d:6b:ea:c5:3d:d2:55:54:
5e:16:49:d6:78:76:2a:c7:7f:04:4a:59:fd:65:9f:45:08:cd:
27:d9:92:50:98:80:32:bf:a4:cf:4c:d9:fa:bd:e7:43:d1:f8:
22:d0:e7:e9:67:c6:3a:1e:18:b8:45:48:75:c5:2b:bb:70:83:
20:d4:d2:87:a9:72:93:6c:6a:74:e2:39:8e:d4:98:4a:20:c1:
c0:ba:f8:b3:36:93:17:eb:63:d3:ba:dd:4a:0b:06:fb:32:d3:
da:22:1a:f7:9b:95:4f:82:b3:83:fd:5c:6f:19:34:fe:50:fa:
61:94:0d:bc:2c:13:fc:5d:72:e3:21:9c:aa:41:ca:f3:84:95:
4e:cf:b0:9d:5e:0f:78:f2:96:4b:4c:58:30:6b:1b:3d:c0:64:
04:7e:19:48:b3:80:73:38:e8:9e:e0:2d:55:32:2d:db:b3:70:
2b:31:5c:a5:31:36:83:5a:dd:1b:4a:35:82:27:e5:b2:ed:92:
dc:73:82:10:67:65:ad:b1:ff:fa:05:2d:be:81:47:56:97:30:
94:73:66:83:ce:dd:e7:7f:93:2f:70:4b:92:3c:e0:d4:d1:bc:
78:8a:b1:27:ef:0a:cb:78:b8:7e:03:ed:d9:ae:70:63:75:ec:
59:72:a9:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 13:32:53 2026 by rpki-client