Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/40a276-8515-442c-816e-38eed6df053b/1/KuK_S6R9cV5T4us9AS0_y80bDsA.mft
File: KuK_S6R9cV5T4us9AS0_y80bDsA.mft (raw, json)
Hash identifier: 3FShhG/1X6bGPT7SO0Lqtu3biVeWEIof7nMUjNN4OpY=
Subject key identifier: 42:48:B1:03:D4:80:9A:ED:7C:74:20:DD:D3:C1:8B:11:3A:86:0C:0C
Authority key identifier: 2A:E2:BF:4B:A4:7D:71:5E:53:E2:EB:3D:01:2D:3F:CB:CD:1B:0E:C0
Certificate issuer: /CN=2ae2bf4ba47d715e53e2eb3d012d3fcbcd1b0ec0
Certificate serial: 019CADFE92FC53F719BDD06A20711405BA17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KuK_S6R9cV5T4us9AS0_y80bDsA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/40a276-8515-442c-816e-38eed6df053b/1/KuK_S6R9cV5T4us9AS0_y80bDsA.mft
Manifest number: 028A
Signing time: Mon 02 Mar 2026 10:01:08 +0000
Manifest this update: Mon 02 Mar 2026 10:01:08 +0000
Manifest next update: Tue 03 Mar 2026 10:01:08 +0000
Files and hashes: 1: KuK_S6R9cV5T4us9AS0_y80bDsA.crl (hash: sBMwUz5cxoBb3WHOTeGsLusmFWDjhFkMY0AjTF1P38I=)
2: uPCaDDec9QKPaddyi8Q6i4Q7q7k.roa (hash: n+pffEHjG87ngAjTdw3F82UnpSjTNX/RT+SqH5AesLg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/40a276-8515-442c-816e-38eed6df053b/1/KuK_S6R9cV5T4us9AS0_y80bDsA.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/40a276-8515-442c-816e-38eed6df053b/1/KuK_S6R9cV5T4us9AS0_y80bDsA.mft
rsync://rpki.ripe.net/repository/DEFAULT/KuK_S6R9cV5T4us9AS0_y80bDsA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 10:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:fe:92:fc:53:f7:19:bd:d0:6a:20:71:14:05:ba:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ae2bf4ba47d715e53e2eb3d012d3fcbcd1b0ec0
Validity
Not Before: Mar 2 10:01:08 2026 GMT
Not After : Mar 3 10:01:08 2026 GMT
Subject: CN=4248b103d4809aed7c7420ddd3c18b113a860c0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:11:cc:89:f9:5a:0b:2d:62:c9:1c:36:65:dc:
78:07:0a:d3:05:5b:3d:2d:df:4a:c1:d9:86:82:8a:
d6:48:a9:d1:0c:5b:35:34:6d:97:19:77:e0:cf:8b:
63:63:4b:fd:95:61:55:63:1d:49:9c:ac:d2:06:a2:
fb:6d:8f:f4:fa:9e:30:63:08:87:68:9b:6c:90:d5:
37:a8:44:46:33:95:d0:49:1d:41:b8:ab:e5:71:5b:
bd:36:d1:95:31:af:11:38:f8:b1:51:f3:c2:6a:40:
9a:71:c7:c0:c4:ec:49:35:70:9a:5b:3a:1a:5d:7d:
18:13:c0:f6:82:78:d4:7a:fe:f6:b9:45:e4:b6:54:
e6:b7:32:53:1e:69:8d:41:4b:ec:cb:06:6a:f5:f3:
08:47:c9:d8:ad:89:f2:df:f3:6e:00:87:34:a5:26:
5e:5a:c6:f8:99:47:d9:74:01:a7:5b:fa:e5:e5:86:
d7:c0:af:6a:23:86:48:6f:9b:af:7a:1c:92:3f:fc:
c3:13:11:b7:3d:fe:ec:b9:0c:0f:e6:29:3f:ed:f0:
af:25:4c:73:fc:ec:87:54:6b:04:31:52:10:bd:5d:
7b:70:13:bd:19:5e:02:99:6e:ec:d8:e2:42:62:12:
dc:f8:72:a9:ec:74:4f:a3:f5:01:ae:82:49:98:1b:
d3:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:48:B1:03:D4:80:9A:ED:7C:74:20:DD:D3:C1:8B:11:3A:86:0C:0C
X509v3 Authority Key Identifier:
keyid:2A:E2:BF:4B:A4:7D:71:5E:53:E2:EB:3D:01:2D:3F:CB:CD:1B:0E:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KuK_S6R9cV5T4us9AS0_y80bDsA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/40a276-8515-442c-816e-38eed6df053b/1/KuK_S6R9cV5T4us9AS0_y80bDsA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/40a276-8515-442c-816e-38eed6df053b/1/KuK_S6R9cV5T4us9AS0_y80bDsA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:60:66:18:70:53:8d:0e:77:2a:ce:0a:65:44:ac:74:7a:00:
f0:87:4a:55:08:30:22:f5:e1:e1:08:fd:8f:36:f1:d9:0b:b4:
ba:06:b8:b4:85:51:bf:7f:50:42:2a:05:f2:3c:f6:3e:5f:3b:
e1:c4:a1:eb:2c:01:18:c2:50:86:75:1a:52:1c:6e:39:40:38:
90:50:11:08:94:74:63:6d:81:65:b9:97:9f:56:7b:09:05:98:
4f:99:54:10:2b:fb:d2:c3:20:ff:c6:02:93:b6:6a:b9:d8:4e:
a0:40:5b:cc:01:a6:1d:8a:c4:c5:5a:cf:e6:de:ad:ab:36:21:
4b:04:a3:a4:b8:73:de:c9:89:aa:a6:d6:da:f1:0b:9b:bb:6f:
d0:7e:1a:88:43:e4:21:a3:52:30:31:54:f7:0c:b9:35:9b:11:
75:33:23:b1:3e:7d:2c:1e:f2:92:93:a2:44:a7:49:ec:bb:5e:
7c:e9:5c:1f:ee:02:7a:22:53:ab:de:2a:72:c0:6d:f6:e6:17:
f8:47:d1:b7:eb:04:94:83:7e:95:a5:5d:60:c0:6f:88:67:9c:
ab:22:83:1d:8a:9c:25:e6:ad:97:c7:4a:a2:d2:19:e6:af:82:
b9:12:da:0e:00:df:a7:ca:5e:3e:87:f2:8f:72:d3:1e:5e:60:
cb:b6:29:f3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyt/pL8U/cZvdBqIHEUBboXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhZTJiZjRiYTQ3ZDcxNWU1M2UyZWIzZDAxMmQzZmNiY2Qx
YjBlYzAwHhcNMjYwMzAyMTAwMTA4WhcNMjYwMzAzMTAwMTA4WjAzMTEwLwYDVQQD
Eyg0MjQ4YjEwM2Q0ODA5YWVkN2M3NDIwZGRkM2MxOGIxMTNhODYwYzBjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyhHMiflaCy1iyRw2Zdx4BwrTBVs9
Ld9KwdmGgorWSKnRDFs1NG2XGXfgz4tjY0v9lWFVYx1JnKzSBqL7bY/0+p4wYwiH
aJtskNU3qERGM5XQSR1BuKvlcVu9NtGVMa8ROPixUfPCakCaccfAxOxJNXCaWzoa
XX0YE8D2gnjUev72uUXktlTmtzJTHmmNQUvsywZq9fMIR8nYrYny3/NuAIc0pSZe
Wsb4mUfZdAGnW/rl5YbXwK9qI4ZIb5uvehySP/zDExG3Pf7suQwP5ik/7fCvJUxz
/OyHVGsEMVIQvV17cBO9GV4CmW7s2OJCYhLc+HKp7HRPo/UBroJJmBvTLwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEJIsQPUgJrtfHQg3dPBixE6hgwMMB8GA1UdIwQY
MBaAFCriv0ukfXFeU+LrPQEtP8vNGw7AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS3VLX1M2UjljVjVUNHVzOUFTMF95ODBiRHNBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy80MGEyNzYtODUxNS00NDJjLTgxNmUt
MzhlZWQ2ZGYwNTNiLzEvS3VLX1M2UjljVjVUNHVzOUFTMF95ODBiRHNBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNy80MGEyNzYtODUxNS00NDJjLTgxNmUtMzhlZWQ2ZGYwNTNi
LzEvS3VLX1M2UjljVjVUNHVzOUFTMF95ODBiRHNBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXGBmGHBT
jQ53Ks4KZUSsdHoA8IdKVQgwIvXh4Qj9jzbx2Qu0uga4tIVRv39QQioF8jz2Pl87
4cSh6ywBGMJQhnUaUhxuOUA4kFARCJR0Y22BZbmXn1Z7CQWYT5lUECv70sMg/8YC
k7ZqudhOoEBbzAGmHYrExVrP5t6tqzYhSwSjpLhz3smJqqbW2vELm7tv0H4aiEPk
IaNSMDFU9wy5NZsRdTMjsT59LB7ykpOiRKdJ7LtefOlcH+4CeiJTq94qcsBt9uYX
+EfRt+sElIN+laVdYMBviGecqyKDHYqcJeatl8dKotIZ5q+CuRLaDgDfp8pePofy
j3LTHl5gy7Yp8w==
-----END CERTIFICATE-----
Generated at Mon Mar 2 18:25:12 2026 by rpki-client