Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/40a276-8515-442c-816e-38eed6df053b/1/KuK_S6R9cV5T4us9AS0_y80bDsA.mft
File: KuK_S6R9cV5T4us9AS0_y80bDsA.mft (raw, json)
Hash identifier: AevwsxKsHyFxqN0NyxW16tJA9RFqUSB5p68GQ2V9swc=
Subject key identifier: 48:4C:9E:17:1B:5C:BB:68:B6:F0:17:37:38:1A:58:95:F4:59:E6:E1
Authority key identifier: 2A:E2:BF:4B:A4:7D:71:5E:53:E2:EB:3D:01:2D:3F:CB:CD:1B:0E:C0
Certificate issuer: /CN=2ae2bf4ba47d715e53e2eb3d012d3fcbcd1b0ec0
Certificate serial: 019FACAD1CEC28DC63850F8C22E8EF6DA6FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KuK_S6R9cV5T4us9AS0_y80bDsA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/40a276-8515-442c-816e-38eed6df053b/1/KuK_S6R9cV5T4us9AS0_y80bDsA.mft
Manifest number: 0417
Signing time: Wed 29 Jul 2026 07:00:53 +0000
Manifest this update: Wed 29 Jul 2026 07:00:53 +0000
Manifest next update: Thu 30 Jul 2026 07:00:53 +0000
Files and hashes: 1: KuK_S6R9cV5T4us9AS0_y80bDsA.crl (hash: akVZr19yuNfEf3iqhaQjPdpDj+D8Rz7gBTBysdZfgDg=)
2: uPCaDDec9QKPaddyi8Q6i4Q7q7k.roa (hash: n+pffEHjG87ngAjTdw3F82UnpSjTNX/RT+SqH5AesLg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/40a276-8515-442c-816e-38eed6df053b/1/KuK_S6R9cV5T4us9AS0_y80bDsA.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/40a276-8515-442c-816e-38eed6df053b/1/KuK_S6R9cV5T4us9AS0_y80bDsA.mft
rsync://rpki.ripe.net/repository/DEFAULT/KuK_S6R9cV5T4us9AS0_y80bDsA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 07:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:ad:1c:ec:28:dc:63:85:0f:8c:22:e8:ef:6d:a6:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ae2bf4ba47d715e53e2eb3d012d3fcbcd1b0ec0
Validity
Not Before: Jul 29 07:00:53 2026 GMT
Not After : Jul 30 07:00:53 2026 GMT
Subject: CN=484c9e171b5cbb68b6f01737381a5895f459e6e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:ee:f9:eb:35:65:dd:8d:dd:09:20:80:b5:40:
94:a0:62:50:a3:0d:51:eb:21:f4:55:5e:95:96:b5:
f5:c7:3c:f3:90:4e:a6:c2:80:8b:2f:b1:f6:50:24:
25:8e:28:c0:34:9d:85:eb:46:4a:53:9a:28:9a:06:
fd:27:b9:78:d6:33:54:7f:74:cc:fe:a7:f5:e6:db:
98:ff:a8:87:61:6c:de:03:18:74:4e:a0:cb:b6:bd:
a5:8a:df:5e:15:1c:4f:a1:c5:3f:4d:7c:62:1c:76:
f1:26:d3:9d:c8:1d:62:e5:8f:a8:52:4d:49:ea:a9:
97:55:3d:81:d1:a9:bc:13:80:10:c8:89:28:b3:8e:
bf:2f:7e:0a:bc:de:e7:d5:4c:c3:3c:45:a7:13:cd:
b4:05:a1:f2:7d:87:05:b8:4c:37:bc:cf:4d:1c:f3:
3f:97:2c:92:06:d2:84:e2:4c:1b:4e:4c:c4:c8:84:
15:c9:25:3c:c4:10:c8:92:f7:7d:25:f6:6e:f6:fb:
ee:8a:89:4c:2d:83:19:44:a5:24:2c:c0:33:b7:8e:
6f:14:2e:87:90:7c:05:e4:8f:19:36:8f:b0:8e:92:
de:94:c1:8c:f2:ea:95:0b:3b:c2:06:8e:a9:49:1a:
45:18:01:59:ea:61:44:86:d8:83:e2:3e:e7:eb:8d:
22:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:4C:9E:17:1B:5C:BB:68:B6:F0:17:37:38:1A:58:95:F4:59:E6:E1
X509v3 Authority Key Identifier:
keyid:2A:E2:BF:4B:A4:7D:71:5E:53:E2:EB:3D:01:2D:3F:CB:CD:1B:0E:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KuK_S6R9cV5T4us9AS0_y80bDsA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/40a276-8515-442c-816e-38eed6df053b/1/KuK_S6R9cV5T4us9AS0_y80bDsA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/40a276-8515-442c-816e-38eed6df053b/1/KuK_S6R9cV5T4us9AS0_y80bDsA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:1c:9d:bf:08:3a:c3:ad:7c:0f:11:d2:fb:1b:c5:24:1a:15:
9e:10:22:ff:e5:a5:9f:68:89:2a:d4:11:4e:03:9f:7b:56:70:
b7:94:0c:cd:d6:66:3f:b2:90:14:38:0d:d4:80:ca:01:0c:da:
29:93:6c:9c:b3:a4:5c:62:b0:95:6a:ef:ff:d4:d3:b9:96:61:
d7:80:a0:c9:d5:2c:b4:3a:3b:19:4a:2d:3d:c3:8e:f4:fd:4c:
a8:a6:94:67:8d:05:06:8a:fd:d5:8b:ac:2a:df:fe:a9:4e:c8:
7d:da:f2:01:52:95:5f:7d:7d:50:ab:7d:0d:f6:0a:af:76:f3:
0b:d9:a6:9c:5c:63:0d:b2:dd:b4:ae:de:b5:e1:49:e2:7f:39:
e7:ee:b1:f9:b5:43:d0:4d:2e:47:8d:6d:92:f3:24:86:02:02:
57:db:ed:0d:ce:a0:44:e8:88:9e:29:b8:62:16:81:00:2a:9b:
78:ab:c0:3f:8a:cd:ec:5f:2e:09:3d:8c:fa:1e:2b:4c:61:93:
c5:ff:70:72:5e:8d:3a:97:5e:ff:8d:d2:92:60:3c:48:04:80:
06:d1:61:83:d0:ea:e5:91:6d:27:a4:4a:88:83:f5:9f:05:14:
52:e8:cb:b7:7e:67:97:13:12:8f:54:57:74:ac:e3:bf:bc:64:
d4:9c:90:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 16:10:29 2026 by rpki-client