Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/27/40a276-8515-442c-816e-38eed6df053b/1/KuK_S6R9cV5T4us9AS0_y80bDsA.mft
File: KuK_S6R9cV5T4us9AS0_y80bDsA.mft (raw, json)
Hash identifier: BgvdxhPL8VPVewsrQII9VL6RFXo6OJ4IVIStEeNoA0A=
Subject key identifier: B5:B4:88:EE:07:EA:82:49:A6:72:15:9A:A7:5F:84:AD:16:15:DF:DD
Authority key identifier: 2A:E2:BF:4B:A4:7D:71:5E:53:E2:EB:3D:01:2D:3F:CB:CD:1B:0E:C0
Certificate issuer: /CN=2ae2bf4ba47d715e53e2eb3d012d3fcbcd1b0ec0
Certificate serial: 01A0F6E8CE1E76BCB9351237FB914AAD9972
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KuK_S6R9cV5T4us9AS0_y80bDsA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/40a276-8515-442c-816e-38eed6df053b/1/KuK_S6R9cV5T4us9AS0_y80bDsA.mft
Manifest number: 04C2
Signing time: Thu 01 Oct 2026 10:00:47 +0000
Manifest this update: Thu 01 Oct 2026 10:00:47 +0000
Manifest next update: Fri 02 Oct 2026 10:00:47 +0000
Files and hashes: 1: KuK_S6R9cV5T4us9AS0_y80bDsA.crl (hash: 41BkUoicBxXqDkZDZyRm7wvbXFb8AARoAyD7YxOfvEQ=)
2: uPCaDDec9QKPaddyi8Q6i4Q7q7k.roa (hash: n+pffEHjG87ngAjTdw3F82UnpSjTNX/RT+SqH5AesLg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/40a276-8515-442c-816e-38eed6df053b/1/KuK_S6R9cV5T4us9AS0_y80bDsA.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/40a276-8515-442c-816e-38eed6df053b/1/KuK_S6R9cV5T4us9AS0_y80bDsA.mft
rsync://rpki.ripe.net/repository/DEFAULT/KuK_S6R9cV5T4us9AS0_y80bDsA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 Oct 2026 10:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f6:e8:ce:1e:76:bc:b9:35:12:37:fb:91:4a:ad:99:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ae2bf4ba47d715e53e2eb3d012d3fcbcd1b0ec0
Validity
Not Before: Oct 1 10:00:47 2026 GMT
Not After : Oct 2 10:00:47 2026 GMT
Subject: CN=b5b488ee07ea8249a672159aa75f84ad1615dfdd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:1c:3c:8b:15:bc:d9:8b:c1:ad:4e:4b:0d:00:
b6:63:ef:2a:80:89:2a:d6:d1:73:4c:f7:a3:b6:67:
31:e5:77:e6:14:b0:2d:ac:ee:41:dd:6a:99:4e:70:
bd:89:14:a0:3d:37:bd:96:19:a5:78:9e:55:91:49:
a4:47:8a:8f:b8:9d:ab:6e:28:a8:5e:eb:21:a4:eb:
b7:90:27:7f:c2:91:f2:28:4d:71:88:33:4d:96:ce:
19:0a:7b:06:0b:34:b2:bd:bf:5c:12:05:a6:2d:bb:
c8:4e:2f:5e:90:f9:70:39:81:c7:48:1f:3d:fa:ee:
53:ce:2b:31:8a:95:32:93:a1:c7:40:8f:cd:49:ce:
93:8d:0a:76:5c:10:b0:a6:dc:4b:1f:f8:f2:4e:5b:
0c:03:f2:76:84:e1:8a:1d:bd:1a:3f:c1:f8:82:91:
08:be:4f:94:9d:66:e4:ef:c1:da:df:c6:e5:92:2c:
70:02:2d:2a:13:d9:7b:ef:45:23:2b:af:20:89:ea:
cc:5f:4f:62:8e:83:c1:e5:e7:28:5b:ae:c0:8b:1f:
ca:f7:61:55:4d:f1:20:6a:cc:af:a3:c5:b3:98:81:
ff:b6:09:6f:63:8a:46:44:e9:ba:ae:3e:27:90:97:
7c:52:f3:a8:eb:20:89:69:99:a3:2f:55:98:2c:83:
b0:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:B4:88:EE:07:EA:82:49:A6:72:15:9A:A7:5F:84:AD:16:15:DF:DD
X509v3 Authority Key Identifier:
keyid:2A:E2:BF:4B:A4:7D:71:5E:53:E2:EB:3D:01:2D:3F:CB:CD:1B:0E:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KuK_S6R9cV5T4us9AS0_y80bDsA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/40a276-8515-442c-816e-38eed6df053b/1/KuK_S6R9cV5T4us9AS0_y80bDsA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/40a276-8515-442c-816e-38eed6df053b/1/KuK_S6R9cV5T4us9AS0_y80bDsA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:53:1d:06:31:6f:73:dc:99:23:dc:8c:96:23:fe:8a:35:20:
d8:ec:9b:43:e4:1a:7d:b3:b0:ae:be:09:ae:39:92:c8:53:90:
25:c8:02:d7:1f:b8:a3:f1:8f:41:75:46:7c:b0:e9:ef:19:7b:
b9:84:1c:ae:0d:74:22:25:72:68:7e:90:2e:23:24:bb:62:42:
73:6e:fb:5f:db:1a:83:e0:51:13:66:0a:a3:b1:3d:40:8e:c5:
4d:5a:2b:31:cf:f5:68:4e:55:85:bd:f7:ec:ed:07:27:7f:4f:
1c:06:03:ab:66:35:8f:20:ee:ba:c4:30:25:ce:ca:66:0f:11:
9c:d2:db:bb:19:f6:71:f9:3d:e1:81:2f:7e:70:17:d6:b8:a0:
5e:dc:5c:d6:12:da:11:7e:ab:3a:ba:60:a5:ee:77:2f:c3:5d:
87:56:b9:a9:55:ee:98:93:67:9d:bf:6b:62:0d:48:bd:09:51:
0b:64:7c:2f:5f:62:7a:61:9f:d8:d3:cb:d8:8c:94:25:af:bd:
ca:af:73:b0:3d:1d:d9:a0:26:4a:85:39:c9:d8:95:54:b6:8c:
81:81:04:64:6a:a0:15:aa:00:d5:3d:e8:93:2a:17:d5:9c:91:
ae:fd:da:a8:c2:05:5a:4f:33:e5:66:3f:a5:16:2f:02:9e:79:
d0:ee:00:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 1 21:15:23 2026 by rpki-client