Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/40a276-8515-442c-816e-38eed6df053b/1/KuK_S6R9cV5T4us9AS0_y80bDsA.mft
File: KuK_S6R9cV5T4us9AS0_y80bDsA.mft (raw, json)
Hash identifier: 9H3MEfvyPirkZX3EvSAiQxW/YmNcE0OJpB3fySa0C/s=
Subject key identifier: 70:95:3C:55:7C:8F:78:74:B2:46:62:2B:9E:1B:A5:80:EC:BE:50:E7
Authority key identifier: 2A:E2:BF:4B:A4:7D:71:5E:53:E2:EB:3D:01:2D:3F:CB:CD:1B:0E:C0
Certificate issuer: /CN=2ae2bf4ba47d715e53e2eb3d012d3fcbcd1b0ec0
Certificate serial: 019EC30007888DBF7F88EB1DC345F769D756
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KuK_S6R9cV5T4us9AS0_y80bDsA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/40a276-8515-442c-816e-38eed6df053b/1/KuK_S6R9cV5T4us9AS0_y80bDsA.mft
Manifest number: 039E
Signing time: Sat 13 Jun 2026 22:00:19 +0000
Manifest this update: Sat 13 Jun 2026 22:00:19 +0000
Manifest next update: Sun 14 Jun 2026 22:00:19 +0000
Files and hashes: 1: KuK_S6R9cV5T4us9AS0_y80bDsA.crl (hash: q3dvrLWi1EfBvVZC35rKOPQMjr7QXYcR7+wyofb+Vws=)
2: uPCaDDec9QKPaddyi8Q6i4Q7q7k.roa (hash: n+pffEHjG87ngAjTdw3F82UnpSjTNX/RT+SqH5AesLg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/40a276-8515-442c-816e-38eed6df053b/1/KuK_S6R9cV5T4us9AS0_y80bDsA.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/40a276-8515-442c-816e-38eed6df053b/1/KuK_S6R9cV5T4us9AS0_y80bDsA.mft
rsync://rpki.ripe.net/repository/DEFAULT/KuK_S6R9cV5T4us9AS0_y80bDsA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 17:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c3:00:07:88:8d:bf:7f:88:eb:1d:c3:45:f7:69:d7:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ae2bf4ba47d715e53e2eb3d012d3fcbcd1b0ec0
Validity
Not Before: Jun 13 22:00:19 2026 GMT
Not After : Jun 14 22:00:19 2026 GMT
Subject: CN=70953c557c8f7874b246622b9e1ba580ecbe50e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:fe:47:7d:b5:1a:04:15:65:b6:ee:28:f4:41:
0d:83:0d:9f:c3:69:b0:f1:8d:2d:09:ea:1a:65:65:
76:19:ee:63:c8:44:b2:87:36:72:be:8d:3d:4e:3b:
a8:74:eb:e1:22:c4:d9:ef:80:b3:c9:58:6f:c7:43:
18:46:69:46:c2:37:46:de:1b:f4:85:ae:a8:29:6b:
ff:03:f1:d3:5f:f9:37:87:59:b9:53:1b:76:e4:0f:
69:b8:b3:5e:5b:8f:1e:5e:d0:c0:1a:94:51:34:3f:
81:18:5b:10:9f:dc:dc:6e:b7:7a:4f:72:f9:99:9b:
b5:6e:f5:7a:f9:44:78:12:bc:f5:e4:e4:f7:55:7e:
84:ea:a7:e6:e7:74:0b:3d:ba:c0:2e:1c:9d:47:14:
82:5e:6a:27:db:57:f3:b2:1f:e5:b9:1d:25:8d:33:
4d:a9:9b:d4:7a:0a:71:37:99:03:2e:4b:cb:20:de:
f9:a9:94:a4:34:c9:06:f0:7e:39:d6:62:0f:cc:7c:
e1:63:57:e6:ec:48:6e:ad:48:7c:62:a0:bb:4e:5d:
e5:15:38:e0:58:90:dd:91:e7:1c:80:a9:0f:31:10:
54:c7:88:b8:63:f5:d1:6a:1f:99:c9:60:7c:60:33:
4e:6e:fd:2e:1d:c4:40:b3:e9:fd:02:18:b9:ee:72:
7f:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:95:3C:55:7C:8F:78:74:B2:46:62:2B:9E:1B:A5:80:EC:BE:50:E7
X509v3 Authority Key Identifier:
keyid:2A:E2:BF:4B:A4:7D:71:5E:53:E2:EB:3D:01:2D:3F:CB:CD:1B:0E:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KuK_S6R9cV5T4us9AS0_y80bDsA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/40a276-8515-442c-816e-38eed6df053b/1/KuK_S6R9cV5T4us9AS0_y80bDsA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/40a276-8515-442c-816e-38eed6df053b/1/KuK_S6R9cV5T4us9AS0_y80bDsA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:7b:94:e1:6d:05:32:2d:52:85:31:b6:f3:3d:fd:6b:fb:f4:
5c:30:29:9e:37:72:99:04:4d:8f:45:7d:1c:83:95:91:56:28:
40:d1:89:38:ae:69:9a:60:29:6e:05:f7:58:e7:e5:b6:57:7b:
ce:89:aa:5c:c4:78:97:23:4c:1e:f3:d2:1a:aa:d2:85:42:23:
dd:a2:73:5d:ab:30:f8:da:e7:06:99:5c:2e:41:7d:94:83:b8:
66:45:9d:3a:86:77:27:f0:c2:21:5b:d5:91:d8:3b:97:f7:42:
f8:1a:66:eb:0b:1b:d6:bb:cf:ca:5a:ab:56:f9:32:15:35:7b:
09:ee:e2:6e:f5:2a:97:37:31:ee:77:ef:f8:08:68:ee:2d:6a:
63:d3:92:b9:9d:2e:7a:25:78:a6:0b:89:c2:58:7d:51:30:e9:
9b:ee:a1:43:e6:68:53:49:a6:32:21:ce:60:9d:e1:d5:96:62:
65:84:3d:95:ff:52:f3:0b:53:68:bc:98:10:23:46:28:e4:82:
53:06:99:97:49:53:65:4a:d8:ea:22:98:e9:05:98:11:fc:00:
4c:a8:8e:c6:52:4c:58:20:b4:4e:b2:5e:41:6d:01:4c:3a:ea:
8e:8d:8e:eb:49:f2:08:4d:5c:56:cd:69:f1:af:0d:b8:68:f0:
c1:b3:29:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 03:02:12 2026 by rpki-client