Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/40a276-8515-442c-816e-38eed6df053b/1/KuK_S6R9cV5T4us9AS0_y80bDsA.mft
File: KuK_S6R9cV5T4us9AS0_y80bDsA.mft (raw, json)
Hash identifier: AKuANygqhafxpbyfXh/RtfBlY36dG0POAad5sY1FJqk=
Subject key identifier: 90:A4:74:C0:BA:FF:E7:83:D8:13:CF:D9:01:F6:2A:09:CB:E3:89:48
Authority key identifier: 2A:E2:BF:4B:A4:7D:71:5E:53:E2:EB:3D:01:2D:3F:CB:CD:1B:0E:C0
Certificate issuer: /CN=2ae2bf4ba47d715e53e2eb3d012d3fcbcd1b0ec0
Certificate serial: 019D9D75CFAC85FD2263A1760C935D30FEA4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KuK_S6R9cV5T4us9AS0_y80bDsA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/40a276-8515-442c-816e-38eed6df053b/1/KuK_S6R9cV5T4us9AS0_y80bDsA.mft
Manifest number: 0306
Signing time: Fri 17 Apr 2026 22:00:36 +0000
Manifest this update: Fri 17 Apr 2026 22:00:36 +0000
Manifest next update: Sat 18 Apr 2026 22:00:36 +0000
Files and hashes: 1: KuK_S6R9cV5T4us9AS0_y80bDsA.crl (hash: 1y9nNq2Vvy5cNYx+AulZ/1jq9TBRI3SsgbBkB7ZbXkE=)
2: uPCaDDec9QKPaddyi8Q6i4Q7q7k.roa (hash: n+pffEHjG87ngAjTdw3F82UnpSjTNX/RT+SqH5AesLg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/40a276-8515-442c-816e-38eed6df053b/1/KuK_S6R9cV5T4us9AS0_y80bDsA.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/40a276-8515-442c-816e-38eed6df053b/1/KuK_S6R9cV5T4us9AS0_y80bDsA.mft
rsync://rpki.ripe.net/repository/DEFAULT/KuK_S6R9cV5T4us9AS0_y80bDsA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9d:75:cf:ac:85:fd:22:63:a1:76:0c:93:5d:30:fe:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ae2bf4ba47d715e53e2eb3d012d3fcbcd1b0ec0
Validity
Not Before: Apr 17 22:00:36 2026 GMT
Not After : Apr 18 22:00:36 2026 GMT
Subject: CN=90a474c0baffe783d813cfd901f62a09cbe38948
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:e5:72:ea:e9:6e:a2:80:e1:38:ea:22:24:03:
4b:fb:e9:e2:ae:db:98:fe:ff:c8:84:6d:2b:79:cb:
c5:20:6c:0e:60:cc:92:ac:cc:e9:f9:3f:9c:dd:16:
3d:6a:74:1d:3f:23:b5:11:b8:9b:db:0f:10:e1:b0:
94:78:df:92:a6:4e:d1:f2:c6:05:2f:5e:32:5c:37:
5a:68:64:5f:35:15:18:fc:3a:95:22:6c:ce:4f:02:
6f:05:88:a2:b1:7d:6b:15:5d:39:2d:88:c6:76:a9:
1e:e9:1c:99:cf:6d:ed:09:00:e1:41:0b:8c:24:60:
4c:15:a3:e3:d1:d5:51:20:51:1c:05:90:1b:c4:ba:
c5:7e:db:61:e9:c3:69:30:7d:f5:4c:a0:fb:7a:1b:
38:2e:50:67:ea:11:d4:34:d4:14:af:8f:a4:cd:75:
62:28:63:c1:25:23:a9:f2:0a:2e:49:62:ea:68:3e:
2a:34:22:d4:0f:8f:c3:fb:42:00:26:c8:bd:6e:98:
03:13:51:f2:f5:af:50:00:fd:b1:d1:09:89:1e:63:
ee:3b:27:f9:df:c4:58:89:66:1a:e3:49:13:ba:18:
85:0d:8e:df:31:20:72:fa:82:19:b9:47:31:7c:cc:
a5:6e:c6:74:08:3a:6d:6d:0e:cc:37:34:ac:a5:3c:
bf:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:A4:74:C0:BA:FF:E7:83:D8:13:CF:D9:01:F6:2A:09:CB:E3:89:48
X509v3 Authority Key Identifier:
keyid:2A:E2:BF:4B:A4:7D:71:5E:53:E2:EB:3D:01:2D:3F:CB:CD:1B:0E:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KuK_S6R9cV5T4us9AS0_y80bDsA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/40a276-8515-442c-816e-38eed6df053b/1/KuK_S6R9cV5T4us9AS0_y80bDsA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/40a276-8515-442c-816e-38eed6df053b/1/KuK_S6R9cV5T4us9AS0_y80bDsA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:73:ab:bf:8a:95:7d:bd:a2:cc:1f:79:a1:4f:42:c1:2b:0d:
0d:44:f3:ac:d2:9f:2a:a3:a4:ae:1a:b3:37:a0:46:5c:a1:7e:
26:a8:b6:21:d2:55:4d:2b:99:c4:55:0f:dd:60:e0:3e:1a:e0:
00:d5:7e:83:1f:07:47:60:8f:1e:db:c8:8f:e9:f0:75:92:8f:
ed:73:7f:c8:94:4f:b9:d2:2f:6d:ea:f5:80:d5:49:b2:46:22:
df:95:b3:d3:be:7b:9e:86:2e:21:8d:05:65:a5:67:da:d5:6d:
c9:c5:52:96:5a:79:50:82:54:3f:34:55:c8:69:f4:cb:4d:22:
dc:a5:26:82:9b:20:27:bb:55:d2:76:9f:60:cc:9b:31:d9:15:
26:f9:ca:35:04:e3:1b:72:50:38:aa:d1:a8:83:d7:25:b3:33:
9c:1c:bc:09:d7:15:1d:df:d1:73:6e:74:a4:21:a3:7b:e4:d0:
4d:f3:ba:dc:e4:bd:33:40:10:56:c9:04:25:21:96:50:47:06:
7a:92:ed:db:3b:18:16:18:d0:68:e2:d7:fc:e4:19:ee:63:b1:
f8:06:2c:f5:9f:82:b8:46:96:11:94:47:ad:a8:a2:48:46:5e:
1d:42:4b:22:06:ab:3a:2c:46:3b:ba:09:c9:98:39:b3:09:ac:
80:34:5e:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 01:32:17 2026 by rpki-client