Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/f516f6-d5a0-4086-94f2-abd4c5c9b374/1/kuwQUNOpMgq58M4rNloJfuQTSyQ.mft
File: kuwQUNOpMgq58M4rNloJfuQTSyQ.mft (raw, json)
Hash identifier: FCBUkbd1RalQTPZjhWZtkHsOxPKhpHQ0WsuLWBMJ+5s=
Subject key identifier: 44:0C:64:22:DA:6E:67:F1:15:79:8F:9E:9B:22:E6:54:3A:98:54:22
Authority key identifier: 92:EC:10:50:D3:A9:32:0A:B9:F0:CE:2B:36:5A:09:7E:E4:13:4B:24
Certificate issuer: /CN=92ec1050d3a9320ab9f0ce2b365a097ee4134b24
Certificate serial: 019CAD909A28F572A09D70DE97C58E1AC71C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kuwQUNOpMgq58M4rNloJfuQTSyQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/f516f6-d5a0-4086-94f2-abd4c5c9b374/1/kuwQUNOpMgq58M4rNloJfuQTSyQ.mft
Manifest number: 157E
Signing time: Mon 02 Mar 2026 08:01:00 +0000
Manifest this update: Mon 02 Mar 2026 08:01:00 +0000
Manifest next update: Tue 03 Mar 2026 08:01:00 +0000
Files and hashes: 1: YJW2E58R8TGTMYcVtuV2rsRxaO8.roa (hash: YBA/qYhpHhNFXspw03XsXcvb6WMdqj9LTQkg1z/GYUk=)
2: kuwQUNOpMgq58M4rNloJfuQTSyQ.crl (hash: KM87mukcfFefi0vjU4jGQ18MfiF8mozl6FZ92/UMjGU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/f516f6-d5a0-4086-94f2-abd4c5c9b374/1/kuwQUNOpMgq58M4rNloJfuQTSyQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/f516f6-d5a0-4086-94f2-abd4c5c9b374/1/kuwQUNOpMgq58M4rNloJfuQTSyQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/kuwQUNOpMgq58M4rNloJfuQTSyQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 08:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:90:9a:28:f5:72:a0:9d:70:de:97:c5:8e:1a:c7:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92ec1050d3a9320ab9f0ce2b365a097ee4134b24
Validity
Not Before: Mar 2 08:01:00 2026 GMT
Not After : Mar 3 08:01:00 2026 GMT
Subject: CN=440c6422da6e67f115798f9e9b22e6543a985422
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:47:e5:00:1e:b2:a0:c7:af:a3:16:d9:d6:01:
43:23:b0:79:05:c1:9d:05:f3:4f:df:dc:78:7b:d9:
10:2a:9f:9e:05:1d:0f:ee:33:23:ee:b5:38:a3:bd:
70:a1:8e:13:d3:f7:d3:c6:8a:40:cf:29:bc:93:23:
e6:fa:e3:2c:c9:38:06:d7:35:a1:d1:f0:a0:a1:84:
db:d5:23:8f:55:e6:f1:89:62:b4:25:60:21:f5:84:
d5:05:5e:3c:6e:b8:9d:62:78:48:40:d3:f8:09:3a:
f6:72:33:01:0d:bc:61:e0:3a:85:f7:e7:0b:38:81:
00:a6:05:e7:c3:7b:87:23:90:70:99:86:e1:8b:38:
3e:1e:6d:98:c2:b6:a0:c3:b0:28:bb:37:14:33:d6:
bd:77:4e:d6:69:ae:5b:4f:92:88:3e:4f:18:46:32:
ee:de:52:ed:1d:09:07:b4:66:70:69:76:92:0b:1e:
0f:24:d5:0b:a4:7c:29:28:45:4c:7c:f1:aa:08:78:
1c:df:f2:e2:d0:ec:35:09:78:3e:15:84:2d:94:cd:
b0:2d:b8:d4:b3:c9:18:59:d5:e6:2d:78:8a:f5:16:
0f:12:85:9d:e3:e7:cf:92:59:29:ab:de:b9:e6:52:
3d:0a:19:31:aa:b0:6c:b3:dd:4a:52:f2:6c:02:84:
04:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:0C:64:22:DA:6E:67:F1:15:79:8F:9E:9B:22:E6:54:3A:98:54:22
X509v3 Authority Key Identifier:
keyid:92:EC:10:50:D3:A9:32:0A:B9:F0:CE:2B:36:5A:09:7E:E4:13:4B:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kuwQUNOpMgq58M4rNloJfuQTSyQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/f516f6-d5a0-4086-94f2-abd4c5c9b374/1/kuwQUNOpMgq58M4rNloJfuQTSyQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/f516f6-d5a0-4086-94f2-abd4c5c9b374/1/kuwQUNOpMgq58M4rNloJfuQTSyQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:e8:7d:3a:93:c3:b3:6c:4c:2b:94:69:cd:92:98:a8:2f:58:
84:b6:56:9b:8f:e6:5f:e7:fa:ea:1a:0e:e2:af:e6:de:33:db:
7e:2c:c8:9e:01:c1:5d:18:0a:3f:33:f2:92:15:a1:3a:90:68:
02:66:4b:81:08:62:0c:e4:45:a9:23:f2:9c:c7:76:3f:8b:32:
b7:a3:64:2f:18:26:68:6e:0e:eb:ce:c5:0a:ff:90:a2:24:bc:
8e:f8:df:22:35:91:a0:f4:73:f2:43:26:77:79:b3:f7:e5:ba:
e6:14:f5:81:2b:bd:23:2b:5b:0f:54:6d:4d:27:73:b1:8a:6c:
4a:e1:10:98:b6:1f:bf:e6:57:17:58:ab:76:bb:8f:ef:63:4e:
12:05:34:ff:57:09:55:5a:86:a7:5a:c0:97:ee:f9:3e:5e:7c:
ea:5b:aa:ff:6e:51:44:b7:d8:3c:fd:7c:fc:21:44:68:89:c3:
53:d2:a2:cb:0f:6c:6d:81:bd:cf:ff:63:3d:17:39:d8:d4:1c:
3a:c5:9f:3c:98:ec:09:8d:94:ef:a3:48:51:0c:ea:29:02:22:
4c:3b:92:18:63:1d:d4:ca:e7:e5:2c:7a:a9:3a:ca:47:43:a7:
cb:60:e9:b2:5a:3a:5b:e9:c5:90:cb:98:f2:c4:18:a8:4c:cc:
eb:94:c9:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:39:11 2026 by rpki-client