Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/13b0cd-5992-4561-9729-b30fe058d162/1/kuDCRw6wpptO-lhbnLLAZ2ErN54.mft
File: kuDCRw6wpptO-lhbnLLAZ2ErN54.mft (raw, json)
Hash identifier: YAGWrq94+ii0MB4WpkkNFMv/CZNo8AGx9LnoapDxwqw=
Subject key identifier: 88:8C:5D:9E:62:20:DA:EC:52:BC:E1:08:F5:9D:31:BD:69:29:7E:9C
Authority key identifier: 92:E0:C2:47:0E:B0:A6:9B:4E:FA:58:5B:9C:B2:C0:67:61:2B:37:9E
Certificate issuer: /CN=92e0c2470eb0a69b4efa585b9cb2c067612b379e
Certificate serial: 019CAC47641961D4F049F555A4A81D3A064F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kuDCRw6wpptO-lhbnLLAZ2ErN54.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/13b0cd-5992-4561-9729-b30fe058d162/1/kuDCRw6wpptO-lhbnLLAZ2ErN54.mft
Manifest number: 184A
Signing time: Mon 02 Mar 2026 02:01:25 +0000
Manifest this update: Mon 02 Mar 2026 02:01:25 +0000
Manifest next update: Tue 03 Mar 2026 02:01:25 +0000
Files and hashes: 1: C2qg2Q6lbBzdlBnvS6yqtgeY3uk.roa (hash: ijJYNodWqQV5uQq7Q5J14Dvs1Q1uxMUsTbwAGiSXPAc=)
2: kuDCRw6wpptO-lhbnLLAZ2ErN54.crl (hash: WnWhLLO7bVpz08YwGFflZ2FWq8foVME5cvWmn7L0xt4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/13b0cd-5992-4561-9729-b30fe058d162/1/kuDCRw6wpptO-lhbnLLAZ2ErN54.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/13b0cd-5992-4561-9729-b30fe058d162/1/kuDCRw6wpptO-lhbnLLAZ2ErN54.mft
rsync://rpki.ripe.net/repository/DEFAULT/kuDCRw6wpptO-lhbnLLAZ2ErN54.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:47:64:19:61:d4:f0:49:f5:55:a4:a8:1d:3a:06:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92e0c2470eb0a69b4efa585b9cb2c067612b379e
Validity
Not Before: Mar 2 02:01:25 2026 GMT
Not After : Mar 3 02:01:25 2026 GMT
Subject: CN=888c5d9e6220daec52bce108f59d31bd69297e9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:fc:a9:0f:42:f3:1d:62:3a:38:8b:f9:49:c4:
dd:c3:96:44:15:c8:d2:e4:3d:27:d1:b8:cd:a9:73:
0e:cf:91:1d:95:83:5a:d4:41:cf:32:4f:bb:1c:e2:
90:5c:f7:27:2c:88:00:4d:98:77:46:ad:b0:9d:4d:
47:e2:5d:ed:3f:42:11:d2:b4:08:eb:3d:78:dd:fc:
d6:68:d9:cc:97:d1:b5:f8:d2:76:37:97:60:89:46:
97:83:b0:ae:3c:e4:38:c0:be:7c:0a:c4:9c:ac:7d:
3d:e7:59:5b:38:15:02:0a:18:7a:9f:e5:3c:96:3f:
d9:b9:7c:41:19:3a:3e:ae:07:e5:2b:5a:7a:ae:f4:
52:99:07:9c:68:ce:f9:72:49:cf:27:96:0c:d6:3d:
47:2f:43:db:e9:e3:36:90:a4:b7:d3:34:ae:da:a2:
2d:d2:d6:68:16:18:a3:84:7f:63:ae:71:5a:bd:ad:
2e:71:ee:2c:54:a2:5e:21:4b:25:7e:79:65:13:f5:
d6:67:9a:43:46:85:f6:f1:16:6a:93:aa:b3:74:64:
8d:a5:0e:ee:5b:85:62:8d:2d:bb:3f:08:e0:07:b0:
a1:0f:72:e0:2e:1e:90:9e:a7:17:6d:da:1c:93:89:
41:b7:c6:51:7c:81:e6:a3:b6:cf:08:6c:a1:49:c6:
63:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:8C:5D:9E:62:20:DA:EC:52:BC:E1:08:F5:9D:31:BD:69:29:7E:9C
X509v3 Authority Key Identifier:
keyid:92:E0:C2:47:0E:B0:A6:9B:4E:FA:58:5B:9C:B2:C0:67:61:2B:37:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kuDCRw6wpptO-lhbnLLAZ2ErN54.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/13b0cd-5992-4561-9729-b30fe058d162/1/kuDCRw6wpptO-lhbnLLAZ2ErN54.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/13b0cd-5992-4561-9729-b30fe058d162/1/kuDCRw6wpptO-lhbnLLAZ2ErN54.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:01:08:11:b7:a3:af:55:3d:f3:bf:2d:c8:5f:93:03:1e:bf:
fc:f9:f3:13:70:4e:8e:8f:68:fc:33:b3:6a:c8:76:8f:89:21:
1b:8d:5c:5c:93:82:6c:43:f4:07:09:c1:a7:7e:51:f7:9f:77:
59:37:3c:58:c4:cc:1e:e5:95:30:6c:32:a3:35:4b:9f:c6:f6:
2a:9e:ce:ef:38:52:69:fc:d4:69:28:99:eb:e7:68:f9:c4:da:
c6:3e:dd:0f:d1:cc:92:c5:09:c5:d0:65:64:34:5d:02:e5:b1:
3e:fe:a1:8a:a1:b0:aa:6d:91:64:aa:18:f8:f2:ea:18:f4:6f:
2d:99:79:f3:a2:c2:13:91:08:53:c3:04:bc:e3:4f:d9:53:5c:
89:a8:a0:f8:c6:a5:08:21:e4:08:b5:d1:76:e0:70:ef:37:c5:
6e:63:cb:1d:5a:a7:ae:95:4b:d4:46:ff:e1:34:2e:11:eb:c5:
fe:5b:e5:63:0c:4f:be:12:25:96:b9:de:68:c6:56:1d:52:d0:
80:02:c5:81:32:26:c9:07:23:95:11:b4:58:26:92:c3:e8:1d:
6d:59:9a:a9:ac:0d:d0:39:90:2a:f3:19:75:0e:17:49:ec:dc:
c9:f6:c0:fb:a0:1c:a3:cc:b7:aa:34:7e:84:62:2f:08:0c:db:
08:80:2e:a3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZysR2QZYdTwSfVVpKgdOgZPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyZTBjMjQ3MGViMGE2OWI0ZWZhNTg1YjljYjJjMDY3NjEy
YjM3OWUwHhcNMjYwMzAyMDIwMTI1WhcNMjYwMzAzMDIwMTI1WjAzMTEwLwYDVQQD
Eyg4ODhjNWQ5ZTYyMjBkYWVjNTJiY2UxMDhmNTlkMzFiZDY5Mjk3ZTljMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsPypD0LzHWI6OIv5ScTdw5ZEFcjS
5D0n0bjNqXMOz5EdlYNa1EHPMk+7HOKQXPcnLIgATZh3Rq2wnU1H4l3tP0IR0rQI
6z143fzWaNnMl9G1+NJ2N5dgiUaXg7CuPOQ4wL58CsScrH0951lbOBUCChh6n+U8
lj/ZuXxBGTo+rgflK1p6rvRSmQecaM75cknPJ5YM1j1HL0Pb6eM2kKS30zSu2qIt
0tZoFhijhH9jrnFava0uce4sVKJeIUslfnllE/XWZ5pDRoX28RZqk6qzdGSNpQ7u
W4VijS27PwjgB7ChD3LgLh6QnqcXbdock4lBt8ZRfIHmo7bPCGyhScZjDQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIiMXZ5iINrsUrzhCPWdMb1pKX6cMB8GA1UdIwQY
MBaAFJLgwkcOsKabTvpYW5yywGdhKzeeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva3VEQ1J3NndwcHRPLWxoYm5MTEFaMkVyTjU0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC8xM2IwY2QtNTk5Mi00NTYxLTk3Mjkt
YjMwZmUwNThkMTYyLzEva3VEQ1J3NndwcHRPLWxoYm5MTEFaMkVyTjU0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZC8xM2IwY2QtNTk5Mi00NTYxLTk3MjktYjMwZmUwNThkMTYy
LzEva3VEQ1J3NndwcHRPLWxoYm5MTEFaMkVyTjU0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUgEIEbej
r1U9878tyF+TAx6//PnzE3BOjo9o/DOzash2j4khG41cXJOCbEP0BwnBp35R9593
WTc8WMTMHuWVMGwyozVLn8b2Kp7O7zhSafzUaSiZ6+do+cTaxj7dD9HMksUJxdBl
ZDRdAuWxPv6hiqGwqm2RZKoY+PLqGPRvLZl586LCE5EIU8MEvONP2VNciaig+Mal
CCHkCLXRduBw7zfFbmPLHVqnrpVL1Eb/4TQuEevF/lvlYwxPvhIllrneaMZWHVLQ
gALFgTImyQcjlRG0WCaSw+gdbVmaqawN0DmQKvMZdQ4XSezcyfbA+6Aco8y3qjR+
hGIvCAzbCIAuow==
-----END CERTIFICATE-----
Generated at Mon Mar 2 06:39:10 2026 by rpki-client