Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/7508cf-4198-42cc-9f25-821db0026738/1/kUJchq_U--IqaeAELgB2I0IxwpM.mft
File: kUJchq_U--IqaeAELgB2I0IxwpM.mft (raw, json)
Hash identifier: B6dynxGr3vXSICCWo8QNpZpogJmAK0E7lRYGqVPF0kY=
Subject key identifier: 59:50:DF:B4:ED:0F:B5:93:6C:50:66:B7:00:28:FB:A2:06:F5:E4:DC
Authority key identifier: 91:42:5C:86:AF:D4:FB:E2:2A:69:E0:04:2E:00:76:23:42:31:C2:93
Certificate issuer: /CN=91425c86afd4fbe22a69e0042e0076234231c293
Certificate serial: 019CABD9BCFBDC75DFD9D699F054B45AD0D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kUJchq_U--IqaeAELgB2I0IxwpM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/7508cf-4198-42cc-9f25-821db0026738/1/kUJchq_U--IqaeAELgB2I0IxwpM.mft
Manifest number: 016E
Signing time: Mon 02 Mar 2026 00:01:39 +0000
Manifest this update: Mon 02 Mar 2026 00:01:39 +0000
Manifest next update: Tue 03 Mar 2026 00:01:39 +0000
Files and hashes: 1: i5hoQe1WYdmDRK93QhXSWo5DbcA.asa (hash: g4XW1rM0XwOC9gNiLBr0l5Eh7TR7jPk/IHmrYLGtPAk=)
2: kUJchq_U--IqaeAELgB2I0IxwpM.crl (hash: s3mkT7hLFTYhNILkJPUQUaxp6Tyr8sbtAMlPFsUA40Q=)
3: koj8nEAhEbwLOtJWdl4dLHaxVeU.roa (hash: //uRIlijDFSI2Idtl9AfpbSmA1tZpNH4c/UlKhrcxxc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/7508cf-4198-42cc-9f25-821db0026738/1/kUJchq_U--IqaeAELgB2I0IxwpM.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/7508cf-4198-42cc-9f25-821db0026738/1/kUJchq_U--IqaeAELgB2I0IxwpM.mft
rsync://rpki.ripe.net/repository/DEFAULT/kUJchq_U--IqaeAELgB2I0IxwpM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:bc:fb:dc:75:df:d9:d6:99:f0:54:b4:5a:d0:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91425c86afd4fbe22a69e0042e0076234231c293
Validity
Not Before: Mar 2 00:01:39 2026 GMT
Not After : Mar 3 00:01:39 2026 GMT
Subject: CN=5950dfb4ed0fb5936c5066b70028fba206f5e4dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:36:12:69:5e:29:49:c4:a7:18:2c:ae:54:39:
2a:f7:17:d4:b7:e7:be:5a:b7:26:da:56:0b:49:78:
31:fa:42:ef:f4:2d:ae:c2:96:30:87:94:d7:33:17:
e2:7a:84:29:70:e6:7d:24:52:b9:91:bc:1f:55:de:
42:40:85:25:5f:0d:99:b5:9a:08:a1:07:54:48:ae:
eb:20:e4:e6:bc:e0:04:b0:3a:56:43:10:10:e6:27:
5e:f7:2b:37:46:78:5e:20:4d:c4:84:d0:f8:61:e4:
ce:60:71:7b:dd:dc:b7:c6:f9:29:83:ee:fd:3c:bc:
c0:9d:ac:65:de:4a:21:a8:53:7c:4f:06:fd:5b:9b:
86:bb:90:d6:b5:5c:8d:a1:0f:f2:94:49:b6:60:1e:
55:b5:9d:3a:46:92:4a:19:85:5d:e2:dd:69:d5:bf:
21:bb:a9:c2:36:0e:59:6f:25:78:f2:61:88:50:7e:
89:c4:7a:0f:76:d5:53:37:48:ea:2f:7f:3c:1b:8d:
91:0a:e7:33:14:8d:be:fc:4a:2d:95:8f:a3:57:0c:
8f:25:73:43:d0:5a:52:ca:5a:bc:41:ac:6a:a7:c6:
48:80:d3:2e:35:98:15:94:69:d3:5c:8b:32:68:76:
c2:38:2b:12:f8:a6:4f:ef:75:6d:42:aa:22:de:23:
21:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:50:DF:B4:ED:0F:B5:93:6C:50:66:B7:00:28:FB:A2:06:F5:E4:DC
X509v3 Authority Key Identifier:
keyid:91:42:5C:86:AF:D4:FB:E2:2A:69:E0:04:2E:00:76:23:42:31:C2:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kUJchq_U--IqaeAELgB2I0IxwpM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/7508cf-4198-42cc-9f25-821db0026738/1/kUJchq_U--IqaeAELgB2I0IxwpM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/7508cf-4198-42cc-9f25-821db0026738/1/kUJchq_U--IqaeAELgB2I0IxwpM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:e4:f2:de:3a:49:f8:7b:19:5b:39:81:63:07:78:e9:3e:3b:
60:97:1e:74:fa:ef:76:68:4f:c6:9e:57:65:2e:38:98:56:9c:
e4:7b:c3:11:79:5e:e8:22:0f:3e:d8:7d:fc:59:63:31:7d:0a:
69:c7:18:16:6a:05:52:21:07:13:54:20:ac:98:9d:f7:b6:f7:
0c:9b:c4:21:2e:a9:2d:4e:f7:3f:ed:0f:82:92:f1:ca:13:fe:
c7:f9:32:fd:3d:a7:f4:ba:26:12:6b:c8:b0:06:52:c0:ba:fb:
7f:d3:5c:3f:ad:82:a0:7e:b9:32:48:94:41:ee:9b:7c:87:81:
db:58:6e:fc:bb:1b:31:d9:8c:83:43:b9:01:fe:f7:26:76:58:
fb:9d:df:5a:4a:90:23:50:61:7b:5e:09:84:48:30:cf:6d:0c:
b6:b7:af:41:f3:ba:95:ab:0d:f1:a7:52:a8:ae:ad:95:0a:df:
20:fc:5c:71:1b:71:44:f3:46:53:f0:2b:81:c9:c7:7b:0c:05:
36:aa:da:a6:f8:82:32:6f:e4:7a:d3:0f:49:2a:68:10:9e:8f:
be:98:04:16:e1:44:5d:d6:87:5c:37:85:ef:ac:2d:45:b2:91:
99:52:9a:0c:92:f6:d7:45:d3:f0:bf:ce:61:f3:19:48:c9:6d:
91:2e:25:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:02:08 2026 by rpki-client