Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/d5e9f6-3f6d-4694-89b8-a093d100874c/1/KuLHRej2hPuArBnM3AierFgUZUo.mft
File: KuLHRej2hPuArBnM3AierFgUZUo.mft (raw, json)
Hash identifier: kKNQoSp445rWmO/nIIysMWZT+P0HTK9vpzQUvN4A1q8=
Subject key identifier: 0C:9C:BB:1A:1A:75:43:53:8C:9A:0A:53:42:DF:8D:E9:96:7A:72:64
Authority key identifier: 2A:E2:C7:45:E8:F6:84:FB:80:AC:19:CC:DC:08:9E:AC:58:14:65:4A
Certificate issuer: /CN=2ae2c745e8f684fb80ac19ccdc089eac5814654a
Certificate serial: 019F9EF134D21915175BF9109532D734C620
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KuLHRej2hPuArBnM3AierFgUZUo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/d5e9f6-3f6d-4694-89b8-a093d100874c/1/KuLHRej2hPuArBnM3AierFgUZUo.mft
Manifest number: 47
Signing time: Sun 26 Jul 2026 15:00:35 +0000
Manifest this update: Sun 26 Jul 2026 15:00:35 +0000
Manifest next update: Mon 27 Jul 2026 15:00:35 +0000
Files and hashes: 1: C7BgJU1RJsS8-1WKTqX6V7kq4y0.roa (hash: SGtJrPMic2ON9eWUe2+fmPnOCxoU1rHwRo66TB4f67w=)
2: KuLHRej2hPuArBnM3AierFgUZUo.crl (hash: XgP6cPisWOWJdaTRsPimQJZp+OEJAS5GlXGtXSOLNhY=)
3: WgjIu8S97FBry8IBJX7BijRh0UE.asa (hash: plmhVkPEVtHqmyaviSWaVdRoyVEm1YYRYzj6w9pBiLw=)
4: sXYBYOzWape5FZOss1s2gbpkzzU.roa (hash: KREfilkta372D7Yqg/hHtPffqvz0AiEw0qbCO9glSQM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/d5e9f6-3f6d-4694-89b8-a093d100874c/1/KuLHRej2hPuArBnM3AierFgUZUo.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/d5e9f6-3f6d-4694-89b8-a093d100874c/1/KuLHRej2hPuArBnM3AierFgUZUo.mft
rsync://rpki.ripe.net/repository/DEFAULT/KuLHRej2hPuArBnM3AierFgUZUo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 15:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:9e:f1:34:d2:19:15:17:5b:f9:10:95:32:d7:34:c6:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ae2c745e8f684fb80ac19ccdc089eac5814654a
Validity
Not Before: Jul 26 15:00:35 2026 GMT
Not After : Jul 27 15:00:35 2026 GMT
Subject: CN=0c9cbb1a1a7543538c9a0a5342df8de9967a7264
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:64:cd:d9:12:f1:25:bb:2d:b3:8f:e4:2d:f5:
a8:98:9b:d4:4a:88:42:41:41:ec:fa:56:e4:13:38:
f8:9f:1f:bc:dc:c8:9d:0d:5f:aa:6c:7a:ce:b5:3e:
c3:21:4b:58:db:d5:22:a6:05:28:25:f1:aa:6b:81:
97:42:d9:96:04:f6:3c:b5:6a:e8:df:fb:5b:4b:f6:
ef:23:8a:a2:ef:12:17:39:cd:30:8a:14:60:a6:13:
4d:30:84:8e:cc:c4:c3:4b:01:7f:ca:7f:38:61:57:
d3:27:70:d5:f0:2e:74:d8:98:36:c6:63:ee:c4:80:
79:9e:db:51:71:2b:78:0d:fc:58:8f:45:92:88:66:
85:1a:96:9b:4e:27:95:5b:c4:16:89:a7:5c:3d:1c:
13:ce:53:e2:27:1a:75:d8:04:63:13:22:2a:6d:56:
38:43:6f:f0:e7:0a:8f:6a:70:7c:20:88:c3:a0:f4:
17:1a:93:4c:79:53:73:49:a9:f4:6d:25:59:87:60:
04:61:a8:e9:9f:2f:f6:a8:40:aa:ec:87:16:88:91:
d8:ef:fd:6f:9e:da:6f:66:03:64:c8:c4:85:ca:a2:
62:1a:07:47:0f:27:53:cf:42:93:71:79:00:0d:0f:
41:14:fa:0e:38:ef:5a:af:c9:6e:83:b8:a6:ee:11:
3b:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:9C:BB:1A:1A:75:43:53:8C:9A:0A:53:42:DF:8D:E9:96:7A:72:64
X509v3 Authority Key Identifier:
keyid:2A:E2:C7:45:E8:F6:84:FB:80:AC:19:CC:DC:08:9E:AC:58:14:65:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KuLHRej2hPuArBnM3AierFgUZUo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/d5e9f6-3f6d-4694-89b8-a093d100874c/1/KuLHRej2hPuArBnM3AierFgUZUo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/d5e9f6-3f6d-4694-89b8-a093d100874c/1/KuLHRej2hPuArBnM3AierFgUZUo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:da:c3:31:d6:bd:97:d8:ef:08:91:63:70:f5:8e:b6:78:ac:
3a:72:b5:04:6b:b8:87:cc:4d:32:0b:73:43:d6:81:27:e8:35:
22:ee:9c:89:63:7f:43:bb:11:89:49:ec:c9:47:7b:82:c9:42:
c0:12:b3:d7:97:66:a3:e9:d8:1b:3f:f5:f9:58:2c:61:10:d4:
ac:f7:74:bb:ff:c3:c9:be:10:0d:53:f7:d8:63:bf:d2:2c:2b:
e1:88:dc:b7:5e:70:bc:66:2a:f4:d2:cd:90:41:b9:70:28:b4:
fa:17:f9:08:ee:96:56:54:51:e9:8c:1c:a3:3c:5c:c9:fa:1f:
6a:e7:3e:2e:22:7d:90:b5:a7:f7:89:d3:4a:6b:96:28:44:70:
07:f3:f5:87:74:b6:a9:76:17:97:63:ed:c3:59:f2:27:84:87:
e1:ba:4b:30:cc:f8:4e:ff:b8:d7:01:c6:5f:35:27:b4:a9:80:
07:04:3b:60:ed:22:3b:ab:b9:d4:55:77:3c:55:70:93:9d:ea:
3d:a2:19:20:3f:c7:0a:06:f7:22:d6:ae:bc:34:d9:2a:5a:97:
3e:b7:a7:13:22:a8:d5:a5:d4:3e:4c:9f:3a:60:d0:cb:09:39:
6f:63:59:73:c2:af:29:70:d9:36:3a:fb:c9:db:eb:93:ed:98:
27:3d:77:19
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+e8TTSGRUXW/kQlTLXNMYgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhZTJjNzQ1ZThmNjg0ZmI4MGFjMTljY2RjMDg5ZWFjNTgx
NDY1NGEwHhcNMjYwNzI2MTUwMDM1WhcNMjYwNzI3MTUwMDM1WjAzMTEwLwYDVQQD
EygwYzljYmIxYTFhNzU0MzUzOGM5YTBhNTM0MmRmOGRlOTk2N2E3MjY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6GTN2RLxJbsts4/kLfWomJvUSohC
QUHs+lbkEzj4nx+83MidDV+qbHrOtT7DIUtY29UipgUoJfGqa4GXQtmWBPY8tWro
3/tbS/bvI4qi7xIXOc0wihRgphNNMISOzMTDSwF/yn84YVfTJ3DV8C502Jg2xmPu
xIB5nttRcSt4DfxYj0WSiGaFGpabTieVW8QWiadcPRwTzlPiJxp12ARjEyIqbVY4
Q2/w5wqPanB8IIjDoPQXGpNMeVNzSan0bSVZh2AEYajpny/2qECq7IcWiJHY7/1v
ntpvZgNkyMSFyqJiGgdHDydTz0KTcXkADQ9BFPoOOO9ar8lug7im7hE78wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAycuxoadUNTjJoKU0LfjemWenJkMB8GA1UdIwQY
MBaAFCrix0Xo9oT7gKwZzNwInqxYFGVKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS3VMSFJlajJoUHVBckJuTTNBaWVyRmdVWlVvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC9kNWU5ZjYtM2Y2ZC00Njk0LTg5Yjgt
YTA5M2QxMDA4NzRjLzEvS3VMSFJlajJoUHVBckJuTTNBaWVyRmdVWlVvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNC9kNWU5ZjYtM2Y2ZC00Njk0LTg5YjgtYTA5M2QxMDA4NzRj
LzEvS3VMSFJlajJoUHVBckJuTTNBaWVyRmdVWlVvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvNrDMda9
l9jvCJFjcPWOtnisOnK1BGu4h8xNMgtzQ9aBJ+g1Iu6ciWN/Q7sRiUnsyUd7gslC
wBKz15dmo+nYGz/1+VgsYRDUrPd0u//Dyb4QDVP32GO/0iwr4Yjct15wvGYq9NLN
kEG5cCi0+hf5CO6WVlRR6Ywcozxcyfofauc+LiJ9kLWn94nTSmuWKERwB/P1h3S2
qXYXl2Ptw1nyJ4SH4bpLMMz4Tv+41wHGXzUntKmABwQ7YO0iO6u51FV3PFVwk53q
PaIZID/HCgb3ItauvDTZKlqXPrenEyKo1aXUPkyfOmDQywk5b2NZc8KvKXDZNjr7
ydvrk+2YJz13GQ==
-----END CERTIFICATE-----
Generated at Mon Jul 27 00:43:46 2026 by rpki-client