Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/04/d5e9f6-3f6d-4694-89b8-a093d100874c/1/KuLHRej2hPuArBnM3AierFgUZUo.mft
File: KuLHRej2hPuArBnM3AierFgUZUo.mft (raw, json)
Hash identifier: mtF0gG6StiDZf4U2rD5C+W6hgcNrAvagj6FU9uCn/Fg=
Subject key identifier: E4:0B:05:B8:D5:DD:15:8B:56:37:73:48:4C:9A:D7:E8:1C:BC:F9:5A
Authority key identifier: 2A:E2:C7:45:E8:F6:84:FB:80:AC:19:CC:DC:08:9E:AC:58:14:65:4A
Certificate issuer: /CN=2ae2c745e8f684fb80ac19ccdc089eac5814654a
Certificate serial: 01A187884FD6E9658660D6B4FE240B3F7E7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KuLHRej2hPuArBnM3AierFgUZUo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/d5e9f6-3f6d-4694-89b8-a093d100874c/1/KuLHRej2hPuArBnM3AierFgUZUo.mft
Manifest number: 0144
Signing time: Thu 29 Oct 2026 12:00:19 +0000
Manifest this update: Thu 29 Oct 2026 12:00:19 +0000
Manifest next update: Fri 30 Oct 2026 12:00:19 +0000
Files and hashes: 1: C7BgJU1RJsS8-1WKTqX6V7kq4y0.roa (hash: SGtJrPMic2ON9eWUe2+fmPnOCxoU1rHwRo66TB4f67w=)
2: KuLHRej2hPuArBnM3AierFgUZUo.crl (hash: F4CirIlVoQGFKYkjeHUudjxtvebja/9Y8xX9jDTkZkc=)
3: WgjIu8S97FBry8IBJX7BijRh0UE.asa (hash: plmhVkPEVtHqmyaviSWaVdRoyVEm1YYRYzj6w9pBiLw=)
4: sXYBYOzWape5FZOss1s2gbpkzzU.roa (hash: KREfilkta372D7Yqg/hHtPffqvz0AiEw0qbCO9glSQM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/d5e9f6-3f6d-4694-89b8-a093d100874c/1/KuLHRej2hPuArBnM3AierFgUZUo.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/d5e9f6-3f6d-4694-89b8-a093d100874c/1/KuLHRej2hPuArBnM3AierFgUZUo.mft
rsync://rpki.ripe.net/repository/DEFAULT/KuLHRej2hPuArBnM3AierFgUZUo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 30 Oct 2026 12:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:87:88:4f:d6:e9:65:86:60:d6:b4:fe:24:0b:3f:7e:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ae2c745e8f684fb80ac19ccdc089eac5814654a
Validity
Not Before: Oct 29 12:00:19 2026 GMT
Not After : Oct 30 12:00:19 2026 GMT
Subject: CN=e40b05b8d5dd158b563773484c9ad7e81cbcf95a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:8a:73:cc:4b:b9:8c:75:bb:26:95:a7:c8:ac:
b6:ab:f1:47:90:da:c4:95:be:ca:5e:d5:8d:d6:11:
34:ea:4c:d4:9d:97:d9:83:68:aa:b0:14:06:97:cd:
9d:b8:bb:c6:d4:eb:93:e3:81:e3:9a:51:2d:b3:3c:
af:81:82:7a:4a:7a:ae:c1:19:f7:86:a8:31:08:a0:
b9:c8:7c:ff:2c:8d:66:d6:ef:a5:00:e0:71:f3:4f:
7c:b0:fa:17:08:de:39:86:4b:ab:ee:6e:54:bb:b8:
73:7e:28:2a:f0:18:86:54:8b:cc:74:0e:67:eb:fe:
61:89:ae:49:d0:d4:6b:71:99:01:ab:06:a4:9d:cf:
d8:e1:7b:4c:15:b6:a4:44:01:1e:46:40:38:ae:3a:
26:a3:65:ea:a4:1b:23:d6:eb:af:84:35:ab:05:94:
be:ee:44:8d:18:b1:9d:d5:35:ce:a8:8a:40:e6:d7:
94:64:55:be:e3:78:c6:d4:ce:0e:d7:15:b3:e4:1e:
82:6d:b1:44:09:9f:19:d6:14:1a:ac:90:3f:fa:3f:
4b:0e:12:63:1a:3c:1c:ef:ee:cf:fd:55:18:18:c5:
c8:9b:2f:b2:f5:45:92:ec:cc:8c:97:46:29:fd:d4:
54:29:ee:56:9a:18:a0:89:4e:e3:a9:a7:34:73:93:
cf:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:0B:05:B8:D5:DD:15:8B:56:37:73:48:4C:9A:D7:E8:1C:BC:F9:5A
X509v3 Authority Key Identifier:
keyid:2A:E2:C7:45:E8:F6:84:FB:80:AC:19:CC:DC:08:9E:AC:58:14:65:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KuLHRej2hPuArBnM3AierFgUZUo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/d5e9f6-3f6d-4694-89b8-a093d100874c/1/KuLHRej2hPuArBnM3AierFgUZUo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/d5e9f6-3f6d-4694-89b8-a093d100874c/1/KuLHRej2hPuArBnM3AierFgUZUo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:82:24:52:fa:a2:ea:b0:9b:22:36:01:49:0d:26:cc:c4:fb:
66:94:0f:c2:de:96:d6:81:4d:d3:da:c7:84:dd:db:7a:c8:c5:
01:fc:f5:d3:2d:24:df:6d:3b:49:2c:d5:3f:a3:62:95:15:b2:
ef:65:fe:61:6f:8b:65:59:60:91:25:92:07:8d:58:e4:6a:2a:
2c:fe:f0:d5:19:12:59:19:dc:83:26:4f:fa:f1:94:fc:a1:b3:
a5:5f:84:f1:74:70:c2:77:a6:62:56:2e:51:49:ac:1b:6d:eb:
29:8c:4a:f3:8a:32:ec:e8:7e:8d:7f:30:12:07:32:1b:1d:a4:
30:f8:c3:b6:64:59:24:2d:98:26:00:ad:fb:62:91:e8:1a:67:
13:e8:74:97:ce:59:83:d1:bb:7c:d6:1b:e4:e9:05:54:7a:7b:
4f:38:83:69:81:aa:e4:b1:fa:98:31:0a:4a:d5:8f:ba:24:c6:
88:cd:b1:0b:29:c3:a5:7d:45:3d:f4:c5:0d:d8:d4:14:f4:86:
12:26:e8:61:47:38:13:13:57:10:5e:18:12:3e:12:39:63:2d:
e0:c1:b1:bc:ec:30:7a:b8:c9:7f:08:b1:27:af:1b:8b:ed:53:
e0:35:cc:06:e9:e2:21:f2:68:45:eb:f7:54:d8:7a:07:7d:2b:
e2:6d:20:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 17:03:59 2026 by rpki-client