Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/40a276-8515-442c-816e-38eed6df053b/1/KuK_S6R9cV5T4us9AS0_y80bDsA.mft
File: KuK_S6R9cV5T4us9AS0_y80bDsA.mft (raw, json)
Hash identifier: bDrkywqiZ891/89go5DDoB8UY0EZWoMYO6wCA0+w9M8=
Subject key identifier: 23:02:D1:FF:15:E2:DD:17:66:2A:E8:84:FC:89:72:01:6B:15:5A:F4
Authority key identifier: 2A:E2:BF:4B:A4:7D:71:5E:53:E2:EB:3D:01:2D:3F:CB:CD:1B:0E:C0
Certificate issuer: /CN=2ae2bf4ba47d715e53e2eb3d012d3fcbcd1b0ec0
Certificate serial: 019D371BF22431636012CE0EFFCC52E63354
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KuK_S6R9cV5T4us9AS0_y80bDsA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/40a276-8515-442c-816e-38eed6df053b/1/KuK_S6R9cV5T4us9AS0_y80bDsA.mft
Manifest number: 02D1
Signing time: Sun 29 Mar 2026 01:01:11 +0000
Manifest this update: Sun 29 Mar 2026 01:01:11 +0000
Manifest next update: Mon 30 Mar 2026 01:01:11 +0000
Files and hashes: 1: KuK_S6R9cV5T4us9AS0_y80bDsA.crl (hash: v6qH/g6kg9sGMdVW68YPEjg42czoG5XBAnMRBt2WPsw=)
2: uPCaDDec9QKPaddyi8Q6i4Q7q7k.roa (hash: n+pffEHjG87ngAjTdw3F82UnpSjTNX/RT+SqH5AesLg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/40a276-8515-442c-816e-38eed6df053b/1/KuK_S6R9cV5T4us9AS0_y80bDsA.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/40a276-8515-442c-816e-38eed6df053b/1/KuK_S6R9cV5T4us9AS0_y80bDsA.mft
rsync://rpki.ripe.net/repository/DEFAULT/KuK_S6R9cV5T4us9AS0_y80bDsA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 01:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:1b:f2:24:31:63:60:12:ce:0e:ff:cc:52:e6:33:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ae2bf4ba47d715e53e2eb3d012d3fcbcd1b0ec0
Validity
Not Before: Mar 29 01:01:11 2026 GMT
Not After : Mar 30 01:01:11 2026 GMT
Subject: CN=2302d1ff15e2dd17662ae884fc8972016b155af4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:b1:4e:ac:29:b4:4c:51:04:a1:ee:4b:bb:43:
58:a8:52:ea:68:ef:d4:8a:24:81:93:70:37:73:38:
d9:ce:a0:a5:b9:5b:0e:3b:2a:ef:6d:f4:43:f7:f4:
92:7d:f5:a0:75:16:5f:92:59:ca:a4:e3:55:dc:89:
65:0b:ad:90:be:97:84:90:da:8f:b3:15:b3:86:f7:
26:fe:26:bc:c8:b4:6c:ba:8e:49:1a:46:c7:31:83:
63:84:b3:0b:3a:84:6a:90:07:97:a3:02:8e:8f:15:
3e:e3:40:19:d2:47:8e:53:67:c2:02:d9:3f:68:e6:
36:eb:81:11:4f:e2:ef:8e:f4:a3:37:f4:b8:dc:da:
1e:78:0f:4d:2a:e8:49:ed:90:c4:41:56:c5:9c:94:
f5:45:ee:32:b1:72:f7:65:a3:6b:00:9d:37:a5:db:
10:24:4b:43:48:93:eb:12:7d:99:4f:90:0e:67:64:
d6:ca:e7:6e:0f:65:5a:43:9d:ab:e6:d6:a5:8f:0a:
83:8a:d6:b0:7c:1a:54:10:ba:f3:e0:04:a8:74:b8:
f3:19:a5:92:0e:fd:a2:03:e9:ba:78:28:4a:77:bb:
b2:0a:69:39:5e:bd:e6:1a:52:1f:f6:aa:92:5e:18:
48:2a:f7:0a:e4:3c:da:3a:73:94:f3:e9:ea:4a:06:
e8:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:02:D1:FF:15:E2:DD:17:66:2A:E8:84:FC:89:72:01:6B:15:5A:F4
X509v3 Authority Key Identifier:
keyid:2A:E2:BF:4B:A4:7D:71:5E:53:E2:EB:3D:01:2D:3F:CB:CD:1B:0E:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KuK_S6R9cV5T4us9AS0_y80bDsA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/40a276-8515-442c-816e-38eed6df053b/1/KuK_S6R9cV5T4us9AS0_y80bDsA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/40a276-8515-442c-816e-38eed6df053b/1/KuK_S6R9cV5T4us9AS0_y80bDsA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:5f:72:c0:a2:36:da:2b:19:d1:ff:60:e4:6e:99:af:fc:3f:
55:85:b6:fb:71:4f:a2:29:64:b0:d0:f7:a4:21:a3:96:94:f3:
68:8f:7c:cb:e1:7d:1c:03:10:45:e8:3a:6c:05:12:eb:7f:d8:
5a:e8:99:4d:20:23:07:80:94:53:97:c6:52:48:95:42:70:23:
e5:d0:90:8b:b6:e9:4e:73:64:42:7d:5e:2a:a4:b5:c0:99:14:
66:6f:03:44:a6:df:0e:b9:0a:5d:c5:3d:45:e0:50:d7:f8:1b:
1b:af:a7:4d:30:7d:97:86:87:9c:15:07:ba:41:a5:52:d2:e1:
fb:d2:64:1b:08:23:20:e8:32:2a:de:c0:27:44:d1:87:bd:d8:
1e:85:f5:80:e4:6d:50:9d:33:0b:d3:35:c3:15:16:a0:a1:6f:
21:d2:5c:94:3e:2a:ee:30:96:39:d3:14:b0:ac:88:1e:e8:1c:
e9:38:59:71:da:3f:be:6f:d5:95:1a:75:af:36:96:0e:69:28:
6d:3f:af:ba:79:32:ce:e0:a5:b3:3d:b7:d3:17:0f:93:af:13:
7e:a9:5b:36:c7:2c:03:46:5d:13:98:90:c8:06:b7:86:93:c6:
3f:b9:f9:dd:88:d3:7a:58:72:17:f4:bd:70:de:06:35:30:98:
1e:19:e5:8f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03G/IkMWNgEs4O/8xS5jNUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhZTJiZjRiYTQ3ZDcxNWU1M2UyZWIzZDAxMmQzZmNiY2Qx
YjBlYzAwHhcNMjYwMzI5MDEwMTExWhcNMjYwMzMwMDEwMTExWjAzMTEwLwYDVQQD
EygyMzAyZDFmZjE1ZTJkZDE3NjYyYWU4ODRmYzg5NzIwMTZiMTU1YWY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzbFOrCm0TFEEoe5Lu0NYqFLqaO/U
iiSBk3A3czjZzqCluVsOOyrvbfRD9/SSffWgdRZfklnKpONV3IllC62QvpeEkNqP
sxWzhvcm/ia8yLRsuo5JGkbHMYNjhLMLOoRqkAeXowKOjxU+40AZ0keOU2fCAtk/
aOY264ERT+LvjvSjN/S43NoeeA9NKuhJ7ZDEQVbFnJT1Re4ysXL3ZaNrAJ03pdsQ
JEtDSJPrEn2ZT5AOZ2TWyuduD2VaQ52r5taljwqDitawfBpUELrz4ASodLjzGaWS
Dv2iA+m6eChKd7uyCmk5Xr3mGlIf9qqSXhhIKvcK5DzaOnOU8+nqSgboBQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCMC0f8V4t0XZirohPyJcgFrFVr0MB8GA1UdIwQY
MBaAFCriv0ukfXFeU+LrPQEtP8vNGw7AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS3VLX1M2UjljVjVUNHVzOUFTMF95ODBiRHNBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy80MGEyNzYtODUxNS00NDJjLTgxNmUt
MzhlZWQ2ZGYwNTNiLzEvS3VLX1M2UjljVjVUNHVzOUFTMF95ODBiRHNBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNy80MGEyNzYtODUxNS00NDJjLTgxNmUtMzhlZWQ2ZGYwNTNi
LzEvS3VLX1M2UjljVjVUNHVzOUFTMF95ODBiRHNBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaF9ywKI2
2isZ0f9g5G6Zr/w/VYW2+3FPoilksND3pCGjlpTzaI98y+F9HAMQReg6bAUS63/Y
WuiZTSAjB4CUU5fGUkiVQnAj5dCQi7bpTnNkQn1eKqS1wJkUZm8DRKbfDrkKXcU9
ReBQ1/gbG6+nTTB9l4aHnBUHukGlUtLh+9JkGwgjIOgyKt7AJ0TRh73YHoX1gORt
UJ0zC9M1wxUWoKFvIdJclD4q7jCWOdMUsKyIHugc6ThZcdo/vm/VlRp1rzaWDmko
bT+vunkyzuClsz230xcPk68TfqlbNscsA0ZdE5iQyAa3hpPGP7n53YjTelhyF/S9
cN4GNTCYHhnljw==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:13:44 2026 by rpki-client