
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/27/40a276-8515-442c-816e-38eed6df053b/1/KuK_S6R9cV5T4us9AS0_y80bDsA.mft
File: KuK_S6R9cV5T4us9AS0_y80bDsA.mft (raw, json)
Hash identifier: thZurD/06nIKJ3Biufcl7HBDO+EvHk7uOZsn/OD6ckY=
Subject key identifier: 2B:96:32:3A:A0:B3:65:26:D3:48:48:D9:7B:CD:77:1C:67:C6:62:8A
Authority key identifier: 2A:E2:BF:4B:A4:7D:71:5E:53:E2:EB:3D:01:2D:3F:CB:CD:1B:0E:C0
Certificate issuer: /CN=2ae2bf4ba47d715e53e2eb3d012d3fcbcd1b0ec0
Certificate serial: 01A151AD2C8061026C520DB1D3B39D0432B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KuK_S6R9cV5T4us9AS0_y80bDsA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/40a276-8515-442c-816e-38eed6df053b/1/KuK_S6R9cV5T4us9AS0_y80bDsA.mft
Manifest number: 04F1
Signing time: Mon 19 Oct 2026 01:01:05 +0000
Manifest this update: Mon 19 Oct 2026 01:01:05 +0000
Manifest next update: Tue 20 Oct 2026 01:01:05 +0000
Files and hashes: 1: KuK_S6R9cV5T4us9AS0_y80bDsA.crl (hash: ZK3fqwBPLdCKFZVY2p/TxTGYa+wmT4zsS0nIJwWwygE=)
2: uPCaDDec9QKPaddyi8Q6i4Q7q7k.roa (hash: n+pffEHjG87ngAjTdw3F82UnpSjTNX/RT+SqH5AesLg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/40a276-8515-442c-816e-38eed6df053b/1/KuK_S6R9cV5T4us9AS0_y80bDsA.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/40a276-8515-442c-816e-38eed6df053b/1/KuK_S6R9cV5T4us9AS0_y80bDsA.mft
rsync://rpki.ripe.net/repository/DEFAULT/KuK_S6R9cV5T4us9AS0_y80bDsA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 01:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:51:ad:2c:80:61:02:6c:52:0d:b1:d3:b3:9d:04:32:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ae2bf4ba47d715e53e2eb3d012d3fcbcd1b0ec0
Validity
Not Before: Oct 19 01:01:05 2026 GMT
Not After : Oct 20 01:01:05 2026 GMT
Subject: CN=2b96323aa0b36526d34848d97bcd771c67c6628a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:d1:a3:7b:9e:52:89:f6:96:9c:e1:31:6a:4d:
c7:03:eb:94:32:67:5c:51:49:d7:d5:1c:23:30:ad:
42:04:d2:f7:69:1d:d6:e7:ca:b4:44:82:03:a3:90:
b8:00:7c:7e:37:32:bd:c3:75:e3:3b:29:53:e0:0f:
2d:49:75:49:f2:0f:b7:e4:a3:72:27:ef:26:35:fa:
fe:e7:ee:1c:a3:a0:32:d8:2d:31:a9:ff:33:9f:91:
09:33:91:93:81:80:d8:fa:1b:f8:b7:b0:ed:27:c0:
22:b7:2a:7b:eb:86:58:65:b5:0e:bb:80:02:a6:ed:
05:e9:11:10:f0:ea:d1:1c:8f:5e:01:3c:03:9c:f1:
41:04:e5:43:d4:1d:c0:fa:b0:64:ae:22:c9:f1:4a:
35:ed:39:3e:51:c9:d7:3e:39:bc:4a:16:ab:ce:06:
04:5d:5f:23:da:ba:90:18:66:7e:08:65:f8:ee:d0:
38:f0:99:89:21:c0:3d:5f:12:32:bc:1f:3d:b9:4b:
0b:f8:74:9e:8a:c4:c9:1e:cf:80:1b:e4:49:b4:c9:
a5:c5:5d:72:9f:7f:db:cd:c9:6e:31:c8:1c:64:d2:
b4:2a:61:df:a8:ea:f2:fd:5e:7f:7b:e5:f1:4a:79:
d5:66:76:47:3f:f3:78:93:e6:82:36:eb:fd:7a:10:
88:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:96:32:3A:A0:B3:65:26:D3:48:48:D9:7B:CD:77:1C:67:C6:62:8A
X509v3 Authority Key Identifier:
keyid:2A:E2:BF:4B:A4:7D:71:5E:53:E2:EB:3D:01:2D:3F:CB:CD:1B:0E:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KuK_S6R9cV5T4us9AS0_y80bDsA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/40a276-8515-442c-816e-38eed6df053b/1/KuK_S6R9cV5T4us9AS0_y80bDsA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/40a276-8515-442c-816e-38eed6df053b/1/KuK_S6R9cV5T4us9AS0_y80bDsA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:37:80:c7:48:fb:ac:d2:92:55:52:d9:b3:da:8d:56:0f:01:
84:ec:3c:d3:d3:5e:7f:ac:fa:cb:ee:e1:bb:a9:bf:74:64:ca:
1b:83:1c:5b:48:2a:da:52:d5:3d:27:24:22:92:05:da:87:28:
a3:be:d4:72:a2:ca:e4:b8:4f:6c:bd:ac:b5:d4:e8:62:1a:7e:
a3:62:40:58:7d:72:4f:0d:93:65:2f:8e:b0:b3:b1:63:fd:c5:
0e:29:45:20:27:dc:bd:6f:37:02:c4:f4:bf:85:f1:b9:d0:73:
c8:f2:f7:b3:4e:95:dd:0e:54:2b:76:ab:42:58:2c:07:d6:eb:
ff:46:03:5d:e5:03:91:43:12:e6:57:c1:cc:61:33:f9:51:c7:
89:07:36:1d:6b:0f:53:f2:61:e0:7d:8b:59:91:75:1d:ba:21:
ae:89:60:44:75:56:e8:26:d5:3f:d3:fe:93:a3:30:83:97:36:
ac:ee:c4:17:8b:09:f3:2f:a0:2e:54:2f:de:19:bf:01:31:50:
9b:76:8d:1d:13:fa:4a:89:90:68:06:f3:b7:89:2a:dd:0c:16:
08:74:15:02:f5:90:ab:54:00:e1:c1:00:01:b3:f4:1f:6b:d2:
60:d1:29:3a:9b:51:8f:20:a2:8f:b9:f3:aa:1d:6f:d2:74:a2:
c2:cb:ae:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 08:01:33 2026 by rpki-client