Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/40a276-8515-442c-816e-38eed6df053b/1/KuK_S6R9cV5T4us9AS0_y80bDsA.mft
File: KuK_S6R9cV5T4us9AS0_y80bDsA.mft (raw, json)
Hash identifier: 1Aqzh9hmOr/1r7tFioPlKJoqCUcy6LeQVHUQ+iDJsSA=
Subject key identifier: 85:0B:ED:F8:36:94:07:25:6B:7E:36:4F:2C:87:3F:95:96:DE:72:89
Authority key identifier: 2A:E2:BF:4B:A4:7D:71:5E:53:E2:EB:3D:01:2D:3F:CB:CD:1B:0E:C0
Certificate issuer: /CN=2ae2bf4ba47d715e53e2eb3d012d3fcbcd1b0ec0
Certificate serial: 019E3229F4F02D06EEE26ABA814A65841B7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KuK_S6R9cV5T4us9AS0_y80bDsA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/40a276-8515-442c-816e-38eed6df053b/1/KuK_S6R9cV5T4us9AS0_y80bDsA.mft
Manifest number: 0353
Signing time: Sat 16 May 2026 19:01:10 +0000
Manifest this update: Sat 16 May 2026 19:01:10 +0000
Manifest next update: Sun 17 May 2026 19:01:10 +0000
Files and hashes: 1: KuK_S6R9cV5T4us9AS0_y80bDsA.crl (hash: 7gZ1rwHg6E9GrsKRPBtU9QDPyfzqMh1ijf0xwJEJ41g=)
2: uPCaDDec9QKPaddyi8Q6i4Q7q7k.roa (hash: n+pffEHjG87ngAjTdw3F82UnpSjTNX/RT+SqH5AesLg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/40a276-8515-442c-816e-38eed6df053b/1/KuK_S6R9cV5T4us9AS0_y80bDsA.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/40a276-8515-442c-816e-38eed6df053b/1/KuK_S6R9cV5T4us9AS0_y80bDsA.mft
rsync://rpki.ripe.net/repository/DEFAULT/KuK_S6R9cV5T4us9AS0_y80bDsA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 14:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:32:29:f4:f0:2d:06:ee:e2:6a:ba:81:4a:65:84:1b:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ae2bf4ba47d715e53e2eb3d012d3fcbcd1b0ec0
Validity
Not Before: May 16 19:01:10 2026 GMT
Not After : May 17 19:01:10 2026 GMT
Subject: CN=850bedf8369407256b7e364f2c873f9596de7289
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:7a:09:18:ec:4e:bb:e2:19:7d:56:3d:ea:94:
23:9d:6f:05:5e:04:73:52:b1:3b:9a:e7:b0:2a:89:
b9:05:9b:4f:f2:a6:e6:b4:c6:e7:55:a5:98:e4:4e:
cb:f4:bb:4f:d4:ec:eb:46:3f:23:6e:3d:e4:3f:c8:
b9:0d:64:b1:df:65:9c:6e:9c:ee:9a:95:ce:83:19:
73:e3:af:23:9f:ae:7e:1c:4c:65:0a:1e:4d:9f:03:
76:4c:ed:8a:97:54:e2:f4:ae:a5:ec:75:ee:a8:89:
35:04:c5:53:fe:67:38:0f:dd:8e:38:dc:34:aa:5f:
ad:14:b9:9c:2d:d1:1b:33:ec:56:ea:b8:4e:c0:7b:
b9:f0:fc:8b:3b:0e:d2:13:90:03:1a:2f:94:98:4a:
a8:9c:4c:3b:ed:9e:fd:3c:41:ea:aa:a5:89:43:1b:
87:92:64:de:1f:ad:bd:0e:d5:78:9a:6a:88:0e:76:
aa:e7:d6:0f:1d:ea:61:a6:2f:ed:67:ec:80:04:38:
d9:cb:08:40:41:be:b6:a7:74:96:ee:1d:67:dc:c7:
28:ee:37:d2:ab:0e:db:37:01:42:c6:0a:c6:ef:2b:
82:15:28:4a:f6:93:92:4d:c1:61:0c:dd:a6:06:77:
d8:6d:8c:15:df:e6:ad:7e:22:6f:73:82:3f:0d:09:
cd:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:0B:ED:F8:36:94:07:25:6B:7E:36:4F:2C:87:3F:95:96:DE:72:89
X509v3 Authority Key Identifier:
keyid:2A:E2:BF:4B:A4:7D:71:5E:53:E2:EB:3D:01:2D:3F:CB:CD:1B:0E:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KuK_S6R9cV5T4us9AS0_y80bDsA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/40a276-8515-442c-816e-38eed6df053b/1/KuK_S6R9cV5T4us9AS0_y80bDsA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/40a276-8515-442c-816e-38eed6df053b/1/KuK_S6R9cV5T4us9AS0_y80bDsA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:4c:f7:0e:32:0a:ec:1b:79:c7:30:04:9a:0e:a5:2d:2d:70:
2a:bf:bc:af:ab:db:e5:27:7a:5b:c0:64:8f:10:ce:97:66:a2:
14:0d:67:4f:76:3b:b5:98:b3:a6:15:00:3e:e1:e5:f8:39:23:
71:0c:ef:64:67:1b:07:36:67:e0:a8:0f:0d:f0:71:88:87:08:
61:2d:cf:e1:e0:1b:ae:52:33:fe:55:99:87:ae:56:bf:7e:aa:
b7:8f:ad:4b:78:57:7a:d4:a6:27:38:a1:12:93:cc:69:36:4f:
e6:12:e2:49:74:e3:6e:b1:7a:45:ef:bc:f9:18:b9:07:ec:c8:
20:5a:6f:21:d0:88:07:3a:58:06:d4:28:4a:1b:47:46:f3:2f:
09:e2:67:e7:42:fe:aa:1d:1f:5a:f7:1e:f4:bb:30:e9:95:39:
e5:59:78:04:ae:a5:67:e2:24:00:f0:63:c4:71:09:29:bd:55:
49:7f:d9:cd:11:d4:de:5f:06:df:44:d9:62:f7:b5:5c:0f:cc:
63:f2:a3:e1:6e:72:fd:ae:73:8f:3d:6f:33:0b:43:55:a8:42:
b2:ca:9c:97:00:95:15:84:73:8f:6e:e7:b9:a1:8e:8d:0f:73:
23:c6:8e:d3:fb:15:d2:8b:fc:70:d2:d7:bc:ab:14:9a:1b:da:
b2:14:f6:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 23:30:14 2026 by rpki-client