Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/27/40a276-8515-442c-816e-38eed6df053b/1/KuK_S6R9cV5T4us9AS0_y80bDsA.mft
File: KuK_S6R9cV5T4us9AS0_y80bDsA.mft (raw, json)
Hash identifier: zKrpv1W5PwAcnQfA7Qvka0MMUbbaGOC+nrY5iLXVyyA=
Subject key identifier: E5:5B:8D:8F:BD:20:51:E3:57:9A:68:65:66:19:A3:88:F0:CF:69:FD
Authority key identifier: 2A:E2:BF:4B:A4:7D:71:5E:53:E2:EB:3D:01:2D:3F:CB:CD:1B:0E:C0
Certificate issuer: /CN=2ae2bf4ba47d715e53e2eb3d012d3fcbcd1b0ec0
Certificate serial: 01A159667985259D98A06A75A4BFB0AEF852
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KuK_S6R9cV5T4us9AS0_y80bDsA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/40a276-8515-442c-816e-38eed6df053b/1/KuK_S6R9cV5T4us9AS0_y80bDsA.mft
Manifest number: 04F5
Signing time: Tue 20 Oct 2026 13:00:50 +0000
Manifest this update: Tue 20 Oct 2026 13:00:50 +0000
Manifest next update: Wed 21 Oct 2026 13:00:50 +0000
Files and hashes: 1: KuK_S6R9cV5T4us9AS0_y80bDsA.crl (hash: +M+PVxkfTjcn2hLxEBrzihgpTbMr1850JHpAf9efSqU=)
2: uPCaDDec9QKPaddyi8Q6i4Q7q7k.roa (hash: n+pffEHjG87ngAjTdw3F82UnpSjTNX/RT+SqH5AesLg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/40a276-8515-442c-816e-38eed6df053b/1/KuK_S6R9cV5T4us9AS0_y80bDsA.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/40a276-8515-442c-816e-38eed6df053b/1/KuK_S6R9cV5T4us9AS0_y80bDsA.mft
rsync://rpki.ripe.net/repository/DEFAULT/KuK_S6R9cV5T4us9AS0_y80bDsA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Oct 2026 08:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:59:66:79:85:25:9d:98:a0:6a:75:a4:bf:b0:ae:f8:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ae2bf4ba47d715e53e2eb3d012d3fcbcd1b0ec0
Validity
Not Before: Oct 20 13:00:50 2026 GMT
Not After : Oct 21 13:00:50 2026 GMT
Subject: CN=e55b8d8fbd2051e3579a68656619a388f0cf69fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:18:3a:98:fc:24:99:01:45:5c:16:a8:46:2b:
8d:7e:1f:b6:27:db:8b:aa:ea:f3:dc:50:fd:27:fc:
27:dc:73:c2:5d:dc:7e:53:db:06:5e:fc:0f:06:f8:
b6:52:03:e4:df:c6:cc:7f:4a:08:b4:2f:44:bb:d6:
87:77:8e:b8:d2:d5:8f:74:78:6e:78:6e:0f:09:2c:
a8:8b:da:e0:cf:4d:03:63:a5:55:b8:ae:73:a6:82:
e6:a1:50:cc:0b:ca:99:08:94:ed:dc:0e:db:88:b6:
84:67:46:7d:d8:ce:ef:bb:c5:b5:75:0a:e6:de:71:
77:cb:3d:5c:eb:32:48:0e:e3:ec:a1:c9:c9:f9:60:
96:18:92:b9:52:a9:b2:81:ea:e5:48:e5:a4:39:0a:
93:bc:e9:b0:42:99:a9:f0:55:4b:b5:57:44:cf:71:
b3:31:be:a6:d6:0d:c2:9f:06:96:e4:ca:fd:2f:d9:
88:7f:ec:54:cd:bb:2d:da:53:85:63:36:db:ce:c8:
77:fa:fe:28:32:3d:fa:5e:2d:12:2e:69:da:70:c3:
ed:ba:20:de:47:20:86:19:6a:f7:53:b1:97:9c:6a:
51:0d:14:1a:ca:16:a1:d1:ea:77:0f:e8:2a:2f:b9:
f8:70:64:ef:73:ce:2e:e6:4c:ca:2e:4b:cc:fe:52:
ed:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:5B:8D:8F:BD:20:51:E3:57:9A:68:65:66:19:A3:88:F0:CF:69:FD
X509v3 Authority Key Identifier:
keyid:2A:E2:BF:4B:A4:7D:71:5E:53:E2:EB:3D:01:2D:3F:CB:CD:1B:0E:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KuK_S6R9cV5T4us9AS0_y80bDsA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/40a276-8515-442c-816e-38eed6df053b/1/KuK_S6R9cV5T4us9AS0_y80bDsA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/40a276-8515-442c-816e-38eed6df053b/1/KuK_S6R9cV5T4us9AS0_y80bDsA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:28:8d:ee:1a:f0:b1:88:32:d0:d5:e6:ed:83:c0:81:57:fa:
fd:c7:ae:3d:8c:bd:da:84:2b:ed:41:39:fe:94:54:a0:7f:45:
19:4f:d9:e5:f0:16:31:f3:dd:94:50:c3:fc:5d:41:01:2e:58:
1f:63:05:5a:cd:70:f9:70:87:b2:9f:9d:aa:ef:73:b4:fa:45:
31:9d:55:35:cf:39:5d:fc:7e:de:90:33:6e:ef:d3:72:e6:2c:
a9:72:d3:07:11:8c:33:ea:b7:35:19:4d:80:00:e7:e4:c3:69:
98:e9:88:a4:0f:fb:27:f9:ec:8c:73:4b:c0:03:58:f1:52:16:
27:5a:cf:1a:53:60:ab:3f:4c:52:17:3a:97:c0:cb:4d:0c:09:
b5:f7:bd:51:cc:a8:3a:d0:70:6f:7a:c0:c1:6a:ef:4e:01:64:
83:d4:82:00:92:38:ca:23:34:23:d1:72:41:86:9f:3e:28:1a:
a5:11:98:2c:e2:50:c6:bf:93:69:b9:71:80:c1:75:1f:08:4c:
57:03:65:cf:a5:f8:96:dd:66:a6:8e:05:87:06:f9:24:00:da:
67:66:45:b7:eb:76:f4:a0:b3:9c:b5:76:9a:07:5a:e7:9b:4e:
50:ad:b3:e5:b3:98:af:09:97:b7:59:e1:a9:a1:64:7e:71:5f:
2a:e8:18:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 18:27:48 2026 by rpki-client