Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/40a276-8515-442c-816e-38eed6df053b/1/KuK_S6R9cV5T4us9AS0_y80bDsA.mft
File: KuK_S6R9cV5T4us9AS0_y80bDsA.mft (raw, json)
Hash identifier: L4dSPTtgWjr1Tk0vXSSQUUtbN7w/7Fom3J/TGERQeb8=
Subject key identifier: DF:40:B6:A3:CE:34:63:11:A6:3E:A1:92:71:FC:0D:48:0A:C7:9A:DC
Authority key identifier: 2A:E2:BF:4B:A4:7D:71:5E:53:E2:EB:3D:01:2D:3F:CB:CD:1B:0E:C0
Certificate issuer: /CN=2ae2bf4ba47d715e53e2eb3d012d3fcbcd1b0ec0
Certificate serial: 019FA30540505C2B0CA9088AB79B2D33B854
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KuK_S6R9cV5T4us9AS0_y80bDsA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/40a276-8515-442c-816e-38eed6df053b/1/KuK_S6R9cV5T4us9AS0_y80bDsA.mft
Manifest number: 0412
Signing time: Mon 27 Jul 2026 10:00:57 +0000
Manifest this update: Mon 27 Jul 2026 10:00:57 +0000
Manifest next update: Tue 28 Jul 2026 10:00:57 +0000
Files and hashes: 1: KuK_S6R9cV5T4us9AS0_y80bDsA.crl (hash: 392NfYNhbpeKTPnwIkCTR9rY4jzUQEkTl2bz4fbfROg=)
2: uPCaDDec9QKPaddyi8Q6i4Q7q7k.roa (hash: n+pffEHjG87ngAjTdw3F82UnpSjTNX/RT+SqH5AesLg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/40a276-8515-442c-816e-38eed6df053b/1/KuK_S6R9cV5T4us9AS0_y80bDsA.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/40a276-8515-442c-816e-38eed6df053b/1/KuK_S6R9cV5T4us9AS0_y80bDsA.mft
rsync://rpki.ripe.net/repository/DEFAULT/KuK_S6R9cV5T4us9AS0_y80bDsA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a3:05:40:50:5c:2b:0c:a9:08:8a:b7:9b:2d:33:b8:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ae2bf4ba47d715e53e2eb3d012d3fcbcd1b0ec0
Validity
Not Before: Jul 27 10:00:57 2026 GMT
Not After : Jul 28 10:00:57 2026 GMT
Subject: CN=df40b6a3ce346311a63ea19271fc0d480ac79adc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:11:9a:e0:d0:be:9b:3f:67:12:80:fe:2d:6d:
e9:15:a8:41:d0:c8:9d:f7:2e:2f:4a:67:e1:07:a6:
f8:c3:bc:75:c1:96:ec:53:1e:bc:59:bd:f2:69:c4:
78:79:fc:71:84:d2:3c:1a:c8:6c:d1:b0:cd:82:78:
a4:2e:2c:2c:cf:e8:09:b9:c9:9a:01:76:40:07:2e:
84:bf:2a:49:fe:8e:d6:54:f2:58:7c:25:b9:ad:1d:
e6:b9:7d:25:f5:a6:13:b9:a8:cf:e5:a8:19:3c:ce:
44:55:d0:05:48:d2:36:e1:e3:da:ea:89:5c:78:31:
fb:82:b9:4e:bf:a8:5c:f0:14:68:f7:c6:2e:09:95:
16:3b:05:85:76:3c:84:2d:3d:a2:bc:6a:1c:09:86:
4b:7e:8f:d2:15:48:ea:d4:9d:b1:4c:c3:49:33:41:
8c:df:ba:5f:cc:5a:01:a7:4f:6b:e5:bb:f5:b2:57:
c1:2c:58:44:19:4c:a8:5c:3e:fc:f8:0d:72:56:06:
b6:5a:a3:fa:2b:4c:94:8b:44:93:3c:c4:7e:37:af:
19:58:aa:df:6d:36:58:44:f0:d8:d0:98:89:d9:20:
a5:8f:c8:a1:81:7c:8e:44:01:d4:b6:4b:92:12:5f:
22:cc:b2:05:d1:13:65:ee:12:19:19:56:fb:18:16:
f7:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:40:B6:A3:CE:34:63:11:A6:3E:A1:92:71:FC:0D:48:0A:C7:9A:DC
X509v3 Authority Key Identifier:
keyid:2A:E2:BF:4B:A4:7D:71:5E:53:E2:EB:3D:01:2D:3F:CB:CD:1B:0E:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KuK_S6R9cV5T4us9AS0_y80bDsA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/40a276-8515-442c-816e-38eed6df053b/1/KuK_S6R9cV5T4us9AS0_y80bDsA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/40a276-8515-442c-816e-38eed6df053b/1/KuK_S6R9cV5T4us9AS0_y80bDsA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:d7:a9:7c:3d:d8:0a:23:97:25:4d:f0:19:e8:00:b0:40:76:
4e:c2:e2:70:20:ce:c6:50:82:b5:24:49:62:6e:d6:3c:31:6e:
95:e9:b2:ad:ff:e8:89:1e:8e:3f:b0:09:d0:25:5a:e8:fa:89:
6f:2a:25:b6:2e:17:95:96:ee:b3:5c:97:db:5c:c8:84:96:09:
b1:81:1e:c7:c9:23:28:61:ca:8c:b0:6c:35:e5:9d:15:67:c3:
e4:aa:37:89:bd:46:d5:34:16:01:1a:8a:6d:56:0b:22:34:d4:
f1:6e:d5:6f:fb:47:6f:a0:45:ca:8b:56:eb:39:65:23:98:07:
45:18:cc:95:ad:dd:c6:09:cb:fd:9f:90:c5:aa:21:3c:2a:35:
64:a1:a3:bd:c4:70:47:6a:8b:85:a9:6b:8a:27:44:08:80:c0:
23:be:6e:74:2d:2c:ba:70:48:6e:b7:e0:46:db:15:f1:1a:8b:
5a:3c:7d:30:68:f4:a2:31:9c:da:c5:37:ea:eb:b9:74:30:ce:
71:b6:1e:17:7e:a3:c8:d4:14:83:80:1b:a4:24:9f:36:01:8e:
e3:27:ed:8f:eb:9e:03:6d:d3:ce:74:e7:e8:c7:b5:85:34:57:
fd:ae:73:00:5d:e9:52:59:af:81:9e:c5:88:a6:d5:a9:7c:63:
93:99:c4:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 13:58:19 2026 by rpki-client