Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/f516f6-d5a0-4086-94f2-abd4c5c9b374/1/kuwQUNOpMgq58M4rNloJfuQTSyQ.mft
File: kuwQUNOpMgq58M4rNloJfuQTSyQ.mft (raw, json)
Hash identifier: yP5pnvqb0vHEt55j7qWeViYoQvs38ymzerUjJ/2w7ug=
Subject key identifier: EB:2B:67:13:48:0C:F6:C1:32:84:23:D9:36:0A:79:DB:C5:66:F9:BC
Authority key identifier: 92:EC:10:50:D3:A9:32:0A:B9:F0:CE:2B:36:5A:09:7E:E4:13:4B:24
Certificate issuer: /CN=92ec1050d3a9320ab9f0ce2b365a097ee4134b24
Certificate serial: 019D3865FD2AAD830CA27BF94BB59453BD27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kuwQUNOpMgq58M4rNloJfuQTSyQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/f516f6-d5a0-4086-94f2-abd4c5c9b374/1/kuwQUNOpMgq58M4rNloJfuQTSyQ.mft
Manifest number: 15C6
Signing time: Sun 29 Mar 2026 07:01:41 +0000
Manifest this update: Sun 29 Mar 2026 07:01:41 +0000
Manifest next update: Mon 30 Mar 2026 07:01:41 +0000
Files and hashes: 1: kuwQUNOpMgq58M4rNloJfuQTSyQ.crl (hash: bPIDEznxuvQ2AAxougVlCg7fMNZFyyRQjJGG7lyc4sw=)
2: pS_aC8FbZiw_mmNWrXEQK1MHFNw.roa (hash: 0RzrxLXwiw0ILr05gey7vS2L1ChVUD2SMX+WoCfTDCU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/f516f6-d5a0-4086-94f2-abd4c5c9b374/1/kuwQUNOpMgq58M4rNloJfuQTSyQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/f516f6-d5a0-4086-94f2-abd4c5c9b374/1/kuwQUNOpMgq58M4rNloJfuQTSyQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/kuwQUNOpMgq58M4rNloJfuQTSyQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:fd:2a:ad:83:0c:a2:7b:f9:4b:b5:94:53:bd:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92ec1050d3a9320ab9f0ce2b365a097ee4134b24
Validity
Not Before: Mar 29 07:01:41 2026 GMT
Not After : Mar 30 07:01:41 2026 GMT
Subject: CN=eb2b6713480cf6c1328423d9360a79dbc566f9bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:1b:8c:42:2f:c5:d7:d1:b2:22:7d:2a:3d:99:
60:c0:8e:1b:a2:6b:5b:af:e1:2d:c7:40:e8:a4:8c:
b9:9f:31:b3:f4:1c:8f:0e:ec:ce:4e:eb:74:91:36:
b4:4c:32:e7:14:78:32:87:53:75:78:50:5a:83:cd:
cf:58:10:52:f7:6c:1e:2a:0b:02:51:62:a1:44:58:
cf:f3:8d:16:4e:ea:65:1d:3e:5c:91:10:a0:2e:83:
0e:5a:f7:6c:9b:52:66:44:ce:b2:c5:50:12:8e:71:
82:c8:c5:61:00:5b:75:06:60:f6:ab:ec:bd:21:23:
ad:7a:ad:17:17:63:81:52:8f:f0:64:8f:b7:16:89:
78:da:89:c3:b4:7e:a6:33:ea:1f:b3:4b:22:7d:d2:
c7:e6:08:2f:a9:52:49:48:51:ba:e4:35:87:31:5c:
f4:cd:95:7a:15:41:5a:9a:b0:98:53:e1:90:8a:18:
40:0c:2d:ec:ab:c8:88:e1:93:52:ae:d3:68:26:36:
71:67:eb:4c:74:b0:54:6b:c4:6f:1c:fe:0d:87:41:
64:77:fa:54:fd:b5:be:70:ac:2c:c9:a2:e6:e3:f7:
ba:b5:3b:0c:7e:76:ac:79:51:c8:99:72:26:a5:75:
80:1b:b4:63:14:53:2c:da:22:03:51:64:c1:10:ef:
f6:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:2B:67:13:48:0C:F6:C1:32:84:23:D9:36:0A:79:DB:C5:66:F9:BC
X509v3 Authority Key Identifier:
keyid:92:EC:10:50:D3:A9:32:0A:B9:F0:CE:2B:36:5A:09:7E:E4:13:4B:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kuwQUNOpMgq58M4rNloJfuQTSyQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/f516f6-d5a0-4086-94f2-abd4c5c9b374/1/kuwQUNOpMgq58M4rNloJfuQTSyQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/f516f6-d5a0-4086-94f2-abd4c5c9b374/1/kuwQUNOpMgq58M4rNloJfuQTSyQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:d3:b9:7d:96:9c:50:9d:bc:d3:60:4b:3b:3c:7e:fe:75:1e:
21:5c:16:f7:1f:eb:83:78:e5:cb:67:fd:60:d8:0c:88:69:77:
75:d7:70:67:8c:bd:06:c2:20:a3:0a:d4:23:90:4e:c7:a2:26:
19:b6:03:68:6f:04:46:64:be:20:07:94:e1:a1:7a:59:8d:3a:
41:72:6e:4c:37:fe:bf:c3:38:07:0c:21:b9:76:e4:3d:8d:81:
c5:ae:66:5f:40:22:9d:6c:d8:d7:f4:94:d2:a4:56:b6:1d:2f:
ae:cc:4e:e9:e6:39:9a:be:86:13:1a:ba:11:e0:4f:76:71:59:
f4:90:79:43:ad:b2:ca:16:b3:79:46:92:c2:af:8d:c5:b6:87:
bb:a1:92:be:11:68:ee:2b:b8:ad:65:49:0c:b5:ef:13:e6:9e:
3b:92:cd:2c:58:b8:cf:c8:2a:73:0a:54:4d:9e:e4:73:01:27:
df:75:b8:b3:84:18:fd:b4:4d:bc:23:12:dc:c8:a4:2e:30:1e:
8b:9d:0b:c7:70:9a:a7:c0:2e:f5:63:04:63:14:09:63:72:21:
5c:24:6e:0d:41:ad:23:0d:ee:c3:95:41:a3:89:b8:c0:8b:a7:
70:de:0f:4d:12:c8:2a:13:c7:20:60:b7:18:f5:95:e5:b8:4f:
8f:09:7e:10
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04Zf0qrYMMonv5S7WUU70nMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyZWMxMDUwZDNhOTMyMGFiOWYwY2UyYjM2NWEwOTdlZTQx
MzRiMjQwHhcNMjYwMzI5MDcwMTQxWhcNMjYwMzMwMDcwMTQxWjAzMTEwLwYDVQQD
EyhlYjJiNjcxMzQ4MGNmNmMxMzI4NDIzZDkzNjBhNzlkYmM1NjZmOWJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4xuMQi/F19GyIn0qPZlgwI4bomtb
r+Etx0DopIy5nzGz9ByPDuzOTut0kTa0TDLnFHgyh1N1eFBag83PWBBS92weKgsC
UWKhRFjP840WTuplHT5ckRCgLoMOWvdsm1JmRM6yxVASjnGCyMVhAFt1BmD2q+y9
ISOteq0XF2OBUo/wZI+3Fol42onDtH6mM+ofs0sifdLH5ggvqVJJSFG65DWHMVz0
zZV6FUFamrCYU+GQihhADC3sq8iI4ZNSrtNoJjZxZ+tMdLBUa8RvHP4Nh0Fkd/pU
/bW+cKwsyaLm4/e6tTsMfnaseVHImXImpXWAG7RjFFMs2iIDUWTBEO/2EwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOsrZxNIDPbBMoQj2TYKedvFZvm8MB8GA1UdIwQY
MBaAFJLsEFDTqTIKufDOKzZaCX7kE0skMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva3V3UVVOT3BNZ3E1OE00ck5sb0pmdVFUU3lRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC9mNTE2ZjYtZDVhMC00MDg2LTk0ZjIt
YWJkNGM1YzliMzc0LzEva3V3UVVOT3BNZ3E1OE00ck5sb0pmdVFUU3lRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC9mNTE2ZjYtZDVhMC00MDg2LTk0ZjItYWJkNGM1YzliMzc0
LzEva3V3UVVOT3BNZ3E1OE00ck5sb0pmdVFUU3lRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZdO5fZac
UJ2802BLOzx+/nUeIVwW9x/rg3jly2f9YNgMiGl3dddwZ4y9BsIgowrUI5BOx6Im
GbYDaG8ERmS+IAeU4aF6WY06QXJuTDf+v8M4BwwhuXbkPY2Bxa5mX0AinWzY1/SU
0qRWth0vrsxO6eY5mr6GExq6EeBPdnFZ9JB5Q62yyhazeUaSwq+NxbaHu6GSvhFo
7iu4rWVJDLXvE+aeO5LNLFi4z8gqcwpUTZ7kcwEn33W4s4QY/bRNvCMS3MikLjAe
i50Lx3Cap8Au9WMEYxQJY3IhXCRuDUGtIw3uw5VBo4m4wIuncN4PTRLIKhPHIGC3
GPWV5bhPjwl+EA==
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:56:56 2026 by rpki-client