Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/7943a0-ccab-4260-bd51-afe89aacc492/1/ku_2FiUC6jtS_YyjrhCNE9a_9lI.mft
File: ku_2FiUC6jtS_YyjrhCNE9a_9lI.mft (raw, json)
Hash identifier: r/wA31JKg9n54s5JTkcQFhOESvRyC7r1MnYuAk7YhDc=
Subject key identifier: 4B:36:F1:79:0B:58:6E:3F:80:74:FB:50:12:45:EA:4A:AF:65:E1:60
Authority key identifier: 92:EF:F6:16:25:02:EA:3B:52:FD:8C:A3:AE:10:8D:13:D6:BF:F6:52
Certificate issuer: /CN=92eff6162502ea3b52fd8ca3ae108d13d6bff652
Certificate serial: 019D382DDC004CF3AA5381D21FCCBEBE2422
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ku_2FiUC6jtS_YyjrhCNE9a_9lI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/7943a0-ccab-4260-bd51-afe89aacc492/1/ku_2FiUC6jtS_YyjrhCNE9a_9lI.mft
Manifest number: 188F
Signing time: Sun 29 Mar 2026 06:00:22 +0000
Manifest this update: Sun 29 Mar 2026 06:00:22 +0000
Manifest next update: Mon 30 Mar 2026 06:00:22 +0000
Files and hashes: 1: BK2ktyU34ofrpamQZgAZgS1SDAw.roa (hash: UFCcNLAPVlBtUduNktGFZUuUL/6s5iN6F5JFOmjmPCk=)
2: ku_2FiUC6jtS_YyjrhCNE9a_9lI.crl (hash: P4eR8UvBq2tXNQd0x8Gain+XQVA0DjD4wBY5nEKp4yY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/7943a0-ccab-4260-bd51-afe89aacc492/1/ku_2FiUC6jtS_YyjrhCNE9a_9lI.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/7943a0-ccab-4260-bd51-afe89aacc492/1/ku_2FiUC6jtS_YyjrhCNE9a_9lI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ku_2FiUC6jtS_YyjrhCNE9a_9lI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2d:dc:00:4c:f3:aa:53:81:d2:1f:cc:be:be:24:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92eff6162502ea3b52fd8ca3ae108d13d6bff652
Validity
Not Before: Mar 29 06:00:22 2026 GMT
Not After : Mar 30 06:00:22 2026 GMT
Subject: CN=4b36f1790b586e3f8074fb501245ea4aaf65e160
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:6a:12:39:d9:82:63:c0:b7:6a:02:86:6b:55:
f6:19:67:d6:ad:b4:44:a0:83:9c:23:dd:82:d1:ba:
e5:6d:b2:8c:58:74:c4:18:ad:35:32:08:a6:67:fe:
fc:5d:2a:5e:2d:df:b1:b2:c2:77:b1:4d:06:2c:cf:
94:61:01:92:1c:35:41:a8:21:06:77:8d:14:bb:11:
7c:02:c1:f2:4c:1c:27:7e:77:3b:2a:08:96:85:06:
74:6e:00:d4:a4:22:b2:c6:29:52:5c:46:f8:55:6d:
21:24:de:ee:db:e5:be:6a:91:64:40:ec:6f:81:4c:
09:5c:f6:ec:c9:c8:d5:f6:9f:28:7f:2a:b6:46:cf:
ed:87:ec:c7:47:de:09:e1:71:cd:00:85:88:d1:87:
1b:00:1b:fb:74:0c:a4:d3:f6:6b:ba:21:71:f6:b5:
7a:12:93:3f:f7:04:2a:c1:92:03:78:f3:d1:4b:78:
f7:fc:d4:ab:3c:5e:e3:1b:c0:fa:4a:2a:ff:e8:d2:
79:7c:f6:24:5f:89:e5:13:d6:58:f0:8d:a7:45:47:
74:4e:3b:0c:6e:4a:a8:90:f8:9f:58:58:e3:e5:38:
88:11:40:bc:6c:af:4b:a2:6c:fe:6c:5f:28:66:64:
cd:69:23:86:9e:90:8b:45:16:7d:93:00:8a:f2:ca:
d7:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:36:F1:79:0B:58:6E:3F:80:74:FB:50:12:45:EA:4A:AF:65:E1:60
X509v3 Authority Key Identifier:
keyid:92:EF:F6:16:25:02:EA:3B:52:FD:8C:A3:AE:10:8D:13:D6:BF:F6:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ku_2FiUC6jtS_YyjrhCNE9a_9lI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/7943a0-ccab-4260-bd51-afe89aacc492/1/ku_2FiUC6jtS_YyjrhCNE9a_9lI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/7943a0-ccab-4260-bd51-afe89aacc492/1/ku_2FiUC6jtS_YyjrhCNE9a_9lI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:e7:66:b0:c0:9e:c1:f0:a9:ac:48:5b:3e:70:c5:84:9d:00:
8e:71:80:44:67:bf:67:55:3e:63:b6:f5:df:9a:c9:5b:ce:13:
4f:a4:38:87:01:14:80:59:e4:85:e7:fc:ec:b8:cd:7a:16:68:
d4:fc:35:77:42:eb:b1:44:36:e9:eb:bd:a5:14:25:a4:92:18:
c1:c1:c4:0e:c0:1b:c4:8b:86:89:dc:a8:86:46:13:b9:de:d3:
70:ba:05:7b:36:a4:7f:af:b6:d9:a3:57:26:a6:2c:41:fa:10:
48:f0:57:6f:dc:b8:da:f1:a9:3e:f5:73:76:7d:2b:c5:4f:c2:
02:cb:15:97:67:77:12:00:d4:3f:41:0b:04:41:fb:fd:ae:3c:
9b:fd:f8:ae:4d:8e:bb:52:d0:a8:a0:85:29:d8:5d:b3:e2:ae:
c7:99:b2:cc:71:17:08:0c:8b:19:b5:76:16:79:4e:ae:ca:c7:
f6:fc:d0:63:a9:45:90:51:69:be:0b:e2:c6:66:5c:8c:4d:8f:
d7:69:1a:78:b1:b3:8b:ee:c0:ed:5c:f3:1c:9a:38:a3:fb:4b:
53:06:7f:8f:24:52:81:ac:6e:ba:21:f2:f5:21:1a:de:39:01:
00:fb:4c:fe:bc:b6:7b:92:d0:15:a6:45:6b:38:a7:27:08:02:
31:01:e4:55
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04LdwATPOqU4HSH8y+viQiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyZWZmNjE2MjUwMmVhM2I1MmZkOGNhM2FlMTA4ZDEzZDZi
ZmY2NTIwHhcNMjYwMzI5MDYwMDIyWhcNMjYwMzMwMDYwMDIyWjAzMTEwLwYDVQQD
Eyg0YjM2ZjE3OTBiNTg2ZTNmODA3NGZiNTAxMjQ1ZWE0YWFmNjVlMTYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt2oSOdmCY8C3agKGa1X2GWfWrbRE
oIOcI92C0brlbbKMWHTEGK01MgimZ/78XSpeLd+xssJ3sU0GLM+UYQGSHDVBqCEG
d40UuxF8AsHyTBwnfnc7KgiWhQZ0bgDUpCKyxilSXEb4VW0hJN7u2+W+apFkQOxv
gUwJXPbsycjV9p8ofyq2Rs/th+zHR94J4XHNAIWI0YcbABv7dAyk0/ZruiFx9rV6
EpM/9wQqwZIDePPRS3j3/NSrPF7jG8D6Sir/6NJ5fPYkX4nlE9ZY8I2nRUd0TjsM
bkqokPifWFjj5TiIEUC8bK9Lomz+bF8oZmTNaSOGnpCLRRZ9kwCK8srX7QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEs28XkLWG4/gHT7UBJF6kqvZeFgMB8GA1UdIwQY
MBaAFJLv9hYlAuo7Uv2Mo64QjRPWv/ZSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva3VfMkZpVUM2anRTX1l5anJoQ05FOWFfOWxJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS83OTQzYTAtY2NhYi00MjYwLWJkNTEt
YWZlODlhYWNjNDkyLzEva3VfMkZpVUM2anRTX1l5anJoQ05FOWFfOWxJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZS83OTQzYTAtY2NhYi00MjYwLWJkNTEtYWZlODlhYWNjNDky
LzEva3VfMkZpVUM2anRTX1l5anJoQ05FOWFfOWxJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVOdmsMCe
wfCprEhbPnDFhJ0AjnGARGe/Z1U+Y7b135rJW84TT6Q4hwEUgFnkhef87LjNehZo
1Pw1d0LrsUQ26eu9pRQlpJIYwcHEDsAbxIuGidyohkYTud7TcLoFezakf6+22aNX
JqYsQfoQSPBXb9y42vGpPvVzdn0rxU/CAssVl2d3EgDUP0ELBEH7/a48m/34rk2O
u1LQqKCFKdhds+Kux5myzHEXCAyLGbV2FnlOrsrH9vzQY6lFkFFpvgvixmZcjE2P
12kaeLGzi+7A7VzzHJo4o/tLUwZ/jyRSgaxuuiHy9SEa3jkBAPtM/ry2e5LQFaZF
azinJwgCMQHkVQ==
-----END CERTIFICATE-----
Generated at Sun Mar 29 15:27:20 2026 by rpki-client