Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/7508cf-4198-42cc-9f25-821db0026738/1/kUJchq_U--IqaeAELgB2I0IxwpM.mft
File: kUJchq_U--IqaeAELgB2I0IxwpM.mft (raw, json)
Hash identifier: JUAjbLSiJCNfgJuCTtoLWk+zbVyv7pO1FHcEWj1DUaA=
Subject key identifier: F9:4A:59:3C:DF:C4:EB:9C:C1:68:A3:0D:F8:EF:C4:9F:7C:AC:E9:D6
Authority key identifier: 91:42:5C:86:AF:D4:FB:E2:2A:69:E0:04:2E:00:76:23:42:31:C2:93
Certificate issuer: /CN=91425c86afd4fbe22a69e0042e0076234231c293
Certificate serial: 019E284B73CA507BED67E5A3830AC30FCF29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kUJchq_U--IqaeAELgB2I0IxwpM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/7508cf-4198-42cc-9f25-821db0026738/1/kUJchq_U--IqaeAELgB2I0IxwpM.mft
Manifest number: 0233
Signing time: Thu 14 May 2026 21:01:33 +0000
Manifest this update: Thu 14 May 2026 21:01:33 +0000
Manifest next update: Fri 15 May 2026 21:01:33 +0000
Files and hashes: 1: i5hoQe1WYdmDRK93QhXSWo5DbcA.asa (hash: g4XW1rM0XwOC9gNiLBr0l5Eh7TR7jPk/IHmrYLGtPAk=)
2: kUJchq_U--IqaeAELgB2I0IxwpM.crl (hash: OPLNX3mz6pbWlcvBBu77MUxJfSEhX/W2qawx6K5zG7I=)
3: koj8nEAhEbwLOtJWdl4dLHaxVeU.roa (hash: //uRIlijDFSI2Idtl9AfpbSmA1tZpNH4c/UlKhrcxxc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/7508cf-4198-42cc-9f25-821db0026738/1/kUJchq_U--IqaeAELgB2I0IxwpM.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/7508cf-4198-42cc-9f25-821db0026738/1/kUJchq_U--IqaeAELgB2I0IxwpM.mft
rsync://rpki.ripe.net/repository/DEFAULT/kUJchq_U--IqaeAELgB2I0IxwpM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 15 May 2026 21:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:28:4b:73:ca:50:7b:ed:67:e5:a3:83:0a:c3:0f:cf:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91425c86afd4fbe22a69e0042e0076234231c293
Validity
Not Before: May 14 21:01:33 2026 GMT
Not After : May 15 21:01:33 2026 GMT
Subject: CN=f94a593cdfc4eb9cc168a30df8efc49f7cace9d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:5d:d8:0e:de:36:27:e3:1e:7e:11:cf:be:95:
ec:7f:d3:43:e6:56:77:7f:89:74:66:44:b5:6c:4a:
d8:ee:08:27:8b:43:fc:7d:43:42:73:22:b5:d7:f2:
01:19:f5:39:f6:da:83:12:de:f4:b8:ef:b1:f8:0b:
f4:2b:8f:8c:f9:0e:4d:32:0e:ad:37:d4:58:1d:7c:
44:83:4d:be:0c:f2:4d:97:38:91:0a:11:78:09:de:
28:fa:d1:fc:61:44:3b:b5:9f:0b:93:f8:1b:44:60:
ad:94:26:bb:e5:5e:04:d1:32:c3:d6:61:dd:b4:7c:
35:94:fe:fd:51:96:8f:e8:4b:f4:da:21:c8:8c:83:
2e:f5:94:74:6d:71:a9:75:a0:75:17:7c:ba:fd:62:
fc:e9:5f:3c:a8:da:02:02:07:eb:26:da:0a:9d:02:
c0:c1:3a:17:3b:b5:ef:6c:f3:1b:ad:dd:ec:99:ee:
4a:8c:63:86:3e:7b:54:7a:6d:c4:63:ad:9f:66:48:
a0:d9:25:3f:cc:6e:bc:fe:af:f5:56:40:94:7a:e3:
f6:9b:58:a7:8d:36:02:a1:ef:58:46:56:33:6d:2a:
97:99:77:39:ca:b3:54:f5:02:3f:82:90:77:60:c1:
7d:c8:e9:02:13:ad:34:e7:03:0b:5d:b4:20:96:71:
50:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:4A:59:3C:DF:C4:EB:9C:C1:68:A3:0D:F8:EF:C4:9F:7C:AC:E9:D6
X509v3 Authority Key Identifier:
keyid:91:42:5C:86:AF:D4:FB:E2:2A:69:E0:04:2E:00:76:23:42:31:C2:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kUJchq_U--IqaeAELgB2I0IxwpM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/7508cf-4198-42cc-9f25-821db0026738/1/kUJchq_U--IqaeAELgB2I0IxwpM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/7508cf-4198-42cc-9f25-821db0026738/1/kUJchq_U--IqaeAELgB2I0IxwpM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:d3:c8:89:39:3c:f3:27:d0:bf:58:64:0c:53:7d:12:a8:03:
27:cf:dd:56:bd:9c:f6:87:b5:97:d0:4a:8c:3e:fd:23:94:9b:
59:31:38:1e:e9:0c:6b:3c:aa:84:56:1e:3a:f9:b1:58:d8:28:
5a:69:d2:4e:f2:b7:98:47:cc:72:3d:4e:79:6b:be:1c:15:a8:
96:bf:f5:48:13:e4:24:a5:4b:59:2e:9e:4b:20:72:60:02:b1:
92:74:2d:76:d1:3a:ab:6b:69:73:4d:f3:91:08:23:3e:17:f6:
ef:e0:08:86:2d:df:f4:48:11:55:a8:31:89:35:db:e6:86:9e:
e8:ba:8d:66:f0:6c:93:4e:b2:05:b0:c0:3a:65:bb:ff:b5:b6:
fb:ce:3a:ca:3f:4f:eb:38:14:b1:3e:ba:10:6a:5c:19:ea:3c:
45:78:f7:28:90:f3:62:12:6b:87:67:5c:c7:74:2d:79:10:c4:
4a:c2:7f:6b:43:f1:33:33:c2:73:b2:67:c0:55:e6:b0:e1:c8:
c3:94:81:0e:87:0b:ce:8d:85:02:ee:46:d7:bb:05:69:14:9e:
26:fc:87:22:1a:41:c7:cd:5a:12:01:13:ba:a2:f0:44:93:1b:
9d:c4:39:c3:af:f3:4f:a6:ed:bb:e2:84:3f:bb:8f:2f:bc:30:
6c:53:60:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 06:20:54 2026 by rpki-client