Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/52/7508cf-4198-42cc-9f25-821db0026738/1/kUJchq_U--IqaeAELgB2I0IxwpM.mft
File: kUJchq_U--IqaeAELgB2I0IxwpM.mft (raw, json)
Hash identifier: 7CR2mmGVU4ioYRbhZCXjFxxFC5EKPnmSjP9nuo1cUKE=
Subject key identifier: 75:E9:0F:4A:52:B0:F6:E4:77:B8:6E:0F:2C:01:7D:07:0B:A2:DB:C4
Authority key identifier: 91:42:5C:86:AF:D4:FB:E2:2A:69:E0:04:2E:00:76:23:42:31:C2:93
Certificate issuer: /CN=91425c86afd4fbe22a69e0042e0076234231c293
Certificate serial: 01A03F3B3803970936A8E3CB856F86EB897C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kUJchq_U--IqaeAELgB2I0IxwpM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/7508cf-4198-42cc-9f25-821db0026738/1/kUJchq_U--IqaeAELgB2I0IxwpM.mft
Manifest number: 0348
Signing time: Wed 26 Aug 2026 18:00:40 +0000
Manifest this update: Wed 26 Aug 2026 18:00:40 +0000
Manifest next update: Thu 27 Aug 2026 18:00:40 +0000
Files and hashes: 1: i5hoQe1WYdmDRK93QhXSWo5DbcA.asa (hash: g4XW1rM0XwOC9gNiLBr0l5Eh7TR7jPk/IHmrYLGtPAk=)
2: kUJchq_U--IqaeAELgB2I0IxwpM.crl (hash: XYRB7cWpB2TveIDfJiJZIPHHiYuNL1oMFuz28aUaOKE=)
3: koj8nEAhEbwLOtJWdl4dLHaxVeU.roa (hash: //uRIlijDFSI2Idtl9AfpbSmA1tZpNH4c/UlKhrcxxc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/7508cf-4198-42cc-9f25-821db0026738/1/kUJchq_U--IqaeAELgB2I0IxwpM.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/7508cf-4198-42cc-9f25-821db0026738/1/kUJchq_U--IqaeAELgB2I0IxwpM.mft
rsync://rpki.ripe.net/repository/DEFAULT/kUJchq_U--IqaeAELgB2I0IxwpM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 14:17:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:3f:3b:38:03:97:09:36:a8:e3:cb:85:6f:86:eb:89:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91425c86afd4fbe22a69e0042e0076234231c293
Validity
Not Before: Aug 26 18:00:40 2026 GMT
Not After : Aug 27 18:00:40 2026 GMT
Subject: CN=75e90f4a52b0f6e477b86e0f2c017d070ba2dbc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:56:2d:3b:d4:f5:5b:73:7a:00:58:93:62:bf:
eb:b4:d4:9b:e2:64:ff:fe:83:f5:e6:57:2b:82:aa:
8c:39:35:e1:f0:87:03:f7:3c:61:88:f0:a9:ad:b4:
c6:2f:82:ee:dd:2f:92:8e:ce:2d:7c:66:df:4f:75:
ca:67:0e:44:5e:8e:50:97:8c:78:c0:23:ea:8b:67:
6d:aa:4d:77:5b:5b:a2:e5:8c:73:f1:56:aa:81:f6:
3d:c2:29:1a:37:0d:85:65:69:d4:80:c7:53:00:47:
a6:24:8c:6c:80:ab:d6:24:59:9b:c0:3e:29:19:fb:
8c:cc:ca:95:0c:43:97:ab:e2:ee:4d:42:33:ba:71:
17:77:ca:a1:ed:b0:29:6d:91:00:6d:5e:e4:bf:5a:
de:a5:ac:47:0e:c4:d1:1e:82:bf:ca:0a:27:11:35:
c0:08:f2:52:4c:70:d0:e8:81:ca:58:98:fc:0d:56:
56:c0:62:13:17:4c:c6:4c:a3:bf:ba:e3:cb:6b:f4:
e5:77:83:77:ce:25:73:ad:a2:d6:29:c9:81:fc:88:
87:57:83:3c:13:aa:ad:e2:4e:f5:72:be:1f:1e:e0:
3e:16:42:90:5e:24:b1:83:ae:83:dc:ae:8b:f9:46:
7b:6c:a3:db:47:37:ce:3e:6d:2d:2f:87:f8:cf:f3:
0c:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:E9:0F:4A:52:B0:F6:E4:77:B8:6E:0F:2C:01:7D:07:0B:A2:DB:C4
X509v3 Authority Key Identifier:
keyid:91:42:5C:86:AF:D4:FB:E2:2A:69:E0:04:2E:00:76:23:42:31:C2:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kUJchq_U--IqaeAELgB2I0IxwpM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/7508cf-4198-42cc-9f25-821db0026738/1/kUJchq_U--IqaeAELgB2I0IxwpM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/7508cf-4198-42cc-9f25-821db0026738/1/kUJchq_U--IqaeAELgB2I0IxwpM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:14:81:23:f3:5e:89:d9:fa:1e:04:4d:a7:bd:33:73:8e:03:
11:0e:96:b0:b7:8e:01:fc:d0:3a:5a:6c:3c:ec:38:e4:b1:95:
9a:e4:cb:df:16:9f:95:4a:0f:54:86:df:f5:dd:7f:70:73:97:
1f:1f:6a:a8:47:86:09:88:92:e2:bd:d9:6e:8e:6d:3d:87:7a:
9c:4e:a0:fa:81:f2:e3:4c:49:84:d0:e6:4e:d9:8b:26:49:cb:
b3:1e:ac:a9:87:6a:56:c2:27:dd:af:ee:84:d5:21:a1:aa:17:
b6:9c:5b:23:9f:cb:d7:67:5c:81:75:45:ca:27:9a:83:7e:6d:
c5:b3:4f:c5:49:a3:f5:dc:3c:61:7d:c3:00:de:92:66:64:b1:
ae:90:41:93:e4:e4:f4:43:1b:dd:a4:e1:e9:5b:63:65:34:bf:
fa:a3:3b:8b:c7:07:28:99:07:fd:d5:86:0e:29:65:e4:d3:b6:
b4:f2:cd:26:67:44:cc:6c:91:82:8e:48:73:33:ac:9d:ac:70:
51:d2:37:02:8e:23:67:3e:b2:27:d6:6f:d0:2a:f9:28:19:fa:
10:c3:23:d2:ef:14:6c:31:b5:75:5e:fc:b2:a2:3f:02:3e:6e:
e8:ed:17:5d:fa:2f:a9:3d:78:0e:52:26:6c:61:f1:46:ca:9b:
86:39:7c:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 22:37:38 2026 by rpki-client