Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/7508cf-4198-42cc-9f25-821db0026738/1/kUJchq_U--IqaeAELgB2I0IxwpM.mft
File: kUJchq_U--IqaeAELgB2I0IxwpM.mft (raw, json)
Hash identifier: J1m4ZOOe+Wx24F7p4yR/X/QPi8hhzNPI8f5zhycdxfg=
Subject key identifier: 8C:69:C3:31:82:FB:91:50:6D:2C:43:0B:0C:EC:2F:28:81:DB:D6:F7
Authority key identifier: 91:42:5C:86:AF:D4:FB:E2:2A:69:E0:04:2E:00:76:23:42:31:C2:93
Certificate issuer: /CN=91425c86afd4fbe22a69e0042e0076234231c293
Certificate serial: 019D38D36AA7FA4D84C97C7B8D9AEDEE015F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kUJchq_U--IqaeAELgB2I0IxwpM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/7508cf-4198-42cc-9f25-821db0026738/1/kUJchq_U--IqaeAELgB2I0IxwpM.mft
Manifest number: 01B7
Signing time: Sun 29 Mar 2026 09:01:12 +0000
Manifest this update: Sun 29 Mar 2026 09:01:12 +0000
Manifest next update: Mon 30 Mar 2026 09:01:12 +0000
Files and hashes: 1: i5hoQe1WYdmDRK93QhXSWo5DbcA.asa (hash: g4XW1rM0XwOC9gNiLBr0l5Eh7TR7jPk/IHmrYLGtPAk=)
2: kUJchq_U--IqaeAELgB2I0IxwpM.crl (hash: ydkccNzayfigN0qzthANnV/NQT7ux0chaALS/W/Ysy4=)
3: koj8nEAhEbwLOtJWdl4dLHaxVeU.roa (hash: //uRIlijDFSI2Idtl9AfpbSmA1tZpNH4c/UlKhrcxxc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/7508cf-4198-42cc-9f25-821db0026738/1/kUJchq_U--IqaeAELgB2I0IxwpM.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/7508cf-4198-42cc-9f25-821db0026738/1/kUJchq_U--IqaeAELgB2I0IxwpM.mft
rsync://rpki.ripe.net/repository/DEFAULT/kUJchq_U--IqaeAELgB2I0IxwpM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:6a:a7:fa:4d:84:c9:7c:7b:8d:9a:ed:ee:01:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91425c86afd4fbe22a69e0042e0076234231c293
Validity
Not Before: Mar 29 09:01:12 2026 GMT
Not After : Mar 30 09:01:12 2026 GMT
Subject: CN=8c69c33182fb91506d2c430b0cec2f2881dbd6f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:40:83:2f:16:96:d2:28:e4:71:22:88:0b:58:
5c:6c:f7:ad:ae:53:c4:cc:7c:06:ef:6d:91:41:e7:
70:d1:d7:1d:c2:a3:25:d3:4b:40:3e:b5:24:90:ee:
1f:22:ef:83:a7:26:c0:0d:d9:99:53:47:e7:c0:ee:
39:8d:d5:cc:36:df:1c:3b:cd:b6:e8:b4:cf:e0:7a:
c8:3a:09:b0:e8:f0:18:ec:94:01:bf:b9:7c:22:b4:
a4:f5:66:96:7b:b8:3c:8a:7e:e0:16:a2:45:cc:c2:
b9:b7:de:e2:a8:9f:e0:fe:fa:06:08:e9:a1:a4:5d:
3b:ed:16:25:3d:3d:19:14:79:96:01:8d:60:7d:bc:
ed:0d:01:a1:16:a9:af:3a:68:5e:9d:dc:86:40:69:
27:3a:47:a3:70:a6:2b:26:17:ea:ed:ab:fa:b0:aa:
08:0c:b9:ee:38:bd:90:3c:7e:0b:9b:fe:53:84:5f:
fb:44:a5:4e:e5:61:27:ac:33:64:70:15:de:bd:1b:
a4:6f:52:fa:14:d4:91:44:ec:cd:0b:95:dc:7d:74:
a2:66:d4:17:03:e8:90:23:2d:35:f6:a3:95:d2:e4:
d2:85:ae:d5:d0:aa:ea:5e:6a:42:cc:52:6a:53:c9:
24:5e:b6:68:be:49:cf:0f:2e:b5:c9:8a:e1:4a:90:
58:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:69:C3:31:82:FB:91:50:6D:2C:43:0B:0C:EC:2F:28:81:DB:D6:F7
X509v3 Authority Key Identifier:
keyid:91:42:5C:86:AF:D4:FB:E2:2A:69:E0:04:2E:00:76:23:42:31:C2:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kUJchq_U--IqaeAELgB2I0IxwpM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/7508cf-4198-42cc-9f25-821db0026738/1/kUJchq_U--IqaeAELgB2I0IxwpM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/7508cf-4198-42cc-9f25-821db0026738/1/kUJchq_U--IqaeAELgB2I0IxwpM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:81:38:41:02:03:f3:c1:a1:29:83:56:80:55:45:14:44:5b:
5f:7f:d8:25:0d:39:70:32:24:2c:f8:07:ec:b4:7c:fb:5a:dd:
6e:58:bd:d0:46:2b:17:b7:62:44:bb:8f:9c:46:4d:09:d7:0a:
3e:55:a0:51:7e:fe:af:93:17:f2:40:88:6c:34:f7:47:06:22:
2e:b0:35:bd:13:fe:23:68:cd:40:d6:8b:a4:97:59:4c:d6:91:
4e:85:03:36:8f:09:de:4d:b3:ec:69:fe:44:eb:44:6c:7d:05:
cf:63:f7:d7:38:1d:36:c9:f8:0f:38:d1:ac:c4:7f:62:46:5c:
44:20:f8:1e:23:87:13:e9:72:9d:b1:6e:a2:a5:01:65:22:1b:
b0:00:a6:53:78:66:c7:59:d3:d4:64:49:89:80:bf:20:e7:12:
a9:57:e6:6e:bb:d6:25:b4:e8:be:60:1c:2b:eb:86:b4:75:a0:
b6:0a:9f:a6:4e:5c:b3:66:fe:08:a6:02:09:53:60:14:e9:02:
bf:b6:1d:e1:c4:d1:98:07:f1:34:29:ba:41:72:77:73:59:c4:
22:17:f3:7b:18:01:e8:de:12:0f:45:91:29:f8:89:30:b8:bf:
b8:8b:3b:ba:2d:98:02:5d:6a:5e:44:c2:99:7f:79:7e:f6:ab:
9e:d6:d9:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:47:17 2026 by rpki-client