Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/52/7508cf-4198-42cc-9f25-821db0026738/1/kUJchq_U--IqaeAELgB2I0IxwpM.mft
File: kUJchq_U--IqaeAELgB2I0IxwpM.mft (raw, json)
Hash identifier: nVbs41yXovcAjYjJ4N4G200rt4/WvI/7V/DGzoYYxXE=
Subject key identifier: 0C:5F:00:6A:2A:39:4D:F5:B9:CE:5F:AF:1A:50:85:CE:07:A7:DF:6E
Authority key identifier: 91:42:5C:86:AF:D4:FB:E2:2A:69:E0:04:2E:00:76:23:42:31:C2:93
Certificate issuer: /CN=91425c86afd4fbe22a69e0042e0076234231c293
Certificate serial: 01A037821B59EFA2AF10D9249E559190B064
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kUJchq_U--IqaeAELgB2I0IxwpM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/7508cf-4198-42cc-9f25-821db0026738/1/kUJchq_U--IqaeAELgB2I0IxwpM.mft
Manifest number: 0344
Signing time: Tue 25 Aug 2026 06:01:08 +0000
Manifest this update: Tue 25 Aug 2026 06:01:08 +0000
Manifest next update: Wed 26 Aug 2026 06:01:08 +0000
Files and hashes: 1: i5hoQe1WYdmDRK93QhXSWo5DbcA.asa (hash: g4XW1rM0XwOC9gNiLBr0l5Eh7TR7jPk/IHmrYLGtPAk=)
2: kUJchq_U--IqaeAELgB2I0IxwpM.crl (hash: T2qUWC531uJpN2LEUel2fpiD1UR10qOMhWADBcYxAfo=)
3: koj8nEAhEbwLOtJWdl4dLHaxVeU.roa (hash: //uRIlijDFSI2Idtl9AfpbSmA1tZpNH4c/UlKhrcxxc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/7508cf-4198-42cc-9f25-821db0026738/1/kUJchq_U--IqaeAELgB2I0IxwpM.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/7508cf-4198-42cc-9f25-821db0026738/1/kUJchq_U--IqaeAELgB2I0IxwpM.mft
rsync://rpki.ripe.net/repository/DEFAULT/kUJchq_U--IqaeAELgB2I0IxwpM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 26 Aug 2026 06:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:37:82:1b:59:ef:a2:af:10:d9:24:9e:55:91:90:b0:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91425c86afd4fbe22a69e0042e0076234231c293
Validity
Not Before: Aug 25 06:01:08 2026 GMT
Not After : Aug 26 06:01:08 2026 GMT
Subject: CN=0c5f006a2a394df5b9ce5faf1a5085ce07a7df6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:48:72:f5:d9:98:a4:7a:81:56:9c:85:de:5d:
e1:c5:ca:6b:0e:b8:7e:38:c1:15:9f:5d:57:f8:2e:
b3:f2:e4:f3:bf:ae:9a:4f:62:69:b5:09:a6:9f:1e:
be:30:37:21:52:99:21:8f:3f:58:4f:76:72:5a:e3:
58:fb:64:80:a4:d6:95:34:8a:24:17:84:71:15:56:
89:07:79:55:94:d6:ca:c1:41:92:ab:7a:a4:89:21:
1f:b3:83:ba:b0:18:6b:89:73:3f:c0:2c:a6:a2:8f:
67:17:83:48:c4:ac:a0:fe:10:24:9c:11:5c:be:dd:
15:0d:15:ee:03:39:1d:a3:56:87:3b:9a:3f:05:2a:
66:2c:f1:2f:92:7e:98:8d:c1:9e:75:a5:a9:f2:34:
97:f6:d0:ee:1a:b3:66:b0:f7:db:08:0b:d5:6d:a2:
74:ba:a4:26:e0:e8:f4:6b:06:11:51:01:2a:44:ba:
8e:17:89:96:db:7c:61:b1:b3:51:46:c7:59:b8:0a:
66:68:b2:ce:1f:90:4f:9e:2a:40:de:66:95:1b:cc:
8b:9d:06:67:8b:41:69:92:d2:32:0a:58:53:9b:2e:
94:51:ca:df:51:a0:48:65:b4:21:79:4a:ba:55:76:
ca:69:12:b0:e9:72:4c:a2:ce:fa:e9:7e:39:c7:00:
5b:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:5F:00:6A:2A:39:4D:F5:B9:CE:5F:AF:1A:50:85:CE:07:A7:DF:6E
X509v3 Authority Key Identifier:
keyid:91:42:5C:86:AF:D4:FB:E2:2A:69:E0:04:2E:00:76:23:42:31:C2:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kUJchq_U--IqaeAELgB2I0IxwpM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/7508cf-4198-42cc-9f25-821db0026738/1/kUJchq_U--IqaeAELgB2I0IxwpM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/7508cf-4198-42cc-9f25-821db0026738/1/kUJchq_U--IqaeAELgB2I0IxwpM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:40:98:07:e1:3b:e6:49:ec:1b:c1:a3:f2:83:cb:6d:ee:d3:
67:db:01:24:11:96:1f:ea:76:df:52:ce:42:d6:f9:be:8a:91:
cc:43:bb:e9:33:dd:40:04:6d:af:3b:11:61:03:ea:d1:b2:2b:
52:e0:e1:12:e0:17:e3:4e:71:b3:54:2b:2b:54:a9:5f:82:6d:
e1:db:04:32:8a:29:dd:12:bb:2c:03:9b:67:cb:1c:e4:ef:fa:
c7:f8:ae:b5:04:c9:7f:a1:12:da:be:31:89:bc:8a:23:15:1c:
2d:40:95:f8:2d:80:1a:61:4e:7f:f8:73:c1:cf:84:48:e9:3d:
4d:66:f0:87:de:4b:6e:43:09:bd:b1:09:af:77:16:35:42:2b:
1f:c3:62:06:08:00:73:19:bb:63:a5:9d:42:9e:45:e0:fd:4e:
5f:79:3a:20:29:e9:bb:ed:b2:5e:9c:6c:fe:58:4b:3b:34:4e:
79:c3:66:d6:49:34:bf:28:81:2c:36:56:af:b5:a0:58:75:57:
de:76:a4:50:ca:d0:23:6c:af:09:bf:cd:f1:ac:06:72:c9:2a:
84:0d:00:cd:a0:ad:ce:72:92:b9:25:3d:b7:0a:98:81:f0:a0:
3c:f5:d7:98:55:a9:04:e9:28:e1:54:f4:48:97:f0:ce:c2:45:
d4:63:67:b2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaA3ghtZ76KvENkknlWRkLBkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkxNDI1Yzg2YWZkNGZiZTIyYTY5ZTAwNDJlMDA3NjIzNDIz
MWMyOTMwHhcNMjYwODI1MDYwMTA4WhcNMjYwODI2MDYwMTA4WjAzMTEwLwYDVQQD
EygwYzVmMDA2YTJhMzk0ZGY1YjljZTVmYWYxYTUwODVjZTA3YTdkZjZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuEhy9dmYpHqBVpyF3l3hxcprDrh+
OMEVn11X+C6z8uTzv66aT2JptQmmnx6+MDchUpkhjz9YT3ZyWuNY+2SApNaVNIok
F4RxFVaJB3lVlNbKwUGSq3qkiSEfs4O6sBhriXM/wCymoo9nF4NIxKyg/hAknBFc
vt0VDRXuAzkdo1aHO5o/BSpmLPEvkn6YjcGedaWp8jSX9tDuGrNmsPfbCAvVbaJ0
uqQm4Oj0awYRUQEqRLqOF4mW23xhsbNRRsdZuApmaLLOH5BPnipA3maVG8yLnQZn
i0FpktIyClhTmy6UUcrfUaBIZbQheUq6VXbKaRKw6XJMos766X45xwBblQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAxfAGoqOU31uc5frxpQhc4Hp99uMB8GA1UdIwQY
MBaAFJFCXIav1PviKmngBC4AdiNCMcKTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva1VKY2hxX1UtLUlxYWVBRUxnQjJJMEl4d3BNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi83NTA4Y2YtNDE5OC00MmNjLTlmMjUt
ODIxZGIwMDI2NzM4LzEva1VKY2hxX1UtLUlxYWVBRUxnQjJJMEl4d3BNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Mi83NTA4Y2YtNDE5OC00MmNjLTlmMjUtODIxZGIwMDI2NzM4
LzEva1VKY2hxX1UtLUlxYWVBRUxnQjJJMEl4d3BNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdECYB+E7
5knsG8Gj8oPLbe7TZ9sBJBGWH+p231LOQtb5voqRzEO76TPdQARtrzsRYQPq0bIr
UuDhEuAX405xs1QrK1SpX4Jt4dsEMoop3RK7LAObZ8sc5O/6x/iutQTJf6ES2r4x
ibyKIxUcLUCV+C2AGmFOf/hzwc+ESOk9TWbwh95LbkMJvbEJr3cWNUIrH8NiBggA
cxm7Y6WdQp5F4P1OX3k6ICnpu+2yXpxs/lhLOzROecNm1kk0vyiBLDZWr7WgWHVX
3nakUMrQI2yvCb/N8awGcskqhA0AzaCtznKSuSU9twqYgfCgPPXXmFWpBOko4VT0
SJfwzsJF1GNnsg==
-----END CERTIFICATE-----
Generated at Tue Aug 25 15:41:17 2026 by rpki-client