Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/7508cf-4198-42cc-9f25-821db0026738/1/kUJchq_U--IqaeAELgB2I0IxwpM.mft
File: kUJchq_U--IqaeAELgB2I0IxwpM.mft (raw, json)
Hash identifier: rREOpMfKZyYSYe5owCRPO5K9LZY+H6lmA9jzDkjKwdc=
Subject key identifier: 59:DF:80:C1:D7:37:61:64:76:51:C9:C1:9E:37:85:71:F8:F0:BB:DF
Authority key identifier: 91:42:5C:86:AF:D4:FB:E2:2A:69:E0:04:2E:00:76:23:42:31:C2:93
Certificate issuer: /CN=91425c86afd4fbe22a69e0042e0076234231c293
Certificate serial: 019F11F85A8AC272B8912C846A1E62A77AAD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kUJchq_U--IqaeAELgB2I0IxwpM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/7508cf-4198-42cc-9f25-821db0026738/1/kUJchq_U--IqaeAELgB2I0IxwpM.mft
Manifest number: 02AC
Signing time: Mon 29 Jun 2026 06:01:56 +0000
Manifest this update: Mon 29 Jun 2026 06:01:56 +0000
Manifest next update: Tue 30 Jun 2026 06:01:56 +0000
Files and hashes: 1: i5hoQe1WYdmDRK93QhXSWo5DbcA.asa (hash: g4XW1rM0XwOC9gNiLBr0l5Eh7TR7jPk/IHmrYLGtPAk=)
2: kUJchq_U--IqaeAELgB2I0IxwpM.crl (hash: RTZxshWOXNmlHVnbfPyBsUJGODXm2jeHtbDzdxtCX+Y=)
3: koj8nEAhEbwLOtJWdl4dLHaxVeU.roa (hash: //uRIlijDFSI2Idtl9AfpbSmA1tZpNH4c/UlKhrcxxc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/7508cf-4198-42cc-9f25-821db0026738/1/kUJchq_U--IqaeAELgB2I0IxwpM.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/7508cf-4198-42cc-9f25-821db0026738/1/kUJchq_U--IqaeAELgB2I0IxwpM.mft
rsync://rpki.ripe.net/repository/DEFAULT/kUJchq_U--IqaeAELgB2I0IxwpM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:11:f8:5a:8a:c2:72:b8:91:2c:84:6a:1e:62:a7:7a:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91425c86afd4fbe22a69e0042e0076234231c293
Validity
Not Before: Jun 29 06:01:56 2026 GMT
Not After : Jun 30 06:01:56 2026 GMT
Subject: CN=59df80c1d73761647651c9c19e378571f8f0bbdf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:70:37:8e:9e:05:c3:3c:a9:8a:31:e5:6a:0d:
53:bd:14:22:0c:f5:63:0f:ee:03:80:1d:1a:90:b1:
89:51:01:c4:19:28:e7:52:d3:4d:c1:a3:29:fd:8a:
c7:39:c4:31:32:e0:3a:9b:dd:60:3c:45:22:c0:b6:
12:34:cb:42:1e:41:6f:88:fc:20:e6:5a:0d:9a:a0:
29:8b:20:f8:d3:ac:9e:00:19:0b:7b:f6:d2:31:7b:
81:87:e6:0f:31:cf:11:1d:ff:6b:a4:20:05:5c:6e:
39:c9:66:56:0b:cd:df:10:36:3d:54:9a:57:54:5f:
c9:43:cb:14:71:32:56:9e:b7:09:49:c5:2a:53:7f:
25:f4:d0:66:4e:e2:7c:eb:d8:47:02:fb:ed:2e:55:
43:92:75:d4:53:3b:3d:53:d7:03:f2:99:5f:a1:8d:
87:4e:d3:fd:cf:c0:df:c2:e2:7f:c1:58:25:49:df:
4d:6a:cd:c9:d2:9c:89:09:e5:91:4b:14:61:62:84:
3e:3d:8d:65:8c:2e:2e:0e:06:50:e3:99:3c:2d:6b:
0f:56:92:97:9e:8d:a7:c1:81:40:90:a9:d3:18:53:
8d:b2:ce:a3:c7:4d:f7:a9:ec:d2:04:4a:b4:5f:b7:
bd:1a:1c:b4:af:5e:82:f5:bc:cd:d4:7d:c1:5b:ca:
48:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:DF:80:C1:D7:37:61:64:76:51:C9:C1:9E:37:85:71:F8:F0:BB:DF
X509v3 Authority Key Identifier:
keyid:91:42:5C:86:AF:D4:FB:E2:2A:69:E0:04:2E:00:76:23:42:31:C2:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kUJchq_U--IqaeAELgB2I0IxwpM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/7508cf-4198-42cc-9f25-821db0026738/1/kUJchq_U--IqaeAELgB2I0IxwpM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/7508cf-4198-42cc-9f25-821db0026738/1/kUJchq_U--IqaeAELgB2I0IxwpM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:7f:33:a7:1d:ac:9c:36:7d:0d:3a:fc:0b:0b:5e:f1:00:bd:
0a:6c:06:cc:7d:20:c2:ab:1e:47:01:e8:68:89:11:8a:6a:1c:
99:54:05:3c:6c:a6:51:95:37:8f:49:de:95:fe:bc:be:62:7e:
d1:3f:18:48:de:e0:98:5a:a9:d8:06:13:f8:e5:a2:af:4b:24:
c8:f7:ea:f8:8a:10:b6:8a:c5:24:c7:db:99:af:bd:14:ab:85:
f4:0b:bf:dc:2a:5b:43:3f:eb:1f:66:a1:28:89:3c:3d:ab:a4:
01:39:68:95:9b:d6:1f:48:cf:77:f5:a7:4e:9f:f0:6e:3c:6e:
90:d3:65:a1:0b:f0:24:fd:ee:65:a2:21:e4:78:d2:6c:66:3c:
6c:a8:ab:64:86:c8:54:99:90:4b:c1:9c:b1:da:cd:66:b9:08:
5d:a6:52:81:5b:c5:fc:f0:68:82:41:3c:8b:14:02:e2:b2:5f:
b7:54:db:f1:c6:3f:da:38:92:d8:de:7c:77:51:ca:a7:08:87:
4a:99:23:1b:ce:e4:db:5e:b7:99:0f:b2:2d:ba:aa:cd:e2:4f:
ee:95:20:f3:26:c8:cd:9d:be:4b:00:d4:ab:5a:8f:41:9e:e9:
41:77:6a:bf:ea:8e:a9:7a:e6:ef:8e:fe:22:bd:a3:5c:ec:88:
68:c5:04:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 10:42:36 2026 by rpki-client