Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/b796f4-2e88-4eaa-a269-2738bcb43d6d/1/kjorPddmcnXwmIbffaB591XO7Vk.mft
File: kjorPddmcnXwmIbffaB591XO7Vk.mft (raw, json)
Hash identifier: J8lfGhXs5+Bxjj4KXmWPLUFX7E/zEbgaR9LxoHowcVk=
Subject key identifier: C3:8D:67:85:C7:0C:B9:6A:A3:F5:4C:87:BA:BF:8B:2C:8C:D7:E1:4F
Authority key identifier: 92:3A:2B:3D:D7:66:72:75:F0:98:86:DF:7D:A0:79:F7:55:CE:ED:59
Certificate issuer: /CN=923a2b3dd7667275f09886df7da079f755ceed59
Certificate serial: 019FAA874CC948EBCF7769F69C36594AF364
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kjorPddmcnXwmIbffaB591XO7Vk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/b796f4-2e88-4eaa-a269-2738bcb43d6d/1/kjorPddmcnXwmIbffaB591XO7Vk.mft
Manifest number: 19DB
Signing time: Tue 28 Jul 2026 21:00:21 +0000
Manifest this update: Tue 28 Jul 2026 21:00:21 +0000
Manifest next update: Wed 29 Jul 2026 21:00:21 +0000
Files and hashes: 1: kjorPddmcnXwmIbffaB591XO7Vk.crl (hash: 78KYOSytruqhtUQ+Fskp6jpeA/lLPXj1ASuAikQfgNo=)
2: lr9abnPwCKuiEqQLCTnj_yF2mpA.roa (hash: f/0VKTDVUAMvZzhHBp5U3cnXddMK0Wnijx8d3qSFB3Q=)
3: uoml1ooKIpEwGVQcgm0COMGf22M.roa (hash: j6yV3AvezVwVR9BGMG8Xa/if460puXKoVMqsrCe3beo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/b796f4-2e88-4eaa-a269-2738bcb43d6d/1/kjorPddmcnXwmIbffaB591XO7Vk.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/b796f4-2e88-4eaa-a269-2738bcb43d6d/1/kjorPddmcnXwmIbffaB591XO7Vk.mft
rsync://rpki.ripe.net/repository/DEFAULT/kjorPddmcnXwmIbffaB591XO7Vk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 21:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:87:4c:c9:48:eb:cf:77:69:f6:9c:36:59:4a:f3:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=923a2b3dd7667275f09886df7da079f755ceed59
Validity
Not Before: Jul 28 21:00:21 2026 GMT
Not After : Jul 29 21:00:21 2026 GMT
Subject: CN=c38d6785c70cb96aa3f54c87babf8b2c8cd7e14f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:db:60:80:d2:6f:4b:d1:57:11:90:d2:99:20:
55:a3:68:65:13:3e:92:12:27:e9:53:2b:41:a5:43:
81:58:04:e7:e1:45:32:5d:96:dd:09:7c:04:d3:fe:
22:ae:2f:75:17:d4:77:e1:4a:5f:04:1b:57:ab:07:
1e:f6:ad:e5:54:3f:1b:d1:54:3a:35:6e:c6:c9:cd:
3b:56:e7:b0:eb:89:14:10:03:f6:ef:93:be:84:0c:
d8:8d:56:42:bd:a0:4e:94:03:d0:34:98:5a:34:47:
a1:87:3e:f0:6a:d0:e7:45:47:a0:bc:20:9c:d4:17:
55:6e:fc:f1:15:a1:89:ec:63:87:30:dc:4a:04:d4:
eb:a7:b0:54:f8:76:50:35:dc:a2:2a:13:b3:47:69:
bb:ca:f3:93:da:90:29:a5:03:07:13:71:9b:a3:30:
b8:80:29:af:37:03:04:e0:f8:75:b0:7f:7d:90:da:
81:43:94:7f:0a:fc:c3:9a:bd:0a:52:02:90:a3:b1:
8f:46:f4:f7:98:a2:af:4a:f2:d4:96:e9:a0:c2:64:
b9:6e:68:e0:08:eb:3b:35:ba:22:dd:f8:88:ac:c3:
7b:13:13:3c:6c:b3:5c:e5:78:eb:78:f8:c9:32:6c:
d6:00:a8:51:8b:b0:e7:84:89:80:8f:58:cc:44:dd:
2d:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:8D:67:85:C7:0C:B9:6A:A3:F5:4C:87:BA:BF:8B:2C:8C:D7:E1:4F
X509v3 Authority Key Identifier:
keyid:92:3A:2B:3D:D7:66:72:75:F0:98:86:DF:7D:A0:79:F7:55:CE:ED:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kjorPddmcnXwmIbffaB591XO7Vk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/b796f4-2e88-4eaa-a269-2738bcb43d6d/1/kjorPddmcnXwmIbffaB591XO7Vk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/b796f4-2e88-4eaa-a269-2738bcb43d6d/1/kjorPddmcnXwmIbffaB591XO7Vk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:1b:a3:a4:a2:bb:da:04:e1:6f:d4:e5:f1:b8:07:6a:13:8e:
23:5e:27:3b:78:8e:e5:07:a2:f9:27:5a:ae:75:15:c8:0a:c1:
5f:87:f1:df:28:2c:07:ff:39:86:57:5c:1a:0a:6c:5f:21:1f:
a2:26:d6:30:ea:de:08:e8:bc:a6:9f:c0:0f:6b:10:29:55:87:
ca:9d:d8:f4:45:4e:60:a3:69:21:bd:7b:41:4a:de:67:8f:d3:
39:f7:56:32:e7:97:a5:49:cd:38:30:04:3f:f9:da:28:fe:2b:
52:6f:66:35:c2:cb:70:09:0a:53:79:b7:c5:4c:e0:c0:29:9c:
8e:8a:c5:ce:7f:1b:de:2d:03:9f:48:c4:d1:23:d0:f1:57:95:
f5:bc:d4:a2:4f:ac:b9:eb:7a:ee:a2:18:e3:10:66:1a:68:a6:
a6:a3:21:a3:76:18:64:2d:44:54:b7:d6:81:14:a1:16:66:54:
90:8e:a5:27:d6:94:45:00:ca:43:3e:f1:80:d0:bf:9b:70:2d:
be:4e:19:93:80:9b:b3:1a:c5:d2:8c:92:4a:e6:64:bf:58:fe:
b2:32:e1:3c:ef:47:13:3f:53:0e:5c:62:89:2d:b4:aa:a9:ae:
e0:e5:7e:4c:43:83:46:47:34:00:75:e0:df:e7:59:96:41:d0:
67:a0:1c:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 02:43:54 2026 by rpki-client