Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/b796f4-2e88-4eaa-a269-2738bcb43d6d/1/kjorPddmcnXwmIbffaB591XO7Vk.mft
File: kjorPddmcnXwmIbffaB591XO7Vk.mft (raw, json)
Hash identifier: 401JobNKOkrh10q8thwNPUJAZCrEZWoiCmxF6MhIuqU=
Subject key identifier: 72:E2:F9:61:C6:5F:9E:59:24:23:9F:88:E7:71:76:FF:C4:CF:7D:33
Authority key identifier: 92:3A:2B:3D:D7:66:72:75:F0:98:86:DF:7D:A0:79:F7:55:CE:ED:59
Certificate issuer: /CN=923a2b3dd7667275f09886df7da079f755ceed59
Certificate serial: 019EBFFA49DCD53CE4F2F3D5919A9CADD154
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kjorPddmcnXwmIbffaB591XO7Vk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/b796f4-2e88-4eaa-a269-2738bcb43d6d/1/kjorPddmcnXwmIbffaB591XO7Vk.mft
Manifest number: 1961
Signing time: Sat 13 Jun 2026 07:55:11 +0000
Manifest this update: Sat 13 Jun 2026 07:55:11 +0000
Manifest next update: Sun 14 Jun 2026 07:55:11 +0000
Files and hashes: 1: GE_GF_dA2CBOv7-gUG1tB7WwKsE.roa (hash: HOXYFTv8yCh3OC2aa0aVLIYRnSQvClNBSEVT+AwELDg=)
2: kjorPddmcnXwmIbffaB591XO7Vk.crl (hash: J/TCqy0RZIEubwbLgvxbc00XOQGw/QEueGuAQ2iWuwo=)
3: uoml1ooKIpEwGVQcgm0COMGf22M.roa (hash: j6yV3AvezVwVR9BGMG8Xa/if460puXKoVMqsrCe3beo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/b796f4-2e88-4eaa-a269-2738bcb43d6d/1/kjorPddmcnXwmIbffaB591XO7Vk.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/b796f4-2e88-4eaa-a269-2738bcb43d6d/1/kjorPddmcnXwmIbffaB591XO7Vk.mft
rsync://rpki.ripe.net/repository/DEFAULT/kjorPddmcnXwmIbffaB591XO7Vk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 07:55:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bf:fa:49:dc:d5:3c:e4:f2:f3:d5:91:9a:9c:ad:d1:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=923a2b3dd7667275f09886df7da079f755ceed59
Validity
Not Before: Jun 13 07:55:11 2026 GMT
Not After : Jun 14 07:55:11 2026 GMT
Subject: CN=72e2f961c65f9e5924239f88e77176ffc4cf7d33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:4e:a4:c7:6c:c2:02:c2:c0:5a:ec:39:14:3d:
3e:d1:71:30:6d:b0:7d:6b:bb:34:00:5d:b6:b2:b1:
69:e0:c7:15:39:aa:15:96:8c:64:6e:f5:62:a1:17:
20:9b:7e:92:63:b7:29:02:63:72:7a:1e:de:4b:02:
30:13:d8:2e:d2:c4:22:df:82:d6:62:e9:6d:bb:a5:
f9:7a:9c:42:5c:a3:d9:84:3c:40:70:b8:40:5b:38:
cb:6f:8a:bd:a8:59:14:f0:7b:6b:c5:9a:f3:a4:94:
6f:69:f4:70:6f:06:cb:4d:fb:28:85:f7:a1:ee:5a:
53:69:7b:5c:97:d4:ff:8b:45:31:0c:e7:b6:ae:a5:
19:e0:de:50:eb:bc:0a:50:58:c5:a1:18:3f:01:4e:
58:25:bc:28:5b:32:bd:39:f0:01:29:86:1c:25:2a:
d1:8c:a5:cf:a9:56:9f:dd:0f:4d:b7:f4:1a:29:86:
12:e1:5a:9d:79:8c:92:46:18:f4:32:b1:cc:27:73:
05:7c:86:95:06:14:9e:a7:9d:dd:59:5d:9d:bd:33:
91:3f:0b:fc:e7:ba:0c:3a:a9:aa:01:77:12:fb:cb:
be:cb:c2:14:29:4a:66:d9:98:dd:0f:89:01:8b:c7:
ab:19:85:69:90:4b:e2:44:e3:b5:2a:02:36:72:84:
43:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:E2:F9:61:C6:5F:9E:59:24:23:9F:88:E7:71:76:FF:C4:CF:7D:33
X509v3 Authority Key Identifier:
keyid:92:3A:2B:3D:D7:66:72:75:F0:98:86:DF:7D:A0:79:F7:55:CE:ED:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kjorPddmcnXwmIbffaB591XO7Vk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/b796f4-2e88-4eaa-a269-2738bcb43d6d/1/kjorPddmcnXwmIbffaB591XO7Vk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/b796f4-2e88-4eaa-a269-2738bcb43d6d/1/kjorPddmcnXwmIbffaB591XO7Vk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:59:86:70:84:19:80:57:d8:ea:4b:40:18:dc:1c:e1:c3:93:
bf:43:a0:de:a0:db:13:8d:4a:73:7d:e4:f5:04:2b:57:63:fc:
6e:40:9f:af:13:8e:0b:53:6d:7b:8d:da:94:6e:fb:e7:8c:cd:
44:a1:ee:b4:88:57:1a:27:98:63:6f:01:d1:46:b8:52:b0:80:
22:e9:d9:04:69:c0:d7:58:59:f0:51:b2:e3:b0:24:48:a7:cf:
21:2d:99:87:ae:ae:89:e8:93:35:91:a9:c5:b5:8e:06:a5:33:
6b:f4:a5:10:d1:8a:5f:9c:0d:07:de:44:7d:92:0d:52:68:7b:
5b:ca:5a:25:48:74:73:00:dc:55:33:a8:af:09:1a:40:04:f5:
4f:0c:c4:65:93:11:38:3e:09:f2:1c:cf:5b:f9:3b:cb:b6:db:
83:9c:31:1d:83:02:a0:3c:60:ac:f8:33:96:30:13:20:88:87:
90:cb:37:ed:98:b2:c6:d8:73:c9:ce:f5:a1:6d:da:80:fd:98:
ca:13:3c:12:98:a9:0b:af:f5:a7:c8:79:a3:38:5c:e0:6f:d4:
cf:14:1a:bb:81:5a:f1:8b:d2:21:38:aa:95:d2:93:a6:d6:db:
b4:d7:c8:f3:37:d4:95:c1:bc:ed:92:b8:9a:ba:5f:b2:da:48:
66:52:60:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:09:19 2026 by rpki-client