Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/b796f4-2e88-4eaa-a269-2738bcb43d6d/1/kjorPddmcnXwmIbffaB591XO7Vk.mft
File: kjorPddmcnXwmIbffaB591XO7Vk.mft (raw, json)
Hash identifier: CWfhhra1FLs41WyeCYAczszelFt9+xJzqpH4QzHHGVM=
Subject key identifier: F9:28:A4:F7:A0:01:A6:C1:9E:4C:F4:9C:FA:20:EE:D6:81:1B:3D:BD
Authority key identifier: 92:3A:2B:3D:D7:66:72:75:F0:98:86:DF:7D:A0:79:F7:55:CE:ED:59
Certificate issuer: /CN=923a2b3dd7667275f09886df7da079f755ceed59
Certificate serial: 019CAD90462A02CD3AFE844B16D2DE50F68C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kjorPddmcnXwmIbffaB591XO7Vk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/b796f4-2e88-4eaa-a269-2738bcb43d6d/1/kjorPddmcnXwmIbffaB591XO7Vk.mft
Manifest number: 184C
Signing time: Mon 02 Mar 2026 08:00:39 +0000
Manifest this update: Mon 02 Mar 2026 08:00:39 +0000
Manifest next update: Tue 03 Mar 2026 08:00:39 +0000
Files and hashes: 1: HgVTCqxTI2p7CB3_pzYOlBKbewI.roa (hash: Vx3tDFhqH00mNA0Sjbw5LLVQH5B1ifF/KkPAwaHsXVk=)
2: kjorPddmcnXwmIbffaB591XO7Vk.crl (hash: NltTqq2vyquQRO1lW3MZJk6v1Rb73fR8H2n0qMjYuZY=)
3: uoml1ooKIpEwGVQcgm0COMGf22M.roa (hash: j6yV3AvezVwVR9BGMG8Xa/if460puXKoVMqsrCe3beo=)
4: yYRNMp4_8tPWVd55Ov35Q5FSlnI.roa (hash: 0/ssvW/ngUlJqY3PbldVkn5N/q0lSB25o7gaAX3Yo8w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/b796f4-2e88-4eaa-a269-2738bcb43d6d/1/kjorPddmcnXwmIbffaB591XO7Vk.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/b796f4-2e88-4eaa-a269-2738bcb43d6d/1/kjorPddmcnXwmIbffaB591XO7Vk.mft
rsync://rpki.ripe.net/repository/DEFAULT/kjorPddmcnXwmIbffaB591XO7Vk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:90:46:2a:02:cd:3a:fe:84:4b:16:d2:de:50:f6:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=923a2b3dd7667275f09886df7da079f755ceed59
Validity
Not Before: Mar 2 08:00:39 2026 GMT
Not After : Mar 3 08:00:39 2026 GMT
Subject: CN=f928a4f7a001a6c19e4cf49cfa20eed6811b3dbd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:f6:5b:a5:aa:69:b2:a4:db:4c:bd:be:9e:6f:
e5:bb:9a:35:e4:16:ff:52:0d:a8:12:48:cc:47:6a:
c1:13:b0:ba:cb:05:a8:33:29:0d:18:02:d1:9d:b3:
40:8e:dd:cb:a1:b7:50:3f:91:99:90:c6:50:d9:02:
c3:25:8a:d3:8b:14:49:33:78:dc:0d:4f:a8:18:00:
57:c9:ac:ea:c0:30:a0:2d:36:29:06:54:d7:0f:c7:
c4:f0:a5:dc:96:e9:0d:78:17:15:54:1e:c0:b4:37:
21:b1:3f:3b:f4:bc:88:fb:e1:98:87:85:9f:37:0a:
07:cb:ae:b1:9f:2b:55:f5:09:c5:d6:c6:48:b3:aa:
91:20:20:68:d2:be:5b:4f:32:5e:1e:25:f5:66:e3:
34:63:59:f3:54:cb:c4:4f:e0:06:31:00:aa:97:0b:
40:89:cb:1f:1c:d8:86:b1:b0:22:2e:8c:b3:de:e5:
13:d4:c9:4d:93:a5:5f:bc:6b:2a:0a:8d:bf:77:b2:
ea:c5:8a:54:f0:71:2d:92:73:09:5b:bc:38:f3:45:
2f:db:a3:c5:be:6b:2c:27:2a:6d:53:38:19:e0:98:
15:34:2d:9c:e0:59:e0:e3:72:3f:f8:0f:75:17:29:
5d:35:7e:9e:b7:74:fc:9c:9c:03:92:4f:59:80:68:
17:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:28:A4:F7:A0:01:A6:C1:9E:4C:F4:9C:FA:20:EE:D6:81:1B:3D:BD
X509v3 Authority Key Identifier:
keyid:92:3A:2B:3D:D7:66:72:75:F0:98:86:DF:7D:A0:79:F7:55:CE:ED:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kjorPddmcnXwmIbffaB591XO7Vk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/b796f4-2e88-4eaa-a269-2738bcb43d6d/1/kjorPddmcnXwmIbffaB591XO7Vk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/b796f4-2e88-4eaa-a269-2738bcb43d6d/1/kjorPddmcnXwmIbffaB591XO7Vk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:6e:24:d2:24:e8:f3:c7:e9:3d:d1:0d:ac:cd:2c:da:54:bb:
08:c4:a3:86:ee:6a:02:fe:79:8a:d6:7a:bb:96:28:71:5d:94:
a8:22:94:80:55:43:85:7b:c9:a3:58:b2:d2:73:f8:70:e5:10:
99:5a:e5:9a:19:bb:f4:ec:c0:f0:45:6a:95:8b:a4:bb:7a:d3:
74:ee:f1:b8:0b:d5:1d:c7:23:c7:ec:18:de:68:84:e9:a6:8b:
d1:d5:b9:be:cf:e1:e6:70:4e:bb:92:68:92:98:7e:dc:98:b8:
90:33:1e:e2:ca:6e:12:fa:25:5e:31:1c:8c:3d:f1:76:be:13:
02:f7:33:bb:48:a3:21:cc:7a:1e:18:d2:0e:6a:2c:a2:51:68:
df:a3:ec:b8:ad:f1:4f:d9:5c:b8:19:85:73:5a:f7:ff:bf:8d:
7a:aa:f3:ae:f4:7b:4b:2c:05:26:30:ef:0d:b8:2c:3b:f4:4d:
ae:a9:4b:cf:1d:ff:b3:ad:86:95:c7:e6:78:8b:c8:33:3b:a7:
82:f3:fa:ab:93:62:9b:b9:10:0c:8d:14:ae:e4:5e:bd:d3:4e:
c0:05:2b:cf:9a:bf:e6:74:b5:77:05:7e:a1:37:26:c7:4e:90:
ee:97:1a:e4:76:85:9b:01:67:92:bc:1c:8a:b9:38:74:81:09:
a8:ea:07:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:54:12 2026 by rpki-client