Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/40/b796f4-2e88-4eaa-a269-2738bcb43d6d/1/kjorPddmcnXwmIbffaB591XO7Vk.mft
File: kjorPddmcnXwmIbffaB591XO7Vk.mft (raw, json)
Hash identifier: uGLXtSICwXL06TIK8NTNjdvJLpM0v71CGnq8QXakE2Y=
Subject key identifier: D8:EF:65:60:0D:15:8F:4D:3C:91:13:C7:41:06:49:FA:72:B0:D6:7F
Authority key identifier: 92:3A:2B:3D:D7:66:72:75:F0:98:86:DF:7D:A0:79:F7:55:CE:ED:59
Certificate issuer: /CN=923a2b3dd7667275f09886df7da079f755ceed59
Certificate serial: 01A0C669B673117153E039A3D843482294E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kjorPddmcnXwmIbffaB591XO7Vk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/b796f4-2e88-4eaa-a269-2738bcb43d6d/1/kjorPddmcnXwmIbffaB591XO7Vk.mft
Manifest number: 1A6E
Signing time: Tue 22 Sep 2026 00:00:11 +0000
Manifest this update: Tue 22 Sep 2026 00:00:11 +0000
Manifest next update: Wed 23 Sep 2026 00:00:11 +0000
Files and hashes: 1: kjorPddmcnXwmIbffaB591XO7Vk.crl (hash: tpiHZ/tn3BwdfH/6mRDnKg4u8OC+Usf/H6bS7183vB8=)
2: lr9abnPwCKuiEqQLCTnj_yF2mpA.roa (hash: f/0VKTDVUAMvZzhHBp5U3cnXddMK0Wnijx8d3qSFB3Q=)
3: uoml1ooKIpEwGVQcgm0COMGf22M.roa (hash: j6yV3AvezVwVR9BGMG8Xa/if460puXKoVMqsrCe3beo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/b796f4-2e88-4eaa-a269-2738bcb43d6d/1/kjorPddmcnXwmIbffaB591XO7Vk.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/b796f4-2e88-4eaa-a269-2738bcb43d6d/1/kjorPddmcnXwmIbffaB591XO7Vk.mft
rsync://rpki.ripe.net/repository/DEFAULT/kjorPddmcnXwmIbffaB591XO7Vk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 00:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c6:69:b6:73:11:71:53:e0:39:a3:d8:43:48:22:94:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=923a2b3dd7667275f09886df7da079f755ceed59
Validity
Not Before: Sep 22 00:00:11 2026 GMT
Not After : Sep 23 00:00:11 2026 GMT
Subject: CN=d8ef65600d158f4d3c9113c7410649fa72b0d67f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:03:c1:a2:79:60:18:24:01:34:62:4c:94:38:
d4:48:3c:06:80:83:a3:f0:6f:09:28:fe:0f:16:b9:
9e:73:84:3c:5d:0f:78:ed:89:aa:48:9e:8d:ef:c1:
ab:e3:4e:19:8e:c0:71:89:ed:dc:0f:8f:68:0d:2b:
9a:41:af:73:c1:e6:b6:43:c2:a8:86:57:7e:ac:17:
9f:04:2d:8c:e4:77:1b:13:55:07:53:d4:c7:fc:49:
12:c9:a7:ba:61:e0:f2:96:7b:ab:ac:de:7e:df:5a:
c7:91:b1:13:6e:8f:09:b6:21:e5:b6:a4:57:20:52:
ac:09:91:e9:13:e2:f8:2c:06:e9:1c:6c:1a:a4:66:
a4:1d:69:43:62:58:f3:fd:f5:bb:b0:f3:db:22:09:
e5:f5:9e:8f:b6:aa:1f:5a:d4:1c:49:3b:47:70:d6:
17:b1:ef:d7:4c:59:4f:50:37:57:86:14:5e:06:cb:
a8:10:40:c7:6f:0f:3e:f4:8c:1c:38:4d:b2:66:69:
9b:38:88:77:88:0c:39:a3:0a:4a:a3:d9:cc:17:ca:
d1:d2:29:18:2d:ea:11:33:ea:f1:77:82:f6:0d:6e:
2b:1a:bf:e0:18:7c:92:d1:ea:de:89:0f:c4:84:ef:
e2:58:b7:49:a8:65:3c:06:68:5f:93:e7:57:8e:37:
44:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:EF:65:60:0D:15:8F:4D:3C:91:13:C7:41:06:49:FA:72:B0:D6:7F
X509v3 Authority Key Identifier:
keyid:92:3A:2B:3D:D7:66:72:75:F0:98:86:DF:7D:A0:79:F7:55:CE:ED:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kjorPddmcnXwmIbffaB591XO7Vk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/b796f4-2e88-4eaa-a269-2738bcb43d6d/1/kjorPddmcnXwmIbffaB591XO7Vk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/b796f4-2e88-4eaa-a269-2738bcb43d6d/1/kjorPddmcnXwmIbffaB591XO7Vk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:72:b2:d3:a9:dd:0e:79:b9:91:73:5f:bc:e9:ec:cc:1f:aa:
52:cf:5d:09:29:13:b1:13:23:85:a4:cd:e6:1c:39:d5:a5:68:
b3:51:0b:39:dc:a6:8b:dd:ad:a0:6a:5b:5f:4f:9b:58:04:9f:
d0:5e:4c:f9:6e:c4:24:ed:2c:44:2e:8e:c1:24:6b:6c:35:2a:
36:f7:a4:90:2c:d1:78:8a:29:a9:f1:c2:0e:6d:2e:b1:c0:fe:
58:71:4b:5f:8b:29:0b:77:0a:38:a7:d7:11:08:b5:c6:c0:a6:
73:5f:bc:71:d7:d6:9c:2b:5e:57:8b:c3:ed:cd:fe:35:18:47:
63:c7:dd:91:7f:a1:97:c5:27:2a:12:67:82:63:c5:99:64:fc:
ae:48:cb:76:57:10:24:cf:e2:c7:d6:0a:d3:7b:d4:dd:83:b6:
c3:19:8f:b5:7d:fd:5f:b5:aa:42:a8:42:52:f7:fa:b0:d0:89:
03:ed:25:d0:35:90:1b:63:3f:59:83:65:66:44:e0:5d:61:b8:
01:1c:5a:10:83:bd:56:bf:2c:1b:b0:c7:05:73:6c:d4:33:13:
df:58:d5:8f:7d:b7:7b:cd:10:ee:80:40:07:e2:fd:bd:83:92:
c6:99:d5:66:4f:bc:4d:55:13:17:71:35:50:29:b7:54:1c:d1:
ac:8e:0e:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 10:43:16 2026 by rpki-client