Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/55/f37027-afc4-444f-8008-95ce2c755d47/1/KJVOKPbgHKXHNTvDcvNppfUdm7Q.mft
File: KJVOKPbgHKXHNTvDcvNppfUdm7Q.mft (raw, json)
Hash identifier: cvPGb0y8C6A5/lB5dGZh5yqNxnpvLSAJhqpjZPNwKzM=
Subject key identifier: 29:F8:E4:DB:3B:5A:D4:5B:39:30:DD:41:CA:F4:42:B5:D6:53:BF:37
Authority key identifier: 28:95:4E:28:F6:E0:1C:A5:C7:35:3B:C3:72:F3:69:A5:F5:1D:9B:B4
Certificate issuer: /CN=28954e28f6e01ca5c7353bc372f369a5f51d9bb4
Certificate serial: 01A0F9EA13E28297B0F485B8250D1BC573A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KJVOKPbgHKXHNTvDcvNppfUdm7Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/f37027-afc4-444f-8008-95ce2c755d47/1/KJVOKPbgHKXHNTvDcvNppfUdm7Q.mft
Manifest number: 085D
Signing time: Fri 02 Oct 2026 00:01:02 +0000
Manifest this update: Fri 02 Oct 2026 00:01:02 +0000
Manifest next update: Sat 03 Oct 2026 00:01:02 +0000
Files and hashes: 1: AXdXSPys8K4gKCZL761_CRlXkQg.roa (hash: Eq65FPzgWfwxVUVR4WpFvfNbVj2sB466X23GUTRrgvw=)
2: KJVOKPbgHKXHNTvDcvNppfUdm7Q.crl (hash: ini499nvUuJWu9cYJZx1nXd+hysI5QCLDcQEPunV80E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/f37027-afc4-444f-8008-95ce2c755d47/1/KJVOKPbgHKXHNTvDcvNppfUdm7Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/f37027-afc4-444f-8008-95ce2c755d47/1/KJVOKPbgHKXHNTvDcvNppfUdm7Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/KJVOKPbgHKXHNTvDcvNppfUdm7Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 Oct 2026 23:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f9:ea:13:e2:82:97:b0:f4:85:b8:25:0d:1b:c5:73:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28954e28f6e01ca5c7353bc372f369a5f51d9bb4
Validity
Not Before: Oct 2 00:01:02 2026 GMT
Not After : Oct 3 00:01:02 2026 GMT
Subject: CN=29f8e4db3b5ad45b3930dd41caf442b5d653bf37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:78:a0:b7:0d:ce:61:13:48:ab:6b:d3:15:f5:
75:2b:e9:20:08:27:b3:bf:03:27:9d:69:56:e3:76:
2e:c2:77:e6:f6:45:06:3f:1c:9b:5d:99:54:fa:49:
d5:77:cc:42:89:cf:95:f1:a9:2e:5f:b8:ee:f6:49:
43:dd:34:b1:42:6b:95:fa:0b:91:0d:9e:a0:54:bd:
0b:6a:5f:08:dc:d6:7f:a3:1f:73:71:87:60:df:f8:
9b:05:40:49:6b:cd:d0:c2:49:47:6e:6c:de:b7:76:
4d:12:d5:39:a6:5e:cf:62:ab:da:1b:34:40:e4:8c:
a2:71:fa:be:f7:66:8b:8e:f7:bd:0e:24:a6:d6:c0:
88:a6:30:6d:3d:b4:23:65:28:9a:df:39:53:e3:03:
9a:d3:41:38:90:cb:e6:5e:5b:b2:10:22:c4:79:be:
cd:ae:d9:c7:6f:2a:97:59:91:0b:e4:09:2f:6d:db:
64:09:fd:b5:bf:2d:37:c8:30:78:67:e5:fa:f6:35:
a2:58:86:a9:18:42:f3:a7:c7:68:a1:66:e6:30:30:
08:64:96:8e:e6:4f:9d:6f:81:a8:7c:a0:b8:bd:7f:
a2:3b:2d:7c:61:ad:18:c4:c6:3c:86:35:93:fb:76:
39:34:93:9e:22:4b:87:dc:cb:62:07:fb:51:6f:fe:
80:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:F8:E4:DB:3B:5A:D4:5B:39:30:DD:41:CA:F4:42:B5:D6:53:BF:37
X509v3 Authority Key Identifier:
keyid:28:95:4E:28:F6:E0:1C:A5:C7:35:3B:C3:72:F3:69:A5:F5:1D:9B:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KJVOKPbgHKXHNTvDcvNppfUdm7Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/f37027-afc4-444f-8008-95ce2c755d47/1/KJVOKPbgHKXHNTvDcvNppfUdm7Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/f37027-afc4-444f-8008-95ce2c755d47/1/KJVOKPbgHKXHNTvDcvNppfUdm7Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:91:8e:c7:e8:8c:ee:78:4d:fa:77:cd:dc:f8:b4:20:e6:df:
f4:6e:2f:84:56:da:5d:73:35:bc:c7:8d:bc:a7:0e:f6:e5:3b:
2d:7b:bb:86:9f:f3:c2:2f:ec:42:dd:87:15:65:30:31:59:b2:
97:cf:dd:96:b9:a5:12:11:6c:79:19:0d:18:6c:52:e1:02:0e:
d5:26:56:74:b5:e1:d4:96:01:c4:53:5c:dd:f0:ec:bf:f3:f5:
b7:5c:11:d1:4e:51:e1:ab:c6:4e:89:4c:f8:52:d9:23:ed:39:
c2:4b:da:a5:eb:fa:46:47:bd:e7:26:1f:86:f1:83:de:2d:e6:
6c:c0:4a:7d:63:cf:bd:3f:74:77:4d:3d:32:d9:be:45:09:c9:
ea:51:34:90:ea:0f:f8:8a:5f:28:6d:e2:3c:d2:d1:ab:7b:98:
76:e3:bd:21:21:a7:46:3e:33:c5:f1:2b:88:19:fe:b6:ee:e2:
e1:78:63:83:aa:35:0f:73:99:2d:57:00:99:36:98:a2:3d:1e:
c6:ed:00:fa:a6:3b:38:60:ce:8b:3b:2d:15:2e:bf:d8:37:3f:
a2:2a:1f:4d:a3:c5:54:75:9a:24:41:54:22:8c:dd:24:c2:00:
c6:a5:79:e6:62:51:a2:ef:9e:d3:98:1c:29:16:02:11:a2:27:
88:b5:4a:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 2 05:14:14 2026 by rpki-client