Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/4e816d-d8ec-437c-986a-3c12781e202d/1/kdjDKnA5cqrqCToB-N7fV_lnVXU.mft
File: kdjDKnA5cqrqCToB-N7fV_lnVXU.mft (raw, json)
Hash identifier: gdpKn8knqe118foA7E2lA61pFJ/D16nNv/7T2bN6CY8=
Subject key identifier: 78:D0:A3:11:1D:5F:B8:76:ED:86:FE:02:4B:13:7D:C7:60:E1:D6:A4
Authority key identifier: 91:D8:C3:2A:70:39:72:AA:EA:09:3A:01:F8:DE:DF:57:F9:67:55:75
Certificate issuer: /CN=91d8c32a703972aaea093a01f8dedf57f9675575
Certificate serial: 019EC224B1F8386E2505765DF78D06C63161
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kdjDKnA5cqrqCToB-N7fV_lnVXU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/4e816d-d8ec-437c-986a-3c12781e202d/1/kdjDKnA5cqrqCToB-N7fV_lnVXU.mft
Manifest number: 195C
Signing time: Sat 13 Jun 2026 18:00:45 +0000
Manifest this update: Sat 13 Jun 2026 18:00:45 +0000
Manifest next update: Sun 14 Jun 2026 18:00:45 +0000
Files and hashes: 1: fqnqgR-axVnKnA0P1MNMOEPlOKQ.roa (hash: dS17jdz8caEPLRuaszV/W/bAD/gLlYgn1NNbi4+I3kM=)
2: gRgykk6dz_IwqNNOBfkFkQce2pk.roa (hash: PzJ5ETV1AGTHV0gxW4EKMy3jivHWboSvAxQ7aMFFRFY=)
3: kdjDKnA5cqrqCToB-N7fV_lnVXU.crl (hash: 2jkh5WJuOfkIzzqIe1GYDLsATMr2WoyqO386SenUs9k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/4e816d-d8ec-437c-986a-3c12781e202d/1/kdjDKnA5cqrqCToB-N7fV_lnVXU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/4e816d-d8ec-437c-986a-3c12781e202d/1/kdjDKnA5cqrqCToB-N7fV_lnVXU.mft
rsync://rpki.ripe.net/repository/DEFAULT/kdjDKnA5cqrqCToB-N7fV_lnVXU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 17:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c2:24:b1:f8:38:6e:25:05:76:5d:f7:8d:06:c6:31:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91d8c32a703972aaea093a01f8dedf57f9675575
Validity
Not Before: Jun 13 18:00:45 2026 GMT
Not After : Jun 14 18:00:45 2026 GMT
Subject: CN=78d0a3111d5fb876ed86fe024b137dc760e1d6a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:f1:70:92:7c:ab:8e:a1:37:f5:2f:c4:50:8e:
a7:04:e5:4b:c9:ba:94:20:bf:b1:f1:f9:92:67:93:
f7:dc:c4:ee:94:f7:67:d8:7d:ed:42:99:f3:5a:8c:
21:9a:c8:71:4c:dc:a3:8f:cc:ca:08:60:69:53:76:
e0:ae:29:68:62:c5:36:7c:58:d2:45:4e:c5:72:5a:
62:02:1a:3a:73:64:5f:d9:fa:0f:34:9c:ca:aa:72:
82:27:e9:38:56:d0:e2:b9:33:5a:d5:e2:ea:5a:39:
d2:1c:da:17:63:d6:3c:8c:5c:63:fa:e1:96:0d:ad:
5f:ea:2c:48:19:28:cd:9b:37:0b:1e:ed:87:ad:62:
de:72:83:55:76:1e:e5:0b:e2:f3:52:61:b5:e6:33:
e1:4f:43:e2:d2:35:9f:da:08:36:6b:8c:13:09:53:
35:1e:c7:f5:fc:7e:44:d1:75:36:dd:95:f0:44:0e:
83:f8:a0:ab:70:af:f3:b6:ca:23:ac:f2:02:7c:f5:
71:90:5d:10:1d:6c:74:b9:4d:90:16:93:2f:d9:94:
d1:5a:3a:f5:e8:be:96:56:b8:bb:e6:6d:68:de:55:
a0:09:c7:a7:b5:96:64:62:df:7f:b4:5c:ab:f5:38:
b7:1a:56:c8:7e:21:35:80:20:fc:4d:28:48:19:c2:
9e:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:D0:A3:11:1D:5F:B8:76:ED:86:FE:02:4B:13:7D:C7:60:E1:D6:A4
X509v3 Authority Key Identifier:
keyid:91:D8:C3:2A:70:39:72:AA:EA:09:3A:01:F8:DE:DF:57:F9:67:55:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kdjDKnA5cqrqCToB-N7fV_lnVXU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/4e816d-d8ec-437c-986a-3c12781e202d/1/kdjDKnA5cqrqCToB-N7fV_lnVXU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/4e816d-d8ec-437c-986a-3c12781e202d/1/kdjDKnA5cqrqCToB-N7fV_lnVXU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:1e:2e:2b:9f:01:a8:c9:5c:d7:ac:36:b4:7f:a6:c6:e7:94:
c8:74:d9:63:a5:a2:89:d6:c0:b4:6c:fb:6c:5b:b0:79:d5:12:
27:b0:85:eb:48:d5:53:03:7b:2d:5b:86:73:65:ee:c8:2c:f5:
71:39:92:e0:fc:04:69:a1:24:e0:39:8b:49:69:17:9d:b2:02:
00:8d:6b:e3:af:7b:b4:a2:06:e9:02:a8:26:6d:64:88:45:6a:
06:eb:17:dd:32:fa:01:b2:47:b4:40:85:7e:83:cd:2a:17:64:
27:c5:0b:ce:28:cb:fb:db:91:fc:5c:32:1b:32:09:37:5e:98:
13:c7:a7:2d:1b:91:4d:0d:9b:8a:94:d9:45:96:91:4e:44:d6:
19:af:b5:fe:5a:88:37:a5:01:20:a6:db:c5:df:a9:71:4b:36:
4b:7a:66:d8:de:4f:b7:aa:3e:56:d7:c0:a8:76:7a:a3:77:56:
c6:de:08:96:83:26:a1:2a:33:b1:8d:73:6f:37:ea:0f:c7:ac:
04:5d:70:ad:5a:07:cf:2b:35:7b:59:36:99:89:87:eb:53:5e:
21:3e:d9:6f:d6:f3:f1:ff:7a:33:12:29:3c:a7:27:9c:97:e6:
96:cd:ca:1f:dd:45:70:ee:75:1d:ef:63:40:82:c8:89:4d:8d:
20:23:09:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 21:27:06 2026 by rpki-client