
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/227670-fe4d-4bd6-bf28-b2545b404eec/1/kjkTU_bh9QJQSgho6_itDevJ2ng.mft
File: kjkTU_bh9QJQSgho6_itDevJ2ng.mft (raw, json)
Hash identifier: t/bUXo5xBgotCVak8UOEdodghie/qyTYhnSQCXxr1Is=
Subject key identifier: A9:87:0F:1B:A3:8D:99:74:7F:52:FF:C6:80:65:F1:73:95:5C:91:4B
Authority key identifier: 92:39:13:53:F6:E1:F5:02:50:4A:08:68:EB:F8:AD:0D:EB:C9:DA:78
Certificate issuer: /CN=92391353f6e1f502504a0868ebf8ad0debc9da78
Certificate serial: 019FA97596D3A5ACA17BF4868F232C19C99F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kjkTU_bh9QJQSgho6_itDevJ2ng.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/227670-fe4d-4bd6-bf28-b2545b404eec/1/kjkTU_bh9QJQSgho6_itDevJ2ng.mft
Manifest number: 19D6
Signing time: Tue 28 Jul 2026 16:01:23 +0000
Manifest this update: Tue 28 Jul 2026 16:01:23 +0000
Manifest next update: Wed 29 Jul 2026 16:01:23 +0000
Files and hashes: 1: JhmecN5URCtv1yBIbMEV6e9g8Co.roa (hash: pl/+LhQub+A0lSXtk6Diu/3nX3HjGeeg4r2Cz4f+9V4=)
2: SgvNtEPjeS4PQsDsrJuu4hkfOtY.asa (hash: COU0yqjHmkzsF5ND+gIgB3KnAyucghgqR4Ewe3DYMIQ=)
3: kjkTU_bh9QJQSgho6_itDevJ2ng.crl (hash: CmUK6VL0Z480wojQ287oeNXtNhDUVVwGP13TdOwv6aI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/227670-fe4d-4bd6-bf28-b2545b404eec/1/kjkTU_bh9QJQSgho6_itDevJ2ng.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/227670-fe4d-4bd6-bf28-b2545b404eec/1/kjkTU_bh9QJQSgho6_itDevJ2ng.mft
rsync://rpki.ripe.net/repository/DEFAULT/kjkTU_bh9QJQSgho6_itDevJ2ng.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:75:96:d3:a5:ac:a1:7b:f4:86:8f:23:2c:19:c9:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92391353f6e1f502504a0868ebf8ad0debc9da78
Validity
Not Before: Jul 28 16:01:23 2026 GMT
Not After : Jul 29 16:01:23 2026 GMT
Subject: CN=a9870f1ba38d99747f52ffc68065f173955c914b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:b3:a1:0b:9b:be:d9:97:91:d8:cb:a7:b6:27:
5f:73:db:69:70:e1:19:50:17:4c:06:db:57:05:15:
87:5b:7b:60:d0:68:85:e6:b1:a1:3d:02:30:c6:15:
41:3b:7e:00:41:0c:ed:85:8c:97:a7:9f:31:1c:2c:
66:a6:d7:2b:48:0b:32:62:3a:0a:fd:bd:07:e2:34:
9c:18:64:67:29:4b:91:be:e7:5a:89:17:d1:1a:e8:
53:61:26:bc:c9:fd:34:a9:30:cf:c1:18:a0:69:27:
c5:cd:7e:40:4f:76:f3:aa:06:e4:70:bd:0f:c2:b8:
2c:79:a6:7b:bb:a8:de:a9:35:83:1b:89:25:e7:f1:
d7:82:ee:13:05:49:d0:03:c5:be:fd:b6:61:cc:7d:
20:a4:d4:7b:69:6d:53:18:a6:e8:58:77:67:12:7d:
c8:a2:58:f8:fb:bf:af:20:1f:f5:fb:42:7c:88:ee:
bf:0c:ea:6f:b5:72:90:91:a8:75:0e:d3:e3:16:1c:
e0:5b:d6:c4:eb:f0:f1:93:20:30:ae:8f:21:87:42:
02:56:03:19:10:a0:c6:c1:26:1d:c1:1e:bf:64:ec:
1f:9a:f0:97:42:71:34:77:b3:ed:5e:7b:c0:f4:e7:
96:2b:da:fd:17:d2:ad:9e:f1:79:9c:c4:f2:d8:d6:
a8:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:87:0F:1B:A3:8D:99:74:7F:52:FF:C6:80:65:F1:73:95:5C:91:4B
X509v3 Authority Key Identifier:
keyid:92:39:13:53:F6:E1:F5:02:50:4A:08:68:EB:F8:AD:0D:EB:C9:DA:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kjkTU_bh9QJQSgho6_itDevJ2ng.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/227670-fe4d-4bd6-bf28-b2545b404eec/1/kjkTU_bh9QJQSgho6_itDevJ2ng.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/227670-fe4d-4bd6-bf28-b2545b404eec/1/kjkTU_bh9QJQSgho6_itDevJ2ng.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:44:78:d1:68:11:e1:b4:9c:22:42:82:a8:d1:c1:fe:ba:2e:
b7:e1:6f:b9:e1:d1:1e:0e:c3:90:2a:08:55:39:97:90:bf:79:
5b:20:d2:fd:45:0d:d2:56:2e:e6:d3:11:7f:ab:62:62:21:07:
0a:46:5f:70:4f:1b:d4:1f:81:de:25:38:a3:6e:a5:16:dd:6d:
bd:a1:ab:e4:59:fc:88:ab:1a:32:35:17:d0:64:5e:e9:7e:b4:
85:92:63:ea:c1:2a:bc:00:df:97:95:ca:1c:ce:87:b1:45:5f:
02:d9:8b:4c:fe:5d:7d:2b:0d:e3:23:e4:d4:14:20:7e:54:28:
e4:13:71:ca:4e:54:3f:e6:95:1f:ae:4e:5e:92:28:b1:c6:76:
0c:ff:ac:77:d2:24:fb:cd:ed:6e:60:57:12:98:61:2a:b2:87:
45:91:3b:c8:99:ab:21:b1:42:e0:9f:cd:c8:c3:e6:26:bb:e6:
df:1f:dc:cc:87:1a:af:6c:00:ff:30:e9:1f:7b:c9:ba:6c:63:
d8:31:46:ee:24:98:e3:43:6f:3c:49:35:be:93:99:59:cd:2f:
d8:ad:16:35:ed:9c:e3:51:1b:a7:f5:e7:76:b8:96:d5:8d:7e:
15:a2:ce:c1:66:4c:dd:53:69:d8:36:7c:ab:b0:50:b7:58:de:
4f:5d:c6:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:23:57 2026 by rpki-client