Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/227670-fe4d-4bd6-bf28-b2545b404eec/1/kjkTU_bh9QJQSgho6_itDevJ2ng.mft
File: kjkTU_bh9QJQSgho6_itDevJ2ng.mft (raw, json)
Hash identifier: xz7rmTzsKC/7Jq3eznE8QCJKLCRahVLqzwlnHvwAsCU=
Subject key identifier: 96:60:85:07:DA:90:65:55:8A:CC:94:29:A4:47:71:A2:FE:7B:1D:74
Authority key identifier: 92:39:13:53:F6:E1:F5:02:50:4A:08:68:EB:F8:AD:0D:EB:C9:DA:78
Certificate issuer: /CN=92391353f6e1f502504a0868ebf8ad0debc9da78
Certificate serial: 019DA3E5F5F9C9ABE8D146380220B9088C28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kjkTU_bh9QJQSgho6_itDevJ2ng.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/227670-fe4d-4bd6-bf28-b2545b404eec/1/kjkTU_bh9QJQSgho6_itDevJ2ng.mft
Manifest number: 18CA
Signing time: Sun 19 Apr 2026 04:00:50 +0000
Manifest this update: Sun 19 Apr 2026 04:00:50 +0000
Manifest next update: Mon 20 Apr 2026 04:00:50 +0000
Files and hashes: 1: JhmecN5URCtv1yBIbMEV6e9g8Co.roa (hash: pl/+LhQub+A0lSXtk6Diu/3nX3HjGeeg4r2Cz4f+9V4=)
2: SgvNtEPjeS4PQsDsrJuu4hkfOtY.asa (hash: COU0yqjHmkzsF5ND+gIgB3KnAyucghgqR4Ewe3DYMIQ=)
3: kjkTU_bh9QJQSgho6_itDevJ2ng.crl (hash: 0FzgF0Jp0p4kf7juvv/BBGhhaMc3e+/kpY07JzchJS4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/227670-fe4d-4bd6-bf28-b2545b404eec/1/kjkTU_bh9QJQSgho6_itDevJ2ng.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/227670-fe4d-4bd6-bf28-b2545b404eec/1/kjkTU_bh9QJQSgho6_itDevJ2ng.mft
rsync://rpki.ripe.net/repository/DEFAULT/kjkTU_bh9QJQSgho6_itDevJ2ng.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:e5:f5:f9:c9:ab:e8:d1:46:38:02:20:b9:08:8c:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92391353f6e1f502504a0868ebf8ad0debc9da78
Validity
Not Before: Apr 19 04:00:50 2026 GMT
Not After : Apr 20 04:00:50 2026 GMT
Subject: CN=96608507da9065558acc9429a44771a2fe7b1d74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:e8:39:28:c6:55:cd:dd:66:75:9f:7b:b6:aa:
da:0a:a0:12:97:99:81:0d:a4:cb:a6:3f:8c:d7:be:
cb:68:5c:fd:69:3b:ac:46:d0:a4:ad:2b:ad:5a:c6:
9f:77:e7:28:76:62:64:1e:bf:ee:42:be:f9:52:96:
78:ed:f2:49:b9:f2:cc:4f:47:f8:76:df:9e:7f:2c:
75:7c:7d:91:0b:8a:25:d0:ed:15:5d:5f:bf:3a:97:
18:77:a3:01:a2:2b:00:8a:16:cb:3f:14:c0:f2:9c:
26:be:43:03:cf:e6:e9:79:ba:fb:78:7a:01:3c:7e:
91:28:11:3b:0c:f1:a4:25:f4:ed:74:4d:8b:9c:22:
f3:63:03:76:26:47:1e:b6:70:d0:a4:44:b6:c2:2c:
f0:ea:90:72:84:c3:1a:20:d4:2b:28:19:10:76:41:
7c:e2:7b:ba:67:70:86:95:37:37:1b:74:86:06:29:
b5:6f:29:f0:8b:3b:29:ab:0d:ad:50:1e:d6:f5:73:
43:96:0c:97:84:87:b0:73:0b:27:32:d8:5a:27:08:
4b:14:04:bf:32:f0:7a:35:be:29:e8:3a:48:6d:da:
bf:12:63:bf:7f:45:0a:61:a7:6a:43:2a:90:17:1a:
7d:c2:be:21:f0:93:e4:57:cd:a6:e3:ef:44:44:49:
b2:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:60:85:07:DA:90:65:55:8A:CC:94:29:A4:47:71:A2:FE:7B:1D:74
X509v3 Authority Key Identifier:
keyid:92:39:13:53:F6:E1:F5:02:50:4A:08:68:EB:F8:AD:0D:EB:C9:DA:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kjkTU_bh9QJQSgho6_itDevJ2ng.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/227670-fe4d-4bd6-bf28-b2545b404eec/1/kjkTU_bh9QJQSgho6_itDevJ2ng.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/227670-fe4d-4bd6-bf28-b2545b404eec/1/kjkTU_bh9QJQSgho6_itDevJ2ng.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:f7:68:cf:17:e1:2e:87:45:8c:48:6f:e3:4f:b6:b7:7b:2e:
61:27:c1:c4:6f:d4:70:c3:3f:6c:b3:03:27:a5:0b:6d:a7:2d:
84:dc:66:8c:03:c1:ef:21:67:44:af:32:b7:15:a3:bb:81:60:
2f:d7:dd:0d:46:d9:0c:80:e0:05:47:a6:63:b8:bd:fb:f7:44:
9c:5a:25:81:bf:52:86:b5:03:37:0f:c6:f6:3b:9d:08:b3:4a:
1f:af:f6:5a:4a:4c:72:03:56:31:c7:c6:ea:f4:57:db:95:47:
85:12:7e:44:4d:fa:e0:30:97:8b:2e:67:33:a3:e4:33:9b:a3:
2b:73:b7:ad:1c:37:09:90:89:cb:ae:7a:b9:6b:b6:25:9f:89:
c9:fe:58:0a:b0:36:a3:86:51:d1:63:aa:61:29:a2:30:4d:17:
c6:02:fc:2c:03:13:90:8a:08:3b:57:6b:39:b1:9f:85:21:18:
04:07:1e:05:cc:51:ea:ca:88:c1:6d:ec:b8:94:e0:6d:b7:29:
fa:23:a0:af:87:7d:61:a9:5d:69:07:f1:7e:6e:24:0f:b5:90:
81:75:b4:f6:bf:62:46:05:d2:3e:61:6d:9c:30:02:f3:30:e0:
b2:92:7f:4f:ae:22:5c:69:7e:a1:49:bb:4d:a2:56:74:31:05:
04:5b:91:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 11:49:41 2026 by rpki-client