Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/40/b796f4-2e88-4eaa-a269-2738bcb43d6d/1/kjorPddmcnXwmIbffaB591XO7Vk.mft
File: kjorPddmcnXwmIbffaB591XO7Vk.mft (raw, json)
Hash identifier: exaqqKk/7ITZ2FO3LJFYZoWVhD0OfW6ciVmQXL+BScg=
Subject key identifier: 93:3B:67:AA:E7:72:53:55:CB:3D:08:80:FE:85:34:C3:2D:69:5D:2C
Authority key identifier: 92:3A:2B:3D:D7:66:72:75:F0:98:86:DF:7D:A0:79:F7:55:CE:ED:59
Certificate issuer: /CN=923a2b3dd7667275f09886df7da079f755ceed59
Certificate serial: 01A186AD8B25CB186566F5C4BFCE562510F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kjorPddmcnXwmIbffaB591XO7Vk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/b796f4-2e88-4eaa-a269-2738bcb43d6d/1/kjorPddmcnXwmIbffaB591XO7Vk.mft
Manifest number: 1AD2
Signing time: Thu 29 Oct 2026 08:01:22 +0000
Manifest this update: Thu 29 Oct 2026 08:01:22 +0000
Manifest next update: Fri 30 Oct 2026 08:01:22 +0000
Files and hashes: 1: YX3c6AW5N8_1JIHkyaPZznDHltk.roa (hash: 3r1UvDAubSkKwKvxzV7xHOO2pIO4ajxp8ZBIP+GibHo=)
2: kjorPddmcnXwmIbffaB591XO7Vk.crl (hash: WEqqWapkrzdJs6x4inLJD8XeStBMXZJ1SGjIuo5VbhU=)
3: uoml1ooKIpEwGVQcgm0COMGf22M.roa (hash: j6yV3AvezVwVR9BGMG8Xa/if460puXKoVMqsrCe3beo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/b796f4-2e88-4eaa-a269-2738bcb43d6d/1/kjorPddmcnXwmIbffaB591XO7Vk.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/b796f4-2e88-4eaa-a269-2738bcb43d6d/1/kjorPddmcnXwmIbffaB591XO7Vk.mft
rsync://rpki.ripe.net/repository/DEFAULT/kjorPddmcnXwmIbffaB591XO7Vk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 30 Oct 2026 08:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:86:ad:8b:25:cb:18:65:66:f5:c4:bf:ce:56:25:10:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=923a2b3dd7667275f09886df7da079f755ceed59
Validity
Not Before: Oct 29 08:01:22 2026 GMT
Not After : Oct 30 08:01:22 2026 GMT
Subject: CN=933b67aae7725355cb3d0880fe8534c32d695d2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:bc:29:1b:84:1c:d8:55:fa:45:ab:86:63:12:
da:9e:04:53:f8:44:10:47:ff:69:67:e4:ac:f3:77:
99:87:b8:51:93:61:2f:1f:16:25:6c:d1:8d:fe:30:
20:40:07:16:3e:59:a3:35:01:85:93:aa:97:50:df:
74:78:d9:07:a8:d9:ab:31:de:ac:0e:84:50:23:9d:
8f:be:47:cd:70:d3:b3:e7:a5:60:91:0c:fa:99:84:
5a:e7:72:8b:d2:77:d4:44:4f:d8:8d:a2:15:74:f7:
56:58:59:fd:83:bf:43:76:5b:1b:dd:1c:65:48:c4:
73:70:9b:a8:3c:3c:91:bc:88:46:1b:05:71:10:af:
67:a9:30:77:e0:14:4e:f2:ec:9a:1b:98:88:f9:d1:
31:dd:33:fe:0f:6c:d8:45:91:f5:ab:d0:db:4b:99:
1b:2e:d9:b6:93:24:1b:70:b5:7b:8c:8d:01:01:1c:
22:ac:6d:4e:88:51:87:48:88:a5:c4:59:b9:b8:fe:
3b:b3:9f:54:78:3c:78:52:66:f8:36:db:77:39:81:
57:0f:13:a1:7a:27:2a:8c:85:43:a3:43:7a:11:bf:
b7:dd:6a:a0:77:c2:6b:93:15:39:25:57:f5:83:5b:
05:88:11:2a:0a:b7:a6:ea:96:81:62:cb:e5:cf:f0:
a8:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:3B:67:AA:E7:72:53:55:CB:3D:08:80:FE:85:34:C3:2D:69:5D:2C
X509v3 Authority Key Identifier:
keyid:92:3A:2B:3D:D7:66:72:75:F0:98:86:DF:7D:A0:79:F7:55:CE:ED:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kjorPddmcnXwmIbffaB591XO7Vk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/b796f4-2e88-4eaa-a269-2738bcb43d6d/1/kjorPddmcnXwmIbffaB591XO7Vk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/b796f4-2e88-4eaa-a269-2738bcb43d6d/1/kjorPddmcnXwmIbffaB591XO7Vk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:55:1b:05:93:90:1e:1c:ee:5d:4e:44:09:69:43:a1:3f:8e:
0e:ac:30:c8:53:3d:8f:d3:6e:44:0f:ab:ef:51:1d:d5:50:2c:
61:05:7a:a7:21:0f:99:31:df:08:07:fb:eb:57:ef:a5:c2:59:
41:c1:98:10:dd:da:ac:73:25:c6:14:29:52:58:8f:dc:b1:0d:
26:3a:f1:30:de:3e:42:d9:4e:07:64:14:ea:be:83:a2:43:17:
e9:68:06:81:43:9d:df:05:4d:64:2b:e3:fe:c5:80:fe:97:72:
e9:41:da:80:96:61:c0:67:5a:80:87:30:b7:13:ba:8e:21:18:
d5:88:f0:f9:26:65:3c:1c:d3:2a:61:4f:38:9e:be:cf:0d:ef:
7a:c2:e9:48:3c:db:49:75:ae:fd:45:3e:1e:2d:38:ff:53:59:
b8:6f:69:88:c5:c0:90:82:08:2c:1d:1a:16:7b:09:8a:4c:6b:
c8:74:b2:0e:a5:2c:37:a7:52:23:d5:88:0b:55:a1:6d:dc:67:
4d:cf:e5:15:93:29:5d:20:2d:93:79:cd:be:b5:ad:72:b0:50:
2a:8c:a0:7d:04:6a:fb:47:eb:c6:95:a1:9d:69:9c:0b:18:37:
6f:fd:46:78:fc:1d:50:53:29:20:9c:41:14:e2:27:8e:04:04:
f3:1b:2f:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 12:23:12 2026 by rpki-client