Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/b796f4-2e88-4eaa-a269-2738bcb43d6d/1/kjorPddmcnXwmIbffaB591XO7Vk.mft
File: kjorPddmcnXwmIbffaB591XO7Vk.mft (raw, json)
Hash identifier: MwT8PTu6ZPYp+ueNXX9QkngM3cCGD7sQE8XX3QYDTNc=
Subject key identifier: 0B:BD:EF:BE:A4:CB:34:1D:27:CF:0C:C6:4D:43:2C:BB:E7:F1:56:47
Authority key identifier: 92:3A:2B:3D:D7:66:72:75:F0:98:86:DF:7D:A0:79:F7:55:CE:ED:59
Certificate issuer: /CN=923a2b3dd7667275f09886df7da079f755ceed59
Certificate serial: 019EB921184E52D8F5234AA7E60A867E9AC3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kjorPddmcnXwmIbffaB591XO7Vk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/b796f4-2e88-4eaa-a269-2738bcb43d6d/1/kjorPddmcnXwmIbffaB591XO7Vk.mft
Manifest number: 195D
Signing time: Fri 12 Jun 2026 00:00:14 +0000
Manifest this update: Fri 12 Jun 2026 00:00:14 +0000
Manifest next update: Sat 13 Jun 2026 00:00:14 +0000
Files and hashes: 1: ZvjICbgY5uzy4lM-8BzRrQ50iq0.roa (hash: Mczo0R8qXmsaTjs79OPPMvnbrbwivQ8mckMyGorwlIk=)
2: kjorPddmcnXwmIbffaB591XO7Vk.crl (hash: QX1Uh26F4zk8CzS6z2rlg4fhU7ZrBX/P6Y+Cb+qZORM=)
3: uoml1ooKIpEwGVQcgm0COMGf22M.roa (hash: j6yV3AvezVwVR9BGMG8Xa/if460puXKoVMqsrCe3beo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/b796f4-2e88-4eaa-a269-2738bcb43d6d/1/kjorPddmcnXwmIbffaB591XO7Vk.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/b796f4-2e88-4eaa-a269-2738bcb43d6d/1/kjorPddmcnXwmIbffaB591XO7Vk.mft
rsync://rpki.ripe.net/repository/DEFAULT/kjorPddmcnXwmIbffaB591XO7Vk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 20:26:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b9:21:18:4e:52:d8:f5:23:4a:a7:e6:0a:86:7e:9a:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=923a2b3dd7667275f09886df7da079f755ceed59
Validity
Not Before: Jun 12 00:00:14 2026 GMT
Not After : Jun 13 00:00:14 2026 GMT
Subject: CN=0bbdefbea4cb341d27cf0cc64d432cbbe7f15647
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:1b:bc:d0:5c:66:a3:8e:c8:c8:aa:0d:6d:b1:
bb:04:11:92:24:ef:86:90:ce:00:eb:b1:f3:e9:52:
15:00:a0:10:22:b7:e7:f0:28:cb:17:84:60:f3:3a:
3e:da:85:81:1b:49:67:35:18:ed:ad:c0:2b:df:ee:
42:d9:5a:d0:02:2e:0b:cf:57:9d:30:e0:be:24:fc:
58:f6:48:ab:74:45:18:ad:7d:82:fa:b4:c8:24:7f:
c2:6f:c2:27:c8:e7:2c:17:c4:d4:be:07:2c:96:ab:
ab:bb:07:ed:97:ee:2a:b7:29:43:28:56:fb:d5:25:
72:3a:77:66:0f:f0:9c:f3:6c:9d:26:3a:47:6f:d5:
20:a8:b9:89:ce:28:fc:1e:2a:76:45:c6:6b:00:9b:
f5:26:1c:84:6e:97:53:c1:a4:cf:65:bb:a1:0d:36:
7b:18:00:32:e2:79:e4:e5:b2:98:90:4a:2a:37:ae:
cd:80:42:fe:81:c4:f9:29:da:9a:8c:17:ad:2f:12:
2f:c9:c0:f9:81:ae:c0:05:a6:39:de:35:ae:97:1b:
42:d1:49:ab:f5:ab:da:58:c2:df:4e:19:cb:bc:79:
56:f9:89:3b:8c:d1:0e:38:d0:b5:28:b9:8b:16:44:
ae:f3:7f:9f:30:62:9b:5c:23:10:91:e3:e2:32:f9:
4d:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:BD:EF:BE:A4:CB:34:1D:27:CF:0C:C6:4D:43:2C:BB:E7:F1:56:47
X509v3 Authority Key Identifier:
keyid:92:3A:2B:3D:D7:66:72:75:F0:98:86:DF:7D:A0:79:F7:55:CE:ED:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kjorPddmcnXwmIbffaB591XO7Vk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/b796f4-2e88-4eaa-a269-2738bcb43d6d/1/kjorPddmcnXwmIbffaB591XO7Vk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/b796f4-2e88-4eaa-a269-2738bcb43d6d/1/kjorPddmcnXwmIbffaB591XO7Vk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:67:46:6e:94:e5:19:37:a7:e0:08:ba:fb:b9:cf:6e:cb:68:
c3:80:db:94:40:bd:66:7f:68:75:44:9f:71:84:70:bb:0c:49:
62:f4:95:f5:03:06:00:53:91:d8:cb:90:78:c0:0f:4b:78:48:
8b:f8:f8:94:09:be:84:98:81:5e:45:d7:f5:0e:4f:96:b8:f8:
4a:f6:5d:ff:0a:22:e9:94:ec:de:72:d2:37:ab:b3:9a:d0:e1:
a8:d9:8d:e2:6d:6e:a8:6c:63:9b:52:be:86:87:4a:09:0b:2c:
8d:f1:b9:72:b5:f8:75:01:3a:0a:d9:7c:e5:15:0a:2e:a8:2f:
3b:56:c5:a6:74:4b:de:12:3b:6d:eb:bf:84:9c:03:6a:54:12:
9c:02:b0:1b:26:38:8a:a9:36:f8:28:2a:d0:75:a0:91:39:a8:
5a:1f:a5:fc:05:43:41:36:a1:06:ff:b5:dd:80:79:8b:24:f8:
df:ce:7c:1b:80:dc:e4:3f:bb:38:a8:ca:a1:93:0d:65:d1:80:
21:f5:73:e1:51:3b:ed:5a:a1:d9:75:33:f4:41:61:6a:6f:a0:
4a:31:b9:2e:47:75:56:e9:9c:ce:0a:c5:a8:55:fd:b5:ac:1a:
5c:54:b5:a0:7f:f1:c1:32:8d:ab:4c:90:54:c7:69:ed:84:ae:
1a:21:51:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 06:28:32 2026 by rpki-client