Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/b796f4-2e88-4eaa-a269-2738bcb43d6d/1/kjorPddmcnXwmIbffaB591XO7Vk.mft
File: kjorPddmcnXwmIbffaB591XO7Vk.mft (raw, json)
Hash identifier: MvmA8XWabbHyPPaOb+s6GM1TeI1IlxKgRcjW6C3EOrY=
Subject key identifier: 25:1B:6B:65:DF:67:A9:96:FC:5A:30:76:C1:68:84:B0:EA:B7:CC:5B
Authority key identifier: 92:3A:2B:3D:D7:66:72:75:F0:98:86:DF:7D:A0:79:F7:55:CE:ED:59
Certificate issuer: /CN=923a2b3dd7667275f09886df7da079f755ceed59
Certificate serial: 019FA2CE2545EB93FFE7791EC611B385A29E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kjorPddmcnXwmIbffaB591XO7Vk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/b796f4-2e88-4eaa-a269-2738bcb43d6d/1/kjorPddmcnXwmIbffaB591XO7Vk.mft
Manifest number: 19D7
Signing time: Mon 27 Jul 2026 09:00:46 +0000
Manifest this update: Mon 27 Jul 2026 09:00:46 +0000
Manifest next update: Tue 28 Jul 2026 09:00:46 +0000
Files and hashes: 1: kjorPddmcnXwmIbffaB591XO7Vk.crl (hash: 6XJ2c7nNfBsCvdWgoDacrYywyv6Pygl1ZVKnu858W/k=)
2: lr9abnPwCKuiEqQLCTnj_yF2mpA.roa (hash: f/0VKTDVUAMvZzhHBp5U3cnXddMK0Wnijx8d3qSFB3Q=)
3: uoml1ooKIpEwGVQcgm0COMGf22M.roa (hash: j6yV3AvezVwVR9BGMG8Xa/if460puXKoVMqsrCe3beo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/b796f4-2e88-4eaa-a269-2738bcb43d6d/1/kjorPddmcnXwmIbffaB591XO7Vk.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/b796f4-2e88-4eaa-a269-2738bcb43d6d/1/kjorPddmcnXwmIbffaB591XO7Vk.mft
rsync://rpki.ripe.net/repository/DEFAULT/kjorPddmcnXwmIbffaB591XO7Vk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a2:ce:25:45:eb:93:ff:e7:79:1e:c6:11:b3:85:a2:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=923a2b3dd7667275f09886df7da079f755ceed59
Validity
Not Before: Jul 27 09:00:46 2026 GMT
Not After : Jul 28 09:00:46 2026 GMT
Subject: CN=251b6b65df67a996fc5a3076c16884b0eab7cc5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:cd:74:8e:41:86:c4:09:05:97:3f:e4:5f:59:
a0:08:30:a7:36:fc:4f:1d:8e:b6:23:78:66:74:9e:
46:51:34:5c:4c:4f:87:bb:1f:10:2b:84:24:77:90:
bf:2d:10:21:64:40:4e:11:04:94:f5:31:66:6d:6f:
44:ee:b0:13:67:7b:2c:11:ce:83:bc:c3:2b:be:45:
f1:b0:a6:d6:f2:bf:f6:35:10:4f:78:08:f3:01:58:
26:b5:cd:9d:e9:5b:3b:5c:dd:20:f7:74:1a:35:2b:
36:7b:c6:fe:b8:2f:0c:b9:3a:ed:e8:03:af:19:d1:
c9:cc:47:12:37:99:02:59:1f:23:d0:cd:96:51:6e:
17:cc:c1:f7:d7:f0:28:da:20:5a:40:c4:68:5b:e2:
c4:f3:8d:62:7c:27:80:72:3e:14:ca:74:bf:33:b3:
3a:2a:2a:6d:5d:2d:a2:98:4e:79:4e:88:5e:cb:e9:
a7:56:e1:09:b3:6a:d6:ec:d7:c9:d1:38:c1:74:d9:
3d:f7:4b:1a:86:b1:39:4b:8a:6d:d6:a7:76:2b:89:
7c:28:f5:2b:4c:c7:5c:00:0a:e6:84:e3:9b:45:0e:
dd:83:2c:49:6d:34:29:53:d1:f3:8e:ce:e6:6a:78:
31:32:c1:e1:6b:b2:50:eb:c5:a1:74:58:08:6e:1b:
be:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:1B:6B:65:DF:67:A9:96:FC:5A:30:76:C1:68:84:B0:EA:B7:CC:5B
X509v3 Authority Key Identifier:
keyid:92:3A:2B:3D:D7:66:72:75:F0:98:86:DF:7D:A0:79:F7:55:CE:ED:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kjorPddmcnXwmIbffaB591XO7Vk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/b796f4-2e88-4eaa-a269-2738bcb43d6d/1/kjorPddmcnXwmIbffaB591XO7Vk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/b796f4-2e88-4eaa-a269-2738bcb43d6d/1/kjorPddmcnXwmIbffaB591XO7Vk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:f0:aa:a7:fa:be:38:61:46:58:45:35:55:9f:97:60:97:24:
5e:62:a7:92:3b:29:4d:7d:79:1a:32:df:83:7b:32:cd:62:24:
fb:6a:3d:ee:8e:a9:9c:ec:64:b2:49:f8:99:cb:91:8b:6b:3e:
ce:9b:a3:ed:d7:5d:c8:8a:0e:a5:ee:cf:c3:c0:cd:0f:36:e6:
63:bb:46:9c:cd:62:f6:03:05:20:fd:32:45:70:35:70:95:8a:
f6:73:36:44:6a:e6:9e:55:bc:57:72:21:f8:8e:94:b3:cc:17:
0a:f3:3b:86:e6:36:93:af:c4:8a:53:f3:a0:29:aa:df:ec:ba:
ba:61:02:62:93:3b:ca:02:83:73:6e:71:db:d9:b4:b9:2d:9e:
8f:8b:a3:10:a7:6f:9f:2b:b3:08:12:60:3c:9c:01:f5:71:5a:
d4:1a:a2:59:a7:5c:ab:82:f2:e5:6c:fc:88:e5:cc:3b:b0:2d:
08:bf:7c:26:68:92:80:c7:f4:96:73:b1:c4:7f:0b:c4:89:e6:
2e:a4:74:2e:43:93:c9:ab:4a:cb:ab:fb:d3:29:c2:53:4d:fe:
00:b0:1a:c4:26:c0:7b:b8:0d:0d:c2:71:cd:ac:45:57:5f:4f:
97:6d:b3:50:6e:a4:c0:66:95:e1:2c:1d:88:50:dc:54:32:28:
09:99:74:28
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+iziVF65P/53kexhGzhaKeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyM2EyYjNkZDc2NjcyNzVmMDk4ODZkZjdkYTA3OWY3NTVj
ZWVkNTkwHhcNMjYwNzI3MDkwMDQ2WhcNMjYwNzI4MDkwMDQ2WjAzMTEwLwYDVQQD
EygyNTFiNmI2NWRmNjdhOTk2ZmM1YTMwNzZjMTY4ODRiMGVhYjdjYzViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoc10jkGGxAkFlz/kX1mgCDCnNvxP
HY62I3hmdJ5GUTRcTE+Hux8QK4Qkd5C/LRAhZEBOEQSU9TFmbW9E7rATZ3ssEc6D
vMMrvkXxsKbW8r/2NRBPeAjzAVgmtc2d6Vs7XN0g93QaNSs2e8b+uC8MuTrt6AOv
GdHJzEcSN5kCWR8j0M2WUW4XzMH31/Ao2iBaQMRoW+LE841ifCeAcj4UynS/M7M6
KiptXS2imE55Tohey+mnVuEJs2rW7NfJ0TjBdNk990sahrE5S4pt1qd2K4l8KPUr
TMdcAArmhOObRQ7dgyxJbTQpU9Hzjs7mangxMsHha7JQ68WhdFgIbhu+PwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCUba2XfZ6mW/FowdsFohLDqt8xbMB8GA1UdIwQY
MBaAFJI6Kz3XZnJ18JiG332gefdVzu1ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva2pvclBkZG1jblh3bUliZmZhQjU5MVhPN1ZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC9iNzk2ZjQtMmU4OC00ZWFhLWEyNjkt
MjczOGJjYjQzZDZkLzEva2pvclBkZG1jblh3bUliZmZhQjU5MVhPN1ZrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MC9iNzk2ZjQtMmU4OC00ZWFhLWEyNjktMjczOGJjYjQzZDZk
LzEva2pvclBkZG1jblh3bUliZmZhQjU5MVhPN1ZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUvCqp/q+
OGFGWEU1VZ+XYJckXmKnkjspTX15GjLfg3syzWIk+2o97o6pnOxkskn4mcuRi2s+
zpuj7dddyIoOpe7Pw8DNDzbmY7tGnM1i9gMFIP0yRXA1cJWK9nM2RGrmnlW8V3Ih
+I6Us8wXCvM7huY2k6/EilPzoCmq3+y6umECYpM7ygKDc25x29m0uS2ej4ujEKdv
nyuzCBJgPJwB9XFa1BqiWadcq4Ly5Wz8iOXMO7AtCL98JmiSgMf0lnOxxH8LxInm
LqR0LkOTyatKy6v70ynCU03+ALAaxCbAe7gNDcJxzaxFV19Pl22zUG6kwGaV4Swd
iFDcVDIoCZl0KA==
-----END CERTIFICATE-----
Generated at Mon Jul 27 12:44:56 2026 by rpki-client