Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/b796f4-2e88-4eaa-a269-2738bcb43d6d/1/kjorPddmcnXwmIbffaB591XO7Vk.mft
File: kjorPddmcnXwmIbffaB591XO7Vk.mft (raw, json)
Hash identifier: klkMXOu8wdpamlNRniIqRKvy9CE3Fm8aBK1QrA38HzY=
Subject key identifier: 5F:0A:E4:81:92:10:AC:F4:6B:90:3B:63:FA:DD:B1:69:C4:6F:59:D4
Authority key identifier: 92:3A:2B:3D:D7:66:72:75:F0:98:86:DF:7D:A0:79:F7:55:CE:ED:59
Certificate issuer: /CN=923a2b3dd7667275f09886df7da079f755ceed59
Certificate serial: 019DCF3DDDE2D8B77CE3F347B060B267F149
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kjorPddmcnXwmIbffaB591XO7Vk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/b796f4-2e88-4eaa-a269-2738bcb43d6d/1/kjorPddmcnXwmIbffaB591XO7Vk.mft
Manifest number: 18E2
Signing time: Mon 27 Apr 2026 14:00:31 +0000
Manifest this update: Mon 27 Apr 2026 14:00:31 +0000
Manifest next update: Tue 28 Apr 2026 14:00:31 +0000
Files and hashes: 1: HgVTCqxTI2p7CB3_pzYOlBKbewI.roa (hash: Vx3tDFhqH00mNA0Sjbw5LLVQH5B1ifF/KkPAwaHsXVk=)
2: kjorPddmcnXwmIbffaB591XO7Vk.crl (hash: vqe71aW0Vp27nBgMp7CP0nb9mGFA7/u5KObOlkffOL8=)
3: uoml1ooKIpEwGVQcgm0COMGf22M.roa (hash: j6yV3AvezVwVR9BGMG8Xa/if460puXKoVMqsrCe3beo=)
4: yYRNMp4_8tPWVd55Ov35Q5FSlnI.roa (hash: 0/ssvW/ngUlJqY3PbldVkn5N/q0lSB25o7gaAX3Yo8w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/b796f4-2e88-4eaa-a269-2738bcb43d6d/1/kjorPddmcnXwmIbffaB591XO7Vk.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/b796f4-2e88-4eaa-a269-2738bcb43d6d/1/kjorPddmcnXwmIbffaB591XO7Vk.mft
rsync://rpki.ripe.net/repository/DEFAULT/kjorPddmcnXwmIbffaB591XO7Vk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 14:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cf:3d:dd:e2:d8:b7:7c:e3:f3:47:b0:60:b2:67:f1:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=923a2b3dd7667275f09886df7da079f755ceed59
Validity
Not Before: Apr 27 14:00:31 2026 GMT
Not After : Apr 28 14:00:31 2026 GMT
Subject: CN=5f0ae4819210acf46b903b63faddb169c46f59d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:ce:2e:ac:30:59:f8:21:c0:dd:63:c7:0d:86:
e0:96:f0:a8:ee:7b:18:85:81:a3:9b:62:1a:19:6a:
84:f1:c4:95:a1:95:e1:27:fb:6b:55:07:8e:0f:ad:
5f:e6:f7:b2:72:e9:7d:64:c0:f5:14:df:8f:95:f0:
2c:b2:df:62:ff:f0:3c:18:ef:0e:4d:8e:3f:d1:dd:
99:7e:af:4a:21:fd:9a:ba:76:c0:42:b7:80:84:06:
6c:e6:3a:52:41:fa:ae:ef:3b:48:d2:2e:f5:bb:02:
af:05:14:e0:34:40:9b:a3:b0:50:66:a4:eb:d9:5f:
43:39:65:f7:8c:35:99:6e:19:95:22:fa:72:fe:fe:
da:cb:fc:0a:31:5e:3f:b9:91:aa:0a:86:40:2a:7b:
5a:9c:f7:b3:ac:f9:cb:88:39:93:f0:11:b5:fe:50:
53:01:3c:fd:b9:f8:48:3e:e0:b1:d0:67:03:7f:de:
ab:de:47:d8:da:28:80:b6:ff:7e:82:9d:c3:6f:ee:
6e:ca:1d:c1:13:89:1b:cd:09:2c:e1:57:19:9b:36:
7c:b2:fd:5d:77:d3:c8:22:02:0f:17:db:5b:c9:b4:
f7:cc:84:7e:45:b8:11:72:4c:86:52:15:bc:48:04:
bb:e9:4c:ae:33:a6:72:56:33:f7:9d:ae:33:67:b5:
11:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:0A:E4:81:92:10:AC:F4:6B:90:3B:63:FA:DD:B1:69:C4:6F:59:D4
X509v3 Authority Key Identifier:
keyid:92:3A:2B:3D:D7:66:72:75:F0:98:86:DF:7D:A0:79:F7:55:CE:ED:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kjorPddmcnXwmIbffaB591XO7Vk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/b796f4-2e88-4eaa-a269-2738bcb43d6d/1/kjorPddmcnXwmIbffaB591XO7Vk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/b796f4-2e88-4eaa-a269-2738bcb43d6d/1/kjorPddmcnXwmIbffaB591XO7Vk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:80:57:b2:c8:30:42:01:7e:0d:8e:ac:3f:eb:17:07:1a:6f:
67:3c:a8:bf:75:36:0d:4c:e6:96:c4:1e:d0:2c:42:3f:d6:98:
02:28:a2:ac:bd:4f:a1:fe:32:f5:a7:63:3e:d7:32:0f:58:67:
38:52:e8:88:b1:65:fb:35:61:a1:83:d9:5a:8b:30:28:5c:81:
d9:39:65:62:ec:b0:de:c2:01:5b:6f:a2:bd:76:45:2c:b8:ff:
83:0b:be:dc:56:1e:9b:2c:ca:00:43:28:ce:fc:37:13:af:50:
15:79:92:e4:a1:d2:ae:da:60:6e:b2:28:dc:e2:b7:bb:04:96:
cc:25:68:6f:b4:0b:45:e6:23:c0:8d:3c:6c:03:6f:c0:a6:af:
7b:7a:d2:93:a9:14:81:4b:3b:b4:9f:f0:4f:16:43:0a:58:cc:
8a:cd:44:22:a4:ba:26:92:2a:67:0a:2a:e2:2f:ec:df:1e:a5:
38:a6:91:79:43:1d:da:ea:bf:67:bd:2b:d2:14:f0:15:71:c6:
72:6b:4c:5f:9d:3d:ad:49:b7:a0:50:4e:1e:cc:4d:10:27:8b:
53:52:a8:c4:d2:3e:dd:fd:53:b9:eb:05:35:76:b9:c1:71:d9:
59:63:db:88:eb:12:25:1b:f4:07:d8:e3:f3:ed:4d:92:04:6d:
af:ca:49:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 23:08:32 2026 by rpki-client