Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/40/b796f4-2e88-4eaa-a269-2738bcb43d6d/1/kjorPddmcnXwmIbffaB591XO7Vk.mft
File: kjorPddmcnXwmIbffaB591XO7Vk.mft (raw, json)
Hash identifier: 6hTXN4cC4PoQ8Q09r7ZcDwwgbFqQVFpBv3P4b0dN9Yc=
Subject key identifier: 01:A3:A8:F8:E1:7D:F9:EE:B5:88:A8:85:BD:1F:97:51:98:65:CC:C2
Authority key identifier: 92:3A:2B:3D:D7:66:72:75:F0:98:86:DF:7D:A0:79:F7:55:CE:ED:59
Certificate issuer: /CN=923a2b3dd7667275f09886df7da079f755ceed59
Certificate serial: 01A08C7AC6E9F31DC8126B43CB54DFBB8141
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kjorPddmcnXwmIbffaB591XO7Vk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/b796f4-2e88-4eaa-a269-2738bcb43d6d/1/kjorPddmcnXwmIbffaB591XO7Vk.mft
Manifest number: 1A50
Signing time: Thu 10 Sep 2026 18:00:51 +0000
Manifest this update: Thu 10 Sep 2026 18:00:51 +0000
Manifest next update: Fri 11 Sep 2026 18:00:51 +0000
Files and hashes: 1: kjorPddmcnXwmIbffaB591XO7Vk.crl (hash: l6AZETIvLagyr3LSkf+PhLOHoHDm2zXse44wte7eytg=)
2: lr9abnPwCKuiEqQLCTnj_yF2mpA.roa (hash: f/0VKTDVUAMvZzhHBp5U3cnXddMK0Wnijx8d3qSFB3Q=)
3: uoml1ooKIpEwGVQcgm0COMGf22M.roa (hash: j6yV3AvezVwVR9BGMG8Xa/if460puXKoVMqsrCe3beo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/b796f4-2e88-4eaa-a269-2738bcb43d6d/1/kjorPddmcnXwmIbffaB591XO7Vk.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/b796f4-2e88-4eaa-a269-2738bcb43d6d/1/kjorPddmcnXwmIbffaB591XO7Vk.mft
rsync://rpki.ripe.net/repository/DEFAULT/kjorPddmcnXwmIbffaB591XO7Vk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8c:7a:c6:e9:f3:1d:c8:12:6b:43:cb:54:df:bb:81:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=923a2b3dd7667275f09886df7da079f755ceed59
Validity
Not Before: Sep 10 18:00:51 2026 GMT
Not After : Sep 11 18:00:51 2026 GMT
Subject: CN=01a3a8f8e17df9eeb588a885bd1f97519865ccc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:df:90:84:24:59:0a:ab:77:64:46:d9:96:ad:
ca:95:a6:5f:85:ce:41:c6:d1:c3:2f:32:80:87:9c:
dc:ec:a8:6e:f5:d2:a3:66:c2:45:9d:f7:6e:1d:76:
ae:9f:20:25:28:da:a6:46:82:12:ca:6c:1f:d9:1c:
2d:5b:66:6c:38:57:c8:26:8c:1f:32:9e:2d:d8:34:
c5:7e:51:4a:d4:0d:45:da:a2:df:2a:e9:23:a4:3f:
b9:4e:14:08:ec:75:6c:f2:a0:2c:66:a5:e2:30:86:
bb:63:cc:8e:d3:6a:f1:43:1c:a5:54:7a:bb:8e:df:
7c:30:11:96:4e:82:fe:48:1f:06:11:63:ed:e2:83:
b7:a8:9f:64:d7:ac:95:45:ad:0a:f6:05:9d:a9:ab:
54:02:3c:d5:10:48:6e:9e:37:20:b0:20:ed:5c:51:
66:8f:11:6d:5e:80:c8:5a:a5:aa:fb:80:0c:71:e6:
2a:e2:71:59:96:87:7f:ac:71:9e:1e:91:ad:5f:b0:
35:81:73:49:b0:e6:ae:01:24:25:65:a9:9b:94:a7:
14:fc:50:8f:0b:2d:15:34:00:5a:70:92:9f:87:f2:
ae:94:41:d1:af:25:39:eb:47:3b:b9:07:26:22:f7:
eb:39:06:7a:3c:d3:cf:5b:66:e9:27:cd:9c:12:b6:
2f:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:A3:A8:F8:E1:7D:F9:EE:B5:88:A8:85:BD:1F:97:51:98:65:CC:C2
X509v3 Authority Key Identifier:
keyid:92:3A:2B:3D:D7:66:72:75:F0:98:86:DF:7D:A0:79:F7:55:CE:ED:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kjorPddmcnXwmIbffaB591XO7Vk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/b796f4-2e88-4eaa-a269-2738bcb43d6d/1/kjorPddmcnXwmIbffaB591XO7Vk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/b796f4-2e88-4eaa-a269-2738bcb43d6d/1/kjorPddmcnXwmIbffaB591XO7Vk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:86:33:6f:a3:ab:e2:3e:39:31:e3:a2:0c:0f:9f:d4:b1:fe:
8a:20:bb:ab:3c:c0:81:c0:3b:b2:a6:a0:30:3b:1d:bd:82:3d:
be:34:1d:55:3b:4d:65:f0:b3:68:1a:b8:5f:45:db:c4:de:0c:
04:7c:9e:a1:03:8f:c7:a6:ef:2b:ae:f3:51:cd:ab:4e:80:94:
86:e5:37:a5:ce:6c:ef:be:36:a6:2b:1f:d9:86:d0:1a:1b:56:
7e:67:9e:cf:97:13:b1:f1:d0:92:ee:45:46:52:51:0b:03:7a:
ee:ff:13:a8:a4:13:9a:f2:09:cb:ab:16:1e:5a:e1:e1:d9:1f:
ef:04:a5:b2:10:63:ad:92:90:76:1f:3b:4d:db:22:99:35:ff:
c1:0a:62:5e:34:e7:c9:1e:ec:7a:6d:8f:d2:c0:44:ce:41:90:
a1:7a:b3:6b:f6:c5:49:98:94:87:a4:19:69:ba:ba:ea:13:ff:
02:a7:c5:3a:45:07:a7:48:84:ff:16:81:80:a6:e6:54:b1:86:
b0:1c:e1:a0:45:d5:b6:65:7a:8d:e8:36:3a:c0:ed:82:f2:82:
a1:f0:da:51:0d:28:92:d2:b3:a6:a5:a7:2e:e9:0e:ce:49:38:
d9:c2:88:91:68:d8:b6:f8:ad:6e:96:4d:40:e8:5c:a9:79:46:
fa:60:a5:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 21:12:09 2026 by rpki-client