Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/f37027-afc4-444f-8008-95ce2c755d47/1/KJVOKPbgHKXHNTvDcvNppfUdm7Q.mft
File: KJVOKPbgHKXHNTvDcvNppfUdm7Q.mft (raw, json)
Hash identifier: drmKEGzG2LVE58FZsGIUxUs16L0dfZu1LJ4xKPmtST0=
Subject key identifier: F0:D4:8C:EA:80:11:A0:C2:25:D6:EC:5F:58:13:A3:85:09:9D:4F:03
Authority key identifier: 28:95:4E:28:F6:E0:1C:A5:C7:35:3B:C3:72:F3:69:A5:F5:1D:9B:B4
Certificate issuer: /CN=28954e28f6e01ca5c7353bc372f369a5f51d9bb4
Certificate serial: 019EFE03BF36F00FCCD8B21576F4FA490B54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KJVOKPbgHKXHNTvDcvNppfUdm7Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/f37027-afc4-444f-8008-95ce2c755d47/1/KJVOKPbgHKXHNTvDcvNppfUdm7Q.mft
Manifest number: 0756
Signing time: Thu 25 Jun 2026 09:01:58 +0000
Manifest this update: Thu 25 Jun 2026 09:01:58 +0000
Manifest next update: Fri 26 Jun 2026 09:01:58 +0000
Files and hashes: 1: AXdXSPys8K4gKCZL761_CRlXkQg.roa (hash: Eq65FPzgWfwxVUVR4WpFvfNbVj2sB466X23GUTRrgvw=)
2: KJVOKPbgHKXHNTvDcvNppfUdm7Q.crl (hash: b++OQYYB2IuXMXC2fHclXqw+APO/lBEJyoqRgpYYnzI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/f37027-afc4-444f-8008-95ce2c755d47/1/KJVOKPbgHKXHNTvDcvNppfUdm7Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/f37027-afc4-444f-8008-95ce2c755d47/1/KJVOKPbgHKXHNTvDcvNppfUdm7Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/KJVOKPbgHKXHNTvDcvNppfUdm7Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 26 Jun 2026 08:01:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:fe:03:bf:36:f0:0f:cc:d8:b2:15:76:f4:fa:49:0b:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28954e28f6e01ca5c7353bc372f369a5f51d9bb4
Validity
Not Before: Jun 25 09:01:58 2026 GMT
Not After : Jun 26 09:01:58 2026 GMT
Subject: CN=f0d48cea8011a0c225d6ec5f5813a385099d4f03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:df:a5:82:f3:bc:8f:2c:de:da:a2:a5:40:cd:
dc:99:04:60:23:e4:ce:04:f7:a4:f6:85:81:aa:a2:
fc:b5:46:00:e0:65:23:8d:70:5d:d9:43:2f:50:c0:
4d:5d:13:bc:c1:01:e9:cd:f4:17:bd:14:d3:d7:97:
06:f1:ed:41:0b:ff:06:9e:9f:03:4f:17:57:36:dd:
36:6f:0b:42:f3:2d:c5:23:d3:1e:92:aa:a0:87:18:
5d:35:79:0f:ad:b1:a2:34:36:c3:39:fa:1e:f0:6e:
a8:65:4a:cc:5b:51:8b:26:56:47:74:cc:b6:a6:df:
fd:2a:a6:a4:8f:cc:a1:fc:f1:25:5f:4a:c6:f4:e2:
01:dc:96:04:37:26:6f:b2:43:28:e4:06:12:a0:14:
49:82:0e:66:f7:f3:12:2a:9f:83:e1:fa:1b:c0:c0:
75:42:9e:17:c2:e2:c3:03:5e:c1:56:ab:28:bc:5d:
62:8f:bc:c9:f3:a1:96:42:20:b7:d5:06:f5:72:6c:
b8:73:4a:be:cd:9d:ec:04:9c:6a:49:c1:d3:81:75:
77:f4:49:ad:c7:d5:d4:fb:14:d4:55:2c:4b:f5:b9:
e4:eb:c7:49:c7:23:05:d7:45:94:b6:12:a8:94:6e:
14:17:85:71:8d:3a:13:d3:46:1e:3f:76:96:d2:c0:
5d:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:D4:8C:EA:80:11:A0:C2:25:D6:EC:5F:58:13:A3:85:09:9D:4F:03
X509v3 Authority Key Identifier:
keyid:28:95:4E:28:F6:E0:1C:A5:C7:35:3B:C3:72:F3:69:A5:F5:1D:9B:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KJVOKPbgHKXHNTvDcvNppfUdm7Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/f37027-afc4-444f-8008-95ce2c755d47/1/KJVOKPbgHKXHNTvDcvNppfUdm7Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/f37027-afc4-444f-8008-95ce2c755d47/1/KJVOKPbgHKXHNTvDcvNppfUdm7Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:e5:19:5c:96:6b:f7:7a:de:0a:5e:08:ea:10:e9:0a:fa:98:
54:2d:c1:e5:29:d2:51:3c:8e:a4:fa:6c:78:67:37:39:ec:6c:
2c:c6:14:c7:46:bf:8a:30:30:43:07:02:3a:86:fc:81:70:a3:
b7:28:31:8f:26:af:40:05:c5:30:c5:d8:b9:0e:3f:12:4d:7f:
7e:a3:fe:89:74:a0:eb:0c:04:77:c2:10:25:b7:b2:6f:5f:95:
ac:97:9c:7a:d8:77:dc:2f:44:c7:85:59:db:08:31:f1:37:6a:
9d:b9:a2:3d:d4:2c:74:e8:1b:d5:b2:53:02:31:3b:a8:82:b0:
52:fd:05:09:27:1c:5c:92:d9:33:4c:8a:ea:fc:1a:73:f3:ce:
48:16:06:99:a2:be:16:be:66:d0:d5:54:ec:9f:35:df:6b:35:
40:00:5c:f2:b9:d0:c3:d8:f5:b3:96:22:6c:31:fc:81:1c:29:
fa:69:a3:04:7a:2f:fd:f4:2c:c2:40:fe:22:e3:16:19:54:d7:
07:c0:48:30:5d:45:05:9f:8c:ae:fb:45:5a:24:0a:37:59:11:
d3:ca:07:31:52:f5:ab:f3:c5:9a:10:87:33:39:27:ea:59:39:
17:1e:89:39:53:91:32:7e:8b:de:88:12:ae:21:c8:0c:49:49:
40:c1:b2:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 25 15:34:52 2026 by rpki-client