Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/f37027-afc4-444f-8008-95ce2c755d47/1/KJVOKPbgHKXHNTvDcvNppfUdm7Q.mft
File: KJVOKPbgHKXHNTvDcvNppfUdm7Q.mft (raw, json)
Hash identifier: Az31LW9WTrnnl7zU8CrB/WUA4bV5BWDDsKTngEaV9sE=
Subject key identifier: 7D:A7:D7:99:68:56:9F:04:80:FA:C4:6B:31:9B:2F:10:F4:61:57:54
Authority key identifier: 28:95:4E:28:F6:E0:1C:A5:C7:35:3B:C3:72:F3:69:A5:F5:1D:9B:B4
Certificate issuer: /CN=28954e28f6e01ca5c7353bc372f369a5f51d9bb4
Certificate serial: 019D382E9C4B428910778E8A03A68F232DEC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KJVOKPbgHKXHNTvDcvNppfUdm7Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/f37027-afc4-444f-8008-95ce2c755d47/1/KJVOKPbgHKXHNTvDcvNppfUdm7Q.mft
Manifest number: 066B
Signing time: Sun 29 Mar 2026 06:01:11 +0000
Manifest this update: Sun 29 Mar 2026 06:01:11 +0000
Manifest next update: Mon 30 Mar 2026 06:01:11 +0000
Files and hashes: 1: AXdXSPys8K4gKCZL761_CRlXkQg.roa (hash: Eq65FPzgWfwxVUVR4WpFvfNbVj2sB466X23GUTRrgvw=)
2: KJVOKPbgHKXHNTvDcvNppfUdm7Q.crl (hash: 1tX/5egAMpxmTem2tpfqbsaSA8uGxERWDkKDCC/LV1Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/f37027-afc4-444f-8008-95ce2c755d47/1/KJVOKPbgHKXHNTvDcvNppfUdm7Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/f37027-afc4-444f-8008-95ce2c755d47/1/KJVOKPbgHKXHNTvDcvNppfUdm7Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/KJVOKPbgHKXHNTvDcvNppfUdm7Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:9c:4b:42:89:10:77:8e:8a:03:a6:8f:23:2d:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28954e28f6e01ca5c7353bc372f369a5f51d9bb4
Validity
Not Before: Mar 29 06:01:11 2026 GMT
Not After : Mar 30 06:01:11 2026 GMT
Subject: CN=7da7d79968569f0480fac46b319b2f10f4615754
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:e2:52:b7:5c:c7:c4:5a:a6:1d:e1:ec:57:75:
bd:8b:d5:46:ec:9e:09:0c:ee:97:35:f1:93:b0:29:
f5:d9:7e:6d:56:46:1c:d6:a6:ef:44:1f:36:fe:10:
7b:09:27:ba:f9:f0:19:97:83:f3:2f:44:c9:bd:87:
c8:ac:d4:3d:00:ad:68:f7:a6:ed:76:58:00:d5:4e:
cc:c5:e3:0e:58:be:58:98:06:cc:3f:43:61:10:00:
ed:89:b2:23:55:70:81:ce:3e:70:04:ad:0c:4f:d1:
d4:13:7e:bd:35:22:21:05:98:72:b9:b5:a5:5a:20:
de:75:67:da:df:96:b4:e3:de:8d:e0:ca:93:24:7e:
84:70:59:05:a0:fd:29:2a:76:3b:a6:62:01:a0:8f:
77:57:22:62:4c:0e:09:07:fa:2f:f6:ae:6c:21:8f:
10:b9:53:3c:6e:7a:23:35:c3:47:d1:c2:50:5f:d5:
d8:04:02:4a:0c:a6:ad:9d:cd:14:89:a2:3b:b7:e2:
7a:3b:55:ba:2b:5d:6d:ac:4f:44:ae:80:88:05:28:
c6:a3:de:fa:7e:50:ec:c4:1e:47:b4:68:e7:d8:eb:
10:23:b9:c4:32:c5:1f:e5:d5:26:eb:67:0d:52:48:
ea:79:a8:ac:73:90:a5:4e:1e:78:be:9f:c4:bd:64:
56:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:A7:D7:99:68:56:9F:04:80:FA:C4:6B:31:9B:2F:10:F4:61:57:54
X509v3 Authority Key Identifier:
keyid:28:95:4E:28:F6:E0:1C:A5:C7:35:3B:C3:72:F3:69:A5:F5:1D:9B:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KJVOKPbgHKXHNTvDcvNppfUdm7Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/f37027-afc4-444f-8008-95ce2c755d47/1/KJVOKPbgHKXHNTvDcvNppfUdm7Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/f37027-afc4-444f-8008-95ce2c755d47/1/KJVOKPbgHKXHNTvDcvNppfUdm7Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:cc:07:b0:1a:77:c1:39:6b:aa:8b:0f:89:8d:00:ba:f7:26:
0c:f8:2e:a0:9e:cc:a4:c1:54:18:1e:b9:1c:99:94:65:fe:eb:
aa:d8:08:6f:2b:f9:81:fe:09:14:f1:ec:9f:30:e7:64:26:44:
14:11:db:a8:8e:91:20:87:d3:4d:a4:91:a5:55:60:65:dc:88:
5f:7e:83:bb:45:85:25:b3:a5:0d:b1:3c:33:2b:d4:d2:57:1a:
83:c5:70:e8:8b:e1:c4:44:86:ca:db:a8:c6:7c:73:52:bc:f6:
01:4f:45:cd:88:15:a0:d6:cd:4c:cf:a1:80:50:0a:15:4c:0b:
cf:69:75:6c:96:de:6a:20:45:a4:b6:5c:ac:d0:e8:89:2a:d9:
be:0d:b7:7e:09:0b:db:5b:32:0e:42:6c:56:08:ee:7e:4d:0e:
e5:23:71:52:d5:6b:be:f1:47:54:ff:e0:82:d8:ba:b8:b8:ae:
ab:bf:a4:b7:4f:41:1d:cb:e1:62:6c:10:c8:f6:9a:ff:4d:fb:
c4:fd:0e:7b:88:ac:a1:03:da:c9:6f:33:3a:60:27:4e:29:12:
d0:0f:3b:f5:6e:db:48:21:b6:8c:a6:05:2a:b9:e7:ca:e7:cf:
54:38:86:b5:57:a9:36:86:5c:8c:00:ca:c5:fa:e5:73:53:fa:
98:56:f7:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:27:38 2026 by rpki-client