Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/55/f37027-afc4-444f-8008-95ce2c755d47/1/KJVOKPbgHKXHNTvDcvNppfUdm7Q.mft
File: KJVOKPbgHKXHNTvDcvNppfUdm7Q.mft (raw, json)
Hash identifier: NBKpyzvsAAmxHGhZUyGUX415BKhq5Q4kdw25NJjDWTs=
Subject key identifier: 7A:3C:49:36:EF:46:A1:66:69:60:A2:3E:54:46:7F:FB:D9:17:51:2B
Authority key identifier: 28:95:4E:28:F6:E0:1C:A5:C7:35:3B:C3:72:F3:69:A5:F5:1D:9B:B4
Certificate issuer: /CN=28954e28f6e01ca5c7353bc372f369a5f51d9bb4
Certificate serial: 01A0599FBA0BAB1E0EC93D1AF3A6A30E2F4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KJVOKPbgHKXHNTvDcvNppfUdm7Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/f37027-afc4-444f-8008-95ce2c755d47/1/KJVOKPbgHKXHNTvDcvNppfUdm7Q.mft
Manifest number: 080A
Signing time: Mon 31 Aug 2026 21:00:35 +0000
Manifest this update: Mon 31 Aug 2026 21:00:35 +0000
Manifest next update: Tue 01 Sep 2026 21:00:35 +0000
Files and hashes: 1: AXdXSPys8K4gKCZL761_CRlXkQg.roa (hash: Eq65FPzgWfwxVUVR4WpFvfNbVj2sB466X23GUTRrgvw=)
2: KJVOKPbgHKXHNTvDcvNppfUdm7Q.crl (hash: yQ+lTk+pqNrHAknzWb9JZEpzyTUdKRGdbb2tDrjzc8U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/f37027-afc4-444f-8008-95ce2c755d47/1/KJVOKPbgHKXHNTvDcvNppfUdm7Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/f37027-afc4-444f-8008-95ce2c755d47/1/KJVOKPbgHKXHNTvDcvNppfUdm7Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/KJVOKPbgHKXHNTvDcvNppfUdm7Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Sep 2026 21:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:59:9f:ba:0b:ab:1e:0e:c9:3d:1a:f3:a6:a3:0e:2f:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28954e28f6e01ca5c7353bc372f369a5f51d9bb4
Validity
Not Before: Aug 31 21:00:35 2026 GMT
Not After : Sep 1 21:00:35 2026 GMT
Subject: CN=7a3c4936ef46a1666960a23e54467ffbd917512b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:26:5e:86:e6:d0:fe:16:2e:70:2c:94:4c:01:
ca:a2:69:65:86:64:53:02:67:60:bb:39:42:fb:0a:
bc:3d:2b:f3:09:e9:b3:a7:1e:53:2e:b3:41:0d:2c:
8e:93:c1:f3:58:ec:7d:77:bb:d4:50:95:55:f1:5e:
9e:87:cc:86:c0:7b:07:99:a5:23:a0:30:df:3a:50:
48:d3:e6:2d:f1:d8:f6:13:95:36:7b:09:90:bc:03:
7b:4f:c4:07:85:73:41:41:f0:d6:0b:a6:b8:79:01:
a7:2c:34:67:5d:c2:c0:41:7b:f3:0e:38:4c:8a:c0:
f1:48:20:02:cd:21:24:5c:31:c5:53:da:f9:12:a9:
6b:73:08:a0:1f:92:7d:14:af:fa:9c:5b:5e:54:27:
af:ad:5b:e4:05:07:37:87:f8:16:27:0c:43:56:9a:
1e:54:2b:77:07:07:91:07:a9:27:5a:18:b7:ab:b6:
77:38:e5:7d:aa:16:39:f3:a4:ed:b7:e9:5d:df:50:
af:00:68:ab:42:78:96:e2:2f:c8:4c:ee:b7:d5:02:
cd:e4:3d:57:bd:87:12:b0:64:bb:4f:29:db:f2:35:
94:63:22:bf:43:4c:01:fd:4f:40:78:be:ea:bd:c9:
0c:ca:16:75:8e:af:ea:50:b8:b3:70:5e:b9:27:ca:
e3:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:3C:49:36:EF:46:A1:66:69:60:A2:3E:54:46:7F:FB:D9:17:51:2B
X509v3 Authority Key Identifier:
keyid:28:95:4E:28:F6:E0:1C:A5:C7:35:3B:C3:72:F3:69:A5:F5:1D:9B:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KJVOKPbgHKXHNTvDcvNppfUdm7Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/f37027-afc4-444f-8008-95ce2c755d47/1/KJVOKPbgHKXHNTvDcvNppfUdm7Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/f37027-afc4-444f-8008-95ce2c755d47/1/KJVOKPbgHKXHNTvDcvNppfUdm7Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:64:6c:29:7f:1a:c7:eb:17:4c:0f:a5:25:40:d3:a2:29:c8:
93:cf:3f:39:42:44:17:89:63:d0:f0:60:43:b0:32:6e:5e:fb:
ab:e5:80:11:ac:85:6f:46:c2:68:db:40:6d:6f:3d:46:d7:fa:
07:5e:d6:5b:e1:12:2d:4c:8b:ae:7d:fc:1d:40:6a:10:6f:0e:
23:27:ee:49:ac:db:48:64:8a:7b:ae:1d:fb:7c:98:50:a1:e3:
96:0e:05:d4:77:65:1e:70:2f:ab:15:b2:87:aa:5e:df:6e:e4:
fc:01:f7:60:a4:b7:eb:5f:28:82:be:09:f1:1e:4c:be:5a:c7:
e0:94:3b:de:36:83:50:64:8e:83:1a:1d:fc:01:1a:b3:4a:04:
73:18:14:74:32:7b:2e:a0:63:8c:63:c7:ed:cb:a9:86:25:05:
72:94:c0:56:4a:73:20:2f:2c:77:45:cc:18:68:ba:c5:c9:74:
29:44:3f:b1:60:ea:6a:e6:a0:ab:16:e4:33:0a:8f:06:67:ed:
14:c1:83:c3:75:7f:8c:ce:62:6c:04:e4:da:cb:62:84:6e:30:
95:ff:3f:a6:61:70:6e:89:08:bf:4b:40:64:ba:5f:60:62:fa:
c1:1f:8e:60:29:94:ab:3f:dc:d3:b3:ed:f0:0f:ea:c9:b4:df:
d9:59:0a:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 04:52:10 2026 by rpki-client