Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/55/f37027-afc4-444f-8008-95ce2c755d47/1/KJVOKPbgHKXHNTvDcvNppfUdm7Q.mft
File: KJVOKPbgHKXHNTvDcvNppfUdm7Q.mft (raw, json)
Hash identifier: MQ5dnN22ZBLSWB/9i9KNsyqmgfBltJr2E00VYkahoo8=
Subject key identifier: 6A:3A:02:32:FA:72:BF:B3:B7:CA:AA:01:D8:4C:6B:05:92:41:F3:63
Authority key identifier: 28:95:4E:28:F6:E0:1C:A5:C7:35:3B:C3:72:F3:69:A5:F5:1D:9B:B4
Certificate issuer: /CN=28954e28f6e01ca5c7353bc372f369a5f51d9bb4
Certificate serial: 01A14729B143B212B2F72020651C275BAC16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KJVOKPbgHKXHNTvDcvNppfUdm7Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/f37027-afc4-444f-8008-95ce2c755d47/1/KJVOKPbgHKXHNTvDcvNppfUdm7Q.mft
Manifest number: 0885
Signing time: Sat 17 Oct 2026 00:01:16 +0000
Manifest this update: Sat 17 Oct 2026 00:01:16 +0000
Manifest next update: Sun 18 Oct 2026 00:01:16 +0000
Files and hashes: 1: AXdXSPys8K4gKCZL761_CRlXkQg.roa (hash: Eq65FPzgWfwxVUVR4WpFvfNbVj2sB466X23GUTRrgvw=)
2: KJVOKPbgHKXHNTvDcvNppfUdm7Q.crl (hash: yl0RQARreYXzpYd4yiexSD3mY4B4ANTeXGPsyoa0ZbQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/f37027-afc4-444f-8008-95ce2c755d47/1/KJVOKPbgHKXHNTvDcvNppfUdm7Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/f37027-afc4-444f-8008-95ce2c755d47/1/KJVOKPbgHKXHNTvDcvNppfUdm7Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/KJVOKPbgHKXHNTvDcvNppfUdm7Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 18 Oct 2026 00:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:47:29:b1:43:b2:12:b2:f7:20:20:65:1c:27:5b:ac:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28954e28f6e01ca5c7353bc372f369a5f51d9bb4
Validity
Not Before: Oct 17 00:01:16 2026 GMT
Not After : Oct 18 00:01:16 2026 GMT
Subject: CN=6a3a0232fa72bfb3b7caaa01d84c6b059241f363
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:20:f8:18:b8:be:cd:f8:00:6f:a3:3d:9d:ea:
ed:39:3a:8f:0d:b2:92:4f:b1:15:3e:20:02:cf:1e:
4e:7c:ee:8a:64:32:5d:fa:bb:83:c8:3e:66:64:a8:
37:cb:6f:26:56:75:ca:54:b5:0c:47:31:7c:fe:54:
6b:98:8c:0f:42:d7:16:54:43:71:f4:86:bd:b6:aa:
e8:64:33:9b:ca:7d:ff:e7:3b:fa:34:51:8b:96:a5:
ff:b7:3b:e5:40:df:f6:ae:33:8b:55:0c:1c:10:d2:
1c:11:a8:ed:47:70:03:cc:67:34:45:53:c6:fc:5d:
5f:72:d5:14:6f:39:dc:f5:aa:7d:4c:19:ed:f1:eb:
b3:3f:4c:41:0d:7d:e0:17:41:fb:70:97:cd:42:e4:
81:17:9d:46:da:2a:2e:23:b7:32:df:24:61:82:c6:
f2:38:28:44:cc:72:58:07:62:2c:24:52:6a:3a:82:
75:5a:50:d9:03:10:80:62:c0:08:55:74:3e:8b:72:
05:79:df:0b:fc:46:c6:0c:cd:b8:df:16:6d:c4:75:
79:12:b0:40:8d:60:55:1e:51:6c:0e:05:e2:5e:13:
56:07:ec:a8:2a:94:9e:ef:6c:1a:5d:a4:1b:1c:18:
4e:51:fd:19:eb:3b:8e:02:3c:03:48:ab:bd:c8:cd:
36:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:3A:02:32:FA:72:BF:B3:B7:CA:AA:01:D8:4C:6B:05:92:41:F3:63
X509v3 Authority Key Identifier:
keyid:28:95:4E:28:F6:E0:1C:A5:C7:35:3B:C3:72:F3:69:A5:F5:1D:9B:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KJVOKPbgHKXHNTvDcvNppfUdm7Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/f37027-afc4-444f-8008-95ce2c755d47/1/KJVOKPbgHKXHNTvDcvNppfUdm7Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/f37027-afc4-444f-8008-95ce2c755d47/1/KJVOKPbgHKXHNTvDcvNppfUdm7Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:aa:f7:db:40:7a:c1:7e:14:d6:da:7a:ea:54:ea:fe:d9:bb:
e6:98:19:2b:66:70:08:8b:6a:46:92:dc:6c:85:6b:9d:6e:3c:
15:7d:ec:37:ee:f8:2a:b4:de:db:1c:89:dd:5b:54:79:b9:5d:
d5:79:ea:fa:41:67:56:30:28:a4:93:3e:ae:d1:40:26:26:63:
67:5f:c0:f1:1f:23:91:96:db:c6:1c:33:08:a9:14:6d:e7:c0:
4d:46:1a:02:e6:ed:af:3b:cd:d4:9f:d6:0f:61:6e:a9:e0:d6:
3b:21:a2:30:23:ee:41:d1:2e:f0:c5:e4:cd:65:f9:8e:79:3a:
c8:da:d2:19:10:f0:a3:0b:92:2b:d8:9e:f2:84:56:e8:be:89:
a4:cc:6a:a3:f8:fe:25:40:ce:1c:46:0f:40:fb:45:86:fb:70:
55:2a:5e:23:d3:74:02:a6:9e:f0:40:9a:60:d8:39:34:26:72:
19:c2:31:49:d2:af:32:19:78:81:63:44:51:0b:ab:37:ae:cc:
7e:88:f0:df:aa:a5:1e:3a:aa:86:e4:a7:32:e1:2b:c9:ec:36:
9c:be:a4:29:05:e3:15:cf:92:cb:6f:0f:61:42:df:2e:7a:52:
1d:56:90:10:e7:ff:95:24:4e:45:9a:f7:00:51:f0:96:07:15:
e5:b2:fe:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 17 07:58:20 2026 by rpki-client