Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/4e816d-d8ec-437c-986a-3c12781e202d/1/kdjDKnA5cqrqCToB-N7fV_lnVXU.mft
File: kdjDKnA5cqrqCToB-N7fV_lnVXU.mft (raw, json)
Hash identifier: zXPNLwXJ+V9haJVyGu1VpIJZo7wczn+vyvEGSzW5X/A=
Subject key identifier: 28:68:ED:BF:25:D7:BF:06:0D:09:89:76:A2:1A:24:91:56:CB:F4:6F
Authority key identifier: 91:D8:C3:2A:70:39:72:AA:EA:09:3A:01:F8:DE:DF:57:F9:67:55:75
Certificate issuer: /CN=91d8c32a703972aaea093a01f8dedf57f9675575
Certificate serial: 019F37F2A71BA93A247957F6DF0F62F8790C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kdjDKnA5cqrqCToB-N7fV_lnVXU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/4e816d-d8ec-437c-986a-3c12781e202d/1/kdjDKnA5cqrqCToB-N7fV_lnVXU.mft
Manifest number: 1999
Signing time: Mon 06 Jul 2026 15:01:17 +0000
Manifest this update: Mon 06 Jul 2026 15:01:17 +0000
Manifest next update: Tue 07 Jul 2026 15:01:17 +0000
Files and hashes: 1: fqnqgR-axVnKnA0P1MNMOEPlOKQ.roa (hash: dS17jdz8caEPLRuaszV/W/bAD/gLlYgn1NNbi4+I3kM=)
2: gRgykk6dz_IwqNNOBfkFkQce2pk.roa (hash: PzJ5ETV1AGTHV0gxW4EKMy3jivHWboSvAxQ7aMFFRFY=)
3: kdjDKnA5cqrqCToB-N7fV_lnVXU.crl (hash: wbcYs7c9uAwaTNLFcKx8TxXjh3iNkVMYEx+Eu+P3BAk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/4e816d-d8ec-437c-986a-3c12781e202d/1/kdjDKnA5cqrqCToB-N7fV_lnVXU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/4e816d-d8ec-437c-986a-3c12781e202d/1/kdjDKnA5cqrqCToB-N7fV_lnVXU.mft
rsync://rpki.ripe.net/repository/DEFAULT/kdjDKnA5cqrqCToB-N7fV_lnVXU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Jul 2026 15:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:37:f2:a7:1b:a9:3a:24:79:57:f6:df:0f:62:f8:79:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91d8c32a703972aaea093a01f8dedf57f9675575
Validity
Not Before: Jul 6 15:01:17 2026 GMT
Not After : Jul 7 15:01:17 2026 GMT
Subject: CN=2868edbf25d7bf060d098976a21a249156cbf46f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:80:27:d5:33:a6:95:36:e6:e4:63:81:90:92:
d7:02:43:ae:0f:70:03:ec:d2:16:3c:98:81:6d:50:
a7:0c:41:15:52:cf:4a:29:63:11:6b:d7:08:89:20:
86:cf:6a:73:af:eb:c8:6e:b8:a7:b7:3b:40:ff:87:
dc:f4:a8:1f:94:fd:b8:58:9e:12:ed:af:72:09:88:
d7:5f:60:6f:7b:e5:23:3e:70:a9:7e:bf:f9:e4:ca:
0b:04:8e:cd:42:3b:65:89:7f:00:c1:66:22:ff:cd:
e5:4d:6f:0a:05:66:40:83:6a:e0:2d:86:7d:48:50:
9c:02:e4:14:ba:44:e9:42:e1:42:a3:49:d5:fa:5e:
b8:3b:11:1d:9b:49:fe:2c:b2:e0:17:ef:5b:c4:ab:
dc:d9:b1:c5:8c:7c:cc:f9:cb:2f:95:80:01:0a:ee:
d9:ff:24:39:b9:4d:02:be:d3:e6:31:37:55:61:8e:
58:5e:a0:2e:cc:9c:4c:62:7b:76:7d:50:33:43:c8:
3d:b2:ba:98:d5:14:5f:ad:72:20:57:54:bb:e9:ad:
b4:bd:70:2d:c2:c2:6a:d8:24:c6:83:0b:8f:33:b4:
0d:98:47:b1:e4:e6:23:21:0d:b6:3b:5c:12:45:fd:
69:b4:2a:f6:8c:d2:6e:75:43:be:98:a8:ef:44:f1:
b9:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:68:ED:BF:25:D7:BF:06:0D:09:89:76:A2:1A:24:91:56:CB:F4:6F
X509v3 Authority Key Identifier:
keyid:91:D8:C3:2A:70:39:72:AA:EA:09:3A:01:F8:DE:DF:57:F9:67:55:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kdjDKnA5cqrqCToB-N7fV_lnVXU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/4e816d-d8ec-437c-986a-3c12781e202d/1/kdjDKnA5cqrqCToB-N7fV_lnVXU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/4e816d-d8ec-437c-986a-3c12781e202d/1/kdjDKnA5cqrqCToB-N7fV_lnVXU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:08:6d:db:88:b7:d1:bb:39:87:14:5d:5c:42:18:9d:5e:e3:
be:4e:1e:e2:f4:18:20:de:b8:0b:f6:79:e1:da:c3:18:39:19:
47:25:e2:da:91:a2:ac:0e:75:be:94:a3:33:e9:09:2f:bb:16:
ab:1d:db:90:0c:5a:70:5b:e9:1c:af:e7:12:0d:05:e1:ef:11:
a5:fe:2b:55:fe:4b:58:1d:7e:d2:52:be:66:1a:9b:46:2b:ef:
2a:d6:f8:11:a7:28:85:af:30:6a:1c:33:c1:55:0b:fa:cb:31:
d4:79:06:9e:aa:b2:c8:5f:6e:dc:1d:91:08:9e:1e:92:47:3c:
d0:30:07:61:f2:3d:2c:78:2b:23:b9:0a:f2:db:86:9c:d1:af:
53:82:e3:20:7e:00:32:eb:ba:07:74:06:c6:36:7c:32:36:95:
c7:92:92:c6:6e:00:f8:62:33:61:39:33:8a:1a:6e:63:02:a8:
d6:ea:89:62:c0:7d:1c:3c:e7:4a:e2:b7:53:ba:2e:cc:4a:39:
8d:10:43:f4:68:3c:89:87:be:cb:b4:8b:e4:e5:cc:81:fe:d1:
35:b1:6f:07:f0:83:61:21:80:0b:25:f4:8c:aa:2c:de:d2:44:
12:77:dc:89:a1:ad:19:ca:f5:6b:03:2e:33:d5:c0:03:16:eb:
66:01:99:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 7 01:10:44 2026 by rpki-client