Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c7/e5b5ab-6af5-43d5-b4e2-4966b3cfc87d/1/KJX7y8-I0a2bGfxCx6oRrT0qfqA.mft
File: KJX7y8-I0a2bGfxCx6oRrT0qfqA.mft (raw, json)
Hash identifier: Iw5G28Ylg5ZBa3dpeKRw8bqBiCeh5gasZ3Kl0KtxtPo=
Subject key identifier: E7:84:3D:16:0B:25:67:E9:C2:57:02:F8:E0:8C:99:28:95:E1:F2:22
Authority key identifier: 28:95:FB:CB:CF:88:D1:AD:9B:19:FC:42:C7:AA:11:AD:3D:2A:7E:A0
Certificate issuer: /CN=2895fbcbcf88d1ad9b19fc42c7aa11ad3d2a7ea0
Certificate serial: 01A13F3995934D7FEEDC8A93E0811126077C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KJX7y8-I0a2bGfxCx6oRrT0qfqA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/e5b5ab-6af5-43d5-b4e2-4966b3cfc87d/1/KJX7y8-I0a2bGfxCx6oRrT0qfqA.mft
Manifest number: 19A3
Signing time: Thu 15 Oct 2026 11:01:40 +0000
Manifest this update: Thu 15 Oct 2026 11:01:40 +0000
Manifest next update: Fri 16 Oct 2026 11:01:40 +0000
Files and hashes: 1: KJX7y8-I0a2bGfxCx6oRrT0qfqA.crl (hash: QiEEmJsIYKcYFSNcD02z0pAW2unC72jp89aUS1jDGpM=)
2: vG3ETTisgvR8uHGsP-7vqX6UxOU.roa (hash: jLQe3Tz3snh6BMY0+c4cK7G/UdU3rVW7/eW9hxngsAY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/e5b5ab-6af5-43d5-b4e2-4966b3cfc87d/1/KJX7y8-I0a2bGfxCx6oRrT0qfqA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/e5b5ab-6af5-43d5-b4e2-4966b3cfc87d/1/KJX7y8-I0a2bGfxCx6oRrT0qfqA.mft
rsync://rpki.ripe.net/repository/DEFAULT/KJX7y8-I0a2bGfxCx6oRrT0qfqA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 11:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3f:39:95:93:4d:7f:ee:dc:8a:93:e0:81:11:26:07:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2895fbcbcf88d1ad9b19fc42c7aa11ad3d2a7ea0
Validity
Not Before: Oct 15 11:01:40 2026 GMT
Not After : Oct 16 11:01:40 2026 GMT
Subject: CN=e7843d160b2567e9c25702f8e08c992895e1f222
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:4d:0c:6c:48:ce:68:ef:9d:85:d9:a8:1b:da:
db:04:b4:ae:7f:c6:0c:39:da:ea:72:e4:b8:f3:f2:
0a:2b:dc:c7:ad:e2:c8:74:24:d4:8f:1a:61:55:50:
e0:7a:60:d5:2d:b7:ed:53:49:24:18:63:7b:2d:f3:
86:92:bf:ae:03:98:ef:4e:4b:f4:29:74:50:0f:76:
c4:77:b6:71:05:40:d8:7a:f9:f9:b2:0a:a0:9e:b7:
ff:d5:cf:4a:af:2c:43:5e:b0:40:de:4d:1d:3d:d1:
19:0d:45:df:28:63:28:89:be:f1:05:b3:ea:c0:f1:
1e:d8:fa:00:06:73:8c:33:a6:6d:7b:b5:1b:46:35:
f8:54:1a:f5:a0:29:8a:86:e7:0f:fc:01:bf:2e:3b:
f2:e9:13:3f:71:37:e9:c6:31:6f:88:3a:df:f0:d4:
7c:34:af:f7:9c:3e:a8:23:58:76:34:e9:4e:c9:21:
05:c7:3f:bd:fc:ce:bd:82:02:4b:44:bc:e6:5c:44:
47:e9:05:75:ba:5b:7d:48:c5:44:2e:17:5a:2e:bc:
0c:45:9a:a6:65:10:9c:35:57:d2:46:b4:4f:e9:56:
e0:21:b0:07:04:9a:16:c0:b1:6d:f2:1f:b6:35:3c:
62:09:1e:d1:31:d7:22:3b:2a:54:eb:3b:9b:6e:29:
14:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:84:3D:16:0B:25:67:E9:C2:57:02:F8:E0:8C:99:28:95:E1:F2:22
X509v3 Authority Key Identifier:
keyid:28:95:FB:CB:CF:88:D1:AD:9B:19:FC:42:C7:AA:11:AD:3D:2A:7E:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KJX7y8-I0a2bGfxCx6oRrT0qfqA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/e5b5ab-6af5-43d5-b4e2-4966b3cfc87d/1/KJX7y8-I0a2bGfxCx6oRrT0qfqA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/e5b5ab-6af5-43d5-b4e2-4966b3cfc87d/1/KJX7y8-I0a2bGfxCx6oRrT0qfqA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:6d:3e:01:4f:6c:cc:a0:c8:e9:c5:eb:68:ea:a0:29:e1:03:
9c:3c:94:2c:53:83:08:61:df:d5:e4:a5:9e:7c:d0:88:20:23:
96:6a:09:8f:f0:9c:87:d2:f0:52:73:ee:be:c3:cf:9c:82:20:
d5:7d:dd:c6:3c:3b:62:43:ee:01:17:c7:78:4c:52:40:ad:66:
af:2e:5a:96:57:aa:61:7d:89:f3:e6:55:43:fe:78:8c:d8:52:
b8:97:97:e3:79:63:88:fc:ec:a1:1c:e0:55:ad:9e:50:00:e7:
e8:08:5a:62:55:b3:d9:19:a8:e8:8e:74:d4:5d:8e:63:5e:35:
37:35:d1:75:3a:65:ab:5a:a6:5b:45:be:27:76:6d:4a:de:ba:
5f:98:c4:87:d7:d7:61:90:9e:aa:e3:04:90:51:aa:de:b7:c0:
51:b6:dc:aa:c6:52:f3:47:46:50:db:a6:c0:1e:da:03:0f:9a:
6d:39:7e:cd:9a:77:d5:6d:32:94:68:39:64:97:8f:19:21:d1:
d0:c4:30:90:da:d6:e2:de:28:db:42:88:ae:05:6a:cf:fb:60:
85:87:d4:b4:5a:c5:cd:8b:c5:94:d0:5e:72:68:bb:ee:da:24:
03:09:0f:4e:f6:3e:86:10:fb:c5:ae:f8:05:76:17:c6:f9:f9:
8d:7b:ef:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 20:56:47 2026 by rpki-client