Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/227670-fe4d-4bd6-bf28-b2545b404eec/1/kjkTU_bh9QJQSgho6_itDevJ2ng.mft
File: kjkTU_bh9QJQSgho6_itDevJ2ng.mft (raw, json)
Hash identifier: 5wciJuUAE9VCro5KJ6gQNyVX3zQC7nMX7OQs+uvmOiY=
Subject key identifier: A3:78:EE:8C:40:6F:4C:09:DA:AD:2E:69:86:7E:D4:CA:48:B7:50:1D
Authority key identifier: 92:39:13:53:F6:E1:F5:02:50:4A:08:68:EB:F8:AD:0D:EB:C9:DA:78
Certificate issuer: /CN=92391353f6e1f502504a0868ebf8ad0debc9da78
Certificate serial: 019D39AF768F822FC1D1785C6EC7A8CE6D80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kjkTU_bh9QJQSgho6_itDevJ2ng.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/227670-fe4d-4bd6-bf28-b2545b404eec/1/kjkTU_bh9QJQSgho6_itDevJ2ng.mft
Manifest number: 1893
Signing time: Sun 29 Mar 2026 13:01:33 +0000
Manifest this update: Sun 29 Mar 2026 13:01:33 +0000
Manifest next update: Mon 30 Mar 2026 13:01:33 +0000
Files and hashes: 1: JhmecN5URCtv1yBIbMEV6e9g8Co.roa (hash: pl/+LhQub+A0lSXtk6Diu/3nX3HjGeeg4r2Cz4f+9V4=)
2: SgvNtEPjeS4PQsDsrJuu4hkfOtY.asa (hash: COU0yqjHmkzsF5ND+gIgB3KnAyucghgqR4Ewe3DYMIQ=)
3: kjkTU_bh9QJQSgho6_itDevJ2ng.crl (hash: 52K0vqLmgZU+ry+AoY3095gKtCblwhVxjb3Tucg/Vv8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/227670-fe4d-4bd6-bf28-b2545b404eec/1/kjkTU_bh9QJQSgho6_itDevJ2ng.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/227670-fe4d-4bd6-bf28-b2545b404eec/1/kjkTU_bh9QJQSgho6_itDevJ2ng.mft
rsync://rpki.ripe.net/repository/DEFAULT/kjkTU_bh9QJQSgho6_itDevJ2ng.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 13:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:af:76:8f:82:2f:c1:d1:78:5c:6e:c7:a8:ce:6d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92391353f6e1f502504a0868ebf8ad0debc9da78
Validity
Not Before: Mar 29 13:01:33 2026 GMT
Not After : Mar 30 13:01:33 2026 GMT
Subject: CN=a378ee8c406f4c09daad2e69867ed4ca48b7501d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:a6:e2:83:26:32:38:2c:a2:56:3a:3c:a0:d9:
67:28:9c:e0:45:a3:aa:da:cc:45:dc:8c:08:f8:07:
19:c9:3f:3b:f8:d0:5d:1a:71:ff:76:3d:90:7a:dc:
00:59:2e:93:20:34:fc:8e:33:e4:02:9b:be:4f:21:
54:9a:b1:11:c7:c6:0d:08:ce:a3:4d:66:eb:1b:08:
2a:8a:7a:98:33:99:6d:97:14:8f:c2:57:d8:ed:91:
2f:98:94:b6:bc:84:af:5f:b7:db:c8:c7:73:49:95:
a0:9e:2b:7c:cb:8c:be:36:8a:c5:e6:f9:f4:77:2d:
c7:44:33:39:59:dd:99:34:51:17:0b:80:5f:14:fd:
06:9f:9e:a8:95:69:cd:73:e1:36:bb:b1:ad:44:ee:
a7:03:c8:91:a8:74:1b:65:e6:4a:f0:86:f9:7f:e0:
d4:68:99:dc:74:03:61:87:79:62:fc:ed:10:5f:08:
4b:f4:80:bf:be:ce:81:ba:43:f8:21:50:0d:16:93:
f9:fb:43:fc:5a:5e:87:dd:2f:33:7c:a5:b2:5c:8d:
f2:39:dd:86:c3:f7:b0:93:22:9a:09:f9:c8:0c:b0:
fe:e8:ef:83:30:c3:7b:5f:b6:21:f2:9b:6e:5a:ea:
9d:a4:60:27:e5:a2:c5:6b:ba:88:ed:a5:25:fe:f8:
6e:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:78:EE:8C:40:6F:4C:09:DA:AD:2E:69:86:7E:D4:CA:48:B7:50:1D
X509v3 Authority Key Identifier:
keyid:92:39:13:53:F6:E1:F5:02:50:4A:08:68:EB:F8:AD:0D:EB:C9:DA:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kjkTU_bh9QJQSgho6_itDevJ2ng.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/227670-fe4d-4bd6-bf28-b2545b404eec/1/kjkTU_bh9QJQSgho6_itDevJ2ng.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/227670-fe4d-4bd6-bf28-b2545b404eec/1/kjkTU_bh9QJQSgho6_itDevJ2ng.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:10:cd:2d:79:82:1d:cc:4b:52:e7:5e:e9:f8:41:87:8c:3f:
d1:71:24:19:93:71:94:a0:0c:f7:9c:6b:d5:0e:e2:b5:10:a4:
9a:a9:46:64:32:f5:f2:51:db:83:5c:da:a5:19:25:42:45:3c:
b2:81:8e:c2:47:16:67:c2:84:de:b3:64:8f:3f:af:e2:e1:0e:
e6:f3:c8:ba:bf:5b:4f:97:c7:a8:80:0e:9a:5f:ce:bb:73:88:
41:30:0c:0e:da:5f:69:60:c8:45:6b:51:5e:52:ca:bd:97:0b:
ec:db:a4:3f:09:64:48:5a:82:e4:57:a3:c4:65:40:dd:8f:d8:
49:0e:c6:9a:0c:98:b7:5f:db:bb:b0:d5:f6:81:6a:64:80:6d:
34:fd:45:44:96:6b:60:bd:66:34:e1:62:6a:ed:8f:d6:79:41:
d1:0b:2f:5e:13:5c:9c:12:3b:83:9b:12:8a:7f:7a:45:33:27:
97:fe:37:2c:39:ad:98:28:02:71:b6:c1:e3:fc:f2:9c:c9:91:
61:41:6e:a3:97:9e:ab:a0:1e:ee:31:86:4f:5b:09:d6:b0:d5:
07:8e:ae:fd:84:13:12:50:71:bf:de:1e:10:44:2b:88:00:09:
f8:7c:3a:f6:9f:27:5d:e8:79:05:42:f0:93:f6:ef:ff:7e:5f:
84:fb:4b:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 20:25:52 2026 by rpki-client