Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/227670-fe4d-4bd6-bf28-b2545b404eec/1/kjkTU_bh9QJQSgho6_itDevJ2ng.mft
File: kjkTU_bh9QJQSgho6_itDevJ2ng.mft (raw, json)
Hash identifier: lgCMB5nIHydyulkWG3pFFHyczlRdyJesEJDgKF8dQaI=
Subject key identifier: C3:5C:ED:FC:9C:84:7F:AB:DE:C5:A7:FD:2F:36:AD:8F:27:75:BA:1D
Authority key identifier: 92:39:13:53:F6:E1:F5:02:50:4A:08:68:EB:F8:AD:0D:EB:C9:DA:78
Certificate issuer: /CN=92391353f6e1f502504a0868ebf8ad0debc9da78
Certificate serial: 019FFA917F32706F3DBC81E9F1C6A0E678BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kjkTU_bh9QJQSgho6_itDevJ2ng.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/227670-fe4d-4bd6-bf28-b2545b404eec/1/kjkTU_bh9QJQSgho6_itDevJ2ng.mft
Manifest number: 1A00
Signing time: Thu 13 Aug 2026 10:01:06 +0000
Manifest this update: Thu 13 Aug 2026 10:01:06 +0000
Manifest next update: Fri 14 Aug 2026 10:01:06 +0000
Files and hashes: 1: JhmecN5URCtv1yBIbMEV6e9g8Co.roa (hash: pl/+LhQub+A0lSXtk6Diu/3nX3HjGeeg4r2Cz4f+9V4=)
2: SgvNtEPjeS4PQsDsrJuu4hkfOtY.asa (hash: COU0yqjHmkzsF5ND+gIgB3KnAyucghgqR4Ewe3DYMIQ=)
3: kjkTU_bh9QJQSgho6_itDevJ2ng.crl (hash: sLHr1WZYkkSAcmXDlKnxSuk6V4muH9G+YlQVT2bj5As=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/227670-fe4d-4bd6-bf28-b2545b404eec/1/kjkTU_bh9QJQSgho6_itDevJ2ng.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/227670-fe4d-4bd6-bf28-b2545b404eec/1/kjkTU_bh9QJQSgho6_itDevJ2ng.mft
rsync://rpki.ripe.net/repository/DEFAULT/kjkTU_bh9QJQSgho6_itDevJ2ng.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Aug 2026 10:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:fa:91:7f:32:70:6f:3d:bc:81:e9:f1:c6:a0:e6:78:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92391353f6e1f502504a0868ebf8ad0debc9da78
Validity
Not Before: Aug 13 10:01:06 2026 GMT
Not After : Aug 14 10:01:06 2026 GMT
Subject: CN=c35cedfc9c847fabdec5a7fd2f36ad8f2775ba1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:7e:7e:3d:28:42:9d:06:75:34:d8:25:a4:58:
60:17:58:78:b3:f8:b9:c4:5b:ee:fb:51:72:eb:01:
6b:a2:2f:89:5e:9d:8d:12:97:7f:09:d3:eb:7d:df:
04:0f:5e:a4:02:fc:66:0e:e2:f3:15:80:73:e8:e2:
11:c7:17:0b:33:f6:ce:d4:80:a0:5a:fd:d1:57:af:
5d:3b:33:17:d2:0a:10:4d:fa:3e:97:9e:87:16:3c:
65:db:f8:ce:c2:97:df:21:38:43:14:0f:f6:37:96:
3c:2e:bf:de:9f:25:2a:16:94:1f:e5:71:d6:48:99:
2a:84:f4:e4:03:b9:de:f5:f6:2a:60:91:ca:94:03:
bf:5b:52:45:b5:42:84:11:b4:30:f2:72:f1:f5:e1:
03:cb:86:01:5b:29:97:da:73:b1:54:f5:18:0d:cd:
a6:ff:64:b4:cb:4d:55:67:c7:a4:ac:2d:17:fa:33:
66:89:0f:5c:91:4d:e3:25:5b:67:9b:60:df:56:54:
63:61:91:89:9e:3e:18:50:d7:77:5f:15:28:bd:c8:
7c:67:5c:48:3c:10:62:3a:db:db:b1:71:6b:3b:07:
52:4b:8d:5c:2a:0a:77:df:40:b1:54:fc:40:b9:26:
bf:3b:6b:52:2c:fb:94:dc:57:22:40:08:20:36:a3:
06:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:5C:ED:FC:9C:84:7F:AB:DE:C5:A7:FD:2F:36:AD:8F:27:75:BA:1D
X509v3 Authority Key Identifier:
keyid:92:39:13:53:F6:E1:F5:02:50:4A:08:68:EB:F8:AD:0D:EB:C9:DA:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kjkTU_bh9QJQSgho6_itDevJ2ng.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/227670-fe4d-4bd6-bf28-b2545b404eec/1/kjkTU_bh9QJQSgho6_itDevJ2ng.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/227670-fe4d-4bd6-bf28-b2545b404eec/1/kjkTU_bh9QJQSgho6_itDevJ2ng.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:c8:c6:11:b9:69:a4:93:81:3f:36:82:c8:d3:02:af:3c:ef:
b3:d9:5e:eb:3e:e1:c1:ee:66:5e:7c:37:12:ea:79:05:54:a2:
54:08:f4:22:92:d8:7a:6b:09:66:db:3f:13:0b:7a:8b:75:d3:
e9:a3:84:20:71:e8:0b:2e:84:08:0a:94:03:f5:74:d0:d0:93:
7d:06:93:e2:26:52:7c:06:25:67:1c:54:01:05:06:3c:07:df:
8a:04:20:41:af:11:04:4e:95:2c:6f:d3:f9:49:39:af:f3:a5:
69:ee:90:15:80:31:8b:20:12:7f:9c:80:68:eb:04:0f:97:2c:
fa:a4:c0:d8:39:c9:82:0a:bb:84:36:62:fa:4b:c0:02:28:ce:
cc:10:45:0b:aa:48:b6:a6:d2:d7:a1:86:c3:f0:32:ca:f5:17:
f0:c5:14:a7:00:e9:c8:11:b2:ed:73:85:28:6c:93:85:b0:8c:
bf:76:a7:f6:2e:42:4b:01:82:ab:b5:18:7a:1e:fb:3f:e0:93:
8d:11:7a:58:27:f1:59:4c:ad:b4:b5:98:6c:2c:47:83:bd:71:
17:42:7f:3e:34:42:45:49:2b:ff:c6:ef:04:e0:d4:1e:da:f4:
63:18:fb:e5:4a:86:a5:4c:2d:37:00:58:6a:83:ec:ec:ec:74:
68:17:8f:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 13:04:23 2026 by rpki-client