Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/19/2bbcd4-edab-48ee-a411-28fc7063d952/1/KJDadlqZn3GYdcUe7PTH1hSKG9k.mft
File: KJDadlqZn3GYdcUe7PTH1hSKG9k.mft (raw, json)
Hash identifier: 7EgJ8+OJg5PdRw+t+U0vVraIS/GRAaihxlai6UI1qbs=
Subject key identifier: CC:B3:B5:03:BA:C1:76:FB:A1:09:C8:DC:80:98:C2:AE:7E:EA:93:FA
Authority key identifier: 28:90:DA:76:5A:99:9F:71:98:75:C5:1E:EC:F4:C7:D6:14:8A:1B:D9
Certificate issuer: /CN=2890da765a999f719875c51eecf4c7d6148a1bd9
Certificate serial: 01A1249E14B89E3745A27293997D92F5CA04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KJDadlqZn3GYdcUe7PTH1hSKG9k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/2bbcd4-edab-48ee-a411-28fc7063d952/1/KJDadlqZn3GYdcUe7PTH1hSKG9k.mft
Manifest number: 11C0
Signing time: Sat 10 Oct 2026 07:01:42 +0000
Manifest this update: Sat 10 Oct 2026 07:01:42 +0000
Manifest next update: Sun 11 Oct 2026 07:01:42 +0000
Files and hashes: 1: 15UE9HDgWyp_cAsmKQd04BSa6H4.roa (hash: pIxWzOfjFzWdadGYH0vQMpRvkDryxRhDbvZeh4lLEUw=)
2: GcuCBFhhPLtm6AWump2_50RkipM.roa (hash: AN10LtfSDckqwD3VaI/98tkLVo8/t79z+my+6bUMJos=)
3: KJDadlqZn3GYdcUe7PTH1hSKG9k.crl (hash: VT1/td348tFrMvlt45w+HMdwRSl4rTw1BWFFfQmYGLg=)
4: bs5yH2megPEoLiq-1Ee8Z68_g6s.roa (hash: bWsVIEeX18Zj1B9Yp3oHbkNqexSpprAqTGKtlbcwk7o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/2bbcd4-edab-48ee-a411-28fc7063d952/1/KJDadlqZn3GYdcUe7PTH1hSKG9k.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/2bbcd4-edab-48ee-a411-28fc7063d952/1/KJDadlqZn3GYdcUe7PTH1hSKG9k.mft
rsync://rpki.ripe.net/repository/DEFAULT/KJDadlqZn3GYdcUe7PTH1hSKG9k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 00:43:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:24:9e:14:b8:9e:37:45:a2:72:93:99:7d:92:f5:ca:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2890da765a999f719875c51eecf4c7d6148a1bd9
Validity
Not Before: Oct 10 07:01:42 2026 GMT
Not After : Oct 11 07:01:42 2026 GMT
Subject: CN=ccb3b503bac176fba109c8dc8098c2ae7eea93fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:00:48:a9:57:ae:06:7f:32:aa:fe:b4:36:f8:
b3:62:4b:eb:04:57:86:f4:e3:d6:a9:00:eb:3b:c1:
45:9c:e8:5b:17:48:b7:9d:f4:54:f8:80:7b:0a:ee:
c7:cb:e0:9a:f2:38:5a:1f:ff:54:df:65:3c:9c:ef:
ce:da:09:bf:f7:32:dd:20:cf:01:22:2f:af:d7:99:
1d:b9:a2:76:6d:5e:f5:47:2a:95:13:23:ca:53:29:
66:b9:8e:cc:16:31:d2:89:6f:b3:d4:8a:7b:f6:e4:
59:72:8d:29:3e:62:45:3f:7f:ab:87:fd:95:88:47:
b2:0a:79:03:71:19:0c:9e:3e:69:2a:06:8f:2c:6c:
91:a4:33:59:bf:9b:0a:27:aa:46:d5:f2:0e:bf:da:
e4:90:fd:16:81:1e:80:19:fd:13:d6:1a:fc:40:ce:
f0:35:fb:dd:7f:a9:d5:e1:14:96:c7:16:74:c3:74:
8e:7a:66:16:c2:8c:4a:95:d1:6b:88:bc:35:83:5f:
50:da:b5:46:66:2d:0d:b6:42:99:48:e5:e6:87:9a:
86:57:8f:85:d3:07:2e:47:2c:b1:71:ef:3b:88:de:
4c:b0:b2:c5:2e:e6:fa:b8:86:81:f5:f5:c8:1a:15:
1c:f6:36:1d:14:86:78:70:1b:f2:28:91:9c:66:88:
93:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:B3:B5:03:BA:C1:76:FB:A1:09:C8:DC:80:98:C2:AE:7E:EA:93:FA
X509v3 Authority Key Identifier:
keyid:28:90:DA:76:5A:99:9F:71:98:75:C5:1E:EC:F4:C7:D6:14:8A:1B:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KJDadlqZn3GYdcUe7PTH1hSKG9k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/2bbcd4-edab-48ee-a411-28fc7063d952/1/KJDadlqZn3GYdcUe7PTH1hSKG9k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/2bbcd4-edab-48ee-a411-28fc7063d952/1/KJDadlqZn3GYdcUe7PTH1hSKG9k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:3d:54:e6:17:43:02:31:17:6f:2f:ef:86:f3:a2:d9:27:4e:
15:a0:b1:fe:9b:cb:66:57:c9:0e:38:85:8f:99:44:e8:78:ec:
34:d4:89:43:e8:00:70:38:d9:0d:b5:45:26:b4:34:be:6e:77:
da:0f:44:0f:a7:ef:68:21:a5:ef:95:ee:9b:b0:0c:54:2c:6c:
70:ac:50:1e:ef:e8:f3:18:57:2b:df:af:08:bf:d4:9a:d4:57:
96:c8:2c:41:01:81:20:07:8b:91:18:4f:ac:a8:44:08:38:6c:
32:55:f2:72:40:18:ce:7a:43:37:ff:87:64:43:ce:47:9b:1d:
24:f4:47:74:32:7f:1f:87:4f:88:30:dd:1e:d6:7c:53:b7:ec:
52:40:28:8d:c4:70:ed:5c:d6:55:7e:6c:a7:7d:41:d4:73:98:
6f:d0:32:71:2f:9b:11:38:e1:e7:84:d8:d6:79:17:06:05:ee:
70:16:0e:01:9f:9d:76:1b:ed:48:e2:0b:ea:77:f7:bc:5d:4a:
ee:7a:36:f0:37:0e:7c:cd:f8:c6:79:2f:82:9e:4f:fe:8d:6c:
90:24:c0:9e:20:81:70:6b:44:55:a0:c1:aa:3e:60:f9:fc:cd:
7e:4d:53:73:b8:07:d3:99:85:05:a6:91:99:d3:81:c9:a1:cf:
95:64:8e:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 11:43:13 2026 by rpki-client