Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/40/b796f4-2e88-4eaa-a269-2738bcb43d6d/1/kjorPddmcnXwmIbffaB591XO7Vk.mft
File: kjorPddmcnXwmIbffaB591XO7Vk.mft (raw, json)
Hash identifier: nhD4Pmy3efm2UN+35bMoRCup8gonjAXIS4SGCGGzpNU=
Subject key identifier: 45:0F:36:64:8A:E5:5E:5D:1C:F8:27:38:37:CF:38:91:E9:BB:A7:D6
Authority key identifier: 92:3A:2B:3D:D7:66:72:75:F0:98:86:DF:7D:A0:79:F7:55:CE:ED:59
Certificate issuer: /CN=923a2b3dd7667275f09886df7da079f755ceed59
Certificate serial: 01A0D9BB8A3890ABC42708F28D8FACDA2938
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kjorPddmcnXwmIbffaB591XO7Vk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/b796f4-2e88-4eaa-a269-2738bcb43d6d/1/kjorPddmcnXwmIbffaB591XO7Vk.mft
Manifest number: 1A78
Signing time: Fri 25 Sep 2026 18:02:21 +0000
Manifest this update: Fri 25 Sep 2026 18:02:21 +0000
Manifest next update: Sat 26 Sep 2026 18:02:21 +0000
Files and hashes: 1: kjorPddmcnXwmIbffaB591XO7Vk.crl (hash: TV6+u17+LT3R6VusLMNsu9yYaj1YfcueRslxCIxq2/g=)
2: lr9abnPwCKuiEqQLCTnj_yF2mpA.roa (hash: f/0VKTDVUAMvZzhHBp5U3cnXddMK0Wnijx8d3qSFB3Q=)
3: uoml1ooKIpEwGVQcgm0COMGf22M.roa (hash: j6yV3AvezVwVR9BGMG8Xa/if460puXKoVMqsrCe3beo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/b796f4-2e88-4eaa-a269-2738bcb43d6d/1/kjorPddmcnXwmIbffaB591XO7Vk.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/b796f4-2e88-4eaa-a269-2738bcb43d6d/1/kjorPddmcnXwmIbffaB591XO7Vk.mft
rsync://rpki.ripe.net/repository/DEFAULT/kjorPddmcnXwmIbffaB591XO7Vk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 17:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d9:bb:8a:38:90:ab:c4:27:08:f2:8d:8f:ac:da:29:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=923a2b3dd7667275f09886df7da079f755ceed59
Validity
Not Before: Sep 25 18:02:21 2026 GMT
Not After : Sep 26 18:02:21 2026 GMT
Subject: CN=450f36648ae55e5d1cf8273837cf3891e9bba7d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:61:42:3c:d5:bc:85:5c:74:08:c0:3b:d2:dc:
cd:2b:24:84:43:0a:45:0d:37:90:d6:d1:a9:f5:40:
a6:5b:12:42:d7:fc:bc:a7:f6:f8:7a:94:09:08:d7:
0e:0f:a3:44:26:41:6e:4d:c5:88:ee:cb:1b:f4:a0:
4b:91:69:75:c1:5f:c3:f1:a2:f9:4c:42:e5:45:77:
5f:f1:d6:a7:d6:e9:a7:cf:cb:da:ec:91:6a:a9:46:
d5:0f:ff:23:cf:6d:7d:5e:a5:b5:1b:b9:b5:b3:3b:
05:33:c2:6c:09:e2:35:f8:cf:70:18:cf:3a:71:a6:
ba:f0:83:74:d8:31:cb:85:9f:d5:d8:8f:58:c1:5a:
8d:c4:94:cd:24:bc:ed:18:b1:21:77:91:f6:32:93:
06:3c:3d:ee:2d:3b:f7:91:30:f6:1c:a9:31:8f:9c:
34:02:05:b2:21:af:69:e6:87:02:52:f2:cb:89:7a:
ba:8b:d7:78:d6:26:09:1b:76:a8:42:32:8e:f4:00:
ec:da:db:e2:41:64:1b:5c:37:30:96:68:97:35:55:
c3:0c:6f:9d:2b:fa:47:4e:68:96:45:4d:11:db:b1:
30:1e:7c:ec:db:86:e4:c7:61:c8:d7:8a:93:dc:62:
15:95:62:69:4f:95:5c:d9:ef:34:66:e5:df:3e:29:
96:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:0F:36:64:8A:E5:5E:5D:1C:F8:27:38:37:CF:38:91:E9:BB:A7:D6
X509v3 Authority Key Identifier:
keyid:92:3A:2B:3D:D7:66:72:75:F0:98:86:DF:7D:A0:79:F7:55:CE:ED:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kjorPddmcnXwmIbffaB591XO7Vk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/b796f4-2e88-4eaa-a269-2738bcb43d6d/1/kjorPddmcnXwmIbffaB591XO7Vk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/b796f4-2e88-4eaa-a269-2738bcb43d6d/1/kjorPddmcnXwmIbffaB591XO7Vk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:e6:9b:3d:bb:2f:7f:c1:65:dc:eb:4b:a0:5b:32:29:e6:1d:
7d:80:5f:21:e7:d5:ca:60:a2:ae:ca:8a:80:5c:1b:a4:1a:55:
6e:ae:87:aa:6c:17:8d:cf:b4:e7:16:da:f9:99:01:e5:6e:54:
3e:07:cd:01:9e:88:16:0f:18:4b:61:fd:23:d8:3d:29:fa:34:
c5:a1:92:3a:41:96:5e:f1:9d:1e:29:56:48:0b:12:c5:a5:f1:
13:bf:78:c4:4d:6b:db:62:5a:b3:30:41:a0:dd:8a:57:82:ea:
13:bc:79:f6:72:00:1f:9d:57:81:dc:b7:09:c7:61:e1:da:91:
4f:2d:f2:16:c9:0a:e5:71:6a:2d:b5:77:a8:4c:b8:58:f6:77:
d6:9e:1f:1e:70:f5:42:32:58:1f:1e:d8:33:d5:42:74:d8:97:
1a:9a:76:14:59:6c:fe:d3:51:e3:1d:20:8c:fc:bd:a8:b6:78:
9e:f5:2c:55:2c:24:ea:a0:5a:57:12:6f:6c:ad:e5:b9:2c:96:
a8:e0:c1:4c:7b:d8:c1:f1:ee:f4:ba:1d:2b:40:3d:e5:23:ca:
29:ca:d1:44:8e:0e:b3:e7:93:84:65:7c:c0:d9:03:8f:04:5b:
0c:6a:0f:70:a3:c0:44:26:19:3c:18:f6:e4:a5:b0:78:09:03:
fd:5e:d8:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 03:25:25 2026 by rpki-client