Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/b796f4-2e88-4eaa-a269-2738bcb43d6d/1/kjorPddmcnXwmIbffaB591XO7Vk.mft
File: kjorPddmcnXwmIbffaB591XO7Vk.mft (raw, json)
Hash identifier: xB1g5f62P6yMRFE27Xi9yxVh9KQXInFT9pyoMuDMN3Y=
Subject key identifier: 77:8A:26:33:79:D5:58:7B:7A:49:54:6A:C7:CC:29:26:4B:DC:66:B9
Authority key identifier: 92:3A:2B:3D:D7:66:72:75:F0:98:86:DF:7D:A0:79:F7:55:CE:ED:59
Certificate issuer: /CN=923a2b3dd7667275f09886df7da079f755ceed59
Certificate serial: 019F916DCF29710FE0E30A1FAF12BCB77380
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kjorPddmcnXwmIbffaB591XO7Vk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/b796f4-2e88-4eaa-a269-2738bcb43d6d/1/kjorPddmcnXwmIbffaB591XO7Vk.mft
Manifest number: 19CE
Signing time: Fri 24 Jul 2026 00:02:00 +0000
Manifest this update: Fri 24 Jul 2026 00:02:00 +0000
Manifest next update: Sat 25 Jul 2026 00:02:00 +0000
Files and hashes: 1: kjorPddmcnXwmIbffaB591XO7Vk.crl (hash: kJ8qNZkV70rl6iJxZEDRrDgT3E5qEASI2l63K3Si8j8=)
2: lr9abnPwCKuiEqQLCTnj_yF2mpA.roa (hash: f/0VKTDVUAMvZzhHBp5U3cnXddMK0Wnijx8d3qSFB3Q=)
3: uoml1ooKIpEwGVQcgm0COMGf22M.roa (hash: j6yV3AvezVwVR9BGMG8Xa/if460puXKoVMqsrCe3beo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/b796f4-2e88-4eaa-a269-2738bcb43d6d/1/kjorPddmcnXwmIbffaB591XO7Vk.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/b796f4-2e88-4eaa-a269-2738bcb43d6d/1/kjorPddmcnXwmIbffaB591XO7Vk.mft
rsync://rpki.ripe.net/repository/DEFAULT/kjorPddmcnXwmIbffaB591XO7Vk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:6d:cf:29:71:0f:e0:e3:0a:1f:af:12:bc:b7:73:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=923a2b3dd7667275f09886df7da079f755ceed59
Validity
Not Before: Jul 24 00:02:00 2026 GMT
Not After : Jul 25 00:02:00 2026 GMT
Subject: CN=778a263379d5587b7a49546ac7cc29264bdc66b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:34:01:46:03:a7:c5:a8:b1:bc:57:8f:5e:e2:
04:5a:14:f5:bb:b5:3d:c2:9e:ef:43:fb:54:7b:db:
87:e0:c7:56:f3:dd:52:4d:06:be:46:be:bd:b3:c9:
3d:e5:6f:c2:83:a6:ae:05:84:62:0a:ed:05:40:84:
47:e6:3e:06:32:ba:14:9c:38:e0:19:22:b8:21:ba:
9e:a8:6a:5f:2c:45:51:cb:2f:aa:ea:38:16:2f:5c:
2e:e3:b5:94:92:00:87:f3:6d:3f:e8:06:32:55:5b:
f3:61:83:90:ef:30:ab:08:20:67:93:df:fa:82:a4:
87:ec:19:2c:31:2f:0c:47:ba:70:ef:41:9f:93:fa:
79:60:48:ff:7a:7f:09:47:22:30:a2:68:ef:98:83:
7d:67:0a:aa:c4:9f:ee:55:85:a0:86:d7:85:a9:39:
c8:da:6d:3a:aa:05:2a:61:30:3a:ff:3d:02:9e:94:
0e:9c:68:67:3d:89:c4:03:e4:c4:1d:f2:6b:c7:10:
0f:63:94:dc:4d:06:0a:80:8b:13:88:e1:b8:ee:a1:
1c:e5:32:30:82:55:52:b5:83:16:f7:e8:d4:ee:f0:
76:de:40:f3:11:41:d7:0b:35:ac:4b:af:75:8b:ab:
5d:9c:2e:4d:4e:72:df:82:03:b3:01:79:8d:81:ce:
fe:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:8A:26:33:79:D5:58:7B:7A:49:54:6A:C7:CC:29:26:4B:DC:66:B9
X509v3 Authority Key Identifier:
keyid:92:3A:2B:3D:D7:66:72:75:F0:98:86:DF:7D:A0:79:F7:55:CE:ED:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kjorPddmcnXwmIbffaB591XO7Vk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/b796f4-2e88-4eaa-a269-2738bcb43d6d/1/kjorPddmcnXwmIbffaB591XO7Vk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/b796f4-2e88-4eaa-a269-2738bcb43d6d/1/kjorPddmcnXwmIbffaB591XO7Vk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:e6:87:6f:c7:3d:9c:df:2f:64:98:4a:eb:f1:8f:fb:41:33:
22:84:c8:96:96:68:66:d9:07:fa:cb:eb:fc:e2:7a:6b:e7:dc:
9a:ed:ec:2d:ad:a6:0c:f0:6c:40:8f:8f:39:ff:51:30:29:99:
91:1b:d8:66:74:c7:30:d0:38:ab:e2:71:c7:27:23:ad:dd:84:
44:64:75:6c:c4:f6:41:cd:fb:b3:15:aa:d4:e4:1f:30:b6:94:
07:02:0d:64:57:66:57:e8:3c:fd:8d:fa:83:45:03:95:b1:ec:
7b:f2:be:27:09:3c:b2:58:9e:c2:a1:fa:e1:83:f6:60:7b:c9:
ae:84:fc:85:5d:e6:a3:46:91:4e:38:65:82:8b:fa:51:ac:96:
f5:e9:79:17:9e:54:5e:95:74:08:a5:ef:9d:9d:8c:a2:71:f0:
1e:e0:58:48:0b:c6:70:e8:8e:60:21:77:5d:65:a8:16:48:4c:
86:53:ab:75:01:0e:09:76:c6:cf:44:c2:a6:cc:79:66:cf:74:
92:2f:8b:2c:1b:ae:95:de:d1:31:de:be:eb:c5:f2:a8:07:ad:
05:1f:3b:68:d9:24:dc:0d:80:48:0f:1c:7a:d7:14:b7:2e:b5:
76:21:00:97:f8:dc:dd:0c:9f:84:b7:c9:d9:82:26:51:34:25:
00:0a:2d:06
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+Rbc8pcQ/g4wofrxK8t3OAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyM2EyYjNkZDc2NjcyNzVmMDk4ODZkZjdkYTA3OWY3NTVj
ZWVkNTkwHhcNMjYwNzI0MDAwMjAwWhcNMjYwNzI1MDAwMjAwWjAzMTEwLwYDVQQD
Eyg3NzhhMjYzMzc5ZDU1ODdiN2E0OTU0NmFjN2NjMjkyNjRiZGM2NmI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqjQBRgOnxaixvFePXuIEWhT1u7U9
wp7vQ/tUe9uH4MdW891STQa+Rr69s8k95W/Cg6auBYRiCu0FQIRH5j4GMroUnDjg
GSK4IbqeqGpfLEVRyy+q6jgWL1wu47WUkgCH820/6AYyVVvzYYOQ7zCrCCBnk9/6
gqSH7BksMS8MR7pw70Gfk/p5YEj/en8JRyIwomjvmIN9ZwqqxJ/uVYWghteFqTnI
2m06qgUqYTA6/z0CnpQOnGhnPYnEA+TEHfJrxxAPY5TcTQYKgIsTiOG47qEc5TIw
glVStYMW9+jU7vB23kDzEUHXCzWsS691i6tdnC5NTnLfggOzAXmNgc7+dwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHeKJjN51Vh7eklUasfMKSZL3Ga5MB8GA1UdIwQY
MBaAFJI6Kz3XZnJ18JiG332gefdVzu1ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva2pvclBkZG1jblh3bUliZmZhQjU5MVhPN1ZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC9iNzk2ZjQtMmU4OC00ZWFhLWEyNjkt
MjczOGJjYjQzZDZkLzEva2pvclBkZG1jblh3bUliZmZhQjU5MVhPN1ZrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MC9iNzk2ZjQtMmU4OC00ZWFhLWEyNjktMjczOGJjYjQzZDZk
LzEva2pvclBkZG1jblh3bUliZmZhQjU5MVhPN1ZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAieaHb8c9
nN8vZJhK6/GP+0EzIoTIlpZoZtkH+svr/OJ6a+fcmu3sLa2mDPBsQI+POf9RMCmZ
kRvYZnTHMNA4q+Jxxycjrd2ERGR1bMT2Qc37sxWq1OQfMLaUBwINZFdmV+g8/Y36
g0UDlbHse/K+Jwk8sliewqH64YP2YHvJroT8hV3mo0aRTjhlgov6UayW9el5F55U
XpV0CKXvnZ2MonHwHuBYSAvGcOiOYCF3XWWoFkhMhlOrdQEOCXbGz0TCpsx5Zs90
ki+LLBuuld7RMd6+68XyqAetBR87aNkk3A2ASA8cetcUty61diEAl/jc3QyfhLfJ
2YImUTQlAAotBg==
-----END CERTIFICATE-----
Generated at Fri Jul 24 04:14:25 2026 by rpki-client