Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/f37027-afc4-444f-8008-95ce2c755d47/1/KJVOKPbgHKXHNTvDcvNppfUdm7Q.mft
File: KJVOKPbgHKXHNTvDcvNppfUdm7Q.mft (raw, json)
Hash identifier: W4MeVXP0nT0YCb7jvUOPL4P+I0p+mCngz6A/VZsLMwY=
Subject key identifier: 2B:A6:D4:0B:B3:3A:24:25:FA:7F:1A:DF:EB:1B:D0:E0:1D:11:8A:1F
Authority key identifier: 28:95:4E:28:F6:E0:1C:A5:C7:35:3B:C3:72:F3:69:A5:F5:1D:9B:B4
Certificate issuer: /CN=28954e28f6e01ca5c7353bc372f369a5f51d9bb4
Certificate serial: 019E1DFE952373587F81DFFFC9E08475A205
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KJVOKPbgHKXHNTvDcvNppfUdm7Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/f37027-afc4-444f-8008-95ce2c755d47/1/KJVOKPbgHKXHNTvDcvNppfUdm7Q.mft
Manifest number: 06E2
Signing time: Tue 12 May 2026 21:01:23 +0000
Manifest this update: Tue 12 May 2026 21:01:23 +0000
Manifest next update: Wed 13 May 2026 21:01:23 +0000
Files and hashes: 1: AXdXSPys8K4gKCZL761_CRlXkQg.roa (hash: Eq65FPzgWfwxVUVR4WpFvfNbVj2sB466X23GUTRrgvw=)
2: KJVOKPbgHKXHNTvDcvNppfUdm7Q.crl (hash: uJMN45tRyhfHnnFrXlb5m6c1MXUtkZTYwyreoeXvGs0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/f37027-afc4-444f-8008-95ce2c755d47/1/KJVOKPbgHKXHNTvDcvNppfUdm7Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/f37027-afc4-444f-8008-95ce2c755d47/1/KJVOKPbgHKXHNTvDcvNppfUdm7Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/KJVOKPbgHKXHNTvDcvNppfUdm7Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 21:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:fe:95:23:73:58:7f:81:df:ff:c9:e0:84:75:a2:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28954e28f6e01ca5c7353bc372f369a5f51d9bb4
Validity
Not Before: May 12 21:01:23 2026 GMT
Not After : May 13 21:01:23 2026 GMT
Subject: CN=2ba6d40bb33a2425fa7f1adfeb1bd0e01d118a1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:38:dd:74:fd:8c:94:37:67:8d:69:b1:4a:95:
30:68:d5:ac:3c:dd:f1:8b:c6:c3:75:bc:2a:7c:da:
c9:10:5e:c1:46:7b:30:55:64:62:ac:4a:52:94:8b:
cf:d8:f4:18:e0:16:29:20:18:19:33:9c:e1:55:4c:
4a:32:b2:bc:78:a3:c4:96:1d:df:04:e2:eb:e9:b3:
72:90:8e:92:e8:25:34:fc:f5:30:c1:12:de:3e:a6:
e0:55:0e:02:26:ed:7e:4c:75:14:b7:f1:08:7d:d6:
ab:a6:76:31:1d:83:7b:17:9c:ad:90:ae:81:da:47:
1b:6f:6b:2d:95:76:a0:5f:a9:df:57:06:8a:d8:70:
db:40:c6:a6:5f:10:b0:af:b8:56:9c:8c:3e:6b:c1:
a0:6f:ca:8e:e3:29:d9:8a:de:cc:e9:71:c2:35:04:
e5:95:3b:a9:b0:bf:ba:d9:0e:5e:f6:51:be:b6:7b:
3f:d0:be:ea:8d:75:e2:07:b9:87:9d:1d:eb:85:53:
ac:81:a4:e3:0f:b7:73:d8:75:b0:b2:9a:2a:71:7a:
77:45:f6:9c:b9:d2:6f:f2:53:77:7a:13:7d:b6:95:
55:d5:cb:dc:e9:53:8a:97:33:1f:a3:12:cb:51:55:
0e:3d:ef:65:a4:70:eb:2b:b9:23:54:6a:64:6a:72:
75:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:A6:D4:0B:B3:3A:24:25:FA:7F:1A:DF:EB:1B:D0:E0:1D:11:8A:1F
X509v3 Authority Key Identifier:
keyid:28:95:4E:28:F6:E0:1C:A5:C7:35:3B:C3:72:F3:69:A5:F5:1D:9B:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KJVOKPbgHKXHNTvDcvNppfUdm7Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/f37027-afc4-444f-8008-95ce2c755d47/1/KJVOKPbgHKXHNTvDcvNppfUdm7Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/f37027-afc4-444f-8008-95ce2c755d47/1/KJVOKPbgHKXHNTvDcvNppfUdm7Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:23:14:43:ca:4c:cf:cd:56:90:35:c4:e3:9e:8b:d2:d2:8a:
b9:16:a2:c3:26:d8:83:f4:26:e1:29:2b:44:d9:fc:32:3e:ec:
38:ec:f3:fc:4d:41:9c:72:1f:2b:f8:e1:09:40:98:bb:1c:7f:
d1:d0:a7:65:c2:5e:e2:a4:c7:4b:a7:b2:a9:f4:06:5d:f9:84:
11:c2:b0:fb:bf:ea:f9:2d:6a:ae:f7:b0:88:02:af:49:38:77:
bc:ed:68:16:95:d2:63:96:80:1a:b1:64:2d:2b:d7:cd:ab:9d:
70:4a:9d:d3:5f:8a:1b:a5:5c:94:17:72:ae:15:da:1f:7e:5e:
24:7b:f4:62:f2:98:86:0e:1c:7a:a6:c2:5e:0c:7c:ae:71:60:
62:b6:fa:90:20:48:03:2d:02:76:29:3f:ab:b3:16:ad:9e:ee:
b5:c6:71:fd:02:c1:98:20:6d:22:3a:1e:74:61:4a:2b:08:d5:
fd:32:ca:8a:66:3b:44:66:00:bf:4b:a3:f8:c5:e7:d9:fc:a9:
d1:6d:46:d9:f2:c9:25:3d:42:67:0c:81:21:14:2e:20:fe:55:
8b:b5:22:de:5b:9a:ee:e2:d4:9c:56:2b:00:0b:14:77:6c:de:
2b:65:ab:8f:95:5d:49:30:00:b2:0e:dd:17:80:02:e0:7d:2a:
2d:d0:34:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:58:11 2026 by rpki-client