Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/55/f37027-afc4-444f-8008-95ce2c755d47/1/KJVOKPbgHKXHNTvDcvNppfUdm7Q.mft
File: KJVOKPbgHKXHNTvDcvNppfUdm7Q.mft (raw, json)
Hash identifier: WdLDetASKcosArdfDDY2wvWKXHvYCKM0xtHpT62J1/0=
Subject key identifier: 99:BC:23:92:6B:BF:E0:F0:7E:96:DA:53:29:A0:5A:EB:50:AF:1C:5D
Authority key identifier: 28:95:4E:28:F6:E0:1C:A5:C7:35:3B:C3:72:F3:69:A5:F5:1D:9B:B4
Certificate issuer: /CN=28954e28f6e01ca5c7353bc372f369a5f51d9bb4
Certificate serial: 01A0DCF2FF81CEF74A7205E58358512FA7C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KJVOKPbgHKXHNTvDcvNppfUdm7Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/f37027-afc4-444f-8008-95ce2c755d47/1/KJVOKPbgHKXHNTvDcvNppfUdm7Q.mft
Manifest number: 084E
Signing time: Sat 26 Sep 2026 09:01:47 +0000
Manifest this update: Sat 26 Sep 2026 09:01:47 +0000
Manifest next update: Sun 27 Sep 2026 09:01:47 +0000
Files and hashes: 1: AXdXSPys8K4gKCZL761_CRlXkQg.roa (hash: Eq65FPzgWfwxVUVR4WpFvfNbVj2sB466X23GUTRrgvw=)
2: KJVOKPbgHKXHNTvDcvNppfUdm7Q.crl (hash: S5Qex52dDo8+yOEOX9YqGkZa1s75W4Ug+Ac4c9TzX+U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/f37027-afc4-444f-8008-95ce2c755d47/1/KJVOKPbgHKXHNTvDcvNppfUdm7Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/f37027-afc4-444f-8008-95ce2c755d47/1/KJVOKPbgHKXHNTvDcvNppfUdm7Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/KJVOKPbgHKXHNTvDcvNppfUdm7Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 09:01:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dc:f2:ff:81:ce:f7:4a:72:05:e5:83:58:51:2f:a7:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28954e28f6e01ca5c7353bc372f369a5f51d9bb4
Validity
Not Before: Sep 26 09:01:47 2026 GMT
Not After : Sep 27 09:01:47 2026 GMT
Subject: CN=99bc23926bbfe0f07e96da5329a05aeb50af1c5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:78:eb:fa:c6:8b:37:44:48:f4:14:f1:93:20:
62:f9:9d:f4:8c:8b:fa:b6:c2:b8:13:e2:b4:e6:c9:
25:82:d5:a6:3a:2a:5a:28:0f:00:8c:85:4f:b7:1c:
84:5b:88:61:9b:a8:81:42:3f:56:01:99:08:8c:53:
79:6d:b7:d2:0b:72:34:43:8a:55:7d:e8:de:fb:ee:
a5:54:13:4b:16:d5:bf:cb:20:54:a5:e2:a9:d9:85:
93:04:db:bc:ea:c3:74:8b:ae:ed:8b:c9:78:24:88:
4d:e6:87:ed:6b:4d:80:a5:df:6e:f1:4b:e2:06:a1:
99:dc:6a:49:2d:87:9e:92:f8:29:c0:45:21:52:5e:
e1:31:32:ba:18:80:2b:a8:5f:9d:4e:88:cb:bb:96:
c3:67:3d:3c:13:a9:c9:58:41:05:d6:44:67:e3:bb:
55:75:55:72:30:37:5a:87:ce:dd:bd:40:21:4b:7b:
e0:4d:10:e3:af:c5:ed:34:4c:8c:07:4b:c1:90:34:
01:4e:fc:ae:6b:79:8c:89:00:34:04:15:f8:ab:09:
32:9c:1a:ca:61:89:b1:55:51:f5:57:7d:41:45:72:
a2:60:58:b9:37:67:72:16:cc:97:e9:9d:dc:1f:51:
e5:a2:2e:d5:85:33:1c:f5:62:ea:a8:f0:ec:89:a3:
7f:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:BC:23:92:6B:BF:E0:F0:7E:96:DA:53:29:A0:5A:EB:50:AF:1C:5D
X509v3 Authority Key Identifier:
keyid:28:95:4E:28:F6:E0:1C:A5:C7:35:3B:C3:72:F3:69:A5:F5:1D:9B:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KJVOKPbgHKXHNTvDcvNppfUdm7Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/f37027-afc4-444f-8008-95ce2c755d47/1/KJVOKPbgHKXHNTvDcvNppfUdm7Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/f37027-afc4-444f-8008-95ce2c755d47/1/KJVOKPbgHKXHNTvDcvNppfUdm7Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:23:dc:62:85:14:d6:b1:cf:4b:bc:07:1b:dd:01:6b:7c:b9:
6b:27:af:d2:0d:9f:29:73:4a:80:3c:0b:18:a5:b1:a8:36:88:
6c:09:42:cb:15:96:7c:11:a1:73:f8:2c:53:70:19:f0:1d:aa:
c1:94:a3:7b:46:9c:cb:57:b3:dd:31:1e:16:2e:43:33:e7:88:
af:3b:bc:2d:42:1f:10:08:07:6e:c4:08:44:aa:8c:31:3e:14:
ff:68:af:84:ac:33:36:c2:d6:b3:48:e0:01:6b:2c:e4:f2:04:
30:46:28:d8:35:e5:de:c8:99:64:10:b8:5c:c8:70:16:4d:2c:
a8:cc:68:2b:3e:66:6a:ed:51:c3:14:ec:e1:80:3a:24:b1:1a:
20:16:01:00:24:19:19:9f:9a:b8:1a:0c:e8:d2:6e:5e:65:7b:
9f:b9:16:c6:21:04:68:fc:c3:22:d0:1c:d1:7b:32:39:5d:65:
a6:5f:91:59:cf:a1:07:96:6c:92:08:9e:ae:cc:40:c0:81:ad:
50:95:9b:0d:f3:54:6b:02:34:6b:ee:01:2b:ad:13:e7:03:16:
86:76:f2:93:03:29:56:d8:cd:4e:fb:7d:0b:5f:06:ce:4b:ba:
81:dc:1d:9c:67:b6:44:a2:48:c6:1f:41:04:09:00:a7:a1:f9:
05:52:b2:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 20:46:19 2026 by rpki-client