Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/f37027-afc4-444f-8008-95ce2c755d47/1/KJVOKPbgHKXHNTvDcvNppfUdm7Q.mft
File: KJVOKPbgHKXHNTvDcvNppfUdm7Q.mft (raw, json)
Hash identifier: xXKFx3lX+jNNpGvrnvz874EAIpEgQvFfp+L/cbawe1s=
Subject key identifier: F7:49:C0:92:6E:AE:41:CB:A5:6C:D7:C0:0D:59:41:C8:99:C9:FB:C2
Authority key identifier: 28:95:4E:28:F6:E0:1C:A5:C7:35:3B:C3:72:F3:69:A5:F5:1D:9B:B4
Certificate issuer: /CN=28954e28f6e01ca5c7353bc372f369a5f51d9bb4
Certificate serial: 019F90C83D6BAC2EF8B38CA9AD7E82A199C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KJVOKPbgHKXHNTvDcvNppfUdm7Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/f37027-afc4-444f-8008-95ce2c755d47/1/KJVOKPbgHKXHNTvDcvNppfUdm7Q.mft
Manifest number: 07A2
Signing time: Thu 23 Jul 2026 21:01:09 +0000
Manifest this update: Thu 23 Jul 2026 21:01:09 +0000
Manifest next update: Fri 24 Jul 2026 21:01:09 +0000
Files and hashes: 1: AXdXSPys8K4gKCZL761_CRlXkQg.roa (hash: Eq65FPzgWfwxVUVR4WpFvfNbVj2sB466X23GUTRrgvw=)
2: KJVOKPbgHKXHNTvDcvNppfUdm7Q.crl (hash: mXi1BVQRCDZijlWgb4DdMfy7wakMhpufHfxtYNvgfH0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/f37027-afc4-444f-8008-95ce2c755d47/1/KJVOKPbgHKXHNTvDcvNppfUdm7Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/f37027-afc4-444f-8008-95ce2c755d47/1/KJVOKPbgHKXHNTvDcvNppfUdm7Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/KJVOKPbgHKXHNTvDcvNppfUdm7Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 21:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:c8:3d:6b:ac:2e:f8:b3:8c:a9:ad:7e:82:a1:99:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28954e28f6e01ca5c7353bc372f369a5f51d9bb4
Validity
Not Before: Jul 23 21:01:09 2026 GMT
Not After : Jul 24 21:01:09 2026 GMT
Subject: CN=f749c0926eae41cba56cd7c00d5941c899c9fbc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:13:43:82:2d:6f:a0:a8:51:be:78:64:d1:d6:
0a:83:e9:70:88:8d:1f:d6:3f:81:3c:58:34:68:ea:
40:19:9e:f3:56:a3:b1:0b:e0:68:08:29:2b:23:5f:
bd:8a:c0:f6:2e:34:4e:ea:63:98:2e:ba:fe:00:0b:
de:75:05:27:08:d7:1c:e7:74:e3:ea:05:c3:cd:c5:
c1:39:e2:2b:39:91:c3:70:74:84:45:76:1e:ec:ab:
9f:ba:30:35:10:af:9c:70:b4:e1:1c:bf:3e:d2:3c:
be:85:40:d2:d6:a7:f8:26:cd:66:02:f2:9a:25:d9:
1b:a5:76:16:7b:4c:cb:12:91:c1:78:1c:91:8c:92:
ff:5b:c0:b6:a5:a8:63:e9:47:0b:fe:79:8b:15:f9:
7b:d2:17:0f:8a:19:30:78:e6:1b:74:fe:7e:27:7a:
02:bd:c4:ab:23:53:46:dc:b4:a4:36:3a:c7:91:3f:
13:ea:13:4b:0c:c4:fe:6b:b7:04:18:35:6c:0f:a5:
f1:b9:d8:e1:51:74:23:8f:c2:90:f4:15:aa:c8:23:
50:d4:22:ca:8e:35:ad:b5:40:7a:6d:24:21:0c:8b:
9c:17:b6:c3:2f:6e:45:90:19:4b:f6:a3:c7:d4:36:
59:da:e9:e3:dd:f3:ca:91:16:5f:6d:dd:d9:c9:b1:
84:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:49:C0:92:6E:AE:41:CB:A5:6C:D7:C0:0D:59:41:C8:99:C9:FB:C2
X509v3 Authority Key Identifier:
keyid:28:95:4E:28:F6:E0:1C:A5:C7:35:3B:C3:72:F3:69:A5:F5:1D:9B:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KJVOKPbgHKXHNTvDcvNppfUdm7Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/f37027-afc4-444f-8008-95ce2c755d47/1/KJVOKPbgHKXHNTvDcvNppfUdm7Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/f37027-afc4-444f-8008-95ce2c755d47/1/KJVOKPbgHKXHNTvDcvNppfUdm7Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:ef:2c:6a:54:33:4a:35:5d:31:c1:bc:cb:dc:ff:2c:df:c9:
b3:78:1f:ea:32:b0:9b:a8:5d:d3:22:6a:2f:71:73:48:1d:cb:
a6:2b:0e:b6:e1:27:ec:37:99:ea:ea:c4:66:e7:3d:9e:ab:63:
36:b7:0d:55:36:04:54:6b:19:f6:d7:10:3b:d4:49:0a:c5:27:
5b:bc:32:ba:1d:91:3b:0b:32:52:84:10:65:bd:c9:ff:ab:ca:
a6:dd:68:a1:63:f6:6d:b6:4e:74:23:9f:cc:1c:b6:1a:c8:f1:
7f:be:df:cc:88:28:74:c6:91:e4:e5:77:68:3e:2c:c5:55:2c:
8b:5d:1f:c0:07:d3:74:38:ee:39:31:ff:05:b1:bb:bb:fe:dd:
8f:37:0e:90:d0:ab:de:c0:0d:d5:51:23:ad:c3:03:ac:ba:bc:
9d:6a:1f:9e:3f:8f:34:63:80:17:6d:d3:d0:76:bb:33:79:fb:
b8:ec:41:c6:49:8e:4b:60:98:ee:a8:69:5a:25:cc:a5:77:f1:
8c:03:98:c1:30:53:65:fc:1c:4b:ab:b5:d9:83:f1:f3:59:96:
b5:1d:63:05:9c:0e:db:42:e0:d6:c7:81:15:f1:77:14:05:84:
90:b7:a4:b8:e9:d0:c0:9a:c4:c6:04:3d:04:a3:87:02:96:63:
2e:8c:80:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 06:38:40 2026 by rpki-client