Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/f37027-afc4-444f-8008-95ce2c755d47/1/KJVOKPbgHKXHNTvDcvNppfUdm7Q.mft
File: KJVOKPbgHKXHNTvDcvNppfUdm7Q.mft (raw, json)
Hash identifier: wgUQzDbSVFzehSDghqYtphzEHSdY7I2hja9kC7Suvck=
Subject key identifier: D4:EB:72:A0:D1:1A:22:C7:5A:70:88:5A:C7:7B:F0:09:EE:DD:DD:34
Authority key identifier: 28:95:4E:28:F6:E0:1C:A5:C7:35:3B:C3:72:F3:69:A5:F5:1D:9B:B4
Certificate issuer: /CN=28954e28f6e01ca5c7353bc372f369a5f51d9bb4
Certificate serial: 019F8ED9C00D90BF6AC1374BBA75E75F3DE9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KJVOKPbgHKXHNTvDcvNppfUdm7Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/f37027-afc4-444f-8008-95ce2c755d47/1/KJVOKPbgHKXHNTvDcvNppfUdm7Q.mft
Manifest number: 07A1
Signing time: Thu 23 Jul 2026 12:01:02 +0000
Manifest this update: Thu 23 Jul 2026 12:01:02 +0000
Manifest next update: Fri 24 Jul 2026 12:01:02 +0000
Files and hashes: 1: AXdXSPys8K4gKCZL761_CRlXkQg.roa (hash: Eq65FPzgWfwxVUVR4WpFvfNbVj2sB466X23GUTRrgvw=)
2: KJVOKPbgHKXHNTvDcvNppfUdm7Q.crl (hash: uDxslOPHIB+JXYXF/BfNTXoMiVbUtl7FaeX3NxAO5JE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/f37027-afc4-444f-8008-95ce2c755d47/1/KJVOKPbgHKXHNTvDcvNppfUdm7Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/f37027-afc4-444f-8008-95ce2c755d47/1/KJVOKPbgHKXHNTvDcvNppfUdm7Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/KJVOKPbgHKXHNTvDcvNppfUdm7Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 12:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8e:d9:c0:0d:90:bf:6a:c1:37:4b:ba:75:e7:5f:3d:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28954e28f6e01ca5c7353bc372f369a5f51d9bb4
Validity
Not Before: Jul 23 12:01:02 2026 GMT
Not After : Jul 24 12:01:02 2026 GMT
Subject: CN=d4eb72a0d11a22c75a70885ac77bf009eedddd34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:6f:6b:0d:a7:b9:82:7c:52:37:cf:78:03:1f:
75:f1:03:47:cd:2f:c3:e7:02:78:a1:b9:8e:72:2a:
b2:67:14:e7:1b:4b:f4:6a:39:6d:0a:45:03:fd:32:
00:d1:49:1b:d9:0a:aa:18:e8:21:e5:04:f6:75:59:
f8:c5:9d:ef:34:ca:50:38:a9:14:e1:ed:83:b5:8f:
81:ad:9f:29:20:49:c3:95:a0:56:c1:09:5d:6e:d3:
9b:a6:d4:f9:e9:f4:ab:bc:1b:51:c7:6a:12:01:68:
cc:46:c1:cb:a2:2a:ca:42:bc:cc:64:ce:bf:46:84:
01:7c:25:fa:60:49:0a:bd:14:83:94:eb:db:79:71:
f2:f4:7b:3b:ff:bb:7b:70:b5:10:33:d3:54:91:0e:
f1:80:16:c8:0e:f8:19:c3:60:25:4a:63:73:1f:a8:
85:a7:b5:06:5b:58:fa:63:71:42:2c:f4:ab:3d:66:
20:15:10:eb:30:58:51:91:dd:4d:15:33:a0:f7:4e:
0f:fc:15:a6:96:f3:99:60:88:3c:f0:e0:db:c9:14:
f0:f6:4e:6c:59:08:da:f2:41:48:6d:8d:31:6b:e6:
bd:4d:d5:d6:f4:73:1c:be:26:52:7b:a1:3e:16:ab:
66:92:cf:e5:92:8c:1b:85:17:13:e3:52:da:27:fc:
96:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:EB:72:A0:D1:1A:22:C7:5A:70:88:5A:C7:7B:F0:09:EE:DD:DD:34
X509v3 Authority Key Identifier:
keyid:28:95:4E:28:F6:E0:1C:A5:C7:35:3B:C3:72:F3:69:A5:F5:1D:9B:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KJVOKPbgHKXHNTvDcvNppfUdm7Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/f37027-afc4-444f-8008-95ce2c755d47/1/KJVOKPbgHKXHNTvDcvNppfUdm7Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/f37027-afc4-444f-8008-95ce2c755d47/1/KJVOKPbgHKXHNTvDcvNppfUdm7Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:86:ce:20:15:9c:f3:c6:50:ae:2c:68:f5:d6:18:35:cf:cc:
3c:39:ac:c1:20:d5:63:38:5b:91:7d:ce:d7:7f:e0:cd:5c:5f:
28:a7:d1:3a:79:d8:46:7e:f7:73:d1:1f:ee:2b:c1:e8:8c:01:
f3:09:c4:6a:c8:ec:33:63:4b:d8:66:a2:67:e9:ed:05:dc:b5:
14:76:61:6b:31:3f:9f:16:d0:dd:d9:e5:07:75:45:56:b6:0b:
5b:13:a7:a5:eb:46:59:df:96:67:f3:31:f9:2b:f5:92:f0:9c:
07:96:dc:83:d2:e8:d9:b7:42:06:d3:4d:43:2d:c3:b6:1b:17:
5d:54:9b:63:4c:9b:36:f9:46:74:f5:73:e7:74:e2:b1:73:b7:
01:e1:9f:a3:26:96:4b:69:7d:c2:c1:ba:37:db:20:2a:60:89:
89:9c:3b:7e:a2:bf:67:88:ec:cb:22:f6:e2:4d:b4:f2:19:dc:
f1:eb:bd:0e:46:8f:56:3e:4d:e1:e5:69:e2:c3:ab:13:5d:b6:
7b:9b:55:f9:91:bc:42:95:57:14:16:cf:17:be:df:7e:1c:3c:
fb:29:7c:89:cd:a1:d0:80:37:77:07:f8:f2:98:7b:9e:4f:9b:
da:95:b7:74:2f:4f:ee:fb:c0:4c:b3:35:a5:fa:a8:89:9b:5b:
64:fa:19:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:51:33 2026 by rpki-client