Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/1743df-0462-4cac-8250-dedc52a2ed8f/1/kJrEshegjDSPstyft0IuHekY9Rc.mft
File: kJrEshegjDSPstyft0IuHekY9Rc.mft (raw, json)
Hash identifier: /7bBAktDnKFfTKBEevKjUZlAix9Rw4SgfzYhV+ptjOY=
Subject key identifier: DE:F4:9E:0F:84:8A:FA:03:56:70:A0:E7:53:AE:26:69:A7:49:F5:31
Authority key identifier: 90:9A:C4:B2:17:A0:8C:34:8F:B2:DC:9F:B7:42:2E:1D:E9:18:F5:17
Certificate issuer: /CN=909ac4b217a08c348fb2dc9fb7422e1de918f517
Certificate serial: 019F92EDD1A3CF35B6801F79BEA2455BBE9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kJrEshegjDSPstyft0IuHekY9Rc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/1743df-0462-4cac-8250-dedc52a2ed8f/1/kJrEshegjDSPstyft0IuHekY9Rc.mft
Manifest number: 0CBD
Signing time: Fri 24 Jul 2026 07:01:26 +0000
Manifest this update: Fri 24 Jul 2026 07:01:26 +0000
Manifest next update: Sat 25 Jul 2026 07:01:26 +0000
Files and hashes: 1: Ru4RlUs3xLqI4i2LlHQz9-A7VwY.roa (hash: DVQde1db5OGzpAw+ZFDgqxFZ7/Y4TU4NFBnhQeqaz0U=)
2: cU4TCCYXoajhZCXIIJ5tcUDsnnM.roa (hash: wT8Ut68PEmHJguLhza++gxsB8fpnhz3P88irlMghl78=)
3: kJrEshegjDSPstyft0IuHekY9Rc.crl (hash: E/cwWvdAo0Qb3j2kO/WhRnl9uPHmNmGlsQWpgHw5DL4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/1743df-0462-4cac-8250-dedc52a2ed8f/1/kJrEshegjDSPstyft0IuHekY9Rc.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/1743df-0462-4cac-8250-dedc52a2ed8f/1/kJrEshegjDSPstyft0IuHekY9Rc.mft
rsync://rpki.ripe.net/repository/DEFAULT/kJrEshegjDSPstyft0IuHekY9Rc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 07:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:ed:d1:a3:cf:35:b6:80:1f:79:be:a2:45:5b:be:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=909ac4b217a08c348fb2dc9fb7422e1de918f517
Validity
Not Before: Jul 24 07:01:26 2026 GMT
Not After : Jul 25 07:01:26 2026 GMT
Subject: CN=def49e0f848afa035670a0e753ae2669a749f531
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:e5:75:8c:1b:44:1d:10:c5:54:83:9c:ac:8f:
ba:aa:13:6e:37:de:cd:57:a0:c6:1f:d6:12:15:05:
2a:02:ef:80:fa:5e:25:c6:63:82:a8:c4:28:30:9e:
41:85:2a:ab:67:4c:81:cd:c7:45:01:5c:a5:ce:76:
15:cb:3e:25:f0:68:24:f1:12:c2:32:79:05:9a:4e:
18:f0:4b:a5:2c:96:2e:69:50:b1:6e:b4:10:d8:6b:
df:1a:ee:f4:80:3c:45:fd:3a:10:5f:20:26:b6:ba:
2f:70:12:91:c4:68:a1:e2:bd:89:0d:9a:65:d0:37:
3e:20:df:36:7d:6a:88:63:fa:2b:98:e9:f0:8d:7c:
37:29:25:20:ad:8a:3b:a2:e6:3a:a0:45:cd:64:f2:
0f:c8:01:3c:b3:77:19:ff:45:1e:bf:99:d0:f0:de:
1a:ed:70:17:8c:9e:89:dc:48:20:b6:f1:31:e6:af:
d6:3c:26:75:25:7a:5f:d0:cb:c7:11:d2:31:9c:9e:
7b:01:67:af:37:c5:17:77:b8:a1:17:dd:34:c3:c9:
82:d3:07:71:e4:18:40:42:3b:7c:40:9e:ea:48:bd:
f6:a0:ec:3d:a5:2b:62:f2:d5:55:45:c6:21:0b:45:
31:24:ee:06:a1:3e:b3:4d:b1:b9:ee:5a:8a:08:c8:
1c:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:F4:9E:0F:84:8A:FA:03:56:70:A0:E7:53:AE:26:69:A7:49:F5:31
X509v3 Authority Key Identifier:
keyid:90:9A:C4:B2:17:A0:8C:34:8F:B2:DC:9F:B7:42:2E:1D:E9:18:F5:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kJrEshegjDSPstyft0IuHekY9Rc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/1743df-0462-4cac-8250-dedc52a2ed8f/1/kJrEshegjDSPstyft0IuHekY9Rc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/1743df-0462-4cac-8250-dedc52a2ed8f/1/kJrEshegjDSPstyft0IuHekY9Rc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:a3:a8:96:7b:f4:02:1f:39:ee:e4:b2:a2:09:ac:ed:ec:ce:
3c:bc:91:2d:02:2d:2b:3e:42:59:b6:3f:a7:f8:06:6d:63:81:
ac:44:d2:d9:8d:9a:48:ab:88:c5:bd:2d:1f:7a:61:d0:f2:f3:
cb:92:a0:35:0f:8e:ff:c0:18:8a:5b:fa:ca:08:26:c4:b6:35:
14:98:b1:cd:fd:01:05:40:ca:c5:cc:0b:b6:72:30:27:99:af:
da:1e:03:a3:0f:0c:b7:49:46:56:46:09:39:3b:1d:42:94:3e:
e1:70:c1:16:4c:2e:ea:1d:f1:fc:f1:ba:ce:81:a5:75:76:b0:
21:81:30:39:e1:39:0e:54:62:9c:8f:49:d1:91:ff:c5:dc:08:
8f:5a:29:de:62:72:db:0a:33:9c:98:9e:9d:20:e1:a5:b4:9d:
86:36:93:a5:20:c1:d8:bf:24:a2:d2:af:d9:93:33:41:42:6c:
c2:98:db:71:24:82:9e:08:75:03:f2:03:af:b0:da:f5:c3:a7:
32:51:d3:3a:24:6d:14:59:10:2d:18:c9:b0:d7:a7:b2:41:6d:
03:b8:70:c7:5f:04:92:78:ef:64:c5:c5:bf:4e:c1:ee:0e:bd:
37:d3:5d:55:1a:dd:76:b9:00:23:d4:ef:f5:af:4a:74:3a:9a:
16:78:cb:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:13:32 2026 by rpki-client