Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/1743df-0462-4cac-8250-dedc52a2ed8f/1/kJrEshegjDSPstyft0IuHekY9Rc.mft
File: kJrEshegjDSPstyft0IuHekY9Rc.mft (raw, json)
Hash identifier: bMRqyTdPP8pgo151yFix6k0ibx7ILPIpKG/1Rf1Eq+g=
Subject key identifier: 72:7F:73:C4:CB:A0:2E:5C:D6:05:D0:12:46:51:68:90:9B:A1:E0:44
Authority key identifier: 90:9A:C4:B2:17:A0:8C:34:8F:B2:DC:9F:B7:42:2E:1D:E9:18:F5:17
Certificate issuer: /CN=909ac4b217a08c348fb2dc9fb7422e1de918f517
Certificate serial: 019D2703ABFE21382C80077740E182110D65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kJrEshegjDSPstyft0IuHekY9Rc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/1743df-0462-4cac-8250-dedc52a2ed8f/1/kJrEshegjDSPstyft0IuHekY9Rc.mft
Manifest number: 0B7C
Signing time: Wed 25 Mar 2026 22:00:45 +0000
Manifest this update: Wed 25 Mar 2026 22:00:45 +0000
Manifest next update: Thu 26 Mar 2026 22:00:45 +0000
Files and hashes: 1: Ru4RlUs3xLqI4i2LlHQz9-A7VwY.roa (hash: DVQde1db5OGzpAw+ZFDgqxFZ7/Y4TU4NFBnhQeqaz0U=)
2: cU4TCCYXoajhZCXIIJ5tcUDsnnM.roa (hash: wT8Ut68PEmHJguLhza++gxsB8fpnhz3P88irlMghl78=)
3: kJrEshegjDSPstyft0IuHekY9Rc.crl (hash: aWmhjJEZkQ0ti5iQnUo0PEoUc5/fLRyduR1wNVhQP/c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/1743df-0462-4cac-8250-dedc52a2ed8f/1/kJrEshegjDSPstyft0IuHekY9Rc.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/1743df-0462-4cac-8250-dedc52a2ed8f/1/kJrEshegjDSPstyft0IuHekY9Rc.mft
rsync://rpki.ripe.net/repository/DEFAULT/kJrEshegjDSPstyft0IuHekY9Rc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:03:ab:fe:21:38:2c:80:07:77:40:e1:82:11:0d:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=909ac4b217a08c348fb2dc9fb7422e1de918f517
Validity
Not Before: Mar 25 22:00:45 2026 GMT
Not After : Mar 26 22:00:45 2026 GMT
Subject: CN=727f73c4cba02e5cd605d012465168909ba1e044
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:58:7f:f2:e9:ca:6a:c2:d6:0b:a0:46:a5:50:
36:06:0b:f8:99:78:66:1c:4b:93:7f:bc:cb:94:20:
14:b7:fe:d9:23:c4:56:6c:4d:e6:3f:2b:a6:ce:36:
5a:25:4a:d0:27:0d:cb:36:08:08:90:16:3c:0e:d3:
a9:7c:90:ca:9b:8c:89:d7:07:22:24:d7:60:93:89:
75:ef:bd:1e:14:4e:04:ea:cd:c7:3d:02:04:dd:7f:
db:72:c9:4a:9c:fe:a4:7f:57:20:ab:fc:d6:f6:89:
05:bf:a3:d4:8b:76:0a:0e:89:bc:93:90:61:af:23:
a1:56:d7:40:4d:64:1d:22:5a:b2:92:33:18:ec:f2:
89:c7:8b:a1:4b:63:0b:ec:58:32:45:77:19:e1:57:
86:29:9c:ff:88:1c:04:ff:94:fa:3b:9d:6b:c7:93:
45:8c:47:e0:46:0c:4f:ad:ca:c3:9a:1f:2f:08:a4:
37:fd:f1:e7:73:86:32:6d:4d:60:de:d8:58:c1:2e:
b2:63:0c:01:32:61:f8:5a:f1:93:51:04:d8:44:9d:
1e:38:74:92:69:cb:3b:9d:65:df:e9:7f:aa:97:d8:
a0:03:7a:3f:e7:4d:50:ef:84:3d:4a:db:df:ee:8a:
26:a2:af:2f:df:80:e3:5b:65:b8:ee:70:e5:1b:c4:
ed:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:7F:73:C4:CB:A0:2E:5C:D6:05:D0:12:46:51:68:90:9B:A1:E0:44
X509v3 Authority Key Identifier:
keyid:90:9A:C4:B2:17:A0:8C:34:8F:B2:DC:9F:B7:42:2E:1D:E9:18:F5:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kJrEshegjDSPstyft0IuHekY9Rc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/1743df-0462-4cac-8250-dedc52a2ed8f/1/kJrEshegjDSPstyft0IuHekY9Rc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/1743df-0462-4cac-8250-dedc52a2ed8f/1/kJrEshegjDSPstyft0IuHekY9Rc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:fc:68:a7:a6:a8:92:54:47:64:61:d0:5b:66:83:2f:ca:b6:
27:64:6a:da:7c:a2:09:38:97:33:3c:57:84:3d:30:eb:48:18:
ac:89:65:33:30:0d:35:c5:0c:25:76:04:16:39:15:a8:46:29:
7e:01:c2:f3:6e:f8:c1:68:f4:2b:2b:c9:a4:74:48:46:cd:9c:
d1:83:c2:38:ad:6e:2d:41:df:1a:1b:00:0e:a2:c9:7a:47:f1:
64:ee:45:a1:16:b2:62:7c:e2:d8:5d:c0:21:6e:90:c8:2a:72:
03:1c:ee:eb:d9:a7:c0:b4:e8:c5:8e:f2:62:f7:82:e7:54:a8:
c8:ce:fc:76:07:7c:56:88:56:0a:25:8d:51:92:e6:d5:d8:32:
3b:b4:c8:8c:a6:79:12:23:0c:f0:36:f8:b9:9c:20:9b:94:a3:
12:6a:f3:e2:d1:4a:eb:3d:a3:23:ec:d3:b9:8c:50:b2:e4:ea:
c9:4e:50:3e:8d:89:a9:79:7c:9d:6a:b8:29:bd:c1:c5:f8:82:
b1:c2:a5:0e:bc:cb:01:30:6e:bb:92:2f:b8:f8:fd:2c:b3:70:
10:a7:2c:2c:9c:3d:ae:69:bb:0e:80:93:4b:ba:ac:06:04:62:
e8:b3:33:6c:0c:46:12:10:54:8e:f6:2a:22:75:a0:dd:3d:ca:
de:30:46:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:00:46 2026 by rpki-client