Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9e/1743df-0462-4cac-8250-dedc52a2ed8f/1/kJrEshegjDSPstyft0IuHekY9Rc.mft
File: kJrEshegjDSPstyft0IuHekY9Rc.mft (raw, json)
Hash identifier: tUdyN/4brPqoAXsqflUzNT+6xXY4LF9e8sCEFgc0lec=
Subject key identifier: 77:8E:52:84:78:5D:94:63:CC:B1:3F:36:50:9B:64:F1:30:97:7E:72
Authority key identifier: 90:9A:C4:B2:17:A0:8C:34:8F:B2:DC:9F:B7:42:2E:1D:E9:18:F5:17
Certificate issuer: /CN=909ac4b217a08c348fb2dc9fb7422e1de918f517
Certificate serial: 01A11718BF769661F523D8E22D3B34B87CA4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kJrEshegjDSPstyft0IuHekY9Rc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/1743df-0462-4cac-8250-dedc52a2ed8f/1/kJrEshegjDSPstyft0IuHekY9Rc.mft
Manifest number: 0D86
Signing time: Wed 07 Oct 2026 16:01:00 +0000
Manifest this update: Wed 07 Oct 2026 16:01:00 +0000
Manifest next update: Thu 08 Oct 2026 16:01:00 +0000
Files and hashes: 1: Ru4RlUs3xLqI4i2LlHQz9-A7VwY.roa (hash: DVQde1db5OGzpAw+ZFDgqxFZ7/Y4TU4NFBnhQeqaz0U=)
2: cU4TCCYXoajhZCXIIJ5tcUDsnnM.roa (hash: wT8Ut68PEmHJguLhza++gxsB8fpnhz3P88irlMghl78=)
3: kJrEshegjDSPstyft0IuHekY9Rc.crl (hash: ioYTlkPEBWofNW93QdvsDCWXh3ic8KGA8Jq8GhrUtuI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/1743df-0462-4cac-8250-dedc52a2ed8f/1/kJrEshegjDSPstyft0IuHekY9Rc.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/1743df-0462-4cac-8250-dedc52a2ed8f/1/kJrEshegjDSPstyft0IuHekY9Rc.mft
rsync://rpki.ripe.net/repository/DEFAULT/kJrEshegjDSPstyft0IuHekY9Rc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 Oct 2026 13:17:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:17:18:bf:76:96:61:f5:23:d8:e2:2d:3b:34:b8:7c:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=909ac4b217a08c348fb2dc9fb7422e1de918f517
Validity
Not Before: Oct 7 16:01:00 2026 GMT
Not After : Oct 8 16:01:00 2026 GMT
Subject: CN=778e5284785d9463ccb13f36509b64f130977e72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:dc:c2:b6:73:f4:3c:82:05:c3:52:5a:e7:f5:
38:4a:78:67:e1:ce:f0:d2:23:49:74:a6:f8:49:5d:
b7:26:40:f5:90:c6:6d:f8:bf:74:a3:51:f2:38:0b:
d7:cb:05:c6:5c:ad:6c:f6:3d:60:c6:b1:ff:ce:be:
cd:80:d5:6e:98:82:47:ae:71:86:b2:09:23:64:6d:
f5:77:ca:8c:9d:5f:d2:82:15:6d:7d:27:c9:c2:f3:
d2:af:3a:48:52:15:62:ba:92:38:ab:df:b1:e4:e1:
4f:e4:f0:9b:15:68:20:fd:4e:7b:15:9d:a3:60:99:
ad:49:16:71:ff:ef:2b:02:cf:ef:e8:25:2c:71:60:
6f:ea:fb:a6:4d:5a:58:1e:48:68:3a:2c:c2:a3:d7:
70:27:5e:33:1d:c4:18:be:b2:57:7a:81:b9:35:94:
ae:d6:10:67:f9:d8:b6:13:7a:74:f9:16:a2:32:0c:
b6:94:6b:3c:a2:77:ad:01:33:ba:fa:82:9f:22:dc:
78:bc:4c:c0:7a:54:55:ff:51:80:d4:d6:99:29:cd:
bd:b7:27:69:59:38:d2:8f:ee:bb:15:f4:c1:8e:7f:
bb:b1:0e:d1:70:90:b5:ed:e6:05:b5:88:41:f6:68:
17:68:38:00:68:b9:ba:ff:ec:7a:75:68:21:cc:9a:
e6:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:8E:52:84:78:5D:94:63:CC:B1:3F:36:50:9B:64:F1:30:97:7E:72
X509v3 Authority Key Identifier:
keyid:90:9A:C4:B2:17:A0:8C:34:8F:B2:DC:9F:B7:42:2E:1D:E9:18:F5:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kJrEshegjDSPstyft0IuHekY9Rc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/1743df-0462-4cac-8250-dedc52a2ed8f/1/kJrEshegjDSPstyft0IuHekY9Rc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/1743df-0462-4cac-8250-dedc52a2ed8f/1/kJrEshegjDSPstyft0IuHekY9Rc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:db:eb:de:e0:26:61:07:65:36:7d:b2:77:a7:1a:ce:54:18:
78:11:27:96:48:8e:bc:7e:bd:64:3c:4f:e1:6a:68:ca:76:9d:
2d:65:da:bc:1c:10:dc:7f:b4:e0:e3:8e:6d:59:6a:cd:9b:d7:
f1:c9:13:ee:09:a2:3d:12:cd:16:b3:66:c4:f7:90:7d:76:4e:
51:c5:fa:66:01:e8:16:84:7d:3b:43:82:ad:88:2e:e9:0e:df:
83:72:9f:76:9e:e7:65:c5:b9:20:72:f4:da:f6:e4:72:b0:d4:
52:4a:18:6e:01:05:d0:52:5e:2d:e6:0c:c0:91:a7:5d:f8:3c:
d8:9f:45:25:e1:6f:73:63:f2:c1:a9:d3:6e:f3:74:3f:5e:26:
a0:cb:5e:d7:62:51:54:4d:a9:82:df:1c:2b:1c:f5:d4:61:4e:
5f:bb:a7:fb:f5:d9:87:c3:b3:54:a5:43:ac:d6:8a:21:bb:20:
97:f8:db:c9:01:d7:5f:d6:43:cc:40:6b:6e:08:76:1f:db:fe:
7d:0d:27:f3:e3:66:e9:12:f6:1b:cd:db:f4:19:7d:51:dc:a6:
8c:8d:21:4f:b5:60:17:ba:da:7a:e5:2d:e2:e1:af:c7:79:0f:
37:69:d2:f2:96:52:1f:b0:4c:9d:3b:31:3f:67:29:c1:ac:75:
79:b9:b7:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 00:20:51 2026 by rpki-client