Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/227670-fe4d-4bd6-bf28-b2545b404eec/1/kjkTU_bh9QJQSgho6_itDevJ2ng.mft
File: kjkTU_bh9QJQSgho6_itDevJ2ng.mft (raw, json)
Hash identifier: d5xlI+Nh3GJZjjaY3iSB3+IPAD3EBmaC4l/w2m59LOw=
Subject key identifier: A8:B9:6D:09:7E:11:6A:8A:7B:23:9E:5F:39:1C:2B:92:FE:F8:0A:D4
Authority key identifier: 92:39:13:53:F6:E1:F5:02:50:4A:08:68:EB:F8:AD:0D:EB:C9:DA:78
Certificate issuer: /CN=92391353f6e1f502504a0868ebf8ad0debc9da78
Certificate serial: 019F8E6BB4FA149C2132D9AF22486831E587
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kjkTU_bh9QJQSgho6_itDevJ2ng.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/227670-fe4d-4bd6-bf28-b2545b404eec/1/kjkTU_bh9QJQSgho6_itDevJ2ng.mft
Manifest number: 19C8
Signing time: Thu 23 Jul 2026 10:00:51 +0000
Manifest this update: Thu 23 Jul 2026 10:00:51 +0000
Manifest next update: Fri 24 Jul 2026 10:00:51 +0000
Files and hashes: 1: JhmecN5URCtv1yBIbMEV6e9g8Co.roa (hash: pl/+LhQub+A0lSXtk6Diu/3nX3HjGeeg4r2Cz4f+9V4=)
2: SgvNtEPjeS4PQsDsrJuu4hkfOtY.asa (hash: COU0yqjHmkzsF5ND+gIgB3KnAyucghgqR4Ewe3DYMIQ=)
3: kjkTU_bh9QJQSgho6_itDevJ2ng.crl (hash: p7s0S3hE7IBeqzKagEjXZOqaEqkJqhpcK5E8w/C+M/Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/227670-fe4d-4bd6-bf28-b2545b404eec/1/kjkTU_bh9QJQSgho6_itDevJ2ng.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/227670-fe4d-4bd6-bf28-b2545b404eec/1/kjkTU_bh9QJQSgho6_itDevJ2ng.mft
rsync://rpki.ripe.net/repository/DEFAULT/kjkTU_bh9QJQSgho6_itDevJ2ng.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 10:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8e:6b:b4:fa:14:9c:21:32:d9:af:22:48:68:31:e5:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92391353f6e1f502504a0868ebf8ad0debc9da78
Validity
Not Before: Jul 23 10:00:51 2026 GMT
Not After : Jul 24 10:00:51 2026 GMT
Subject: CN=a8b96d097e116a8a7b239e5f391c2b92fef80ad4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:9a:da:3e:0a:ad:81:07:ca:ee:57:af:ab:16:
91:65:15:a2:b9:72:6d:93:e2:18:19:c6:13:e2:b6:
09:05:bd:d4:d0:0c:44:fe:99:a5:91:9f:a7:46:c3:
5f:75:e4:ca:8f:ab:98:3d:f2:e2:d2:60:16:c9:a3:
f2:cc:f7:cf:55:05:5b:65:e1:62:e5:8c:49:f8:d4:
6b:27:65:e8:39:11:11:8a:ee:99:73:e8:47:f9:73:
4d:b0:4e:a3:e8:02:14:fb:94:cd:f1:78:c4:e9:96:
85:47:97:e4:54:9a:6c:66:4c:ad:2c:93:73:15:84:
6f:bc:53:8e:be:71:ff:b6:ed:a6:1e:98:1d:1d:94:
d9:79:69:05:cc:32:8a:eb:50:81:30:86:67:01:0e:
8f:09:af:59:6b:10:8d:84:ff:6b:23:e1:55:d1:0c:
14:2f:80:b0:b8:a6:41:25:6c:5d:3c:7a:9b:73:65:
62:ec:f1:a4:f1:ac:05:48:1d:fd:e9:26:2d:a4:29:
5e:72:e0:bc:fd:d9:2f:2c:c8:12:91:73:eb:fe:54:
d1:78:c9:cc:bf:4b:32:8a:c9:17:9c:2a:05:7a:38:
a9:2d:2d:8d:d3:5a:f5:c3:6e:97:82:e6:22:d8:33:
ea:8a:d9:46:36:b3:d1:5c:ba:5c:db:a8:65:6a:7b:
5d:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:B9:6D:09:7E:11:6A:8A:7B:23:9E:5F:39:1C:2B:92:FE:F8:0A:D4
X509v3 Authority Key Identifier:
keyid:92:39:13:53:F6:E1:F5:02:50:4A:08:68:EB:F8:AD:0D:EB:C9:DA:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kjkTU_bh9QJQSgho6_itDevJ2ng.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/227670-fe4d-4bd6-bf28-b2545b404eec/1/kjkTU_bh9QJQSgho6_itDevJ2ng.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/227670-fe4d-4bd6-bf28-b2545b404eec/1/kjkTU_bh9QJQSgho6_itDevJ2ng.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:90:c0:70:3b:2e:f6:0b:1b:71:a2:23:4a:c3:dd:ff:a4:13:
2b:da:97:83:78:ab:e1:ca:d9:c9:db:71:e8:b1:00:69:e8:c0:
1f:0b:a0:01:f6:12:03:9c:3f:f7:27:87:2e:f4:e5:8e:87:76:
13:8a:fa:54:2f:50:f6:25:37:15:4a:70:7d:8b:d5:06:69:7b:
9e:ab:8c:b2:03:58:3d:59:53:b3:97:a3:ec:5d:0b:44:90:03:
ac:b3:ba:2a:ee:02:10:cf:51:12:21:f5:8e:cd:54:92:61:03:
d7:19:35:08:84:c3:f8:7c:9e:55:b4:57:ae:a7:9a:2a:a2:e6:
85:e1:e0:71:cf:a8:4c:65:52:1a:7a:d1:60:55:96:02:15:22:
a4:7f:eb:c1:a8:57:8a:76:76:bd:b1:86:eb:f7:91:19:cc:2e:
23:6e:e6:e9:13:fd:b9:2f:2e:d7:78:8d:cd:71:3a:75:80:78:
65:81:9e:75:9f:d9:71:a7:c0:9e:d5:67:48:96:d3:5c:58:e9:
a2:e6:e4:b5:c7:e1:ad:90:35:14:7c:cd:1c:f0:93:0c:6c:e1:
82:51:cf:a4:1b:64:8c:8c:e8:af:0c:33:bf:58:83:15:90:98:
15:be:70:71:19:4e:ba:84:0c:d8:12:40:d6:a4:ca:4b:94:9e:
d2:a9:e5:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 19:07:05 2026 by rpki-client