Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/7b45b9-990b-4614-a64e-0f52ea5229fc/1/klbbNIe0xbrLMAF3BXzzF0z3dHc.mft
File: klbbNIe0xbrLMAF3BXzzF0z3dHc.mft (raw, json)
Hash identifier: EOz3c/9LO3iUOe4A7GUrbP9BoSXUHjk35AFl8zuxIY4=
Subject key identifier: B5:81:22:52:B7:D9:6C:BF:19:E1:34:B5:48:48:F9:2D:46:40:DD:C4
Authority key identifier: 92:56:DB:34:87:B4:C5:BA:CB:30:01:77:05:7C:F3:17:4C:F7:74:77
Certificate issuer: /CN=9256db3487b4c5bacb300177057cf3174cf77477
Certificate serial: 019EC3000F6D195B6A4F3D6B44030CFCDB5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/klbbNIe0xbrLMAF3BXzzF0z3dHc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/7b45b9-990b-4614-a64e-0f52ea5229fc/1/klbbNIe0xbrLMAF3BXzzF0z3dHc.mft
Manifest number: 195C
Signing time: Sat 13 Jun 2026 22:00:21 +0000
Manifest this update: Sat 13 Jun 2026 22:00:21 +0000
Manifest next update: Sun 14 Jun 2026 22:00:21 +0000
Files and hashes: 1: 04BGo9FtObILQBaft1sQoeQgCYo.roa (hash: Fwkz3jqMyP5AwHPobSf3siex/Tu6ZYcC4zjVdfIOsac=)
2: klbbNIe0xbrLMAF3BXzzF0z3dHc.crl (hash: JPfJwUC5q/l6WhjMXW5nAhkhdA4WsIOqcgOVi3OUzjY=)
3: rX01FOC9tDHIxRVaHAAeqyrP4Eo.roa (hash: FOCcBoXQG14i7Fi0nDAmmqDfc5/wMS3xKazNxC7cZRc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/7b45b9-990b-4614-a64e-0f52ea5229fc/1/klbbNIe0xbrLMAF3BXzzF0z3dHc.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/7b45b9-990b-4614-a64e-0f52ea5229fc/1/klbbNIe0xbrLMAF3BXzzF0z3dHc.mft
rsync://rpki.ripe.net/repository/DEFAULT/klbbNIe0xbrLMAF3BXzzF0z3dHc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 19:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c3:00:0f:6d:19:5b:6a:4f:3d:6b:44:03:0c:fc:db:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9256db3487b4c5bacb300177057cf3174cf77477
Validity
Not Before: Jun 13 22:00:21 2026 GMT
Not After : Jun 14 22:00:21 2026 GMT
Subject: CN=b5812252b7d96cbf19e134b54848f92d4640ddc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:9f:40:da:2b:d6:87:51:6f:09:61:df:e9:4a:
a7:f4:21:5b:ae:cb:0d:03:8e:23:b3:89:e5:dd:66:
e6:df:1b:87:c5:18:77:6a:9f:e2:e6:af:9b:b4:22:
25:5e:21:ce:ad:4f:17:93:38:2d:60:b0:3a:be:47:
16:5d:d2:b0:a6:eb:cc:1c:9a:c2:d7:01:09:65:c1:
1d:0c:e3:be:f3:be:3c:3b:7a:10:9c:16:53:0f:86:
41:87:90:fc:48:c2:c2:26:e2:19:4a:9e:70:72:71:
e9:c8:23:7f:af:8a:af:0c:15:b6:50:23:89:42:6b:
db:11:8d:4c:9f:38:6b:0a:ba:a5:d6:d6:1d:71:ef:
e0:a3:fe:bd:ca:d5:95:aa:06:83:49:5b:f0:c3:56:
6a:54:8e:d6:27:47:e3:b1:9c:34:b9:b5:61:48:37:
e5:03:7d:b4:4a:9d:52:c0:5e:94:14:61:ba:92:79:
b3:2a:cf:24:2d:ca:ae:02:62:15:be:fc:c6:9c:c0:
2c:b7:71:0e:1d:9d:9e:bc:31:49:9f:06:2e:f0:46:
b7:50:fc:e7:35:4b:c5:de:89:8e:25:32:c7:e3:db:
d9:92:7e:2a:0c:85:d5:98:3c:84:54:0e:c4:53:30:
85:b8:0d:3f:c4:a5:cd:07:91:2f:ec:2f:e0:7e:6b:
22:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:81:22:52:B7:D9:6C:BF:19:E1:34:B5:48:48:F9:2D:46:40:DD:C4
X509v3 Authority Key Identifier:
keyid:92:56:DB:34:87:B4:C5:BA:CB:30:01:77:05:7C:F3:17:4C:F7:74:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/klbbNIe0xbrLMAF3BXzzF0z3dHc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/7b45b9-990b-4614-a64e-0f52ea5229fc/1/klbbNIe0xbrLMAF3BXzzF0z3dHc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/7b45b9-990b-4614-a64e-0f52ea5229fc/1/klbbNIe0xbrLMAF3BXzzF0z3dHc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:a8:e8:37:b2:67:2c:ac:e9:90:01:ec:e5:25:7f:f9:ae:51:
7f:0a:f8:2e:f5:83:d1:ed:33:00:1f:b8:e8:f4:72:e1:28:11:
c6:97:7a:9a:0c:cb:89:4a:fc:a8:c9:52:fe:fe:17:d5:65:ad:
bf:4b:49:82:9c:cc:f1:be:45:d4:99:be:65:f2:ff:c3:c9:28:
a3:c8:45:df:37:13:55:32:e5:1b:19:73:df:9d:9c:91:ed:6a:
ac:be:bb:0f:fb:6f:db:6c:d9:25:09:59:21:33:96:ac:70:bd:
d5:45:f5:30:4b:83:e4:5f:bb:da:06:c3:38:73:45:f7:e0:e5:
62:08:7f:87:47:e9:61:d6:c5:9d:cc:be:12:62:77:79:27:a1:
f6:97:05:0b:12:05:66:97:f2:a2:18:a8:79:b6:96:2b:21:04:
49:15:0b:44:00:d2:76:96:cb:1c:99:fd:97:94:a2:ce:b4:06:
4c:1e:58:5c:a3:d6:f0:94:7e:71:5c:91:71:e9:5c:54:81:a9:
d4:d9:52:12:e1:28:2c:36:d5:93:65:93:61:f8:7b:79:bf:a1:
3b:8f:b9:21:84:db:4a:44:8b:8f:5c:be:26:82:a6:69:31:a9:
60:f0:47:a0:56:9d:b8:28:1b:56:df:26:e4:b0:d4:d9:19:23:
7d:93:2c:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 05:43:07 2026 by rpki-client