Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bf/7b45b9-990b-4614-a64e-0f52ea5229fc/1/klbbNIe0xbrLMAF3BXzzF0z3dHc.mft
File: klbbNIe0xbrLMAF3BXzzF0z3dHc.mft (raw, json)
Hash identifier: R3XOuxHjRw8UYJZDL2J3oHiNF1T+UzgD+ctzpA5X2wk=
Subject key identifier: B5:3C:32:6C:C3:1F:43:84:54:62:EF:18:A5:E0:77:15:B3:27:17:E8
Authority key identifier: 92:56:DB:34:87:B4:C5:BA:CB:30:01:77:05:7C:F3:17:4C:F7:74:77
Certificate issuer: /CN=9256db3487b4c5bacb300177057cf3174cf77477
Certificate serial: 01A0D0493112BCA19890FDEAF93CD26D300D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/klbbNIe0xbrLMAF3BXzzF0z3dHc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/7b45b9-990b-4614-a64e-0f52ea5229fc/1/klbbNIe0xbrLMAF3BXzzF0z3dHc.mft
Manifest number: 1A6C
Signing time: Wed 23 Sep 2026 22:00:52 +0000
Manifest this update: Wed 23 Sep 2026 22:00:52 +0000
Manifest next update: Thu 24 Sep 2026 22:00:52 +0000
Files and hashes: 1: 04BGo9FtObILQBaft1sQoeQgCYo.roa (hash: Fwkz3jqMyP5AwHPobSf3siex/Tu6ZYcC4zjVdfIOsac=)
2: klbbNIe0xbrLMAF3BXzzF0z3dHc.crl (hash: jnQiIjzqjzv6i/16ptuVAizE2dc0ls8FevZt0Ia/WQc=)
3: rX01FOC9tDHIxRVaHAAeqyrP4Eo.roa (hash: FOCcBoXQG14i7Fi0nDAmmqDfc5/wMS3xKazNxC7cZRc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/7b45b9-990b-4614-a64e-0f52ea5229fc/1/klbbNIe0xbrLMAF3BXzzF0z3dHc.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/7b45b9-990b-4614-a64e-0f52ea5229fc/1/klbbNIe0xbrLMAF3BXzzF0z3dHc.mft
rsync://rpki.ripe.net/repository/DEFAULT/klbbNIe0xbrLMAF3BXzzF0z3dHc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 18:27:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d0:49:31:12:bc:a1:98:90:fd:ea:f9:3c:d2:6d:30:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9256db3487b4c5bacb300177057cf3174cf77477
Validity
Not Before: Sep 23 22:00:52 2026 GMT
Not After : Sep 24 22:00:52 2026 GMT
Subject: CN=b53c326cc31f43845462ef18a5e07715b32717e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:96:76:70:73:df:ef:29:23:cc:e3:28:be:21:
d2:31:1d:4b:41:37:47:d7:4d:e7:ac:40:38:4f:ce:
6b:71:8f:d6:68:71:90:70:d8:12:84:73:3a:19:83:
07:0b:d0:c7:2e:88:54:63:c2:f7:cb:92:d0:c6:7c:
38:9b:d2:dc:f4:b1:ef:f7:27:bf:3b:4f:65:60:5d:
c5:15:ee:97:84:f2:87:50:c2:fd:cb:83:92:e2:7a:
d6:cf:48:05:00:4e:cb:da:68:0a:50:c0:cc:59:6a:
6b:08:af:35:84:be:76:eb:d1:4c:76:dd:b1:ba:a7:
73:58:8a:87:56:17:ae:be:ea:88:c7:75:73:6a:a9:
39:06:19:6c:a0:6b:92:51:64:97:5d:28:21:ee:18:
06:dc:9a:51:db:e1:b9:ad:da:04:da:43:46:4f:a8:
68:86:b4:2d:b9:71:fb:5e:44:43:37:c6:21:a3:34:
c1:e8:bc:f4:3d:41:73:da:0c:a0:ac:9b:cd:60:cd:
51:0c:a3:95:58:16:a4:db:3b:d9:7f:a8:7f:30:f8:
b2:de:7a:bb:a8:da:99:a5:37:62:6c:bd:e5:e4:65:
bd:f5:a0:c7:48:0a:8b:7b:6c:cf:16:d7:6c:88:d4:
8a:19:86:20:b9:c9:5c:f3:0c:bb:73:90:0f:4f:3a:
46:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:3C:32:6C:C3:1F:43:84:54:62:EF:18:A5:E0:77:15:B3:27:17:E8
X509v3 Authority Key Identifier:
keyid:92:56:DB:34:87:B4:C5:BA:CB:30:01:77:05:7C:F3:17:4C:F7:74:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/klbbNIe0xbrLMAF3BXzzF0z3dHc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/7b45b9-990b-4614-a64e-0f52ea5229fc/1/klbbNIe0xbrLMAF3BXzzF0z3dHc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/7b45b9-990b-4614-a64e-0f52ea5229fc/1/klbbNIe0xbrLMAF3BXzzF0z3dHc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:d5:29:7c:75:4e:1e:d5:d9:c2:4e:28:6f:3d:b1:26:a2:65:
4c:17:47:15:04:08:cc:be:2c:4a:27:e5:b2:22:9a:d7:b1:6d:
2f:59:1f:54:3e:d9:54:44:3d:d6:0a:6a:4b:c6:d5:7d:98:68:
35:1f:b1:06:24:b8:97:70:0b:02:be:c4:42:8c:43:33:9d:b6:
97:3c:cf:da:41:f5:d5:0c:23:d7:ab:bd:4f:5e:69:d7:6f:2c:
f3:a6:98:74:3a:ab:03:d2:63:bb:d7:4a:9f:e4:ad:7e:f5:97:
68:a2:18:25:eb:f9:cf:97:43:e3:5d:41:30:69:37:9b:17:6e:
23:15:b5:67:88:4a:74:aa:9a:65:db:23:d5:1b:03:5a:e3:ec:
b6:fa:56:ca:f9:0b:d4:2b:ca:05:42:cf:83:4d:59:10:1d:77:
3c:c7:eb:3f:44:dd:aa:c5:ad:ef:c4:8a:4d:5e:97:ce:2b:9d:
0c:34:8d:4e:79:1b:b9:5a:d7:e4:27:22:7c:ef:7d:d8:33:5a:
05:46:7b:7e:36:55:86:86:fb:3e:49:cb:d2:ad:3e:a3:d5:ce:
2f:dd:f0:28:11:e5:77:ce:b1:df:33:b2:64:73:4e:22:ed:64:
bb:f4:7d:e0:1e:fb:4b:7b:16:55:00:4c:e5:ae:94:cb:97:f1:
68:13:60:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 03:44:57 2026 by rpki-client