Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/7b45b9-990b-4614-a64e-0f52ea5229fc/1/klbbNIe0xbrLMAF3BXzzF0z3dHc.mft
File: klbbNIe0xbrLMAF3BXzzF0z3dHc.mft (raw, json)
Hash identifier: wSe50uMkMjhy0t+vKrFA2AKvfdIAv2Enj1tmGqv++ic=
Subject key identifier: C4:1D:E3:98:4D:8B:68:E8:B9:2B:12:68:0A:16:AC:BA:38:BC:9C:5C
Authority key identifier: 92:56:DB:34:87:B4:C5:BA:CB:30:01:77:05:7C:F3:17:4C:F7:74:77
Certificate issuer: /CN=9256db3487b4c5bacb300177057cf3174cf77477
Certificate serial: 019CAA21EB95C97434D5B39200A8C9B2C4E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/klbbNIe0xbrLMAF3BXzzF0z3dHc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/7b45b9-990b-4614-a64e-0f52ea5229fc/1/klbbNIe0xbrLMAF3BXzzF0z3dHc.mft
Manifest number: 1846
Signing time: Sun 01 Mar 2026 16:01:15 +0000
Manifest this update: Sun 01 Mar 2026 16:01:15 +0000
Manifest next update: Mon 02 Mar 2026 16:01:15 +0000
Files and hashes: 1: 04BGo9FtObILQBaft1sQoeQgCYo.roa (hash: Fwkz3jqMyP5AwHPobSf3siex/Tu6ZYcC4zjVdfIOsac=)
2: klbbNIe0xbrLMAF3BXzzF0z3dHc.crl (hash: dK74H0ZHF19lg96ueqFusx1Hf9I/fMr9+s+9QYiaUh4=)
3: rX01FOC9tDHIxRVaHAAeqyrP4Eo.roa (hash: FOCcBoXQG14i7Fi0nDAmmqDfc5/wMS3xKazNxC7cZRc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/7b45b9-990b-4614-a64e-0f52ea5229fc/1/klbbNIe0xbrLMAF3BXzzF0z3dHc.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/7b45b9-990b-4614-a64e-0f52ea5229fc/1/klbbNIe0xbrLMAF3BXzzF0z3dHc.mft
rsync://rpki.ripe.net/repository/DEFAULT/klbbNIe0xbrLMAF3BXzzF0z3dHc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:21:eb:95:c9:74:34:d5:b3:92:00:a8:c9:b2:c4:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9256db3487b4c5bacb300177057cf3174cf77477
Validity
Not Before: Mar 1 16:01:15 2026 GMT
Not After : Mar 2 16:01:15 2026 GMT
Subject: CN=c41de3984d8b68e8b92b12680a16acba38bc9c5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:bb:b0:8f:70:37:cd:9e:e0:02:7b:8b:ff:79:
4d:c9:af:81:7c:b7:81:db:dd:c2:6b:7b:44:76:fd:
40:bd:88:ac:56:cf:56:45:e3:ac:0b:e1:80:56:96:
30:9a:7a:5b:5f:bd:ab:1e:e1:a7:ba:a5:ac:f5:ef:
09:bc:6c:58:1c:bf:95:a2:94:f0:4f:24:5d:8c:8c:
a5:83:28:1a:0d:02:01:56:74:97:aa:40:d3:69:2c:
ad:5d:e6:39:25:81:dd:f5:dc:d9:02:50:8c:e2:6f:
78:14:2b:89:0d:3a:c9:c7:44:18:fd:42:ff:85:e1:
b0:ea:cf:1f:f8:6d:73:0a:c3:3a:20:75:11:b8:16:
87:7f:dd:bf:ff:0a:62:41:a4:25:ef:ae:17:d6:f8:
97:65:96:e6:5b:47:4b:f1:fe:11:9f:38:b1:8b:d8:
1a:6d:af:69:c6:30:ad:01:c4:06:82:24:e2:1b:1a:
e3:2e:4c:5b:01:9a:d8:0d:6c:45:66:e6:29:71:78:
d2:12:0d:fd:84:84:14:ed:9b:7e:4c:d2:08:a6:f1:
57:f3:c3:ae:c9:b8:0c:b5:28:cd:fd:6b:1f:94:2c:
f6:f6:b5:2c:50:92:74:50:b0:3e:57:7a:c6:26:3f:
3e:c8:88:de:52:20:d8:65:03:e0:08:84:32:3a:99:
c3:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:1D:E3:98:4D:8B:68:E8:B9:2B:12:68:0A:16:AC:BA:38:BC:9C:5C
X509v3 Authority Key Identifier:
keyid:92:56:DB:34:87:B4:C5:BA:CB:30:01:77:05:7C:F3:17:4C:F7:74:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/klbbNIe0xbrLMAF3BXzzF0z3dHc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/7b45b9-990b-4614-a64e-0f52ea5229fc/1/klbbNIe0xbrLMAF3BXzzF0z3dHc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/7b45b9-990b-4614-a64e-0f52ea5229fc/1/klbbNIe0xbrLMAF3BXzzF0z3dHc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:cb:e0:34:fc:dc:ac:2c:46:db:a8:66:c5:9a:40:89:bc:39:
0f:99:04:b6:49:41:08:6f:ba:58:8f:5d:bd:d9:94:32:6e:02:
79:cd:f5:49:8c:85:57:fa:31:f2:1b:de:7f:a3:17:ba:a0:8b:
9c:82:b3:e6:f6:6a:01:a9:de:53:8d:ae:4d:96:75:b0:53:41:
74:7d:87:72:08:4d:33:5e:23:ac:af:c5:e5:9b:cd:37:d1:50:
91:1b:8a:be:84:07:4a:0f:83:93:0d:d2:b5:af:f6:30:c0:4b:
68:41:6c:f4:09:5f:65:ae:f6:1b:2f:3f:2c:ee:ea:b0:88:6f:
93:8c:16:58:c2:8e:27:99:2a:86:af:35:56:df:82:56:b2:43:
a4:39:07:8c:bc:69:4c:4f:51:4e:38:c1:9b:89:b4:32:b2:eb:
fe:dc:ee:54:2d:02:ed:36:aa:03:9f:66:36:78:75:04:a6:26:
31:64:1a:2a:af:a2:16:ae:72:e1:3c:cb:7a:69:01:3a:ac:54:
dc:ba:77:ba:56:ba:e5:37:74:72:9c:e1:60:68:e4:9b:41:d9:
85:7d:6b:08:af:b1:24:50:b4:2b:d4:c5:a0:a4:dc:d5:f0:c0:
cc:fc:cf:8f:0c:39:08:e3:8e:19:ff:50:dc:cc:aa:ef:90:56:
27:5c:81:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:50:36 2026 by rpki-client