Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/6788f5-4889-4be7-bb19-a9b8de611a96/1/klBppddk2iVZVNsu6dEkPeFrkQE.mft
File: klBppddk2iVZVNsu6dEkPeFrkQE.mft (raw, json)
Hash identifier: /VAGA2s1ZGtr23bYCZEY2dCdUJtptWynrmTRJ7HaQnU=
Subject key identifier: 98:B0:7C:9E:07:34:B0:68:64:B7:67:35:B8:D9:28:CE:F1:AE:A9:57
Authority key identifier: 92:50:69:A5:D7:64:DA:25:59:54:DB:2E:E9:D1:24:3D:E1:6B:91:01
Certificate issuer: /CN=925069a5d764da255954db2ee9d1243de16b9101
Certificate serial: 019CADC7417F2DA0A2FA352241E670994151
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/klBppddk2iVZVNsu6dEkPeFrkQE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/6788f5-4889-4be7-bb19-a9b8de611a96/1/klBppddk2iVZVNsu6dEkPeFrkQE.mft
Manifest number: 13D6
Signing time: Mon 02 Mar 2026 09:00:42 +0000
Manifest this update: Mon 02 Mar 2026 09:00:42 +0000
Manifest next update: Tue 03 Mar 2026 09:00:42 +0000
Files and hashes: 1: g7Y0ZBMWW3x2nBvDARRBK02Lebg.roa (hash: +2cc++Wl1u7PjNULA3cbQO5x+A8pMvr+LGUA63FvUlc=)
2: klBppddk2iVZVNsu6dEkPeFrkQE.crl (hash: PnQrw2dzrLX+RllAe8/qiBqGVUzss+bONBVXiUUSuBU=)
3: rqGjD3vaP5vjh-UbO_Aa0T8TroY.roa (hash: VMdVXfW1qOZfCDo+olo19jtE9+BYNQ4kPi8z5UP7KV0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/6788f5-4889-4be7-bb19-a9b8de611a96/1/klBppddk2iVZVNsu6dEkPeFrkQE.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/6788f5-4889-4be7-bb19-a9b8de611a96/1/klBppddk2iVZVNsu6dEkPeFrkQE.mft
rsync://rpki.ripe.net/repository/DEFAULT/klBppddk2iVZVNsu6dEkPeFrkQE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:c7:41:7f:2d:a0:a2:fa:35:22:41:e6:70:99:41:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=925069a5d764da255954db2ee9d1243de16b9101
Validity
Not Before: Mar 2 09:00:42 2026 GMT
Not After : Mar 3 09:00:42 2026 GMT
Subject: CN=98b07c9e0734b06864b76735b8d928cef1aea957
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:7e:e3:37:26:75:27:d0:68:1a:24:5a:16:65:
aa:2d:64:23:27:92:48:a5:43:ec:cc:f1:0c:c7:a6:
22:78:6c:1a:59:98:23:15:52:92:71:37:ba:1c:7f:
24:b1:d1:0e:9c:5a:08:ce:d8:5f:cd:03:96:1e:de:
64:d4:38:bc:80:61:57:0b:38:b3:94:67:6c:aa:72:
5a:98:08:8d:57:0c:d6:79:e6:a5:e3:cb:c7:12:05:
af:2e:0c:29:02:5d:0c:a4:58:70:64:bd:03:67:26:
4a:20:be:d4:b7:64:9b:7c:15:dc:c5:51:cf:48:58:
ae:da:05:b0:0d:64:8b:61:ca:ff:71:03:6c:3b:59:
79:61:bb:b2:50:9b:18:e1:5e:18:83:a6:e5:05:41:
03:64:9d:3e:de:63:69:e3:0c:39:70:55:ee:f2:49:
30:3d:72:7d:d9:57:05:af:6c:f4:32:1c:71:45:66:
96:be:1f:db:fb:03:d1:b0:1c:f6:45:75:bc:2a:1b:
8d:06:1c:14:50:f5:3c:62:28:69:0b:b4:93:54:3d:
a3:f8:31:52:73:27:5e:13:a5:d5:75:cc:5e:c7:c9:
b9:2b:0d:cb:68:08:a8:b9:94:17:f1:af:3f:3c:78:
31:87:ea:d1:20:da:1c:5d:78:38:5b:81:cf:54:db:
fb:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:B0:7C:9E:07:34:B0:68:64:B7:67:35:B8:D9:28:CE:F1:AE:A9:57
X509v3 Authority Key Identifier:
keyid:92:50:69:A5:D7:64:DA:25:59:54:DB:2E:E9:D1:24:3D:E1:6B:91:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/klBppddk2iVZVNsu6dEkPeFrkQE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/6788f5-4889-4be7-bb19-a9b8de611a96/1/klBppddk2iVZVNsu6dEkPeFrkQE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/6788f5-4889-4be7-bb19-a9b8de611a96/1/klBppddk2iVZVNsu6dEkPeFrkQE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:b6:19:4b:81:82:75:4c:ee:6f:fb:83:f3:01:05:c4:1e:e6:
89:e2:94:1b:d8:83:ff:1e:72:13:a9:2b:74:a4:9a:d7:79:2b:
31:bc:89:72:73:d5:92:ce:06:cc:6a:c3:78:76:f5:9b:70:05:
6f:1b:b4:77:46:5b:e1:47:df:00:39:8b:ff:4f:87:ce:51:59:
67:4c:40:f9:23:f5:f8:4c:89:39:9f:08:bc:f8:9e:cd:c0:12:
29:02:ad:a3:90:0c:12:ea:05:7f:d6:c0:f8:aa:0c:4b:3f:04:
77:50:4d:a1:9f:9e:c5:0b:fd:68:88:42:d4:cf:85:1b:39:41:
da:36:79:2e:71:d1:cf:20:bd:7a:de:c0:b7:49:a3:6f:9b:76:
27:92:6c:00:7d:e6:a0:ad:21:d2:44:b5:76:14:ed:ab:cf:9c:
9a:aa:79:6c:8f:3d:8f:45:e1:93:3a:45:1d:d3:ed:63:73:26:
0d:01:f0:5d:9a:e5:f7:f2:3a:d8:5b:3e:45:9a:ab:20:bb:28:
52:b4:2f:dd:5c:86:d3:a6:6a:75:55:e7:18:e1:a1:22:24:dd:
87:29:bc:09:85:cf:c3:a5:e5:4f:bf:fb:66:4e:b7:3c:09:d5:
d1:4d:95:5c:23:37:6e:08:2f:43:d0:c9:7a:51:54:58:34:87:
d3:76:57:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 18:08:26 2026 by rpki-client