Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/6788f5-4889-4be7-bb19-a9b8de611a96/1/klBppddk2iVZVNsu6dEkPeFrkQE.mft
File: klBppddk2iVZVNsu6dEkPeFrkQE.mft (raw, json)
Hash identifier: SsoQff4J7kFdiIg5Rd/FJmgvjJvQ5aqQ2ZDxWq++F24=
Subject key identifier: 79:F9:0D:31:13:5F:44:CD:4B:05:BA:20:F6:E8:67:12:66:68:4C:D3
Authority key identifier: 92:50:69:A5:D7:64:DA:25:59:54:DB:2E:E9:D1:24:3D:E1:6B:91:01
Certificate issuer: /CN=925069a5d764da255954db2ee9d1243de16b9101
Certificate serial: 019D9962E162791946C20931182D2873F335
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/klBppddk2iVZVNsu6dEkPeFrkQE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/6788f5-4889-4be7-bb19-a9b8de611a96/1/klBppddk2iVZVNsu6dEkPeFrkQE.mft
Manifest number: 1450
Signing time: Fri 17 Apr 2026 03:01:27 +0000
Manifest this update: Fri 17 Apr 2026 03:01:27 +0000
Manifest next update: Sat 18 Apr 2026 03:01:27 +0000
Files and hashes: 1: g7Y0ZBMWW3x2nBvDARRBK02Lebg.roa (hash: +2cc++Wl1u7PjNULA3cbQO5x+A8pMvr+LGUA63FvUlc=)
2: klBppddk2iVZVNsu6dEkPeFrkQE.crl (hash: sXsq+IfHR/CBP3UKOzZhlnZzDMUNakSJUrOYjtyTH1o=)
3: rqGjD3vaP5vjh-UbO_Aa0T8TroY.roa (hash: VMdVXfW1qOZfCDo+olo19jtE9+BYNQ4kPi8z5UP7KV0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/6788f5-4889-4be7-bb19-a9b8de611a96/1/klBppddk2iVZVNsu6dEkPeFrkQE.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/6788f5-4889-4be7-bb19-a9b8de611a96/1/klBppddk2iVZVNsu6dEkPeFrkQE.mft
rsync://rpki.ripe.net/repository/DEFAULT/klBppddk2iVZVNsu6dEkPeFrkQE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 03:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:62:e1:62:79:19:46:c2:09:31:18:2d:28:73:f3:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=925069a5d764da255954db2ee9d1243de16b9101
Validity
Not Before: Apr 17 03:01:27 2026 GMT
Not After : Apr 18 03:01:27 2026 GMT
Subject: CN=79f90d31135f44cd4b05ba20f6e8671266684cd3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:ef:f4:a6:50:a9:9c:2c:ce:cb:c6:99:75:a5:
b1:5d:42:ff:5d:9c:e3:bb:2b:f0:cf:c9:58:b0:b6:
ef:76:0c:42:4a:a7:3c:39:b1:21:c4:ed:cc:8e:39:
82:43:7c:ea:21:f0:67:ff:14:73:6c:72:e6:d1:b4:
f1:68:c6:bf:d5:4f:30:ae:af:66:74:81:3d:23:bb:
e1:02:23:cf:f3:17:43:2b:cc:28:63:60:f5:7b:d8:
c2:2f:5d:61:3a:30:e4:87:39:0a:25:99:0f:84:f3:
28:5e:a4:f5:ef:f5:60:55:0d:95:fb:a6:e8:d9:b2:
bb:c0:66:a0:ca:ef:00:ed:90:c0:1e:ef:cb:ff:17:
36:99:0a:98:be:88:a7:30:cd:e1:1a:e0:0c:19:b2:
86:00:34:a0:65:f6:9c:bb:9d:a1:b0:d1:a6:98:81:
c3:31:c1:79:09:6a:27:1e:cc:da:0d:b2:8c:96:84:
38:14:3d:d8:8e:35:ce:67:80:31:29:74:99:4a:55:
90:4d:e1:88:3e:b8:33:89:12:94:63:4d:3f:5b:b0:
77:a6:08:67:28:07:5a:73:93:2e:87:bc:7b:7a:cd:
7e:98:6d:d0:c8:f9:22:b8:10:57:b9:46:0c:d8:79:
cf:1d:26:85:90:d3:76:82:df:5b:c2:6a:90:e1:fd:
36:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:F9:0D:31:13:5F:44:CD:4B:05:BA:20:F6:E8:67:12:66:68:4C:D3
X509v3 Authority Key Identifier:
keyid:92:50:69:A5:D7:64:DA:25:59:54:DB:2E:E9:D1:24:3D:E1:6B:91:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/klBppddk2iVZVNsu6dEkPeFrkQE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/6788f5-4889-4be7-bb19-a9b8de611a96/1/klBppddk2iVZVNsu6dEkPeFrkQE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/6788f5-4889-4be7-bb19-a9b8de611a96/1/klBppddk2iVZVNsu6dEkPeFrkQE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:88:7a:d4:75:d6:6a:1f:3f:cb:fb:21:fd:ef:7b:17:73:1d:
87:79:62:ab:98:fc:90:f9:de:10:3b:b3:b7:96:e4:6e:cf:0d:
2a:33:b3:48:a5:9a:ce:8d:0e:8a:7f:4c:ef:48:ea:74:42:96:
87:a9:7e:94:08:b6:4f:5b:7f:f3:79:4a:d8:a8:dd:bd:6f:e5:
a9:42:94:6a:23:8a:8a:a1:dd:e6:fc:3d:85:60:df:7b:00:4a:
a1:3d:98:98:7e:bb:9b:ba:50:50:02:f3:8c:e7:6e:c6:48:67:
f2:fb:f8:72:70:66:96:46:5d:04:30:3d:e0:f4:96:c3:98:a2:
09:f5:cc:b3:d2:05:9b:9e:cf:61:88:e3:20:a8:be:b5:a3:47:
77:d8:e2:37:09:84:91:c9:2f:08:ba:08:81:b5:ef:9a:07:53:
cf:b7:48:b0:d6:c4:b4:85:21:31:0e:54:1e:95:be:bf:2f:22:
86:0b:37:d7:dd:f0:d5:8f:2b:f8:28:f6:cf:8f:8e:d4:8b:3c:
f4:e8:03:dd:7a:05:47:06:4b:18:29:4e:37:a0:c0:2b:37:73:
7c:40:25:e7:31:70:1b:bd:33:af:7d:31:84:1a:2d:5c:1a:42:
e5:7c:8c:a6:34:05:be:53:90:0c:56:5f:e7:72:b8:1d:6c:66:
a1:3d:c7:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:13:10 2026 by rpki-client