Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/6788f5-4889-4be7-bb19-a9b8de611a96/1/klBppddk2iVZVNsu6dEkPeFrkQE.mft
File: klBppddk2iVZVNsu6dEkPeFrkQE.mft (raw, json)
Hash identifier: /rjBD3Pba6Bz40zIqTji0gR6dvYEMo0Cn9q6bkT6svE=
Subject key identifier: 61:28:0D:3F:C4:5B:3A:C2:4F:60:4B:78:93:6B:18:BF:7B:99:EF:B0
Authority key identifier: 92:50:69:A5:D7:64:DA:25:59:54:DB:2E:E9:D1:24:3D:E1:6B:91:01
Certificate issuer: /CN=925069a5d764da255954db2ee9d1243de16b9101
Certificate serial: 019ED42B1D789CA6CC3AADC7E8A1BEA89EFB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/klBppddk2iVZVNsu6dEkPeFrkQE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/6788f5-4889-4be7-bb19-a9b8de611a96/1/klBppddk2iVZVNsu6dEkPeFrkQE.mft
Manifest number: 14F3
Signing time: Wed 17 Jun 2026 06:00:55 +0000
Manifest this update: Wed 17 Jun 2026 06:00:55 +0000
Manifest next update: Thu 18 Jun 2026 06:00:55 +0000
Files and hashes: 1: g7Y0ZBMWW3x2nBvDARRBK02Lebg.roa (hash: +2cc++Wl1u7PjNULA3cbQO5x+A8pMvr+LGUA63FvUlc=)
2: klBppddk2iVZVNsu6dEkPeFrkQE.crl (hash: QsKYaZEnqvsgwFaGUgM4hEz6Px2DNhQ01ukZ7F/VUO4=)
3: rqGjD3vaP5vjh-UbO_Aa0T8TroY.roa (hash: VMdVXfW1qOZfCDo+olo19jtE9+BYNQ4kPi8z5UP7KV0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/6788f5-4889-4be7-bb19-a9b8de611a96/1/klBppddk2iVZVNsu6dEkPeFrkQE.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/6788f5-4889-4be7-bb19-a9b8de611a96/1/klBppddk2iVZVNsu6dEkPeFrkQE.mft
rsync://rpki.ripe.net/repository/DEFAULT/klBppddk2iVZVNsu6dEkPeFrkQE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 18 Jun 2026 06:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:d4:2b:1d:78:9c:a6:cc:3a:ad:c7:e8:a1:be:a8:9e:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=925069a5d764da255954db2ee9d1243de16b9101
Validity
Not Before: Jun 17 06:00:55 2026 GMT
Not After : Jun 18 06:00:55 2026 GMT
Subject: CN=61280d3fc45b3ac24f604b78936b18bf7b99efb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:cb:73:df:e1:71:58:b1:85:d5:63:fc:31:99:
a1:41:cc:e6:0c:bc:7e:0f:11:0f:8e:b4:b8:30:43:
33:a7:62:82:39:b2:70:ed:1d:0a:eb:5a:53:a5:86:
96:4c:aa:b5:e1:9b:78:d9:da:07:f5:ac:13:08:60:
24:de:ca:a1:f4:aa:aa:ce:11:8a:ae:60:da:a9:20:
9f:93:90:5f:20:e7:61:64:12:0e:87:a6:02:d8:b8:
c1:c2:0a:91:75:0b:14:bd:e2:56:4e:ad:8a:ee:9c:
c6:27:b4:77:80:cf:5d:ad:48:ed:97:a0:88:9e:65:
f1:d5:71:52:d5:46:6d:c5:72:f8:0f:cd:c0:ce:4d:
13:51:cc:60:f9:7b:75:d8:07:ce:40:f3:c0:6d:43:
c9:5a:a0:79:bf:ed:97:9f:18:16:45:8f:cb:ca:86:
29:a3:a3:92:18:a3:04:c5:dc:86:6b:9c:18:c1:21:
21:66:0f:70:ac:19:c8:73:26:d6:9b:70:da:64:05:
96:e2:71:0a:1b:5d:16:68:b6:df:a3:39:94:42:c6:
c9:99:0a:cf:5a:d9:1c:76:d3:27:12:2b:6a:69:ff:
f4:b9:f6:ae:90:99:bb:0e:d6:a1:e1:d5:24:07:08:
80:2b:40:d7:18:51:5c:af:5e:80:47:a7:46:b4:5d:
16:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:28:0D:3F:C4:5B:3A:C2:4F:60:4B:78:93:6B:18:BF:7B:99:EF:B0
X509v3 Authority Key Identifier:
keyid:92:50:69:A5:D7:64:DA:25:59:54:DB:2E:E9:D1:24:3D:E1:6B:91:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/klBppddk2iVZVNsu6dEkPeFrkQE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/6788f5-4889-4be7-bb19-a9b8de611a96/1/klBppddk2iVZVNsu6dEkPeFrkQE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/6788f5-4889-4be7-bb19-a9b8de611a96/1/klBppddk2iVZVNsu6dEkPeFrkQE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:89:dd:ec:86:e7:6e:2f:d8:73:fc:b0:d7:35:4b:57:dd:40:
4a:e6:6d:d7:d4:fd:4e:47:52:b6:35:56:b7:0d:e6:9b:f7:fe:
ff:ad:f0:7d:17:b2:66:f2:03:96:18:e6:9b:9b:ba:e4:5b:6f:
9e:0b:e5:87:a8:31:d4:1e:66:bd:06:85:a1:fc:e5:92:04:cf:
e1:17:d7:ab:2f:90:6a:25:fe:56:1c:4d:55:73:c9:df:23:3e:
a8:04:c4:a3:f5:d1:93:54:4d:81:9f:8f:aa:5e:03:0e:17:90:
44:87:73:c0:47:56:8d:ac:3b:b5:12:1d:11:3d:cc:4d:6e:82:
1d:f1:97:a2:80:9f:92:02:82:9b:cd:c0:cd:fa:c6:85:c5:35:
1b:6e:fa:34:08:ab:b5:50:b5:49:a2:22:97:71:1a:5f:35:a6:
7a:09:22:c2:19:69:c7:00:ff:bf:9e:17:2e:92:0a:83:74:91:
a5:88:54:e4:86:a5:43:85:df:b8:83:71:ba:eb:37:39:84:45:
eb:93:fc:01:99:c1:75:e4:82:df:f5:7c:71:bc:41:77:34:31:
27:1e:1d:a1:95:fb:5f:74:36:5d:11:94:0b:ec:0d:01:51:68:
3e:86:4a:38:e5:71:f7:b3:91:d8:96:4a:3f:43:ba:d1:82:7c:
6d:fa:f1:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 15:56:19 2026 by rpki-client