Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/de/6788f5-4889-4be7-bb19-a9b8de611a96/1/klBppddk2iVZVNsu6dEkPeFrkQE.mft
File: klBppddk2iVZVNsu6dEkPeFrkQE.mft (raw, json)
Hash identifier: P8cLyk8i8WJz53PpoG7wOHyvBnf37ORUlPJx+G8w1WQ=
Subject key identifier: 66:BD:D4:8E:32:FB:6F:94:17:D4:9D:36:72:56:79:48:DD:D2:F7:77
Authority key identifier: 92:50:69:A5:D7:64:DA:25:59:54:DB:2E:E9:D1:24:3D:E1:6B:91:01
Certificate issuer: /CN=925069a5d764da255954db2ee9d1243de16b9101
Certificate serial: 01A0DD9726B381EF1CEC261F91FB7FD8D6BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/klBppddk2iVZVNsu6dEkPeFrkQE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/6788f5-4889-4be7-bb19-a9b8de611a96/1/klBppddk2iVZVNsu6dEkPeFrkQE.mft
Manifest number: 1601
Signing time: Sat 26 Sep 2026 12:01:05 +0000
Manifest this update: Sat 26 Sep 2026 12:01:05 +0000
Manifest next update: Sun 27 Sep 2026 12:01:05 +0000
Files and hashes: 1: g7Y0ZBMWW3x2nBvDARRBK02Lebg.roa (hash: +2cc++Wl1u7PjNULA3cbQO5x+A8pMvr+LGUA63FvUlc=)
2: klBppddk2iVZVNsu6dEkPeFrkQE.crl (hash: dS3slIPlZTMcnRkXMveDJ4w1AoF+U/qlhK+CLqdVvBY=)
3: rqGjD3vaP5vjh-UbO_Aa0T8TroY.roa (hash: VMdVXfW1qOZfCDo+olo19jtE9+BYNQ4kPi8z5UP7KV0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/6788f5-4889-4be7-bb19-a9b8de611a96/1/klBppddk2iVZVNsu6dEkPeFrkQE.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/6788f5-4889-4be7-bb19-a9b8de611a96/1/klBppddk2iVZVNsu6dEkPeFrkQE.mft
rsync://rpki.ripe.net/repository/DEFAULT/klBppddk2iVZVNsu6dEkPeFrkQE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 11:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dd:97:26:b3:81:ef:1c:ec:26:1f:91:fb:7f:d8:d6:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=925069a5d764da255954db2ee9d1243de16b9101
Validity
Not Before: Sep 26 12:01:05 2026 GMT
Not After : Sep 27 12:01:05 2026 GMT
Subject: CN=66bdd48e32fb6f9417d49d3672567948ddd2f777
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:26:16:74:63:2d:b1:67:12:09:18:7e:a7:70:
35:0a:5c:e6:04:73:96:ff:e0:cc:ca:08:5b:bf:44:
11:d7:60:cb:b1:d0:eb:9e:e4:45:e1:d9:d0:6e:29:
9b:2d:e3:61:14:e2:e5:81:13:ab:51:88:01:6e:bf:
13:41:2a:5e:23:83:da:49:32:fc:cf:6b:20:c1:8d:
fe:61:42:95:cb:c1:62:c7:c8:55:e5:e3:74:6a:a1:
b6:17:74:31:b0:2a:7c:f2:3d:d1:f7:d5:e1:e8:a1:
75:64:0f:a5:76:e8:c3:45:29:f2:b0:4c:40:46:86:
d2:b4:3c:54:1a:4f:d9:cb:f2:03:29:f9:e2:8c:c7:
07:22:f4:12:ad:61:48:93:c6:99:c6:bd:d2:c5:98:
ad:ab:98:c5:21:37:47:eb:78:2c:d2:32:c0:43:e7:
00:8a:bf:10:51:7b:f4:b7:2c:e1:90:b6:de:59:15:
8b:b5:6d:ab:a9:90:d1:9e:03:de:6d:f7:dc:d6:d1:
5a:cd:24:26:a4:1c:c5:8c:73:af:de:54:4d:66:48:
b5:b0:90:3d:23:55:36:d4:0d:ed:61:1d:24:f3:9e:
b6:0a:be:af:b9:77:f1:1f:2a:af:92:7c:88:b3:6b:
70:8a:c2:b4:ab:6c:9a:2d:55:e4:b6:ee:eb:39:b5:
4c:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:BD:D4:8E:32:FB:6F:94:17:D4:9D:36:72:56:79:48:DD:D2:F7:77
X509v3 Authority Key Identifier:
keyid:92:50:69:A5:D7:64:DA:25:59:54:DB:2E:E9:D1:24:3D:E1:6B:91:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/klBppddk2iVZVNsu6dEkPeFrkQE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/6788f5-4889-4be7-bb19-a9b8de611a96/1/klBppddk2iVZVNsu6dEkPeFrkQE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/6788f5-4889-4be7-bb19-a9b8de611a96/1/klBppddk2iVZVNsu6dEkPeFrkQE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:0a:77:82:60:9e:30:72:93:27:a1:85:50:98:b4:15:e9:29:
0a:1c:3b:f3:f2:03:18:f8:59:06:26:61:f9:fb:ef:4f:c4:cb:
5f:b1:2c:3d:33:57:40:1e:c5:82:10:de:8a:89:8e:62:77:e7:
11:5f:b9:d9:8f:dc:11:05:ea:8c:a3:4f:bf:43:41:e2:d0:d3:
1f:e3:8c:c6:4c:31:ef:7d:81:b8:e5:c3:4c:dc:19:72:4d:e6:
94:5e:7a:7d:0e:87:fc:39:61:b6:40:68:1b:ac:1b:da:87:fe:
1f:1d:99:56:af:09:09:92:f7:d9:9d:c8:48:2a:f4:ef:ad:1d:
67:11:32:eb:f2:38:73:38:84:17:e6:c3:25:e1:78:9d:45:5a:
4e:eb:32:33:78:19:6b:83:4f:be:99:12:c1:de:b8:c5:08:f7:
dc:77:66:7d:7a:fd:66:7d:71:8a:ca:8a:e6:f5:0d:96:b3:f8:
f3:37:35:4b:1a:63:a1:2e:ac:48:54:98:24:05:79:f5:1e:ce:
db:9c:ec:25:4d:0e:4a:ed:0c:80:b8:2d:c9:a3:14:10:f3:0b:
21:cc:7b:41:35:56:d2:56:97:b4:3c:27:dd:21:0a:a8:0a:54:
a2:64:77:83:9d:44:3b:d4:89:7c:e7:58:09:8a:62:7f:02:4a:
0d:14:ec:2e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDdlyazge8c7CYfkft/2Na9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyNTA2OWE1ZDc2NGRhMjU1OTU0ZGIyZWU5ZDEyNDNkZTE2
YjkxMDEwHhcNMjYwOTI2MTIwMTA1WhcNMjYwOTI3MTIwMTA1WjAzMTEwLwYDVQQD
Eyg2NmJkZDQ4ZTMyZmI2Zjk0MTdkNDlkMzY3MjU2Nzk0OGRkZDJmNzc3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnSYWdGMtsWcSCRh+p3A1ClzmBHOW
/+DMyghbv0QR12DLsdDrnuRF4dnQbimbLeNhFOLlgROrUYgBbr8TQSpeI4PaSTL8
z2sgwY3+YUKVy8Fix8hV5eN0aqG2F3QxsCp88j3R99Xh6KF1ZA+ldujDRSnysExA
RobStDxUGk/Zy/IDKfnijMcHIvQSrWFIk8aZxr3SxZitq5jFITdH63gs0jLAQ+cA
ir8QUXv0tyzhkLbeWRWLtW2rqZDRngPebffc1tFazSQmpBzFjHOv3lRNZki1sJA9
I1U21A3tYR0k8562Cr6vuXfxHyqvknyIs2twisK0q2yaLVXktu7rObVMOwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGa91I4y+2+UF9SdNnJWeUjd0vd3MB8GA1UdIwQY
MBaAFJJQaaXXZNolWVTbLunRJD3ha5EBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva2xCcHBkZGsyaVZaVk5zdTZkRWtQZUZya1FFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS82Nzg4ZjUtNDg4OS00YmU3LWJiMTkt
YTliOGRlNjExYTk2LzEva2xCcHBkZGsyaVZaVk5zdTZkRWtQZUZya1FFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZS82Nzg4ZjUtNDg4OS00YmU3LWJiMTktYTliOGRlNjExYTk2
LzEva2xCcHBkZGsyaVZaVk5zdTZkRWtQZUZya1FFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXQp3gmCe
MHKTJ6GFUJi0FekpChw78/IDGPhZBiZh+fvvT8TLX7EsPTNXQB7FghDeiomOYnfn
EV+52Y/cEQXqjKNPv0NB4tDTH+OMxkwx732BuOXDTNwZck3mlF56fQ6H/DlhtkBo
G6wb2of+Hx2ZVq8JCZL32Z3ISCr0760dZxEy6/I4cziEF+bDJeF4nUVaTusyM3gZ
a4NPvpkSwd64xQj33HdmfXr9Zn1xisqK5vUNlrP48zc1SxpjoS6sSFSYJAV59R7O
25zsJU0OSu0MgLgtyaMUEPMLIcx7QTVW0laXtDwn3SEKqApUomR3g51EO9SJfOdY
CYpifwJKDRTsLg==
-----END CERTIFICATE-----
Generated at Sat Sep 26 17:39:21 2026 by rpki-client