Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/b717c5-a64b-4475-be3e-5da8d677d847/1/klbr9muA8IE1hY0UTO1veFg09fQ.mft
File: klbr9muA8IE1hY0UTO1veFg09fQ.mft (raw, json)
Hash identifier: pGnfxSAIVglH5irxAfM10y7mySouKoL0hzlUZP3O3ME=
Subject key identifier: 95:B9:E4:26:44:07:F0:13:46:F1:6B:B4:F9:BA:F2:9C:11:1C:66:C5
Authority key identifier: 92:56:EB:F6:6B:80:F0:81:35:85:8D:14:4C:ED:6F:78:58:34:F5:F4
Certificate issuer: /CN=9256ebf66b80f08135858d144ced6f785834f5f4
Certificate serial: 019D99998C9F07AB3CB41990DF31E63A9A0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/klbr9muA8IE1hY0UTO1veFg09fQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/b717c5-a64b-4475-be3e-5da8d677d847/1/klbr9muA8IE1hY0UTO1veFg09fQ.mft
Manifest number: 18C2
Signing time: Fri 17 Apr 2026 04:01:10 +0000
Manifest this update: Fri 17 Apr 2026 04:01:10 +0000
Manifest next update: Sat 18 Apr 2026 04:01:10 +0000
Files and hashes: 1: 40z5BTIzE-Otta9d5IxXlYjWk7Y.roa (hash: /K+vL2kVy1Ot78ZCbPvu7R3pgRcpdRMgsyhuVzNibSE=)
2: FnnFa3pMmqf3MiWUuKMyoAVWg-s.roa (hash: 6fPOtoWUy4XsTgZEttrlKq8GChMydmNHVVGJEIcxPdY=)
3: J4mHGlSY7agF8AXFPW8l8IBLAAI.roa (hash: /s0Afv+pL0DwKivaJvq3/xoIpyRomxE5EF1DLE1ue6g=)
4: ePQMQe046NknExZADvr19blY0SA.roa (hash: wKoVniNasUoMb11Rk/qza9dNeWvntUlfFXzDDxceLEM=)
5: hcjtq7J7FKS0bIahe8TWZOilbrc.roa (hash: uOY6FMIgCoFqDzQfMMnNRctUj2RDP4gSOMAnS9KpjHI=)
6: klbr9muA8IE1hY0UTO1veFg09fQ.crl (hash: i6xTPtQbDP1SV5yh8jIlLk7POf0J6hy0nQnOdO4EW2Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/b717c5-a64b-4475-be3e-5da8d677d847/1/klbr9muA8IE1hY0UTO1veFg09fQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/b717c5-a64b-4475-be3e-5da8d677d847/1/klbr9muA8IE1hY0UTO1veFg09fQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/klbr9muA8IE1hY0UTO1veFg09fQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:99:8c:9f:07:ab:3c:b4:19:90:df:31:e6:3a:9a:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9256ebf66b80f08135858d144ced6f785834f5f4
Validity
Not Before: Apr 17 04:01:10 2026 GMT
Not After : Apr 18 04:01:10 2026 GMT
Subject: CN=95b9e4264407f01346f16bb4f9baf29c111c66c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:cb:0b:e8:cc:b7:0a:33:70:14:22:6b:49:74:
39:0b:eb:af:5b:e4:4e:b2:e4:cf:a5:a7:b5:9f:6b:
1d:0e:c1:23:ef:42:b2:4b:69:c0:35:ce:27:d0:a3:
ab:31:96:73:c6:4b:f6:2d:13:32:db:9a:ba:4e:f6:
6a:3b:69:0e:3a:19:70:47:8c:05:35:a8:8e:d8:15:
14:94:ee:cb:6e:c3:64:e5:f4:ad:8c:10:3e:98:c7:
09:3e:61:2b:c6:78:d1:cc:06:aa:aa:08:ce:e0:f4:
36:71:ce:a8:11:9a:65:46:90:80:dd:f5:32:ab:81:
62:77:8b:e3:07:80:b1:2b:7b:71:65:0c:ac:37:8f:
b0:09:3e:96:32:04:a3:81:85:1a:1c:fb:38:36:01:
a4:a9:03:95:3a:e4:a3:8c:e9:cb:68:3a:d4:f4:e3:
c0:af:d0:1c:49:49:1c:8a:53:92:89:50:64:c7:85:
ed:4d:37:9b:65:32:48:1f:8f:09:b4:4e:d8:84:ef:
1a:b5:9c:f3:7a:3d:1a:41:16:b7:e6:7f:c6:5e:22:
47:55:23:39:3e:44:40:06:8f:f3:4f:e9:2c:e4:d6:
3f:a1:c7:11:6d:aa:da:fb:34:9e:0b:1a:d5:ab:50:
ca:c0:80:c4:df:f3:90:63:c6:53:8a:c9:cb:d9:8b:
c4:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:B9:E4:26:44:07:F0:13:46:F1:6B:B4:F9:BA:F2:9C:11:1C:66:C5
X509v3 Authority Key Identifier:
keyid:92:56:EB:F6:6B:80:F0:81:35:85:8D:14:4C:ED:6F:78:58:34:F5:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/klbr9muA8IE1hY0UTO1veFg09fQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/b717c5-a64b-4475-be3e-5da8d677d847/1/klbr9muA8IE1hY0UTO1veFg09fQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/b717c5-a64b-4475-be3e-5da8d677d847/1/klbr9muA8IE1hY0UTO1veFg09fQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:1e:ea:42:a4:ff:ef:ce:87:ee:f0:f0:1d:49:17:fe:c9:a5:
5b:2e:59:9a:85:e2:97:8a:66:f8:e3:e4:fc:06:01:c0:25:c1:
f8:3b:1d:f1:a8:1e:90:3c:a2:ec:6b:ae:6d:11:24:51:e8:a9:
74:87:22:c6:dd:74:0c:3b:3c:90:65:17:44:ff:cd:58:9e:f1:
fa:5a:5e:af:72:7b:23:a2:05:8c:05:ab:61:b2:db:b3:35:a8:
71:cd:f1:09:02:05:17:a6:d4:4e:1d:89:15:f3:cc:d1:4b:26:
f0:14:6f:cf:67:9d:89:2f:2a:74:29:1f:7b:f7:ea:48:34:08:
45:81:08:a5:37:b1:fd:dc:0f:01:87:1f:89:7c:7e:af:7f:50:
c1:e0:c6:fc:fd:48:fa:41:ca:22:82:81:7a:23:f4:ad:e8:a3:
b8:b6:98:fd:de:07:97:6c:46:9e:ba:23:21:eb:3c:ee:41:1e:
a6:c2:7b:83:6e:f7:8a:31:5d:4f:02:3e:fb:ab:c6:12:3e:7c:
de:13:5c:12:96:4c:bc:26:8e:51:96:7f:14:3e:79:49:f0:60:
ab:81:72:c2:46:2b:40:28:e2:93:39:1e:65:8f:ac:dd:83:02:
23:17:3e:e3:f7:55:a9:67:9a:0a:d6:a5:32:e7:77:6c:b1:ea:
2f:8c:40:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:54:55 2026 by rpki-client