Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f1/b717c5-a64b-4475-be3e-5da8d677d847/1/klbr9muA8IE1hY0UTO1veFg09fQ.mft
File: klbr9muA8IE1hY0UTO1veFg09fQ.mft (raw, json)
Hash identifier: G6X7+1R0xQWqZI9aHAPiv4ERcA+pqxHB8kYtw88bcyM=
Subject key identifier: 9A:47:4D:CE:CA:33:EF:60:F1:24:03:8D:13:9E:ED:F1:F9:F3:0D:45
Authority key identifier: 92:56:EB:F6:6B:80:F0:81:35:85:8D:14:4C:ED:6F:78:58:34:F5:F4
Certificate issuer: /CN=9256ebf66b80f08135858d144ced6f785834f5f4
Certificate serial: 01A1AC7109BFA2D0E138FA32B6981B7BC439
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/klbr9muA8IE1hY0UTO1veFg09fQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/b717c5-a64b-4475-be3e-5da8d677d847/1/klbr9muA8IE1hY0UTO1veFg09fQ.mft
Manifest number: 1ADE
Signing time: Thu 05 Nov 2026 16:00:51 +0000
Manifest this update: Thu 05 Nov 2026 16:00:51 +0000
Manifest next update: Fri 06 Nov 2026 16:00:51 +0000
Files and hashes: 1: 40z5BTIzE-Otta9d5IxXlYjWk7Y.roa (hash: /K+vL2kVy1Ot78ZCbPvu7R3pgRcpdRMgsyhuVzNibSE=)
2: FnnFa3pMmqf3MiWUuKMyoAVWg-s.roa (hash: 6fPOtoWUy4XsTgZEttrlKq8GChMydmNHVVGJEIcxPdY=)
3: J4mHGlSY7agF8AXFPW8l8IBLAAI.roa (hash: /s0Afv+pL0DwKivaJvq3/xoIpyRomxE5EF1DLE1ue6g=)
4: ePQMQe046NknExZADvr19blY0SA.roa (hash: wKoVniNasUoMb11Rk/qza9dNeWvntUlfFXzDDxceLEM=)
5: hcjtq7J7FKS0bIahe8TWZOilbrc.roa (hash: uOY6FMIgCoFqDzQfMMnNRctUj2RDP4gSOMAnS9KpjHI=)
6: klbr9muA8IE1hY0UTO1veFg09fQ.crl (hash: lGkj/5aVK8BBCIB5tHFrMrwBxEsgSWwUmcntXJtHGEA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/b717c5-a64b-4475-be3e-5da8d677d847/1/klbr9muA8IE1hY0UTO1veFg09fQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/b717c5-a64b-4475-be3e-5da8d677d847/1/klbr9muA8IE1hY0UTO1veFg09fQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/klbr9muA8IE1hY0UTO1veFg09fQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Nov 2026 08:45:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:ac:71:09:bf:a2:d0:e1:38:fa:32:b6:98:1b:7b:c4:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9256ebf66b80f08135858d144ced6f785834f5f4
Validity
Not Before: Nov 5 16:00:51 2026 GMT
Not After : Nov 6 16:00:51 2026 GMT
Subject: CN=9a474dceca33ef60f124038d139eedf1f9f30d45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:d1:92:3a:dd:eb:f1:69:ae:f2:51:19:5b:f6:
94:8a:bf:b9:ce:2a:99:61:96:6e:d7:53:ef:02:b6:
90:49:ef:a3:bf:e0:10:87:8f:a8:9a:dc:26:75:e3:
7d:85:da:18:fc:f1:1f:45:62:0f:59:21:01:8d:83:
86:88:c2:f7:88:85:9c:8a:59:25:9b:0a:56:56:b2:
49:ea:4f:c1:ec:e3:5c:fe:9f:9e:dd:96:40:ac:72:
4e:1a:f4:ca:0f:5a:7d:bb:04:d7:6f:81:53:1e:59:
50:03:2d:5c:52:57:1c:b1:76:65:3f:e0:ae:9d:3b:
72:5b:05:59:17:da:d0:fb:b3:15:c4:ce:e0:b1:16:
1a:a0:6e:bb:a0:8b:98:7c:70:85:2b:75:a1:a9:4b:
0a:cf:09:d7:ce:9f:a9:44:1d:e8:69:1d:00:eb:8a:
ba:61:37:1f:c6:73:55:4d:aa:62:a5:00:91:9d:49:
2e:76:15:4e:da:c6:8b:6d:23:df:b4:6f:05:2c:35:
2d:66:16:24:d9:92:8d:df:a2:fb:ec:23:5f:1d:d0:
ca:42:a2:91:77:47:b5:18:69:7d:13:0d:8a:77:07:
85:85:6c:54:21:29:ce:85:e2:47:21:30:fd:54:d9:
70:16:65:b8:45:5c:99:05:3d:1f:70:46:27:cf:6f:
d5:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:47:4D:CE:CA:33:EF:60:F1:24:03:8D:13:9E:ED:F1:F9:F3:0D:45
X509v3 Authority Key Identifier:
keyid:92:56:EB:F6:6B:80:F0:81:35:85:8D:14:4C:ED:6F:78:58:34:F5:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/klbr9muA8IE1hY0UTO1veFg09fQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/b717c5-a64b-4475-be3e-5da8d677d847/1/klbr9muA8IE1hY0UTO1veFg09fQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/b717c5-a64b-4475-be3e-5da8d677d847/1/klbr9muA8IE1hY0UTO1veFg09fQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:33:18:24:5f:58:7c:8f:11:3b:3e:ad:53:c3:f8:9c:0c:95:
cd:c6:57:22:e1:66:bc:7a:74:c7:a7:38:f3:6a:9d:cf:45:0f:
0d:91:5a:2e:69:0a:85:37:be:c4:38:52:6e:d2:61:b9:2f:1f:
78:ff:8d:0c:b3:4a:7f:8d:54:69:97:20:be:d5:4d:f7:48:5a:
14:44:59:dd:10:b4:0b:08:1e:4c:3a:bb:93:a4:25:ef:73:9a:
2a:3a:36:84:d9:6e:17:5f:61:38:f0:c7:41:55:f5:1e:ae:43:
1a:e5:a4:b4:1e:15:4f:c3:d3:c8:09:8b:d6:af:ee:81:b8:77:
e4:da:71:ea:3f:3d:50:0d:2b:6c:78:91:76:a7:eb:eb:84:35:
4f:17:cb:ea:fa:5d:5e:4d:79:7e:16:e9:40:29:44:8b:61:31:
b0:2b:a3:97:b6:31:3e:9c:45:4a:a0:f4:5e:a6:e5:9a:6f:22:
d5:65:cb:7f:8e:22:bd:2e:1b:ec:09:e5:76:d1:8e:ba:9d:40:
ec:51:01:03:43:53:75:68:e9:00:e8:75:c6:9f:47:5a:ac:d2:
9b:87:1a:c6:73:8f:39:57:d3:9f:36:64:50:de:8f:04:f9:6c:
7e:74:95:c3:69:6e:7f:d2:11:70:1b:37:ed:2d:6c:3b:83:f7:
9d:de:75:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 18:48:27 2026 by rpki-client