Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/b717c5-a64b-4475-be3e-5da8d677d847/1/klbr9muA8IE1hY0UTO1veFg09fQ.mft
File: klbr9muA8IE1hY0UTO1veFg09fQ.mft (raw, json)
Hash identifier: wdn08nZl04pdBsKFdRpjhd28pZzPpggi21qHpthTkrA=
Subject key identifier: F2:6D:B8:58:11:07:64:3B:8D:27:30:5C:15:E5:50:A7:AE:72:42:47
Authority key identifier: 92:56:EB:F6:6B:80:F0:81:35:85:8D:14:4C:ED:6F:78:58:34:F5:F4
Certificate issuer: /CN=9256ebf66b80f08135858d144ced6f785834f5f4
Certificate serial: 019CAC100BB82E7308D0232910D5774C8E87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/klbr9muA8IE1hY0UTO1veFg09fQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/b717c5-a64b-4475-be3e-5da8d677d847/1/klbr9muA8IE1hY0UTO1veFg09fQ.mft
Manifest number: 1847
Signing time: Mon 02 Mar 2026 01:00:58 +0000
Manifest this update: Mon 02 Mar 2026 01:00:58 +0000
Manifest next update: Tue 03 Mar 2026 01:00:58 +0000
Files and hashes: 1: 40z5BTIzE-Otta9d5IxXlYjWk7Y.roa (hash: /K+vL2kVy1Ot78ZCbPvu7R3pgRcpdRMgsyhuVzNibSE=)
2: FnnFa3pMmqf3MiWUuKMyoAVWg-s.roa (hash: 6fPOtoWUy4XsTgZEttrlKq8GChMydmNHVVGJEIcxPdY=)
3: J4mHGlSY7agF8AXFPW8l8IBLAAI.roa (hash: /s0Afv+pL0DwKivaJvq3/xoIpyRomxE5EF1DLE1ue6g=)
4: ePQMQe046NknExZADvr19blY0SA.roa (hash: wKoVniNasUoMb11Rk/qza9dNeWvntUlfFXzDDxceLEM=)
5: hcjtq7J7FKS0bIahe8TWZOilbrc.roa (hash: uOY6FMIgCoFqDzQfMMnNRctUj2RDP4gSOMAnS9KpjHI=)
6: klbr9muA8IE1hY0UTO1veFg09fQ.crl (hash: D72i86QjCmjq6MtqI3N25m780Lz7VdT9tH2C2TdPdBU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/b717c5-a64b-4475-be3e-5da8d677d847/1/klbr9muA8IE1hY0UTO1veFg09fQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/b717c5-a64b-4475-be3e-5da8d677d847/1/klbr9muA8IE1hY0UTO1veFg09fQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/klbr9muA8IE1hY0UTO1veFg09fQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:10:0b:b8:2e:73:08:d0:23:29:10:d5:77:4c:8e:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9256ebf66b80f08135858d144ced6f785834f5f4
Validity
Not Before: Mar 2 01:00:58 2026 GMT
Not After : Mar 3 01:00:58 2026 GMT
Subject: CN=f26db8581107643b8d27305c15e550a7ae724247
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:a0:ef:bc:3b:26:1a:7a:01:b5:45:f4:f7:cf:
f6:4e:6c:92:a7:73:77:e3:39:5d:4d:12:30:61:b4:
39:ca:17:c9:55:c8:89:68:12:83:1d:75:a4:28:90:
48:6b:a8:5a:3f:b7:2e:3d:c0:e4:16:09:98:4e:9c:
8f:a5:ea:b8:71:03:c6:f0:d1:fb:c5:46:51:7f:a9:
7d:0b:07:7a:06:f5:cc:6b:88:2f:63:59:85:43:c4:
2f:d2:dc:72:f3:5d:93:dc:a9:0b:e7:cd:c1:0f:3b:
04:da:15:16:cc:58:6f:01:64:9c:37:19:58:ba:05:
1a:b0:67:32:d3:3d:99:fd:bc:f5:38:df:93:d3:2b:
28:a6:1c:54:9b:86:78:ad:74:46:66:19:82:49:1c:
bc:f9:ad:41:73:e2:30:a6:1e:de:aa:99:a6:b3:24:
0e:69:93:b3:49:c0:62:8b:2a:e9:49:c1:4c:8c:60:
a9:62:6f:c2:0e:08:b9:82:5e:9b:d2:4a:ce:de:ee:
a4:77:63:77:7f:7a:33:52:c7:5b:41:00:20:4d:81:
be:de:08:4b:37:b8:18:a5:75:ee:c9:06:80:30:b2:
79:af:a0:e7:b2:62:82:a0:b6:7f:56:a1:ef:d5:01:
11:16:e7:0f:3e:80:ff:df:0d:32:c7:e2:0d:8b:03:
97:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:6D:B8:58:11:07:64:3B:8D:27:30:5C:15:E5:50:A7:AE:72:42:47
X509v3 Authority Key Identifier:
keyid:92:56:EB:F6:6B:80:F0:81:35:85:8D:14:4C:ED:6F:78:58:34:F5:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/klbr9muA8IE1hY0UTO1veFg09fQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/b717c5-a64b-4475-be3e-5da8d677d847/1/klbr9muA8IE1hY0UTO1veFg09fQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/b717c5-a64b-4475-be3e-5da8d677d847/1/klbr9muA8IE1hY0UTO1veFg09fQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:fd:82:4b:aa:3b:e9:26:86:e5:3b:a6:51:95:7e:9a:f7:57:
36:1a:17:d4:5f:00:ac:e0:27:50:c4:05:2f:76:44:d9:e1:77:
2b:47:00:f4:01:88:aa:c2:de:94:fa:46:d2:1e:9a:78:bb:01:
86:2a:00:2f:46:f7:28:5e:52:95:21:39:67:61:56:90:8c:38:
cf:b7:5b:ef:b2:26:40:76:2b:4b:1f:ac:e9:33:79:9c:15:66:
08:64:bf:6a:c5:7a:10:4c:a1:b1:f3:26:66:46:b9:29:db:2b:
d7:b8:cd:3d:af:01:d1:56:2a:51:d5:71:ea:4d:a7:6d:75:7c:
df:b9:db:70:58:98:87:34:db:02:97:34:ab:49:d6:b8:a5:7b:
5d:51:dd:af:de:42:a4:a6:99:0d:26:1a:b2:9a:1e:1c:e3:23:
84:ee:64:bd:4a:92:be:95:68:79:2e:b0:8d:35:66:df:7d:79:
4e:5f:ee:3f:d6:43:dd:29:b7:fa:76:ec:80:a6:e5:08:85:fe:
b7:c8:7e:b6:96:0c:85:4a:5b:f8:e8:0c:bc:19:71:b1:58:4e:
79:25:44:75:34:9f:ca:de:3c:3a:38:da:4f:38:50:ce:08:17:
d1:d2:3d:05:f0:b0:78:70:10:19:87:22:d9:77:4d:82:98:7c:
ce:ea:b7:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:02:14 2026 by rpki-client