Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f1/b717c5-a64b-4475-be3e-5da8d677d847/1/klbr9muA8IE1hY0UTO1veFg09fQ.mft
File: klbr9muA8IE1hY0UTO1veFg09fQ.mft (raw, json)
Hash identifier: 2cm9z3Dg4JZrG+0OUVPxFD62fF08LoLqUal6gdU06nQ=
Subject key identifier: 3A:73:CB:43:7A:A7:58:A6:0B:EE:D4:C5:19:72:D6:50:4F:70:B7:38
Authority key identifier: 92:56:EB:F6:6B:80:F0:81:35:85:8D:14:4C:ED:6F:78:58:34:F5:F4
Certificate issuer: /CN=9256ebf66b80f08135858d144ced6f785834f5f4
Certificate serial: 01A0BCF97F7B81D125611E89EE57E1042BCD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/klbr9muA8IE1hY0UTO1veFg09fQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/b717c5-a64b-4475-be3e-5da8d677d847/1/klbr9muA8IE1hY0UTO1veFg09fQ.mft
Manifest number: 1A62
Signing time: Sun 20 Sep 2026 04:01:02 +0000
Manifest this update: Sun 20 Sep 2026 04:01:02 +0000
Manifest next update: Mon 21 Sep 2026 04:01:02 +0000
Files and hashes: 1: 40z5BTIzE-Otta9d5IxXlYjWk7Y.roa (hash: /K+vL2kVy1Ot78ZCbPvu7R3pgRcpdRMgsyhuVzNibSE=)
2: FnnFa3pMmqf3MiWUuKMyoAVWg-s.roa (hash: 6fPOtoWUy4XsTgZEttrlKq8GChMydmNHVVGJEIcxPdY=)
3: J4mHGlSY7agF8AXFPW8l8IBLAAI.roa (hash: /s0Afv+pL0DwKivaJvq3/xoIpyRomxE5EF1DLE1ue6g=)
4: ePQMQe046NknExZADvr19blY0SA.roa (hash: wKoVniNasUoMb11Rk/qza9dNeWvntUlfFXzDDxceLEM=)
5: hcjtq7J7FKS0bIahe8TWZOilbrc.roa (hash: uOY6FMIgCoFqDzQfMMnNRctUj2RDP4gSOMAnS9KpjHI=)
6: klbr9muA8IE1hY0UTO1veFg09fQ.crl (hash: 4zjQRqo16BKmLVwD5d3+M+a2aHFYc4sMOGZaykxQaLU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/b717c5-a64b-4475-be3e-5da8d677d847/1/klbr9muA8IE1hY0UTO1veFg09fQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/b717c5-a64b-4475-be3e-5da8d677d847/1/klbr9muA8IE1hY0UTO1veFg09fQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/klbr9muA8IE1hY0UTO1veFg09fQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 04:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:bc:f9:7f:7b:81:d1:25:61:1e:89:ee:57:e1:04:2b:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9256ebf66b80f08135858d144ced6f785834f5f4
Validity
Not Before: Sep 20 04:01:02 2026 GMT
Not After : Sep 21 04:01:02 2026 GMT
Subject: CN=3a73cb437aa758a60beed4c51972d6504f70b738
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:f0:28:c6:57:32:42:2b:26:f4:66:be:c6:9c:
cd:a2:fb:a3:66:c4:1b:48:f7:a6:0a:30:c8:39:7e:
63:43:89:8c:b6:d5:26:c6:c2:f0:a4:2e:ce:66:1b:
33:3f:db:e5:0e:d1:58:01:14:50:8f:e5:60:eb:82:
66:ce:56:71:6c:b9:a3:7c:0b:e8:ca:76:48:fa:98:
b4:85:e9:d5:7a:2d:c4:19:a7:f0:04:3b:df:b7:00:
a2:b5:fb:4d:7d:2d:bf:75:94:88:c0:7a:1d:04:78:
ba:fa:58:d2:81:7b:2d:57:c1:f6:d0:72:30:13:5e:
81:25:a9:46:2a:35:de:88:83:f9:10:e3:c1:20:de:
e9:1e:e5:d8:90:93:64:d2:92:5e:d3:97:57:9b:17:
95:94:c9:af:a5:0d:ed:cf:b0:3d:04:3a:8b:18:95:
c9:f7:06:e5:bb:df:a3:50:9f:e2:22:c0:e2:38:f1:
28:8e:bc:eb:1f:21:a3:c3:0b:e3:53:cc:3d:d1:35:
52:b2:31:c1:e1:2d:2f:ac:30:a4:ac:54:ed:28:61:
2a:0a:49:eb:15:1d:55:2b:26:37:f3:79:66:2f:88:
de:17:f0:25:3c:e8:0f:44:2f:35:93:81:6e:90:bf:
5b:74:8b:87:90:7f:75:f1:e4:2e:d1:4c:be:95:a2:
de:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:73:CB:43:7A:A7:58:A6:0B:EE:D4:C5:19:72:D6:50:4F:70:B7:38
X509v3 Authority Key Identifier:
keyid:92:56:EB:F6:6B:80:F0:81:35:85:8D:14:4C:ED:6F:78:58:34:F5:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/klbr9muA8IE1hY0UTO1veFg09fQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/b717c5-a64b-4475-be3e-5da8d677d847/1/klbr9muA8IE1hY0UTO1veFg09fQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/b717c5-a64b-4475-be3e-5da8d677d847/1/klbr9muA8IE1hY0UTO1veFg09fQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:de:5b:d6:9d:8c:a3:3b:12:9e:5c:7b:63:2b:66:7e:f5:b6:
79:73:7e:cd:a8:6e:56:59:e8:7c:6d:6a:9d:64:a1:75:07:3a:
74:55:a7:ca:a7:05:15:ab:0d:7a:0a:54:1f:87:e8:c8:de:b5:
cb:80:f1:80:ef:c2:76:32:e9:47:06:92:bb:fa:bf:fa:b9:db:
b2:ad:53:81:6e:24:e3:35:86:26:04:ce:50:7b:a9:d6:a4:7b:
14:e8:bb:43:68:67:97:10:69:08:be:49:c2:14:6f:97:0d:21:
49:e1:97:36:6b:ff:ba:bc:22:98:8e:87:6f:51:7a:11:80:9f:
4f:cd:79:62:12:2b:4c:67:1f:8a:8f:4c:74:3b:e8:85:1f:3b:
cc:04:7d:b6:ce:5d:d7:7b:bd:7c:e1:67:10:ed:59:aa:42:ff:
59:60:8f:65:ea:1c:a4:9d:6b:3f:c0:87:91:9c:bb:ef:aa:c1:
31:80:0a:d6:ef:30:99:f2:54:21:53:29:34:98:1c:0e:f8:7d:
20:18:68:40:5c:d7:42:77:fa:98:63:e8:a6:8a:06:46:f5:30:
6f:7a:35:6e:d2:44:de:05:f6:3f:d7:91:50:c8:37:14:84:53:
e1:06:6e:3e:15:2c:39:93:07:a2:1f:74:66:2e:50:2f:95:f0:
80:52:e1:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 14:22:07 2026 by rpki-client