Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bf/7b45b9-990b-4614-a64e-0f52ea5229fc/1/klbbNIe0xbrLMAF3BXzzF0z3dHc.mft
File: klbbNIe0xbrLMAF3BXzzF0z3dHc.mft (raw, json)
Hash identifier: ZE3e8SMFAEDZf6KKuJpknYqRNnF9E3JinHwPOFMecLc=
Subject key identifier: F0:43:AF:22:41:E6:7A:71:F1:A5:0D:7C:F2:2A:41:D9:56:F5:D6:32
Authority key identifier: 92:56:DB:34:87:B4:C5:BA:CB:30:01:77:05:7C:F3:17:4C:F7:74:77
Certificate issuer: /CN=9256db3487b4c5bacb300177057cf3174cf77477
Certificate serial: 01A17E183977231CC4B85CB43FF6B9965EB7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/klbbNIe0xbrLMAF3BXzzF0z3dHc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/7b45b9-990b-4614-a64e-0f52ea5229fc/1/klbbNIe0xbrLMAF3BXzzF0z3dHc.mft
Manifest number: 1AC6
Signing time: Tue 27 Oct 2026 16:01:19 +0000
Manifest this update: Tue 27 Oct 2026 16:01:19 +0000
Manifest next update: Wed 28 Oct 2026 16:01:19 +0000
Files and hashes: 1: 04BGo9FtObILQBaft1sQoeQgCYo.roa (hash: Fwkz3jqMyP5AwHPobSf3siex/Tu6ZYcC4zjVdfIOsac=)
2: klbbNIe0xbrLMAF3BXzzF0z3dHc.crl (hash: Yv0ZeIY/IhAY/qAhFCXaoPotFk5H/+4XwoCKh7JYmNs=)
3: rX01FOC9tDHIxRVaHAAeqyrP4Eo.roa (hash: FOCcBoXQG14i7Fi0nDAmmqDfc5/wMS3xKazNxC7cZRc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/7b45b9-990b-4614-a64e-0f52ea5229fc/1/klbbNIe0xbrLMAF3BXzzF0z3dHc.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/7b45b9-990b-4614-a64e-0f52ea5229fc/1/klbbNIe0xbrLMAF3BXzzF0z3dHc.mft
rsync://rpki.ripe.net/repository/DEFAULT/klbbNIe0xbrLMAF3BXzzF0z3dHc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 13:57:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7e:18:39:77:23:1c:c4:b8:5c:b4:3f:f6:b9:96:5e:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9256db3487b4c5bacb300177057cf3174cf77477
Validity
Not Before: Oct 27 16:01:19 2026 GMT
Not After : Oct 28 16:01:19 2026 GMT
Subject: CN=f043af2241e67a71f1a50d7cf22a41d956f5d632
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:c5:d4:6e:b8:99:3f:62:65:d0:e3:6d:91:56:
98:9a:0b:e7:e5:16:dc:a6:4e:61:75:72:ba:02:58:
de:65:54:d2:93:81:cb:64:6a:5b:16:0d:61:ec:14:
4a:2e:6e:68:8d:93:ca:ed:3a:91:65:0b:f4:bc:4a:
9a:6e:a6:3f:11:ca:c2:e0:c2:77:b5:f6:37:af:bf:
9e:47:87:51:f0:60:01:b5:f3:ae:a0:39:14:77:96:
68:8d:58:83:ac:ff:e0:fb:0b:7b:d0:c0:9a:4b:46:
bf:54:9f:9e:60:de:18:ab:2e:97:0b:43:a5:a4:c0:
eb:6d:e2:3c:6d:0b:79:7d:4e:c1:0d:6d:f6:e6:a4:
45:2d:ed:bb:6d:69:c5:02:9e:f3:46:49:ba:5f:90:
44:21:87:a1:e5:76:dd:c9:46:64:91:8a:ee:58:82:
4e:76:e1:39:b7:68:ca:fb:a3:77:02:ff:b5:0f:a2:
63:7b:ff:79:39:b7:86:af:ac:89:92:50:40:14:ad:
15:0b:ff:9b:18:65:55:7c:90:9c:c6:ee:6f:5b:f1:
9a:ed:c3:d9:49:41:53:77:ff:58:9d:7a:bb:09:8f:
98:99:6b:5c:bb:ff:59:1a:97:98:bb:e1:7b:e4:2b:
d0:a3:40:82:a1:a1:e8:af:ac:9c:81:8e:c4:b8:dc:
0f:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:43:AF:22:41:E6:7A:71:F1:A5:0D:7C:F2:2A:41:D9:56:F5:D6:32
X509v3 Authority Key Identifier:
keyid:92:56:DB:34:87:B4:C5:BA:CB:30:01:77:05:7C:F3:17:4C:F7:74:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/klbbNIe0xbrLMAF3BXzzF0z3dHc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/7b45b9-990b-4614-a64e-0f52ea5229fc/1/klbbNIe0xbrLMAF3BXzzF0z3dHc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/7b45b9-990b-4614-a64e-0f52ea5229fc/1/klbbNIe0xbrLMAF3BXzzF0z3dHc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:82:ff:40:bf:64:e7:8e:44:4f:f8:f5:dc:6f:f1:33:82:99:
a6:e0:fd:b3:72:97:82:1c:03:af:68:2c:bd:80:3a:b2:28:4e:
c3:e4:70:ba:37:98:6c:85:a3:35:c6:59:a0:a2:c8:72:c0:9d:
b4:62:1b:16:21:5d:94:03:2c:ab:4e:d3:7e:04:17:a3:d6:b4:
6c:e2:e8:49:e6:1b:59:39:1d:6b:a9:19:f7:d6:64:ea:f9:26:
4a:d4:77:e6:be:89:0b:72:a9:7a:15:6f:90:b5:56:09:7a:ff:
50:ba:18:c0:69:cf:dd:06:ba:6b:2e:10:3e:50:ae:8c:23:3d:
af:ed:4c:02:e9:28:92:a9:47:44:6a:57:e7:04:48:21:2a:38:
02:c1:f9:6c:10:e9:ec:5e:cd:83:55:5f:b3:99:b4:29:b9:76:
90:28:8e:4b:9e:b4:9f:17:f7:5d:ac:61:bb:54:5d:e0:1f:02:
08:49:5c:9c:a0:de:bc:b9:35:d4:1a:42:f1:01:8e:fc:fd:e9:
30:55:17:0a:3d:b7:05:5b:69:ae:82:19:3f:90:8b:43:62:6c:
3d:48:01:42:89:9e:ab:9f:e4:34:71:b0:56:53:07:a6:63:e4:
6b:b0:7c:6e:ef:3f:e4:02:c2:f3:fc:ce:cf:c0:57:0a:6d:16:
0a:57:e7:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 22:27:37 2026 by rpki-client