Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/7b45b9-990b-4614-a64e-0f52ea5229fc/1/klbbNIe0xbrLMAF3BXzzF0z3dHc.mft
File: klbbNIe0xbrLMAF3BXzzF0z3dHc.mft (raw, json)
Hash identifier: io3O8fmWWyT+6jlOHUJQWfOuTE+qRW3xFH7IOXAT+NI=
Subject key identifier: 38:AA:C8:44:E0:05:82:2A:E1:42:A6:1C:C8:F5:C5:D6:C7:33:62:62
Authority key identifier: 92:56:DB:34:87:B4:C5:BA:CB:30:01:77:05:7C:F3:17:4C:F7:74:77
Certificate issuer: /CN=9256db3487b4c5bacb300177057cf3174cf77477
Certificate serial: 019D08C2C1C68F8554EA54BC50BB2202409B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/klbbNIe0xbrLMAF3BXzzF0z3dHc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/7b45b9-990b-4614-a64e-0f52ea5229fc/1/klbbNIe0xbrLMAF3BXzzF0z3dHc.mft
Manifest number: 1877
Signing time: Fri 20 Mar 2026 01:01:14 +0000
Manifest this update: Fri 20 Mar 2026 01:01:14 +0000
Manifest next update: Sat 21 Mar 2026 01:01:14 +0000
Files and hashes: 1: 04BGo9FtObILQBaft1sQoeQgCYo.roa (hash: Fwkz3jqMyP5AwHPobSf3siex/Tu6ZYcC4zjVdfIOsac=)
2: klbbNIe0xbrLMAF3BXzzF0z3dHc.crl (hash: R4Q7FY6HQvgco6nvvHonIamzsJttmllNJ0HhGq+ByVY=)
3: rX01FOC9tDHIxRVaHAAeqyrP4Eo.roa (hash: FOCcBoXQG14i7Fi0nDAmmqDfc5/wMS3xKazNxC7cZRc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/7b45b9-990b-4614-a64e-0f52ea5229fc/1/klbbNIe0xbrLMAF3BXzzF0z3dHc.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/7b45b9-990b-4614-a64e-0f52ea5229fc/1/klbbNIe0xbrLMAF3BXzzF0z3dHc.mft
rsync://rpki.ripe.net/repository/DEFAULT/klbbNIe0xbrLMAF3BXzzF0z3dHc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 21 Mar 2026 01:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:08:c2:c1:c6:8f:85:54:ea:54:bc:50:bb:22:02:40:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9256db3487b4c5bacb300177057cf3174cf77477
Validity
Not Before: Mar 20 01:01:14 2026 GMT
Not After : Mar 21 01:01:14 2026 GMT
Subject: CN=38aac844e005822ae142a61cc8f5c5d6c7336262
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:23:98:d8:39:e7:1a:84:0e:98:eb:79:d6:d7:
06:34:dc:5c:4a:86:12:e8:46:16:88:02:1a:02:17:
40:dc:5c:67:06:81:c5:67:49:f0:fe:10:d1:74:1e:
da:d1:6f:d8:1f:eb:d3:12:c9:e5:c2:44:4a:64:75:
05:b1:94:0d:fc:30:07:3a:54:52:e1:0a:80:5e:c8:
60:cb:10:42:59:b0:a6:90:00:e3:0b:40:03:a5:4d:
c6:63:b7:14:d5:59:11:a7:5f:0e:16:d9:02:01:2f:
08:d3:a6:0d:17:87:bd:c6:06:e0:0c:f7:11:51:82:
e8:c4:a1:5e:ce:96:54:b1:c2:6d:a8:5f:c9:3d:21:
9a:c5:14:c8:0c:8a:00:d6:09:f4:79:b7:b7:dd:57:
35:c7:52:a1:34:54:bb:37:af:28:3e:ad:7e:9c:e4:
e0:5d:bb:b8:ef:5c:67:74:3b:62:31:7b:9c:33:36:
93:b5:2f:a1:c2:84:d7:42:6a:ea:ec:b7:12:08:df:
c6:8f:05:e2:a8:56:e2:67:ab:4a:28:5f:a6:60:98:
16:49:7a:63:21:ef:85:f1:42:b9:9c:87:7d:e4:b1:
aa:75:35:82:7d:27:95:d2:7d:90:5c:11:bb:25:8d:
81:10:7b:95:49:1a:16:d4:7e:82:77:67:f3:40:bf:
7e:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:AA:C8:44:E0:05:82:2A:E1:42:A6:1C:C8:F5:C5:D6:C7:33:62:62
X509v3 Authority Key Identifier:
keyid:92:56:DB:34:87:B4:C5:BA:CB:30:01:77:05:7C:F3:17:4C:F7:74:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/klbbNIe0xbrLMAF3BXzzF0z3dHc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/7b45b9-990b-4614-a64e-0f52ea5229fc/1/klbbNIe0xbrLMAF3BXzzF0z3dHc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/7b45b9-990b-4614-a64e-0f52ea5229fc/1/klbbNIe0xbrLMAF3BXzzF0z3dHc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:60:30:51:6d:f9:08:61:99:3b:7d:62:ad:9c:69:c3:5a:04:
9c:52:dc:c9:a9:05:d7:32:b4:c6:54:3f:50:e8:02:f5:91:63:
5e:9d:a3:c4:d2:eb:9e:b5:1e:39:b0:c7:47:38:d2:97:22:9f:
b8:8e:57:da:f2:af:9d:c4:f0:7f:04:65:10:47:45:6a:9a:6c:
8f:84:35:cd:0b:25:6c:9e:c3:0b:1d:7a:1b:2b:17:07:97:4c:
9c:95:47:03:d5:90:6e:16:2f:c8:68:1e:84:fa:6f:02:92:8d:
a1:d7:5c:ff:9c:1c:aa:dd:6b:68:94:b9:23:d2:2c:45:2f:87:
74:88:72:6c:80:1e:72:08:d2:ca:18:0f:a6:63:3b:19:95:12:
5b:a3:c6:47:c1:68:9f:b6:6e:12:a2:64:d1:1a:0b:e6:b2:19:
1a:59:89:aa:12:18:d2:2e:11:4d:35:8b:06:9d:ef:e5:7a:75:
4a:1d:6e:0a:0f:37:73:9d:42:e8:c3:84:33:11:ed:cb:2f:1a:
ad:4d:30:14:64:82:91:a6:06:4d:47:e1:24:65:71:45:ba:39:
5e:66:e1:f0:db:10:e8:75:de:26:65:50:43:97:5d:f7:d7:d1:
aa:96:7e:b9:27:81:a8:5f:e6:e9:1e:c9:1d:27:d6:fb:53:8c:
db:47:67:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 20 06:50:01 2026 by rpki-client