Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/7b45b9-990b-4614-a64e-0f52ea5229fc/1/klbbNIe0xbrLMAF3BXzzF0z3dHc.mft
File: klbbNIe0xbrLMAF3BXzzF0z3dHc.mft (raw, json)
Hash identifier: caMmoMY6EFgKnZLilv2KPbIsp8LqT16PrN+FTUApWoY=
Subject key identifier: F0:81:F7:D0:45:53:C5:4D:C9:03:7B:68:EC:87:7D:30:51:4A:5B:10
Authority key identifier: 92:56:DB:34:87:B4:C5:BA:CB:30:01:77:05:7C:F3:17:4C:F7:74:77
Certificate issuer: /CN=9256db3487b4c5bacb300177057cf3174cf77477
Certificate serial: 019DFE05BE944CE038394096C4639A3F067F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/klbbNIe0xbrLMAF3BXzzF0z3dHc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/7b45b9-990b-4614-a64e-0f52ea5229fc/1/klbbNIe0xbrLMAF3BXzzF0z3dHc.mft
Manifest number: 18F6
Signing time: Wed 06 May 2026 16:01:22 +0000
Manifest this update: Wed 06 May 2026 16:01:22 +0000
Manifest next update: Thu 07 May 2026 16:01:22 +0000
Files and hashes: 1: 04BGo9FtObILQBaft1sQoeQgCYo.roa (hash: Fwkz3jqMyP5AwHPobSf3siex/Tu6ZYcC4zjVdfIOsac=)
2: klbbNIe0xbrLMAF3BXzzF0z3dHc.crl (hash: RNB6iTm+HBE+k/RGWWxH8t0YKhMy9sN7O2qZGgda0Xo=)
3: rX01FOC9tDHIxRVaHAAeqyrP4Eo.roa (hash: FOCcBoXQG14i7Fi0nDAmmqDfc5/wMS3xKazNxC7cZRc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/7b45b9-990b-4614-a64e-0f52ea5229fc/1/klbbNIe0xbrLMAF3BXzzF0z3dHc.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/7b45b9-990b-4614-a64e-0f52ea5229fc/1/klbbNIe0xbrLMAF3BXzzF0z3dHc.mft
rsync://rpki.ripe.net/repository/DEFAULT/klbbNIe0xbrLMAF3BXzzF0z3dHc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 May 2026 13:58:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:fe:05:be:94:4c:e0:38:39:40:96:c4:63:9a:3f:06:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9256db3487b4c5bacb300177057cf3174cf77477
Validity
Not Before: May 6 16:01:22 2026 GMT
Not After : May 7 16:01:22 2026 GMT
Subject: CN=f081f7d04553c54dc9037b68ec877d30514a5b10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:90:38:b9:40:06:cc:25:a6:fc:59:e8:b5:7a:
f9:f5:ca:40:18:03:22:5d:e9:b8:e8:56:e8:8f:b5:
9f:ed:46:0e:10:06:d7:1a:c9:eb:36:b6:6e:cc:3a:
62:96:ed:e6:47:76:0a:47:a8:f3:bc:5c:ed:19:30:
c3:62:2c:1b:ea:5c:02:28:a8:57:d8:68:27:e3:a1:
44:31:a7:43:17:48:06:2f:e0:f1:12:08:7d:5f:a3:
3a:b5:74:53:8f:7c:e7:fd:5c:9c:12:a5:90:f2:af:
25:4c:47:0a:7e:08:da:a8:3a:37:69:67:c6:9f:a2:
2b:b4:f4:28:8d:38:cf:6e:89:35:87:b1:55:1a:18:
d8:b9:00:c6:3a:74:c9:a7:3d:e6:0a:02:b6:31:3b:
95:a1:f0:51:b6:d0:da:a5:96:c1:6f:b9:da:b0:34:
06:d6:fb:c5:30:56:7b:35:7f:28:24:f5:11:e1:71:
6e:b6:a5:77:7c:a4:89:a3:01:c3:f4:df:a9:ac:a8:
85:2e:a4:91:11:a2:ab:48:78:be:7d:3f:a3:7d:49:
6d:74:d2:c9:0b:82:f5:8d:18:52:5f:5e:5c:a6:1b:
59:f6:e3:f4:a8:94:ff:33:4c:6c:b7:96:85:3c:de:
26:1e:5b:91:7b:aa:f4:7b:21:e4:03:20:ef:d4:6c:
f3:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:81:F7:D0:45:53:C5:4D:C9:03:7B:68:EC:87:7D:30:51:4A:5B:10
X509v3 Authority Key Identifier:
keyid:92:56:DB:34:87:B4:C5:BA:CB:30:01:77:05:7C:F3:17:4C:F7:74:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/klbbNIe0xbrLMAF3BXzzF0z3dHc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/7b45b9-990b-4614-a64e-0f52ea5229fc/1/klbbNIe0xbrLMAF3BXzzF0z3dHc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/7b45b9-990b-4614-a64e-0f52ea5229fc/1/klbbNIe0xbrLMAF3BXzzF0z3dHc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:cc:11:70:dc:50:bb:6a:07:45:08:da:9b:88:27:00:6d:43:
8b:b8:a4:d3:17:1c:1a:ef:6f:18:91:d8:dd:e8:b5:ab:82:df:
f5:c4:fc:a2:4b:73:ff:83:45:79:80:85:03:a0:62:ee:61:7b:
56:0e:5a:48:8b:38:2b:7f:be:85:24:01:cd:43:eb:98:67:69:
15:2d:b8:cb:9c:51:a4:82:8b:3f:dc:7a:42:f4:2c:e5:20:69:
d8:2b:dc:53:81:d6:b1:2b:7f:8b:80:82:07:88:c3:92:60:30:
0f:31:1f:3d:4f:1c:32:9e:1e:cd:12:dc:aa:88:df:45:b0:b7:
4e:58:66:8a:f9:04:89:44:4d:88:f5:03:1d:ea:84:56:e0:64:
37:8f:19:d3:68:06:bf:11:58:25:6a:aa:09:f4:d2:cc:bd:9d:
84:75:db:06:86:c4:61:3b:b5:3a:2a:ab:71:5b:a2:0a:32:28:
df:c5:51:e1:66:7d:f5:47:4b:d1:6d:7e:72:69:bd:e1:5f:df:
0e:94:9d:ab:43:dc:47:47:93:80:24:5b:42:d2:62:60:7c:43:
c0:a3:09:e2:21:b0:6c:53:4c:0f:20:e9:2c:e7:08:1a:6f:1e:
f7:51:b0:14:46:1a:39:cd:c6:ca:7a:fa:18:52:7e:5e:fc:c7:
92:9c:c2:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 6 17:38:54 2026 by rpki-client