Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bf/7b45b9-990b-4614-a64e-0f52ea5229fc/1/klbbNIe0xbrLMAF3BXzzF0z3dHc.mft
File: klbbNIe0xbrLMAF3BXzzF0z3dHc.mft (raw, json)
Hash identifier: uXTpFxucZX9bUE9Ioazq/rVRfF9BbZk2MdvScoqKslE=
Subject key identifier: 87:26:0C:7A:EC:E4:63:6C:0A:6C:60:91:39:0F:B1:46:55:E6:49:09
Authority key identifier: 92:56:DB:34:87:B4:C5:BA:CB:30:01:77:05:7C:F3:17:4C:F7:74:77
Certificate issuer: /CN=9256db3487b4c5bacb300177057cf3174cf77477
Certificate serial: 01A17C291CB671BF8E575530512D579C95CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/klbbNIe0xbrLMAF3BXzzF0z3dHc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/7b45b9-990b-4614-a64e-0f52ea5229fc/1/klbbNIe0xbrLMAF3BXzzF0z3dHc.mft
Manifest number: 1AC5
Signing time: Tue 27 Oct 2026 07:00:31 +0000
Manifest this update: Tue 27 Oct 2026 07:00:31 +0000
Manifest next update: Wed 28 Oct 2026 07:00:31 +0000
Files and hashes: 1: 04BGo9FtObILQBaft1sQoeQgCYo.roa (hash: Fwkz3jqMyP5AwHPobSf3siex/Tu6ZYcC4zjVdfIOsac=)
2: klbbNIe0xbrLMAF3BXzzF0z3dHc.crl (hash: MjBWKKiyFcfZYM+1vTThEqIiYTFMHotcvsFaftcrRjA=)
3: rX01FOC9tDHIxRVaHAAeqyrP4Eo.roa (hash: FOCcBoXQG14i7Fi0nDAmmqDfc5/wMS3xKazNxC7cZRc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/7b45b9-990b-4614-a64e-0f52ea5229fc/1/klbbNIe0xbrLMAF3BXzzF0z3dHc.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/7b45b9-990b-4614-a64e-0f52ea5229fc/1/klbbNIe0xbrLMAF3BXzzF0z3dHc.mft
rsync://rpki.ripe.net/repository/DEFAULT/klbbNIe0xbrLMAF3BXzzF0z3dHc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7c:29:1c:b6:71:bf:8e:57:55:30:51:2d:57:9c:95:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9256db3487b4c5bacb300177057cf3174cf77477
Validity
Not Before: Oct 27 07:00:31 2026 GMT
Not After : Oct 28 07:00:31 2026 GMT
Subject: CN=87260c7aece4636c0a6c6091390fb14655e64909
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:53:59:8a:26:cf:64:66:e3:bc:cc:38:3d:ea:
bc:65:53:74:ee:74:c9:a7:99:28:58:6a:e7:88:45:
2a:34:19:8d:84:16:ae:47:e2:93:d6:af:18:db:56:
e4:24:72:8f:e6:b5:46:2b:68:47:f9:ee:44:36:9c:
7f:37:96:f3:ae:09:85:4c:ee:73:97:aa:3f:2e:93:
a9:9e:2e:65:6a:4c:81:8d:ef:6d:75:b0:d9:f8:83:
88:5b:c4:5f:43:d1:1d:4f:5c:41:5e:fb:67:75:92:
ac:ce:c0:aa:f3:b9:72:1e:ec:aa:f8:c9:a9:17:ae:
47:dd:df:07:ca:fa:f9:36:e0:10:db:ec:a9:a0:b0:
27:20:7b:35:7c:7f:55:e6:7d:e1:d5:54:91:4f:63:
88:75:98:7a:1c:dd:2e:c7:9d:8f:b7:fb:ed:f9:76:
db:f6:bc:43:7c:be:cc:a6:dc:e8:66:52:2f:2a:d7:
b2:a9:a1:c4:55:7a:b4:96:ed:a1:52:8c:bc:1d:6e:
c0:e8:25:44:cd:d1:c9:24:07:b2:11:4d:f1:78:e5:
0b:95:c2:2a:fb:bb:09:17:05:2a:56:c9:d4:f5:99:
eb:a7:2d:74:b5:6a:90:ca:60:e0:4c:d0:59:10:6f:
7c:f6:aa:44:0b:3c:af:29:67:a5:42:88:47:b6:02:
dc:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:26:0C:7A:EC:E4:63:6C:0A:6C:60:91:39:0F:B1:46:55:E6:49:09
X509v3 Authority Key Identifier:
keyid:92:56:DB:34:87:B4:C5:BA:CB:30:01:77:05:7C:F3:17:4C:F7:74:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/klbbNIe0xbrLMAF3BXzzF0z3dHc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/7b45b9-990b-4614-a64e-0f52ea5229fc/1/klbbNIe0xbrLMAF3BXzzF0z3dHc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/7b45b9-990b-4614-a64e-0f52ea5229fc/1/klbbNIe0xbrLMAF3BXzzF0z3dHc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:99:4c:ca:51:e2:0a:e0:69:e6:ef:0d:77:e7:eb:d2:10:f8:
eb:42:64:d2:5c:44:55:6a:6e:6e:e0:77:b0:14:2b:fb:65:30:
ee:1c:53:d2:10:9d:47:ed:a9:70:dd:e0:4b:bc:b1:b0:45:a0:
48:38:af:b8:68:de:39:68:86:54:d1:8b:73:e0:5c:17:74:c2:
e1:41:7d:34:db:ca:ff:17:07:0b:65:03:97:91:58:a9:7c:1c:
7a:42:68:d4:ac:22:b1:4c:07:d2:93:71:b0:38:df:3d:8f:06:
41:ec:6d:d1:a4:a9:a6:3d:42:d4:35:60:45:10:8b:98:d8:1f:
dd:85:32:32:3c:6c:03:76:36:61:0d:d9:c0:55:9c:90:1e:d7:
8f:d1:f8:2b:79:93:ad:0b:8c:54:7f:4d:58:94:38:0b:2e:66:
f5:b6:89:10:56:c1:eb:2f:1f:3c:71:be:dc:03:20:9b:79:84:
81:8e:01:56:8a:ed:c8:b9:02:31:b3:d7:09:20:14:e1:4a:e3:
ee:e6:c7:17:ae:44:92:a9:00:2d:0a:3c:1e:81:3e:80:7c:72:
35:7b:77:15:66:ef:7a:3c:7d:4c:43:b9:e5:71:47:db:c7:b6:
c8:a4:23:ec:ef:ee:5b:67:cc:2f:25:65:2b:4e:a0:eb:0e:c1:
54:73:bb:64
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaF8KRy2cb+OV1UwUS1XnJXOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyNTZkYjM0ODdiNGM1YmFjYjMwMDE3NzA1N2NmMzE3NGNm
Nzc0NzcwHhcNMjYxMDI3MDcwMDMxWhcNMjYxMDI4MDcwMDMxWjAzMTEwLwYDVQQD
Eyg4NzI2MGM3YWVjZTQ2MzZjMGE2YzYwOTEzOTBmYjE0NjU1ZTY0OTA5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmVNZiibPZGbjvMw4Peq8ZVN07nTJ
p5koWGrniEUqNBmNhBauR+KT1q8Y21bkJHKP5rVGK2hH+e5ENpx/N5bzrgmFTO5z
l6o/LpOpni5lakyBje9tdbDZ+IOIW8RfQ9EdT1xBXvtndZKszsCq87lyHuyq+Mmp
F65H3d8Hyvr5NuAQ2+ypoLAnIHs1fH9V5n3h1VSRT2OIdZh6HN0ux52Pt/vt+Xbb
9rxDfL7MptzoZlIvKteyqaHEVXq0lu2hUoy8HW7A6CVEzdHJJAeyEU3xeOULlcIq
+7sJFwUqVsnU9Znrpy10tWqQymDgTNBZEG989qpECzyvKWelQohHtgLcnwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIcmDHrs5GNsCmxgkTkPsUZV5kkJMB8GA1UdIwQY
MBaAFJJW2zSHtMW6yzABdwV88xdM93R3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva2xiYk5JZTB4YnJMTUFGM0JYenpGMHozZEhjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi83YjQ1YjktOTkwYi00NjE0LWE2NGUt
MGY1MmVhNTIyOWZjLzEva2xiYk5JZTB4YnJMTUFGM0JYenpGMHozZEhjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZi83YjQ1YjktOTkwYi00NjE0LWE2NGUtMGY1MmVhNTIyOWZj
LzEva2xiYk5JZTB4YnJMTUFGM0JYenpGMHozZEhjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiplMylHi
CuBp5u8Nd+fr0hD460Jk0lxEVWpubuB3sBQr+2Uw7hxT0hCdR+2pcN3gS7yxsEWg
SDivuGjeOWiGVNGLc+BcF3TC4UF9NNvK/xcHC2UDl5FYqXwcekJo1KwisUwH0pNx
sDjfPY8GQext0aSppj1C1DVgRRCLmNgf3YUyMjxsA3Y2YQ3ZwFWckB7Xj9H4K3mT
rQuMVH9NWJQ4Cy5m9baJEFbB6y8fPHG+3AMgm3mEgY4BVortyLkCMbPXCSAU4Urj
7ubHF65EkqkALQo8HoE+gHxyNXt3FWbvejx9TEO55XFH28e2yKQj7O/uW2fMLyVl
K06g6w7BVHO7ZA==
-----END CERTIFICATE-----
Generated at Tue Oct 27 16:24:07 2026 by rpki-client