Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bf/7b45b9-990b-4614-a64e-0f52ea5229fc/1/klbbNIe0xbrLMAF3BXzzF0z3dHc.mft
File: klbbNIe0xbrLMAF3BXzzF0z3dHc.mft (raw, json)
Hash identifier: /MDInVwyZ4pXv+obvY/VuIBQQkQx7PwzUIiGHheCSjk=
Subject key identifier: 01:82:31:19:EC:9E:63:BA:C8:7B:3F:AC:69:DD:B5:C1:71:81:A1:BB
Authority key identifier: 92:56:DB:34:87:B4:C5:BA:CB:30:01:77:05:7C:F3:17:4C:F7:74:77
Certificate issuer: /CN=9256db3487b4c5bacb300177057cf3174cf77477
Certificate serial: 01A06FB9D6479669631B8407B1331EC14257
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/klbbNIe0xbrLMAF3BXzzF0z3dHc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/7b45b9-990b-4614-a64e-0f52ea5229fc/1/klbbNIe0xbrLMAF3BXzzF0z3dHc.mft
Manifest number: 1A3A
Signing time: Sat 05 Sep 2026 04:00:44 +0000
Manifest this update: Sat 05 Sep 2026 04:00:44 +0000
Manifest next update: Sun 06 Sep 2026 04:00:44 +0000
Files and hashes: 1: 04BGo9FtObILQBaft1sQoeQgCYo.roa (hash: Fwkz3jqMyP5AwHPobSf3siex/Tu6ZYcC4zjVdfIOsac=)
2: klbbNIe0xbrLMAF3BXzzF0z3dHc.crl (hash: vaAe4eH4g9wI8jB0rFFpZH0jUMpbJ0SgtNHpJQmKurs=)
3: rX01FOC9tDHIxRVaHAAeqyrP4Eo.roa (hash: FOCcBoXQG14i7Fi0nDAmmqDfc5/wMS3xKazNxC7cZRc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/7b45b9-990b-4614-a64e-0f52ea5229fc/1/klbbNIe0xbrLMAF3BXzzF0z3dHc.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/7b45b9-990b-4614-a64e-0f52ea5229fc/1/klbbNIe0xbrLMAF3BXzzF0z3dHc.mft
rsync://rpki.ripe.net/repository/DEFAULT/klbbNIe0xbrLMAF3BXzzF0z3dHc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Sep 2026 01:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6f:b9:d6:47:96:69:63:1b:84:07:b1:33:1e:c1:42:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9256db3487b4c5bacb300177057cf3174cf77477
Validity
Not Before: Sep 5 04:00:44 2026 GMT
Not After : Sep 6 04:00:44 2026 GMT
Subject: CN=01823119ec9e63bac87b3fac69ddb5c17181a1bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:ed:af:f6:c5:be:0e:18:19:2e:07:0a:ee:76:
16:99:7b:e1:f7:8c:68:a3:ea:a2:d5:60:4d:33:e0:
26:91:47:16:36:b3:e1:99:30:bc:b6:aa:d7:65:c0:
d2:28:08:e3:6b:0f:d6:69:1f:12:63:f7:aa:7f:6f:
18:41:96:85:82:bb:ce:a8:c0:cc:77:c3:66:ca:00:
08:ac:ee:e5:92:14:e9:51:98:3a:0d:e0:f5:79:51:
57:eb:16:fe:4f:cd:a0:98:36:50:66:62:c3:f2:3c:
86:56:d1:65:c4:f1:42:f4:fd:b2:d4:2b:8d:a4:ef:
2f:39:bc:24:a6:a8:04:9a:05:d0:6c:49:e7:a0:8c:
45:2f:ad:1c:9c:ec:a2:cc:a4:14:db:07:a1:1e:12:
e1:49:99:f5:f1:65:67:4d:e9:4d:38:d6:97:5e:9e:
cd:62:55:c0:6d:c7:2f:c6:98:3f:52:2a:a5:34:e2:
70:af:96:84:8e:2d:b3:b9:e1:74:70:f6:1c:9e:04:
ee:c1:35:9f:0f:fd:80:a5:ce:7b:6e:a1:0d:ff:ab:
27:e7:8c:9d:7e:e4:91:d4:41:64:be:3f:ec:71:14:
71:0e:2c:0c:d6:8a:a2:f1:9e:61:69:9b:7c:9f:b6:
ed:7d:f7:f0:c0:58:76:3e:97:d9:f3:be:02:05:24:
2a:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:82:31:19:EC:9E:63:BA:C8:7B:3F:AC:69:DD:B5:C1:71:81:A1:BB
X509v3 Authority Key Identifier:
keyid:92:56:DB:34:87:B4:C5:BA:CB:30:01:77:05:7C:F3:17:4C:F7:74:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/klbbNIe0xbrLMAF3BXzzF0z3dHc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/7b45b9-990b-4614-a64e-0f52ea5229fc/1/klbbNIe0xbrLMAF3BXzzF0z3dHc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/7b45b9-990b-4614-a64e-0f52ea5229fc/1/klbbNIe0xbrLMAF3BXzzF0z3dHc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:90:20:04:1e:64:0c:59:83:36:e0:7f:bd:35:10:e3:00:7a:
c8:4e:d4:69:e7:bf:8a:26:1b:f2:f0:35:29:dd:8e:d4:fa:36:
27:b2:98:2e:21:e2:67:59:7f:ef:fd:5a:51:d6:c4:4a:ea:bd:
f9:6b:b1:0a:f4:5c:3b:45:9d:21:26:7c:87:25:80:de:6a:70:
cf:33:7b:89:a3:41:74:91:72:2e:c6:4f:73:a4:11:6b:ab:4f:
28:1b:c9:20:bd:c8:69:6e:67:4d:8f:09:a0:5e:5b:39:b7:24:
05:7b:53:83:a3:e4:01:e3:ea:32:97:ad:1f:7c:41:fe:cb:b3:
c8:52:b1:a2:b3:34:14:40:b1:67:1f:ed:eb:d3:fb:c9:fd:0d:
fc:71:4a:27:31:c1:8d:11:2e:30:a9:b0:4b:ad:f2:20:40:b3:
50:7f:8b:91:57:7c:1c:4a:6f:3a:c9:e9:3a:22:49:ae:48:f2:
dd:ff:47:00:91:3b:5a:11:0e:84:51:4a:4d:1c:ea:68:f8:92:
b6:3c:91:60:6d:68:e0:82:01:24:b3:f8:3e:9f:03:52:2e:8e:
52:90:fa:ce:35:4a:c3:f7:d9:e8:e4:ef:81:6b:39:d1:f7:80:
ac:d3:a1:84:e0:ec:9a:99:c6:81:93:23:bb:55:2b:00:91:d4:
0d:c4:22:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 09:03:41 2026 by rpki-client