Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/6788f5-4889-4be7-bb19-a9b8de611a96/1/klBppddk2iVZVNsu6dEkPeFrkQE.mft
File: klBppddk2iVZVNsu6dEkPeFrkQE.mft (raw, json)
Hash identifier: r2sAeMLuouy2HXMH7D8wtJKBr2crOv6kphxZcE1JRp4=
Subject key identifier: 02:88:47:FD:70:86:D1:75:21:F7:42:FF:6F:65:88:A4:21:16:99:AF
Authority key identifier: 92:50:69:A5:D7:64:DA:25:59:54:DB:2E:E9:D1:24:3D:E1:6B:91:01
Certificate issuer: /CN=925069a5d764da255954db2ee9d1243de16b9101
Certificate serial: 019D38D29E2E14643E098383E681956DFAD3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/klBppddk2iVZVNsu6dEkPeFrkQE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/6788f5-4889-4be7-bb19-a9b8de611a96/1/klBppddk2iVZVNsu6dEkPeFrkQE.mft
Manifest number: 141E
Signing time: Sun 29 Mar 2026 09:00:20 +0000
Manifest this update: Sun 29 Mar 2026 09:00:20 +0000
Manifest next update: Mon 30 Mar 2026 09:00:20 +0000
Files and hashes: 1: g7Y0ZBMWW3x2nBvDARRBK02Lebg.roa (hash: +2cc++Wl1u7PjNULA3cbQO5x+A8pMvr+LGUA63FvUlc=)
2: klBppddk2iVZVNsu6dEkPeFrkQE.crl (hash: uvzNjqqEhZ25uMG5SPoj8Ypuy/dzNdd6nDyxCrs0fbM=)
3: rqGjD3vaP5vjh-UbO_Aa0T8TroY.roa (hash: VMdVXfW1qOZfCDo+olo19jtE9+BYNQ4kPi8z5UP7KV0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/6788f5-4889-4be7-bb19-a9b8de611a96/1/klBppddk2iVZVNsu6dEkPeFrkQE.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/6788f5-4889-4be7-bb19-a9b8de611a96/1/klBppddk2iVZVNsu6dEkPeFrkQE.mft
rsync://rpki.ripe.net/repository/DEFAULT/klBppddk2iVZVNsu6dEkPeFrkQE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d2:9e:2e:14:64:3e:09:83:83:e6:81:95:6d:fa:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=925069a5d764da255954db2ee9d1243de16b9101
Validity
Not Before: Mar 29 09:00:20 2026 GMT
Not After : Mar 30 09:00:20 2026 GMT
Subject: CN=028847fd7086d17521f742ff6f6588a4211699af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:31:77:c1:af:d8:e7:8f:f3:3d:46:be:38:1d:
32:5e:0e:46:40:97:c8:80:8e:4b:30:72:a1:45:66:
bf:a4:21:c8:e6:6f:18:15:6c:1f:60:ca:3f:dc:dd:
13:87:de:2f:6a:d3:1b:9f:3b:03:ac:7f:a4:4f:9a:
a4:e0:d5:8e:22:cc:0c:74:4e:b0:8e:f7:1a:c0:73:
b8:1c:f6:79:08:85:39:fc:75:65:de:d2:1a:6e:e7:
cc:d7:9e:f1:21:21:5b:aa:02:95:8c:0d:3e:88:aa:
89:2a:db:50:a6:01:f9:e6:37:95:22:a4:ad:d8:5e:
53:18:a4:dc:7e:cd:f0:fd:ba:47:f0:0f:9d:07:45:
92:bc:ec:d8:ee:21:74:15:03:4b:0d:af:83:82:52:
98:80:d8:32:e1:79:67:12:f0:51:be:9f:7d:e8:84:
47:cc:7d:65:21:56:aa:15:a6:90:96:b7:90:ab:5d:
71:70:08:c7:81:a8:7a:76:90:d5:ba:91:2f:e8:d3:
f1:76:5e:b7:7e:25:34:99:34:73:8a:ca:a1:5d:31:
ef:ee:de:c9:06:e9:da:94:43:39:2b:9e:5e:26:9c:
9e:a2:9b:82:49:84:fa:93:34:46:1b:de:49:d0:f8:
23:d3:57:5a:fe:6c:71:22:3f:bf:1e:21:42:5a:65:
b8:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:88:47:FD:70:86:D1:75:21:F7:42:FF:6F:65:88:A4:21:16:99:AF
X509v3 Authority Key Identifier:
keyid:92:50:69:A5:D7:64:DA:25:59:54:DB:2E:E9:D1:24:3D:E1:6B:91:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/klBppddk2iVZVNsu6dEkPeFrkQE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/6788f5-4889-4be7-bb19-a9b8de611a96/1/klBppddk2iVZVNsu6dEkPeFrkQE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/6788f5-4889-4be7-bb19-a9b8de611a96/1/klBppddk2iVZVNsu6dEkPeFrkQE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:8e:a0:64:29:95:80:69:44:5c:06:d4:22:bf:43:c1:7e:c5:
50:c2:88:e7:fe:5a:49:0f:12:99:83:64:03:9d:66:6c:fd:f2:
40:41:3d:fe:e1:58:86:d8:bc:9b:bb:50:ea:77:1e:42:ec:16:
9f:24:64:cc:db:54:02:60:84:d0:6f:06:13:91:13:62:e2:e8:
c3:b8:be:df:c6:a5:df:f0:44:5d:57:73:4b:3a:a5:40:d0:5e:
a5:0f:c4:2a:c3:e5:16:c1:6f:d1:9d:d8:ed:b0:0e:9f:51:cf:
aa:12:59:31:59:2c:60:ea:7e:75:af:87:a2:50:69:b9:fc:89:
c0:42:a0:93:d1:55:5c:59:9f:00:d4:07:46:95:47:53:f9:62:
fb:03:d7:39:b3:6c:3b:19:a3:ac:d9:2f:af:a5:ef:06:ed:33:
b6:e1:e4:48:95:85:62:b2:2f:0d:c5:f5:36:c6:91:f7:18:9f:
d5:13:df:67:a3:45:c5:47:15:ff:fa:10:12:52:42:cc:86:12:
31:f0:3a:89:3d:66:b5:fb:2c:39:8e:1f:a0:92:b3:a4:b7:74:
6f:90:d5:02:a1:26:7d:ae:e5:dc:47:7a:0d:30:52:69:ea:3c:
dd:a7:be:db:0e:be:b7:85:1d:0e:c4:bb:c5:b5:49:2e:91:b7:
34:d7:76:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:59:06 2026 by rpki-client