Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/de/6788f5-4889-4be7-bb19-a9b8de611a96/1/klBppddk2iVZVNsu6dEkPeFrkQE.mft
File: klBppddk2iVZVNsu6dEkPeFrkQE.mft (raw, json)
Hash identifier: ehJ5JSVWVvQL5Rg5uS+FsIJKAoa6X5HB8SF9JX48k5o=
Subject key identifier: 5B:34:55:6B:9B:F4:4C:E5:53:C5:28:B8:B7:09:8E:67:A5:87:FC:D4
Authority key identifier: 92:50:69:A5:D7:64:DA:25:59:54:DB:2E:E9:D1:24:3D:E1:6B:91:01
Certificate issuer: /CN=925069a5d764da255954db2ee9d1243de16b9101
Certificate serial: 01A08E6918030948F32F1CE30A5352168B45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/klBppddk2iVZVNsu6dEkPeFrkQE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/6788f5-4889-4be7-bb19-a9b8de611a96/1/klBppddk2iVZVNsu6dEkPeFrkQE.mft
Manifest number: 15D8
Signing time: Fri 11 Sep 2026 03:00:47 +0000
Manifest this update: Fri 11 Sep 2026 03:00:47 +0000
Manifest next update: Sat 12 Sep 2026 03:00:47 +0000
Files and hashes: 1: g7Y0ZBMWW3x2nBvDARRBK02Lebg.roa (hash: +2cc++Wl1u7PjNULA3cbQO5x+A8pMvr+LGUA63FvUlc=)
2: klBppddk2iVZVNsu6dEkPeFrkQE.crl (hash: PO4nZatIRkN5sIGNAobl0SS/djKzMUftdJUANdWsUco=)
3: rqGjD3vaP5vjh-UbO_Aa0T8TroY.roa (hash: VMdVXfW1qOZfCDo+olo19jtE9+BYNQ4kPi8z5UP7KV0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/6788f5-4889-4be7-bb19-a9b8de611a96/1/klBppddk2iVZVNsu6dEkPeFrkQE.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/6788f5-4889-4be7-bb19-a9b8de611a96/1/klBppddk2iVZVNsu6dEkPeFrkQE.mft
rsync://rpki.ripe.net/repository/DEFAULT/klBppddk2iVZVNsu6dEkPeFrkQE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8e:69:18:03:09:48:f3:2f:1c:e3:0a:53:52:16:8b:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=925069a5d764da255954db2ee9d1243de16b9101
Validity
Not Before: Sep 11 03:00:47 2026 GMT
Not After : Sep 12 03:00:47 2026 GMT
Subject: CN=5b34556b9bf44ce553c528b8b7098e67a587fcd4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:fb:da:ab:95:3d:66:06:10:32:31:1c:ba:31:
91:4b:8f:71:57:41:2d:fa:b8:73:d8:db:81:9b:a4:
c6:71:a3:b9:e3:af:43:77:60:aa:6d:e7:ff:e6:91:
e0:a0:c9:d0:5e:fd:be:f1:b6:04:f7:c9:63:64:13:
43:07:4d:71:58:89:b1:71:08:ef:e0:62:d7:ba:56:
82:81:ed:1d:52:63:16:3a:86:5d:da:07:3e:81:28:
00:4f:84:51:37:5d:73:41:84:45:b4:47:15:74:d3:
2c:56:59:06:a6:5b:9c:76:d9:74:e2:c9:f6:45:3f:
35:f0:96:bb:9c:da:a7:c7:c1:84:52:6e:61:50:9d:
30:37:95:2a:e2:03:8e:eb:3b:28:69:43:21:25:19:
c1:b2:f7:d0:e2:72:b9:1a:54:41:34:e9:94:78:ae:
78:c2:07:b6:51:ef:7a:29:59:d2:00:32:2f:c1:4e:
a9:61:d6:76:4a:d2:60:34:d6:36:8c:d3:67:59:a5:
0e:2e:8a:c4:6f:fa:73:13:2a:59:e6:05:ee:09:ec:
ef:d5:90:2e:2a:29:20:ba:25:7d:8a:6b:20:d6:bf:
78:08:61:8f:e2:76:a5:ea:08:34:57:ba:3e:67:7f:
0a:58:d0:f8:44:bb:97:f6:e6:02:ad:53:af:63:ed:
1c:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:34:55:6B:9B:F4:4C:E5:53:C5:28:B8:B7:09:8E:67:A5:87:FC:D4
X509v3 Authority Key Identifier:
keyid:92:50:69:A5:D7:64:DA:25:59:54:DB:2E:E9:D1:24:3D:E1:6B:91:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/klBppddk2iVZVNsu6dEkPeFrkQE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/6788f5-4889-4be7-bb19-a9b8de611a96/1/klBppddk2iVZVNsu6dEkPeFrkQE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/6788f5-4889-4be7-bb19-a9b8de611a96/1/klBppddk2iVZVNsu6dEkPeFrkQE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:5b:7e:44:cc:8c:c2:a2:9c:cd:54:d4:bc:53:e6:fd:b2:f9:
41:b0:8d:d2:3a:e7:09:f8:55:4e:73:bf:b0:97:97:be:a8:ac:
36:9a:74:9f:c1:c1:75:1e:db:4a:13:23:b9:86:62:78:4f:c7:
08:37:9b:d9:ee:54:9d:a8:de:42:7c:80:e1:23:ad:f7:d5:a6:
6a:50:5b:f3:e5:96:9a:d0:b8:42:09:6d:9d:3a:f9:4e:cb:42:
72:20:6e:57:b0:30:f1:fa:ed:25:b5:f2:05:1b:5c:9b:17:7a:
cc:b2:f1:33:5b:58:1a:cd:b3:27:ff:28:4c:45:77:99:53:ab:
4d:ff:98:d9:ab:2d:bb:92:89:ed:72:e7:4b:f3:8c:68:28:97:
a2:f6:73:e8:01:86:d0:dd:81:db:3c:f1:34:20:12:64:d5:9a:
83:61:14:b8:66:90:57:9a:d5:b1:3f:dd:22:da:db:76:66:16:
55:7b:a6:2e:ef:2e:ea:cc:4b:4e:67:f2:9f:48:6b:0c:c2:05:
bd:4b:36:cc:ad:81:72:be:c5:0f:91:db:d9:04:47:49:39:2b:
4c:24:64:57:ec:17:08:79:f2:dc:a0:a0:8e:0b:ec:51:22:c3:
62:eb:28:86:8e:79:ae:31:60:c4:68:ee:b9:ab:ae:8c:e8:1f:
d5:b9:29:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 08:32:03 2026 by rpki-client