Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/de/6788f5-4889-4be7-bb19-a9b8de611a96/1/klBppddk2iVZVNsu6dEkPeFrkQE.mft
File: klBppddk2iVZVNsu6dEkPeFrkQE.mft (raw, json)
Hash identifier: 5E9a8xWP9Z81Bbs+sPHEW+EuytJCDwFGCPc+Chzi0i8=
Subject key identifier: 01:FF:44:64:F9:58:EE:06:79:FC:42:77:3B:0C:0D:AF:46:83:C5:60
Authority key identifier: 92:50:69:A5:D7:64:DA:25:59:54:DB:2E:E9:D1:24:3D:E1:6B:91:01
Certificate issuer: /CN=925069a5d764da255954db2ee9d1243de16b9101
Certificate serial: 01A183ACB59E7817A65529A35A14A4F05E39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/klBppddk2iVZVNsu6dEkPeFrkQE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/6788f5-4889-4be7-bb19-a9b8de611a96/1/klBppddk2iVZVNsu6dEkPeFrkQE.mft
Manifest number: 1657
Signing time: Wed 28 Oct 2026 18:01:36 +0000
Manifest this update: Wed 28 Oct 2026 18:01:36 +0000
Manifest next update: Thu 29 Oct 2026 18:01:36 +0000
Files and hashes: 1: g7Y0ZBMWW3x2nBvDARRBK02Lebg.roa (hash: +2cc++Wl1u7PjNULA3cbQO5x+A8pMvr+LGUA63FvUlc=)
2: klBppddk2iVZVNsu6dEkPeFrkQE.crl (hash: 4KoTuyitZw+3LLkUhyNlu9NbidCESf1wrK6bFCRUk/c=)
3: rqGjD3vaP5vjh-UbO_Aa0T8TroY.roa (hash: VMdVXfW1qOZfCDo+olo19jtE9+BYNQ4kPi8z5UP7KV0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/6788f5-4889-4be7-bb19-a9b8de611a96/1/klBppddk2iVZVNsu6dEkPeFrkQE.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/6788f5-4889-4be7-bb19-a9b8de611a96/1/klBppddk2iVZVNsu6dEkPeFrkQE.mft
rsync://rpki.ripe.net/repository/DEFAULT/klBppddk2iVZVNsu6dEkPeFrkQE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 14:14:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:83:ac:b5:9e:78:17:a6:55:29:a3:5a:14:a4:f0:5e:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=925069a5d764da255954db2ee9d1243de16b9101
Validity
Not Before: Oct 28 18:01:36 2026 GMT
Not After : Oct 29 18:01:36 2026 GMT
Subject: CN=01ff4464f958ee0679fc42773b0c0daf4683c560
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:3c:16:4e:da:f9:6e:b0:e2:02:1f:70:76:32:
c6:68:ba:9d:bc:92:d7:ee:f5:66:da:dd:2c:7e:9b:
a8:de:ed:55:20:e0:29:f4:ad:e2:1e:48:2d:b1:61:
8f:48:46:43:a3:72:9e:0a:40:db:23:af:bc:0a:c7:
9d:27:ef:0e:5e:88:a7:b5:b0:cf:2f:6e:93:45:50:
28:ce:0c:b4:d8:7c:80:04:45:11:dc:c0:34:ee:14:
07:1f:70:88:2d:d3:fd:f6:c0:bf:88:62:f4:e7:73:
ea:9a:db:20:69:5b:6e:27:97:19:15:48:26:f3:0b:
a2:9d:af:6d:1b:6f:aa:68:fa:0f:91:e5:57:6e:fa:
67:37:c3:8e:7f:29:ba:ad:9e:13:13:59:6e:94:c8:
ce:fa:fe:e8:d2:61:9d:c6:86:0f:73:54:c6:f7:68:
a0:39:92:8a:07:e8:a1:d4:a9:c5:5d:6f:51:99:f0:
ea:11:d3:c4:04:02:c2:4f:aa:fe:e5:c5:88:a7:74:
8f:1c:e2:db:c8:b7:4c:00:b4:06:d5:80:9c:48:35:
4c:d8:6e:24:30:06:3a:b1:a7:40:c3:a3:fd:2b:59:
ab:fb:65:40:a5:40:e3:c2:23:de:a9:96:b6:31:69:
27:f3:f8:94:b7:b7:fc:37:e7:ed:3c:46:ef:e4:42:
f3:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:FF:44:64:F9:58:EE:06:79:FC:42:77:3B:0C:0D:AF:46:83:C5:60
X509v3 Authority Key Identifier:
keyid:92:50:69:A5:D7:64:DA:25:59:54:DB:2E:E9:D1:24:3D:E1:6B:91:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/klBppddk2iVZVNsu6dEkPeFrkQE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/6788f5-4889-4be7-bb19-a9b8de611a96/1/klBppddk2iVZVNsu6dEkPeFrkQE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/6788f5-4889-4be7-bb19-a9b8de611a96/1/klBppddk2iVZVNsu6dEkPeFrkQE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:25:20:ac:c4:e7:91:80:10:26:9a:7d:f1:2b:c1:3a:59:62:
57:74:5d:de:0f:76:e3:8e:c3:6d:21:84:2c:0e:5c:b5:c5:af:
e8:b4:12:bf:4e:b7:10:0c:cc:9b:75:73:b4:ff:72:58:15:5c:
eb:d9:0c:de:d1:39:b9:27:2a:dd:62:7b:57:ed:71:6f:55:c4:
31:63:bf:1a:a8:e2:12:78:47:95:ce:1e:ec:38:21:48:8d:6a:
08:00:e2:80:8f:14:9f:a4:d5:7a:a5:74:e9:a4:04:bf:a1:ed:
ca:0a:87:e2:f5:75:a0:50:36:24:16:f8:62:5f:c0:1b:fc:a1:
80:94:9e:07:e3:61:62:a9:e3:fb:d7:7e:c0:78:3d:4d:a9:c0:
dd:a8:2d:03:39:d5:bc:ae:a8:98:a4:9c:e6:70:ad:f7:e6:db:
a5:84:b7:79:e9:f2:50:99:8b:6e:4c:7e:f2:80:d9:bf:dc:4a:
d2:57:33:aa:a0:ef:26:a4:b0:f4:0f:55:82:76:2c:39:1b:65:
5e:9f:54:e2:59:f8:cb:8d:f6:a0:9b:fe:2a:1d:2e:22:45:a0:
1c:66:92:35:a6:18:1c:04:e7:06:62:78:3c:4c:6e:d0:70:94:
ab:ae:e7:f9:08:95:b0:a6:80:15:fe:b6:14:c2:2a:bc:a1:23:
84:dc:98:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 22:48:48 2026 by rpki-client