Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/6788f5-4889-4be7-bb19-a9b8de611a96/1/klBppddk2iVZVNsu6dEkPeFrkQE.mft
File: klBppddk2iVZVNsu6dEkPeFrkQE.mft (raw, json)
Hash identifier: NEZqkK4kL9DOXOHipY+Khl+mzggMf2mXKelB0/g5IY4=
Subject key identifier: A5:4B:78:F3:96:F0:E5:02:94:8B:24:17:DB:84:70:3B:A5:D4:69:8D
Authority key identifier: 92:50:69:A5:D7:64:DA:25:59:54:DB:2E:E9:D1:24:3D:E1:6B:91:01
Certificate issuer: /CN=925069a5d764da255954db2ee9d1243de16b9101
Certificate serial: 019E31F321F9F33A58865C583C21CF97A465
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/klBppddk2iVZVNsu6dEkPeFrkQE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/6788f5-4889-4be7-bb19-a9b8de611a96/1/klBppddk2iVZVNsu6dEkPeFrkQE.mft
Manifest number: 149F
Signing time: Sat 16 May 2026 18:01:17 +0000
Manifest this update: Sat 16 May 2026 18:01:17 +0000
Manifest next update: Sun 17 May 2026 18:01:17 +0000
Files and hashes: 1: g7Y0ZBMWW3x2nBvDARRBK02Lebg.roa (hash: +2cc++Wl1u7PjNULA3cbQO5x+A8pMvr+LGUA63FvUlc=)
2: klBppddk2iVZVNsu6dEkPeFrkQE.crl (hash: VBFZGNUmuSlcD68Wl5v+Tnxn8v44iwbY62keObiZY94=)
3: rqGjD3vaP5vjh-UbO_Aa0T8TroY.roa (hash: VMdVXfW1qOZfCDo+olo19jtE9+BYNQ4kPi8z5UP7KV0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/6788f5-4889-4be7-bb19-a9b8de611a96/1/klBppddk2iVZVNsu6dEkPeFrkQE.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/6788f5-4889-4be7-bb19-a9b8de611a96/1/klBppddk2iVZVNsu6dEkPeFrkQE.mft
rsync://rpki.ripe.net/repository/DEFAULT/klBppddk2iVZVNsu6dEkPeFrkQE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 18:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:31:f3:21:f9:f3:3a:58:86:5c:58:3c:21:cf:97:a4:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=925069a5d764da255954db2ee9d1243de16b9101
Validity
Not Before: May 16 18:01:17 2026 GMT
Not After : May 17 18:01:17 2026 GMT
Subject: CN=a54b78f396f0e502948b2417db84703ba5d4698d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:fe:80:5d:58:53:3b:07:ad:b7:76:f8:fd:33:
97:82:ee:4d:69:6b:76:9d:e3:48:c1:80:3c:74:2c:
14:c2:8d:11:c0:3a:41:83:55:e9:03:b1:64:f6:53:
e0:10:0c:44:81:21:4e:ca:91:46:f8:1a:9d:42:34:
73:95:20:e9:e4:59:6e:91:e3:3e:89:b1:25:9a:32:
29:ab:39:dd:50:a9:94:53:46:8a:b3:bb:7b:c9:09:
ca:a5:e3:f1:14:ba:89:54:a7:3e:c3:0b:29:ac:ed:
de:71:d1:a6:86:bb:e2:b1:6d:76:74:1f:ff:33:8c:
73:d2:35:4f:0b:c8:26:7c:06:03:a1:fe:04:1e:cf:
87:cb:dd:01:d4:55:1d:cb:52:d7:bb:51:9a:10:77:
00:72:aa:c4:96:7e:96:9a:15:87:30:d8:e4:58:f1:
af:c8:42:73:fd:f6:a0:ed:76:9d:95:09:5a:96:17:
72:f5:fe:50:22:66:03:d3:7d:c0:0a:b0:49:0e:22:
21:78:6f:b1:51:c5:5a:be:8d:98:e5:68:e1:e2:ec:
97:0d:58:b0:48:a7:49:87:1d:5a:81:8f:db:95:52:
29:c9:ae:2a:94:a6:dd:ef:c2:14:bb:08:89:30:a6:
3e:3a:1c:38:28:c6:77:c9:94:98:a4:c0:f9:49:b7:
df:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:4B:78:F3:96:F0:E5:02:94:8B:24:17:DB:84:70:3B:A5:D4:69:8D
X509v3 Authority Key Identifier:
keyid:92:50:69:A5:D7:64:DA:25:59:54:DB:2E:E9:D1:24:3D:E1:6B:91:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/klBppddk2iVZVNsu6dEkPeFrkQE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/6788f5-4889-4be7-bb19-a9b8de611a96/1/klBppddk2iVZVNsu6dEkPeFrkQE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/6788f5-4889-4be7-bb19-a9b8de611a96/1/klBppddk2iVZVNsu6dEkPeFrkQE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:61:10:07:59:7d:b3:67:64:d4:09:2b:e1:86:24:61:73:bc:
89:35:37:fb:3f:e0:50:74:10:87:35:26:17:23:83:c6:08:df:
40:1a:b9:eb:b1:2e:4b:71:4c:f4:c0:a4:20:40:a9:22:76:7f:
09:f8:7b:08:d8:d7:23:97:18:b3:7c:61:49:cc:eb:d7:ec:f0:
e2:20:c1:34:d4:a6:33:b6:2b:0e:38:60:03:cd:9e:31:14:bf:
9b:30:2d:e4:9f:f6:d8:bb:d0:43:80:b4:d4:c5:a2:9e:15:99:
34:b6:af:0f:fa:c7:6d:57:43:10:08:7a:ad:09:7a:67:97:3c:
ad:11:39:65:1e:eb:ff:80:61:7e:0e:85:46:88:61:d6:43:97:
b4:12:a5:2a:f7:ac:65:5d:79:4e:56:8a:33:86:ce:2f:67:bc:
a4:67:08:eb:6f:8f:66:e5:05:ee:8e:1e:43:da:bb:f2:90:55:
02:08:09:0f:cd:48:82:8a:1e:4a:28:95:2f:6f:c3:42:cd:a1:
a4:95:f2:a4:64:b9:24:20:e6:2e:2b:26:45:a2:64:fb:6a:8a:
18:55:74:f7:93:54:c9:11:2d:c9:d0:73:03:fb:56:ee:2b:0f:
70:85:1b:e5:8e:7e:de:52:15:ab:ba:9c:e7:5b:7e:b7:2b:f9:
fe:4c:4e:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 17 03:33:54 2026 by rpki-client