Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f1/b717c5-a64b-4475-be3e-5da8d677d847/1/klbr9muA8IE1hY0UTO1veFg09fQ.mft
File: klbr9muA8IE1hY0UTO1veFg09fQ.mft (raw, json)
Hash identifier: OeIjEENhI7Br3WBrfgm3wUSwVtkUSz/gY1T1TcbRrqQ=
Subject key identifier: 04:0C:4A:1E:FB:69:63:EC:03:CD:FE:DF:53:38:02:3F:D9:00:5D:60
Authority key identifier: 92:56:EB:F6:6B:80:F0:81:35:85:8D:14:4C:ED:6F:78:58:34:F5:F4
Certificate issuer: /CN=9256ebf66b80f08135858d144ced6f785834f5f4
Certificate serial: 01A18006DC3D23311EAA3A273E874F9FA3B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/klbr9muA8IE1hY0UTO1veFg09fQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/b717c5-a64b-4475-be3e-5da8d677d847/1/klbr9muA8IE1hY0UTO1veFg09fQ.mft
Manifest number: 1AC7
Signing time: Wed 28 Oct 2026 01:01:35 +0000
Manifest this update: Wed 28 Oct 2026 01:01:35 +0000
Manifest next update: Thu 29 Oct 2026 01:01:35 +0000
Files and hashes: 1: 40z5BTIzE-Otta9d5IxXlYjWk7Y.roa (hash: /K+vL2kVy1Ot78ZCbPvu7R3pgRcpdRMgsyhuVzNibSE=)
2: FnnFa3pMmqf3MiWUuKMyoAVWg-s.roa (hash: 6fPOtoWUy4XsTgZEttrlKq8GChMydmNHVVGJEIcxPdY=)
3: J4mHGlSY7agF8AXFPW8l8IBLAAI.roa (hash: /s0Afv+pL0DwKivaJvq3/xoIpyRomxE5EF1DLE1ue6g=)
4: ePQMQe046NknExZADvr19blY0SA.roa (hash: wKoVniNasUoMb11Rk/qza9dNeWvntUlfFXzDDxceLEM=)
5: hcjtq7J7FKS0bIahe8TWZOilbrc.roa (hash: uOY6FMIgCoFqDzQfMMnNRctUj2RDP4gSOMAnS9KpjHI=)
6: klbr9muA8IE1hY0UTO1veFg09fQ.crl (hash: 3PHyBoFcN255Rw476GP6Fss0N0rCMmVP1j2YMBEC9io=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/b717c5-a64b-4475-be3e-5da8d677d847/1/klbr9muA8IE1hY0UTO1veFg09fQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/b717c5-a64b-4475-be3e-5da8d677d847/1/klbr9muA8IE1hY0UTO1veFg09fQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/klbr9muA8IE1hY0UTO1veFg09fQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 22:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:80:06:dc:3d:23:31:1e:aa:3a:27:3e:87:4f:9f:a3:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9256ebf66b80f08135858d144ced6f785834f5f4
Validity
Not Before: Oct 28 01:01:35 2026 GMT
Not After : Oct 29 01:01:35 2026 GMT
Subject: CN=040c4a1efb6963ec03cdfedf5338023fd9005d60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:71:4c:cb:71:e9:90:75:b7:27:2a:53:b2:61:
0e:ab:1f:ec:53:42:90:72:3e:ca:0b:4a:4d:7a:46:
3f:e5:c8:49:01:05:6c:4f:1f:1c:9f:9c:ea:af:76:
01:29:6a:36:ab:47:de:cf:77:5a:51:9e:d8:67:1d:
af:ab:2d:a5:c4:4c:75:c3:79:e3:55:72:b2:bc:8c:
a8:bd:8a:24:fe:71:96:c6:8d:45:c1:9a:7f:2c:82:
30:f5:c0:44:17:61:aa:15:9e:23:57:95:9b:ee:fb:
53:3d:90:75:fc:d7:69:d1:54:66:44:92:3e:13:e4:
77:dc:41:e1:59:37:e0:04:2e:ca:04:7b:f2:54:92:
f9:2a:80:69:3a:4e:e6:5d:34:f7:da:1e:6e:17:37:
dd:33:54:81:15:8b:99:24:77:b5:3d:1b:d3:1c:09:
97:99:c1:bf:c0:a6:ce:76:07:67:bc:7d:95:f6:ec:
2b:08:bd:8b:d2:a8:de:c0:f8:e8:1b:6e:ff:c8:d0:
6b:51:c8:de:9f:a6:6a:7a:d0:25:ee:dd:9b:bf:33:
d0:6b:cb:b3:31:04:99:35:f2:27:04:41:a7:5a:13:
20:a8:1f:32:f9:dd:30:e7:f3:4d:39:fb:b8:e8:de:
3d:64:51:9c:8c:25:80:67:53:d4:c0:af:50:32:eb:
1a:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:0C:4A:1E:FB:69:63:EC:03:CD:FE:DF:53:38:02:3F:D9:00:5D:60
X509v3 Authority Key Identifier:
keyid:92:56:EB:F6:6B:80:F0:81:35:85:8D:14:4C:ED:6F:78:58:34:F5:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/klbr9muA8IE1hY0UTO1veFg09fQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/b717c5-a64b-4475-be3e-5da8d677d847/1/klbr9muA8IE1hY0UTO1veFg09fQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/b717c5-a64b-4475-be3e-5da8d677d847/1/klbr9muA8IE1hY0UTO1veFg09fQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:19:54:93:c8:74:de:7e:70:d5:6b:14:3d:dd:41:ea:eb:b0:
30:61:9e:6b:f2:0f:b9:48:98:e1:f1:83:2f:ef:10:b4:fc:d0:
07:64:4a:35:87:18:28:67:37:6c:78:9b:d3:9f:17:28:1c:74:
3f:1a:ea:ba:db:da:07:a6:4c:bc:44:b2:36:36:e1:e5:33:57:
2d:b1:2a:ad:31:38:df:d2:b8:a7:06:fe:7c:a7:5b:ac:46:b9:
1d:14:7f:d2:77:e3:ed:72:6f:0d:fc:e0:b4:20:83:da:a5:49:
c1:8c:44:76:a7:cd:bf:8a:a6:a0:b6:8f:8d:7f:7c:c2:ff:c9:
bd:07:62:da:17:68:00:96:3c:86:f1:31:6a:9d:eb:29:fd:ba:
e0:1f:f0:49:29:a1:3c:06:04:c4:5e:1b:02:bb:40:bd:b9:d5:
a9:43:bb:17:86:0a:b7:d2:2d:f7:97:5a:75:f2:f2:89:7c:5a:
ef:bf:76:3c:8e:3a:e4:5a:08:98:d9:bf:d6:e7:f9:6e:2b:80:
8f:41:7f:ea:6c:ba:ef:ef:4f:79:7e:d2:6b:d6:f7:53:3d:9e:
fc:56:39:c6:53:2b:31:e9:95:82:4e:e2:0e:98:b6:b8:ca:01:
3c:49:91:0c:f8:41:39:fd:24:ab:72:f9:53:18:d5:ed:ab:7f:
78:7f:0e:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 06:16:40 2026 by rpki-client