Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f1/b717c5-a64b-4475-be3e-5da8d677d847/1/klbr9muA8IE1hY0UTO1veFg09fQ.mft
File: klbr9muA8IE1hY0UTO1veFg09fQ.mft (raw, json)
Hash identifier: hzw7EvOYZ+Ogy4olgLr2XxqfM8Ns6Nj01JpwqPzQ57I=
Subject key identifier: E6:69:C3:29:14:89:19:CD:8A:AB:DC:FE:36:31:3A:2A:D0:B7:2C:64
Authority key identifier: 92:56:EB:F6:6B:80:F0:81:35:85:8D:14:4C:ED:6F:78:58:34:F5:F4
Certificate issuer: /CN=9256ebf66b80f08135858d144ced6f785834f5f4
Certificate serial: 01A17E186C2C8F0F4578F408A0F49A99AD42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/klbr9muA8IE1hY0UTO1veFg09fQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/b717c5-a64b-4475-be3e-5da8d677d847/1/klbr9muA8IE1hY0UTO1veFg09fQ.mft
Manifest number: 1AC6
Signing time: Tue 27 Oct 2026 16:01:32 +0000
Manifest this update: Tue 27 Oct 2026 16:01:32 +0000
Manifest next update: Wed 28 Oct 2026 16:01:32 +0000
Files and hashes: 1: 40z5BTIzE-Otta9d5IxXlYjWk7Y.roa (hash: /K+vL2kVy1Ot78ZCbPvu7R3pgRcpdRMgsyhuVzNibSE=)
2: FnnFa3pMmqf3MiWUuKMyoAVWg-s.roa (hash: 6fPOtoWUy4XsTgZEttrlKq8GChMydmNHVVGJEIcxPdY=)
3: J4mHGlSY7agF8AXFPW8l8IBLAAI.roa (hash: /s0Afv+pL0DwKivaJvq3/xoIpyRomxE5EF1DLE1ue6g=)
4: ePQMQe046NknExZADvr19blY0SA.roa (hash: wKoVniNasUoMb11Rk/qza9dNeWvntUlfFXzDDxceLEM=)
5: hcjtq7J7FKS0bIahe8TWZOilbrc.roa (hash: uOY6FMIgCoFqDzQfMMnNRctUj2RDP4gSOMAnS9KpjHI=)
6: klbr9muA8IE1hY0UTO1veFg09fQ.crl (hash: /2/Z4Vb8pKvCq03bnlImYPHzAiBZkd/4T2GbfIIWaJ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/b717c5-a64b-4475-be3e-5da8d677d847/1/klbr9muA8IE1hY0UTO1veFg09fQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/b717c5-a64b-4475-be3e-5da8d677d847/1/klbr9muA8IE1hY0UTO1veFg09fQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/klbr9muA8IE1hY0UTO1veFg09fQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 13:57:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7e:18:6c:2c:8f:0f:45:78:f4:08:a0:f4:9a:99:ad:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9256ebf66b80f08135858d144ced6f785834f5f4
Validity
Not Before: Oct 27 16:01:32 2026 GMT
Not After : Oct 28 16:01:32 2026 GMT
Subject: CN=e669c329148919cd8aabdcfe36313a2ad0b72c64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:ef:06:e6:8f:69:b0:7f:ce:87:62:5d:c8:c3:
a1:bc:29:3c:e9:5f:bd:3d:7f:fd:15:e0:91:4f:90:
2e:46:b1:14:9a:b8:46:e7:f8:ef:23:d6:96:5b:d4:
40:15:cf:b2:09:9a:70:39:ee:f1:ab:fb:f0:68:e7:
4b:ef:d4:e7:4b:e2:37:7b:24:e8:1e:19:ee:0f:af:
56:76:38:4e:9d:65:e3:f2:48:85:e9:57:fd:fc:63:
0b:de:c6:7d:ad:f7:03:d2:bd:7d:2a:12:5f:41:3f:
96:ce:f2:86:61:cb:04:b8:a7:f3:5b:12:7f:28:ec:
94:95:a4:ec:a8:24:72:e1:48:d0:af:11:59:1b:80:
3e:6e:4b:d1:18:73:61:7d:5c:62:53:61:aa:30:b3:
dd:fb:2b:4f:34:fb:dc:45:5a:fd:5a:0d:cf:f5:67:
1c:be:f6:13:eb:d8:1e:28:f6:b2:60:4c:7c:02:ec:
bd:4b:7e:94:6f:7c:ee:c9:49:62:a6:60:b7:03:b1:
99:97:de:ef:49:d0:9d:1e:cb:63:a1:5d:a6:67:b2:
a9:63:95:3d:30:dd:77:d0:3a:55:e2:72:e1:91:e6:
c5:21:0d:7c:5a:b4:24:a1:fa:42:04:06:2e:55:54:
8f:f7:57:1e:4e:60:97:b7:14:b2:af:79:ef:bd:42:
22:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:69:C3:29:14:89:19:CD:8A:AB:DC:FE:36:31:3A:2A:D0:B7:2C:64
X509v3 Authority Key Identifier:
keyid:92:56:EB:F6:6B:80:F0:81:35:85:8D:14:4C:ED:6F:78:58:34:F5:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/klbr9muA8IE1hY0UTO1veFg09fQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/b717c5-a64b-4475-be3e-5da8d677d847/1/klbr9muA8IE1hY0UTO1veFg09fQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/b717c5-a64b-4475-be3e-5da8d677d847/1/klbr9muA8IE1hY0UTO1veFg09fQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:7d:d5:6c:e7:37:47:31:3a:06:a9:f2:b0:62:c2:2c:ae:7a:
d5:b9:e1:89:71:03:88:50:ca:c9:40:7f:b8:b4:9f:6b:52:0e:
10:74:9e:e9:c3:ee:7f:c9:5a:dc:d4:c9:db:20:49:5b:3b:e2:
c9:ea:aa:b6:fd:3e:dd:cc:6a:54:cf:84:d4:df:46:a2:84:87:
f2:b9:94:b4:07:75:c8:55:c9:b7:b4:3b:3d:26:25:db:c4:2c:
cf:e7:c6:5c:46:26:6e:24:88:7e:94:63:40:61:73:a9:24:6f:
46:2a:aa:e5:b6:57:dd:3b:13:88:d1:d5:40:3b:44:03:28:af:
65:d2:1e:cd:46:b1:bc:f7:b9:36:5c:1e:e6:03:1d:eb:c0:e8:
58:e0:40:8b:fc:6d:bd:f6:72:d1:8e:61:e9:70:70:3e:b8:46:
6e:b8:63:06:bd:b8:c3:f8:07:09:85:6f:d0:52:27:e9:05:70:
16:cd:54:52:d4:99:53:a7:86:78:55:a8:1e:c1:68:81:66:c7:
04:1a:c7:d7:28:48:9c:f6:c6:c7:5c:14:49:75:82:ae:04:fb:
2b:53:1a:bf:fd:2a:b3:3f:ed:75:99:33:2e:11:38:f7:68:46:
13:fc:b7:33:44:b5:39:bb:14:73:c5:8e:5c:be:22:fa:30:a5:
10:8c:de:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 23:04:06 2026 by rpki-client