Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/7b45b9-990b-4614-a64e-0f52ea5229fc/1/klbbNIe0xbrLMAF3BXzzF0z3dHc.mft
File: klbbNIe0xbrLMAF3BXzzF0z3dHc.mft (raw, json)
Hash identifier: E7cvftP64N8U7mF9YX6cRzG8Jj+KJbh4CgxtAP0dU8o=
Subject key identifier: 7B:01:B2:02:5C:96:0B:4D:61:FC:8E:58:3A:B7:43:C7:31:8B:4A:65
Authority key identifier: 92:56:DB:34:87:B4:C5:BA:CB:30:01:77:05:7C:F3:17:4C:F7:74:77
Certificate issuer: /CN=9256db3487b4c5bacb300177057cf3174cf77477
Certificate serial: 019D2996FCE4CA53D87BDB47E412C37B1C00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/klbbNIe0xbrLMAF3BXzzF0z3dHc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/7b45b9-990b-4614-a64e-0f52ea5229fc/1/klbbNIe0xbrLMAF3BXzzF0z3dHc.mft
Manifest number: 1888
Signing time: Thu 26 Mar 2026 10:00:53 +0000
Manifest this update: Thu 26 Mar 2026 10:00:53 +0000
Manifest next update: Fri 27 Mar 2026 10:00:53 +0000
Files and hashes: 1: 04BGo9FtObILQBaft1sQoeQgCYo.roa (hash: Fwkz3jqMyP5AwHPobSf3siex/Tu6ZYcC4zjVdfIOsac=)
2: klbbNIe0xbrLMAF3BXzzF0z3dHc.crl (hash: OWeZKm6LH2FQFo4Y8YKxOMzOOFLc0Yt+NOPvNwQRa4Q=)
3: rX01FOC9tDHIxRVaHAAeqyrP4Eo.roa (hash: FOCcBoXQG14i7Fi0nDAmmqDfc5/wMS3xKazNxC7cZRc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/7b45b9-990b-4614-a64e-0f52ea5229fc/1/klbbNIe0xbrLMAF3BXzzF0z3dHc.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/7b45b9-990b-4614-a64e-0f52ea5229fc/1/klbbNIe0xbrLMAF3BXzzF0z3dHc.mft
rsync://rpki.ripe.net/repository/DEFAULT/klbbNIe0xbrLMAF3BXzzF0z3dHc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:96:fc:e4:ca:53:d8:7b:db:47:e4:12:c3:7b:1c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9256db3487b4c5bacb300177057cf3174cf77477
Validity
Not Before: Mar 26 10:00:53 2026 GMT
Not After : Mar 27 10:00:53 2026 GMT
Subject: CN=7b01b2025c960b4d61fc8e583ab743c7318b4a65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:9b:04:f5:e4:1b:68:49:fc:e2:a8:7d:b5:ab:
3d:48:e7:2c:bf:38:55:f8:77:f3:e7:14:c1:f4:f8:
3b:5d:4a:c2:80:81:6d:42:9d:80:13:5a:77:e3:c2:
b3:1b:b5:86:c3:95:f7:e3:84:84:b7:4b:3c:6d:73:
a4:e0:89:14:6b:bd:78:ad:38:2e:e2:ef:89:20:b5:
a6:ca:98:9c:43:30:e5:22:7f:0b:c0:ef:de:01:fd:
0f:33:54:42:97:e9:62:fd:a0:67:b4:de:ed:1a:e3:
06:1b:2c:48:0b:b0:65:57:4d:76:31:f8:d1:0a:6b:
3e:1a:88:fd:4e:07:01:32:38:27:61:d1:7e:05:09:
da:70:36:a5:20:1f:41:c5:8a:ab:f1:ea:c0:d9:6c:
00:f7:8a:19:05:19:f7:77:66:1a:13:ac:45:f8:2e:
6a:80:17:da:99:4d:50:be:4e:59:c8:4b:d5:4b:d6:
d2:4c:18:1d:21:cb:ff:f8:5c:b1:cb:9a:25:db:f7:
13:ad:7d:e6:8d:a5:da:ab:cc:08:3d:bd:a0:09:ae:
94:40:2b:d4:b0:92:64:c6:c8:c1:b2:5e:ed:d3:d8:
16:6b:03:83:8f:68:c0:ea:18:a0:ea:8d:3d:73:a5:
23:5f:6e:4d:9d:dd:35:18:cb:a3:68:3c:9e:34:ea:
21:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:01:B2:02:5C:96:0B:4D:61:FC:8E:58:3A:B7:43:C7:31:8B:4A:65
X509v3 Authority Key Identifier:
keyid:92:56:DB:34:87:B4:C5:BA:CB:30:01:77:05:7C:F3:17:4C:F7:74:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/klbbNIe0xbrLMAF3BXzzF0z3dHc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/7b45b9-990b-4614-a64e-0f52ea5229fc/1/klbbNIe0xbrLMAF3BXzzF0z3dHc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/7b45b9-990b-4614-a64e-0f52ea5229fc/1/klbbNIe0xbrLMAF3BXzzF0z3dHc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:3f:9f:6e:bc:84:3d:18:99:28:aa:37:c5:36:1d:db:d4:b7:
22:13:f6:38:72:97:8b:91:f5:31:ad:3a:d4:b9:51:64:5b:cc:
7a:e9:35:83:58:18:db:ab:ff:68:39:6d:52:d8:6d:ce:c7:a6:
b5:b4:cb:60:ba:0b:44:02:5d:5a:d4:13:29:e1:b7:3c:49:2e:
b6:7a:74:dc:94:16:ce:b3:15:14:90:7d:55:bc:aa:a4:51:bc:
21:83:83:45:3a:26:9d:b3:70:bf:3e:49:81:00:6a:f8:18:e2:
6b:7e:48:49:28:f9:2d:dd:dc:bf:f4:5c:6f:79:7b:dd:e7:6e:
cf:34:33:70:73:3a:e0:f4:bb:dc:52:34:fe:16:17:0c:ac:dd:
ce:84:44:23:f5:db:ea:e5:6b:1b:4b:80:41:e8:48:a8:cf:71:
f6:3a:81:3c:cd:bc:b4:52:47:c8:51:d5:fe:33:10:5b:3c:b5:
e0:50:da:4e:77:7a:2a:ea:fd:8c:18:b7:0e:63:23:11:18:d1:
36:f6:87:de:7b:92:7f:22:0c:fd:bf:fb:85:4e:e4:a9:65:7e:
ae:ca:27:ec:1f:84:81:00:69:a8:fb:31:f3:23:5a:3b:4e:5c:
63:29:ce:51:d1:11:b0:c3:58:38:3d:bf:51:22:7c:5f:1e:1a:
d6:95:3e:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:38:54 2026 by rpki-client