Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/7b45b9-990b-4614-a64e-0f52ea5229fc/1/klbbNIe0xbrLMAF3BXzzF0z3dHc.mft
File: klbbNIe0xbrLMAF3BXzzF0z3dHc.mft (raw, json)
Hash identifier: xmJ4MCVNkEgpwdHoPlWH00WP13RA90nhr/ZjqhhAsMY=
Subject key identifier: 96:7B:AA:2B:CF:73:C2:2C:06:F3:D0:A6:DB:73:65:34:32:43:F0:AE
Authority key identifier: 92:56:DB:34:87:B4:C5:BA:CB:30:01:77:05:7C:F3:17:4C:F7:74:77
Certificate issuer: /CN=9256db3487b4c5bacb300177057cf3174cf77477
Certificate serial: 019E1EDA3035C71E5D787E6DAF588D5E1C46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/klbbNIe0xbrLMAF3BXzzF0z3dHc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/7b45b9-990b-4614-a64e-0f52ea5229fc/1/klbbNIe0xbrLMAF3BXzzF0z3dHc.mft
Manifest number: 1907
Signing time: Wed 13 May 2026 01:01:16 +0000
Manifest this update: Wed 13 May 2026 01:01:16 +0000
Manifest next update: Thu 14 May 2026 01:01:16 +0000
Files and hashes: 1: 04BGo9FtObILQBaft1sQoeQgCYo.roa (hash: Fwkz3jqMyP5AwHPobSf3siex/Tu6ZYcC4zjVdfIOsac=)
2: klbbNIe0xbrLMAF3BXzzF0z3dHc.crl (hash: TX6q9Njwcy6mHCkoM7BmhHxQVFPHtk+BM07vS+nOeY8=)
3: rX01FOC9tDHIxRVaHAAeqyrP4Eo.roa (hash: FOCcBoXQG14i7Fi0nDAmmqDfc5/wMS3xKazNxC7cZRc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/7b45b9-990b-4614-a64e-0f52ea5229fc/1/klbbNIe0xbrLMAF3BXzzF0z3dHc.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/7b45b9-990b-4614-a64e-0f52ea5229fc/1/klbbNIe0xbrLMAF3BXzzF0z3dHc.mft
rsync://rpki.ripe.net/repository/DEFAULT/klbbNIe0xbrLMAF3BXzzF0z3dHc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 01:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:da:30:35:c7:1e:5d:78:7e:6d:af:58:8d:5e:1c:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9256db3487b4c5bacb300177057cf3174cf77477
Validity
Not Before: May 13 01:01:16 2026 GMT
Not After : May 14 01:01:16 2026 GMT
Subject: CN=967baa2bcf73c22c06f3d0a6db7365343243f0ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:09:cc:3a:16:74:1b:ec:3e:0a:93:2c:6b:65:
55:c9:53:98:a3:10:6a:d5:aa:c9:d2:2d:4c:25:92:
bf:6c:e0:07:65:b2:c5:64:19:5d:26:aa:9e:9c:14:
26:9e:f0:a7:35:a7:f4:f3:29:22:17:68:a2:db:a8:
78:4e:8c:82:ad:4a:e7:af:d5:f0:e5:18:3e:57:f2:
1c:12:f2:50:1c:3a:7c:26:e9:01:1d:ed:c8:f5:89:
8a:6a:af:80:6d:56:19:c9:c2:32:0e:af:91:03:e2:
19:76:53:5f:e3:5f:9d:46:c4:22:56:81:9f:9a:4e:
88:5c:c4:b8:a0:8a:53:9a:c4:16:52:d6:e3:f3:c3:
d4:61:1f:3c:ec:16:51:8d:e0:e4:c1:d3:b6:85:94:
02:f2:13:f1:d8:0a:9d:7c:c2:a8:0b:46:4f:62:28:
e6:19:d8:07:69:24:3b:27:c0:f0:1f:55:a4:f2:4b:
c8:66:77:0e:2f:39:63:88:44:f3:0a:c8:c7:08:87:
42:9d:85:e9:2b:38:ae:ba:b8:1d:74:da:95:42:77:
31:c4:60:86:a5:3f:66:ea:0f:c0:9f:5a:d2:a8:bf:
95:ab:a1:30:96:ce:42:68:f9:1f:93:08:3d:cb:08:
18:3d:dc:e4:26:cc:c4:d5:87:65:f2:ba:c9:15:ed:
99:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:7B:AA:2B:CF:73:C2:2C:06:F3:D0:A6:DB:73:65:34:32:43:F0:AE
X509v3 Authority Key Identifier:
keyid:92:56:DB:34:87:B4:C5:BA:CB:30:01:77:05:7C:F3:17:4C:F7:74:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/klbbNIe0xbrLMAF3BXzzF0z3dHc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/7b45b9-990b-4614-a64e-0f52ea5229fc/1/klbbNIe0xbrLMAF3BXzzF0z3dHc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/7b45b9-990b-4614-a64e-0f52ea5229fc/1/klbbNIe0xbrLMAF3BXzzF0z3dHc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:16:c3:fc:11:aa:10:2f:2f:8f:e7:44:d1:52:cb:d4:93:cd:
d4:74:07:b8:99:23:de:30:7c:34:2e:8c:02:8a:ae:c4:8f:5d:
75:73:75:f5:d1:da:ae:b8:a5:4e:fa:5b:93:cc:4e:4a:70:d9:
ed:04:d4:42:27:da:99:ad:c5:18:e7:cf:11:9b:18:b8:07:9a:
14:dd:6e:ea:86:38:d5:5e:fc:cd:65:d8:7b:33:7a:a0:27:8c:
ed:c0:de:7f:aa:14:1a:b6:e8:34:b1:90:72:1b:7b:d4:65:49:
b3:64:47:70:23:09:f0:3f:6d:a7:08:4b:6a:01:e6:87:43:c4:
3d:72:e6:e4:c4:51:c2:7a:18:23:67:4d:3f:63:42:54:c0:4a:
d2:22:d9:75:32:e4:67:6f:29:b6:48:41:c7:36:c9:0f:8a:38:
01:93:e1:41:9e:36:6b:a4:50:20:3e:84:a6:f1:0e:fb:6b:bc:
f9:9c:a4:e0:e6:e6:e2:2f:ce:50:6f:33:67:fd:e1:12:82:8e:
7a:4d:e0:0f:36:48:c3:c2:dc:30:01:3a:44:cb:a0:ba:12:5a:
d2:9b:2f:bf:df:c8:b9:a7:c3:cd:b0:33:e7:3a:e1:72:f3:95:
0d:7b:50:87:4b:2a:ec:e6:96:07:7d:83:45:95:29:96:dc:c2:
e1:8d:21:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:13:21 2026 by rpki-client