Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bf/7b45b9-990b-4614-a64e-0f52ea5229fc/1/klbbNIe0xbrLMAF3BXzzF0z3dHc.mft
File: klbbNIe0xbrLMAF3BXzzF0z3dHc.mft (raw, json)
Hash identifier: Z1dWU0Nq41HXV++LUsEZkvSDg9ZGQVdG17x0Ry6jTOY=
Subject key identifier: 5B:90:6B:1B:A4:11:2B:13:D7:5F:0A:3D:79:E4:6C:30:77:91:7F:A5
Authority key identifier: 92:56:DB:34:87:B4:C5:BA:CB:30:01:77:05:7C:F3:17:4C:F7:74:77
Certificate issuer: /CN=9256db3487b4c5bacb300177057cf3174cf77477
Certificate serial: 01A10C273398B8628CFA0526B942E9450F4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/klbbNIe0xbrLMAF3BXzzF0z3dHc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/7b45b9-990b-4614-a64e-0f52ea5229fc/1/klbbNIe0xbrLMAF3BXzzF0z3dHc.mft
Manifest number: 1A8B
Signing time: Mon 05 Oct 2026 13:00:58 +0000
Manifest this update: Mon 05 Oct 2026 13:00:58 +0000
Manifest next update: Tue 06 Oct 2026 13:00:58 +0000
Files and hashes: 1: 04BGo9FtObILQBaft1sQoeQgCYo.roa (hash: Fwkz3jqMyP5AwHPobSf3siex/Tu6ZYcC4zjVdfIOsac=)
2: klbbNIe0xbrLMAF3BXzzF0z3dHc.crl (hash: YeWNOnAG+7B0npnUP1PiS4HS2kWqKRffFN6ETfje62s=)
3: rX01FOC9tDHIxRVaHAAeqyrP4Eo.roa (hash: FOCcBoXQG14i7Fi0nDAmmqDfc5/wMS3xKazNxC7cZRc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/7b45b9-990b-4614-a64e-0f52ea5229fc/1/klbbNIe0xbrLMAF3BXzzF0z3dHc.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/7b45b9-990b-4614-a64e-0f52ea5229fc/1/klbbNIe0xbrLMAF3BXzzF0z3dHc.mft
rsync://rpki.ripe.net/repository/DEFAULT/klbbNIe0xbrLMAF3BXzzF0z3dHc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 Oct 2026 13:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:0c:27:33:98:b8:62:8c:fa:05:26:b9:42:e9:45:0f:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9256db3487b4c5bacb300177057cf3174cf77477
Validity
Not Before: Oct 5 13:00:58 2026 GMT
Not After : Oct 6 13:00:58 2026 GMT
Subject: CN=5b906b1ba4112b13d75f0a3d79e46c3077917fa5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:5c:f8:9a:ab:83:68:da:31:8a:14:ff:1c:6b:
28:0d:b4:ff:28:ac:89:81:ca:c0:62:d6:3a:a5:b0:
8e:00:3b:94:df:67:2e:29:09:fb:16:1a:f9:c4:a0:
40:b0:7d:0a:0b:15:68:bf:0f:00:6b:8f:8e:0e:15:
30:fd:d5:d2:32:0e:a7:a5:da:64:c7:11:58:42:32:
23:c7:4f:ae:69:a1:9d:84:8c:d8:5c:c2:05:bb:b3:
4f:85:2c:a2:6b:5b:85:38:4c:a4:ba:8f:e3:1d:ef:
d4:ca:ae:d1:61:34:6b:32:a0:56:99:d2:95:ac:ca:
22:69:7c:03:b3:09:8e:ba:34:45:64:22:a3:81:a8:
d2:2e:8a:87:2b:b3:1d:ad:fd:dd:46:c9:9c:c0:4f:
94:39:04:e2:be:6e:ca:2f:73:df:13:37:a5:fb:18:
d6:a2:8c:1f:25:90:35:f0:e9:51:30:97:fa:7d:74:
d6:64:db:c4:33:2c:fb:c5:4e:a4:08:35:2c:9b:23:
38:ba:e9:3a:18:de:4c:9a:f7:c8:82:a0:96:99:79:
25:30:3d:36:c1:25:48:6f:cb:cf:e7:ba:55:c7:e4:
ff:91:97:33:68:73:c0:17:c9:99:fd:25:90:b5:39:
0d:6f:86:86:f8:61:2c:d6:73:4b:56:dc:c1:06:23:
d9:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:90:6B:1B:A4:11:2B:13:D7:5F:0A:3D:79:E4:6C:30:77:91:7F:A5
X509v3 Authority Key Identifier:
keyid:92:56:DB:34:87:B4:C5:BA:CB:30:01:77:05:7C:F3:17:4C:F7:74:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/klbbNIe0xbrLMAF3BXzzF0z3dHc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/7b45b9-990b-4614-a64e-0f52ea5229fc/1/klbbNIe0xbrLMAF3BXzzF0z3dHc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/7b45b9-990b-4614-a64e-0f52ea5229fc/1/klbbNIe0xbrLMAF3BXzzF0z3dHc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:4b:00:00:83:a5:86:92:7e:ee:43:c3:7a:f7:7d:14:79:de:
25:82:7f:ce:c5:a3:1c:72:99:3f:d7:d9:37:b6:be:e2:7a:b9:
cc:ab:90:de:51:cd:4a:1d:44:4d:09:1e:d4:19:fc:06:80:7c:
e1:2a:ef:e3:24:b4:80:5c:b7:8d:02:27:5c:35:37:17:bf:64:
ef:e1:d4:12:76:62:4c:fa:7c:aa:34:99:dc:09:d4:e9:41:60:
b5:ca:d6:c9:c5:1c:cf:f1:93:f7:3a:3f:b0:35:b9:5f:ca:a4:
52:b0:58:41:ca:4e:32:aa:bc:27:de:aa:6d:54:d8:55:da:eb:
c5:eb:74:48:ed:19:08:da:93:15:57:30:e5:d8:ca:1a:1d:20:
d9:ee:5e:a0:81:36:10:99:63:47:c8:ed:6a:95:e6:2c:a3:04:
44:05:15:c8:e7:3b:0d:f7:59:fd:3d:e2:c7:74:45:21:c2:4e:
6c:74:5b:44:5d:ff:1f:dc:24:99:6e:1c:bb:87:11:40:d9:97:
a1:bd:d3:f0:fe:e2:5f:52:41:1c:f6:9c:6e:39:f1:80:34:c6:
1e:9c:15:6b:9b:ab:6c:51:70:34:41:5e:63:72:1e:ac:e6:4c:
85:04:6f:47:94:ed:42:1c:0e:3c:52:5b:cd:7f:3c:0c:68:0f:
c9:5d:5b:ac
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEMJzOYuGKM+gUmuULpRQ9MMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyNTZkYjM0ODdiNGM1YmFjYjMwMDE3NzA1N2NmMzE3NGNm
Nzc0NzcwHhcNMjYxMDA1MTMwMDU4WhcNMjYxMDA2MTMwMDU4WjAzMTEwLwYDVQQD
Eyg1YjkwNmIxYmE0MTEyYjEzZDc1ZjBhM2Q3OWU0NmMzMDc3OTE3ZmE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtVz4mquDaNoxihT/HGsoDbT/KKyJ
gcrAYtY6pbCOADuU32cuKQn7Fhr5xKBAsH0KCxVovw8Aa4+ODhUw/dXSMg6npdpk
xxFYQjIjx0+uaaGdhIzYXMIFu7NPhSyia1uFOEykuo/jHe/Uyq7RYTRrMqBWmdKV
rMoiaXwDswmOujRFZCKjgajSLoqHK7Mdrf3dRsmcwE+UOQTivm7KL3PfEzel+xjW
oowfJZA18OlRMJf6fXTWZNvEMyz7xU6kCDUsmyM4uuk6GN5MmvfIgqCWmXklMD02
wSVIb8vP57pVx+T/kZczaHPAF8mZ/SWQtTkNb4aG+GEs1nNLVtzBBiPZtwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFuQaxukESsT118KPXnkbDB3kX+lMB8GA1UdIwQY
MBaAFJJW2zSHtMW6yzABdwV88xdM93R3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva2xiYk5JZTB4YnJMTUFGM0JYenpGMHozZEhjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi83YjQ1YjktOTkwYi00NjE0LWE2NGUt
MGY1MmVhNTIyOWZjLzEva2xiYk5JZTB4YnJMTUFGM0JYenpGMHozZEhjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZi83YjQ1YjktOTkwYi00NjE0LWE2NGUtMGY1MmVhNTIyOWZj
LzEva2xiYk5JZTB4YnJMTUFGM0JYenpGMHozZEhjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALksAAIOl
hpJ+7kPDevd9FHneJYJ/zsWjHHKZP9fZN7a+4nq5zKuQ3lHNSh1ETQke1Bn8BoB8
4Srv4yS0gFy3jQInXDU3F79k7+HUEnZiTPp8qjSZ3AnU6UFgtcrWycUcz/GT9zo/
sDW5X8qkUrBYQcpOMqq8J96qbVTYVdrrxet0SO0ZCNqTFVcw5djKGh0g2e5eoIE2
EJljR8jtapXmLKMERAUVyOc7DfdZ/T3ix3RFIcJObHRbRF3/H9wkmW4cu4cRQNmX
ob3T8P7iX1JBHPacbjnxgDTGHpwVa5urbFFwNEFeY3IerOZMhQRvR5TtQhwOPFJb
zX88DGgPyV1brA==
-----END CERTIFICATE-----
Generated at Tue Oct 6 00:57:52 2026 by rpki-client