Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/de/6788f5-4889-4be7-bb19-a9b8de611a96/1/klBppddk2iVZVNsu6dEkPeFrkQE.mft
File: klBppddk2iVZVNsu6dEkPeFrkQE.mft (raw, json)
Hash identifier: c9oHIIgNv4bJGbivCXjAxSlWvfme8vYPeW6PexMtf3Y=
Subject key identifier: BE:1C:A5:0A:66:7D:E4:E4:02:B3:FD:40:44:25:9C:1A:7F:C2:BC:47
Authority key identifier: 92:50:69:A5:D7:64:DA:25:59:54:DB:2E:E9:D1:24:3D:E1:6B:91:01
Certificate issuer: /CN=925069a5d764da255954db2ee9d1243de16b9101
Certificate serial: 01A10626715544700F6082E20158A054815B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/klBppddk2iVZVNsu6dEkPeFrkQE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/6788f5-4889-4be7-bb19-a9b8de611a96/1/klBppddk2iVZVNsu6dEkPeFrkQE.mft
Manifest number: 1616
Signing time: Sun 04 Oct 2026 09:02:24 +0000
Manifest this update: Sun 04 Oct 2026 09:02:24 +0000
Manifest next update: Mon 05 Oct 2026 09:02:24 +0000
Files and hashes: 1: g7Y0ZBMWW3x2nBvDARRBK02Lebg.roa (hash: +2cc++Wl1u7PjNULA3cbQO5x+A8pMvr+LGUA63FvUlc=)
2: klBppddk2iVZVNsu6dEkPeFrkQE.crl (hash: yt/zI+6Cmw5FVj2+k8/e/BLC1J674RSJVW44rQF3kfk=)
3: rqGjD3vaP5vjh-UbO_Aa0T8TroY.roa (hash: VMdVXfW1qOZfCDo+olo19jtE9+BYNQ4kPi8z5UP7KV0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/6788f5-4889-4be7-bb19-a9b8de611a96/1/klBppddk2iVZVNsu6dEkPeFrkQE.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/6788f5-4889-4be7-bb19-a9b8de611a96/1/klBppddk2iVZVNsu6dEkPeFrkQE.mft
rsync://rpki.ripe.net/repository/DEFAULT/klBppddk2iVZVNsu6dEkPeFrkQE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 09:02:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:06:26:71:55:44:70:0f:60:82:e2:01:58:a0:54:81:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=925069a5d764da255954db2ee9d1243de16b9101
Validity
Not Before: Oct 4 09:02:24 2026 GMT
Not After : Oct 5 09:02:24 2026 GMT
Subject: CN=be1ca50a667de4e402b3fd4044259c1a7fc2bc47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:c4:a1:17:81:3d:73:6e:9c:7a:aa:0c:ab:00:
36:50:11:45:4f:8b:c5:f8:2b:8b:94:ad:b0:aa:0b:
83:a6:fe:df:e4:b2:02:09:ac:d3:73:7e:2f:3b:3b:
69:16:25:d7:ec:81:12:42:6c:43:d2:6c:82:e7:c2:
10:4d:80:74:e6:57:b0:ba:f1:5b:b3:75:18:02:4d:
60:43:0e:07:9b:92:72:7e:ff:fb:74:f2:e0:a9:3b:
ee:54:e7:4b:89:d0:4b:b3:60:55:9b:c7:d8:08:47:
77:46:78:c1:9b:6f:3e:00:af:75:12:f9:a6:da:7c:
37:3b:6c:02:73:7a:06:a3:a4:39:bf:34:bc:05:5c:
3f:ce:45:77:47:0d:ba:9a:43:02:30:84:1c:6d:0f:
bb:b3:e0:0e:92:30:32:60:c3:6f:64:24:d4:9c:9e:
fd:a5:ca:e6:d2:cb:12:20:d7:0f:bd:d6:c9:f6:42:
04:46:93:dd:c7:cb:47:f9:49:b9:36:b1:e2:18:40:
bb:44:bb:f2:52:a4:d8:13:3b:b6:de:7a:a4:5a:9f:
0a:1f:43:0e:14:80:91:90:2b:79:8c:fd:38:00:df:
c3:6f:85:e8:43:54:19:95:ff:85:db:10:02:85:56:
6a:de:6b:01:cb:91:1f:73:45:fe:87:fb:86:65:29:
28:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:1C:A5:0A:66:7D:E4:E4:02:B3:FD:40:44:25:9C:1A:7F:C2:BC:47
X509v3 Authority Key Identifier:
keyid:92:50:69:A5:D7:64:DA:25:59:54:DB:2E:E9:D1:24:3D:E1:6B:91:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/klBppddk2iVZVNsu6dEkPeFrkQE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/6788f5-4889-4be7-bb19-a9b8de611a96/1/klBppddk2iVZVNsu6dEkPeFrkQE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/6788f5-4889-4be7-bb19-a9b8de611a96/1/klBppddk2iVZVNsu6dEkPeFrkQE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:3f:03:6f:1a:98:00:a3:1e:1d:22:f1:39:53:39:bc:c1:91:
cb:17:e2:0d:d8:bd:58:da:c4:e3:7b:79:4b:56:45:2c:81:bc:
68:68:81:0b:24:3e:ac:58:0a:96:2d:e7:1c:b2:d8:62:9a:3b:
9f:a7:9f:85:b8:82:ad:b1:fe:9d:77:94:59:f4:29:fe:fc:1d:
cc:24:5c:9c:0a:5d:ee:cf:ae:10:c7:8f:a6:0b:4c:31:63:2e:
b5:30:7a:a4:03:2e:16:d0:dc:1a:ed:79:df:b8:4c:2f:8a:3e:
e3:40:f2:ed:fb:49:dd:d8:d3:98:30:d6:f7:3f:5f:fd:1b:34:
b0:9c:e7:a4:5c:da:19:87:6a:e0:c4:0d:56:88:e4:81:95:be:
02:4d:f9:7d:a3:41:6e:10:6e:86:29:9c:07:7b:e6:43:3f:25:
af:2b:35:f2:64:f2:f0:d1:74:76:fe:e0:bb:de:69:60:60:41:
4a:67:55:d0:65:48:26:bd:19:4e:c0:54:18:2c:ff:73:61:21:
36:eb:24:df:29:f0:db:22:f2:78:31:8e:40:9b:81:14:15:dc:
62:5a:6e:81:93:1c:ea:03:75:f8:70:b2:99:6c:8a:63:07:9d:
d3:ce:3d:6b:5c:70:7e:74:d1:03:bf:97:57:6b:91:cf:58:9e:
de:30:01:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 19:58:01 2026 by rpki-client