Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/6788f5-4889-4be7-bb19-a9b8de611a96/1/klBppddk2iVZVNsu6dEkPeFrkQE.mft
File: klBppddk2iVZVNsu6dEkPeFrkQE.mft (raw, json)
Hash identifier: nI+lCthrt1CsDqFSeNqIsrBtFhzaI6d4BycH8NL2ZE8=
Subject key identifier: F9:72:34:53:66:5E:76:A8:10:29:E8:5D:B0:F3:2F:B8:3F:99:3F:76
Authority key identifier: 92:50:69:A5:D7:64:DA:25:59:54:DB:2E:E9:D1:24:3D:E1:6B:91:01
Certificate issuer: /CN=925069a5d764da255954db2ee9d1243de16b9101
Certificate serial: 019E20916D2C34594A5F29D1551CCC9159C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/klBppddk2iVZVNsu6dEkPeFrkQE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/6788f5-4889-4be7-bb19-a9b8de611a96/1/klBppddk2iVZVNsu6dEkPeFrkQE.mft
Manifest number: 1496
Signing time: Wed 13 May 2026 09:01:01 +0000
Manifest this update: Wed 13 May 2026 09:01:01 +0000
Manifest next update: Thu 14 May 2026 09:01:01 +0000
Files and hashes: 1: g7Y0ZBMWW3x2nBvDARRBK02Lebg.roa (hash: +2cc++Wl1u7PjNULA3cbQO5x+A8pMvr+LGUA63FvUlc=)
2: klBppddk2iVZVNsu6dEkPeFrkQE.crl (hash: 20uA53wowRfq/Fn8RNKOuNRAUdqkfvHEQQ3655vtoJQ=)
3: rqGjD3vaP5vjh-UbO_Aa0T8TroY.roa (hash: VMdVXfW1qOZfCDo+olo19jtE9+BYNQ4kPi8z5UP7KV0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/6788f5-4889-4be7-bb19-a9b8de611a96/1/klBppddk2iVZVNsu6dEkPeFrkQE.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/6788f5-4889-4be7-bb19-a9b8de611a96/1/klBppddk2iVZVNsu6dEkPeFrkQE.mft
rsync://rpki.ripe.net/repository/DEFAULT/klBppddk2iVZVNsu6dEkPeFrkQE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 09:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:91:6d:2c:34:59:4a:5f:29:d1:55:1c:cc:91:59:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=925069a5d764da255954db2ee9d1243de16b9101
Validity
Not Before: May 13 09:01:01 2026 GMT
Not After : May 14 09:01:01 2026 GMT
Subject: CN=f9723453665e76a81029e85db0f32fb83f993f76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:46:0e:20:35:41:0e:21:f8:2f:e1:d9:05:6b:
e7:10:4b:86:31:b6:2f:8c:6a:43:9f:5c:e8:8f:07:
d0:36:78:d4:c3:f4:8b:8d:bf:6b:b5:8b:14:e2:d9:
30:83:3a:62:45:3e:48:9b:a0:21:d8:2f:31:ec:44:
9e:10:43:59:86:20:86:25:45:81:08:9c:fd:09:67:
2f:55:c1:e7:f6:20:3a:42:56:51:c9:8c:d6:2e:fe:
2f:62:45:b1:66:3d:b3:de:93:68:0a:e2:01:e3:18:
46:da:8a:eb:1b:e5:21:43:48:de:61:b7:48:c7:d5:
b8:bd:bc:2d:5c:f0:8d:ef:88:74:c8:7a:8a:2a:28:
10:b4:bb:ec:9f:5c:70:a8:1d:3b:5f:83:39:bd:41:
37:d1:20:ef:46:13:54:6e:72:1d:f9:df:b7:52:1b:
b0:be:cc:b7:d0:85:86:32:2d:ab:18:da:a3:4c:c8:
2d:4e:1c:d2:54:0e:81:92:a5:34:6f:08:93:08:f5:
99:bc:d5:03:22:fe:7b:fa:9e:bf:7c:98:5c:c9:4c:
83:26:b9:26:f2:70:ce:fb:fb:b8:3a:82:c0:af:37:
41:81:4e:3e:de:f2:bc:b9:3d:08:5c:df:a9:70:98:
83:04:2b:23:29:9b:e5:f0:ee:d7:21:1b:37:2f:69:
7f:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:72:34:53:66:5E:76:A8:10:29:E8:5D:B0:F3:2F:B8:3F:99:3F:76
X509v3 Authority Key Identifier:
keyid:92:50:69:A5:D7:64:DA:25:59:54:DB:2E:E9:D1:24:3D:E1:6B:91:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/klBppddk2iVZVNsu6dEkPeFrkQE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/6788f5-4889-4be7-bb19-a9b8de611a96/1/klBppddk2iVZVNsu6dEkPeFrkQE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/6788f5-4889-4be7-bb19-a9b8de611a96/1/klBppddk2iVZVNsu6dEkPeFrkQE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:19:68:fa:b4:82:a0:50:33:cf:2e:d0:17:4d:22:55:71:9a:
10:52:ac:3d:ae:35:51:31:e0:41:3c:1e:9b:42:54:d2:25:a6:
80:ae:f4:38:5d:0c:57:88:5c:7a:d4:54:38:ed:ec:68:82:94:
53:35:2b:ff:e9:26:f3:02:5f:e3:d5:f2:ec:11:c1:12:49:78:
98:3b:0e:4c:eb:b7:1a:8b:4c:c9:0e:12:6b:9d:7e:2e:75:72:
9d:0c:20:6d:30:46:3e:55:cd:7f:61:2e:ed:26:15:b7:d6:0e:
34:b5:86:97:54:b2:ab:bb:eb:33:ee:82:57:3c:18:cd:11:4a:
d7:7f:50:b8:54:46:75:a5:15:57:9b:51:66:d5:4c:1c:e3:10:
e5:64:f6:ec:f8:52:8a:3d:67:56:95:9c:46:7f:85:85:f8:f0:
2e:48:08:55:e3:4c:66:10:2e:85:c5:c4:ac:f8:93:25:19:12:
fb:6d:72:86:9c:6a:d1:f3:d7:51:b7:68:18:fd:9f:39:ea:c7:
7b:06:a6:50:06:61:45:3a:76:57:37:50:66:ad:36:a3:3e:89:
d3:04:77:ec:0e:dd:73:33:e1:fd:e4:dd:d2:76:7c:35:54:43:
45:eb:17:cd:49:83:e9:56:70:3c:64:6c:45:76:d2:8a:c8:1e:
b2:21:6a:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 19:54:17 2026 by rpki-client