Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/6788f5-4889-4be7-bb19-a9b8de611a96/1/klBppddk2iVZVNsu6dEkPeFrkQE.mft
File: klBppddk2iVZVNsu6dEkPeFrkQE.mft (raw, json)
Hash identifier: XchyxRtayMaf0MBOyyrn3biIh88SrkrutJMsIUKmZhg=
Subject key identifier: 6F:6A:44:59:99:18:7C:DF:EE:7B:E4:94:84:95:A2:94:09:2F:BF:10
Authority key identifier: 92:50:69:A5:D7:64:DA:25:59:54:DB:2E:E9:D1:24:3D:E1:6B:91:01
Certificate issuer: /CN=925069a5d764da255954db2ee9d1243de16b9101
Certificate serial: 019D296080F46E705B198F3A859E6F1EFD6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/klBppddk2iVZVNsu6dEkPeFrkQE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/6788f5-4889-4be7-bb19-a9b8de611a96/1/klBppddk2iVZVNsu6dEkPeFrkQE.mft
Manifest number: 1416
Signing time: Thu 26 Mar 2026 09:01:23 +0000
Manifest this update: Thu 26 Mar 2026 09:01:23 +0000
Manifest next update: Fri 27 Mar 2026 09:01:23 +0000
Files and hashes: 1: g7Y0ZBMWW3x2nBvDARRBK02Lebg.roa (hash: +2cc++Wl1u7PjNULA3cbQO5x+A8pMvr+LGUA63FvUlc=)
2: klBppddk2iVZVNsu6dEkPeFrkQE.crl (hash: zztENPXEJ5fPub0R4EmN6WGfCAnp8yKl1bzgcihTUTI=)
3: rqGjD3vaP5vjh-UbO_Aa0T8TroY.roa (hash: VMdVXfW1qOZfCDo+olo19jtE9+BYNQ4kPi8z5UP7KV0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/6788f5-4889-4be7-bb19-a9b8de611a96/1/klBppddk2iVZVNsu6dEkPeFrkQE.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/6788f5-4889-4be7-bb19-a9b8de611a96/1/klBppddk2iVZVNsu6dEkPeFrkQE.mft
rsync://rpki.ripe.net/repository/DEFAULT/klBppddk2iVZVNsu6dEkPeFrkQE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:60:80:f4:6e:70:5b:19:8f:3a:85:9e:6f:1e:fd:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=925069a5d764da255954db2ee9d1243de16b9101
Validity
Not Before: Mar 26 09:01:23 2026 GMT
Not After : Mar 27 09:01:23 2026 GMT
Subject: CN=6f6a445999187cdfee7be4948495a294092fbf10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:15:3c:5d:ec:e6:51:df:ef:05:cb:4f:b2:a6:
64:9e:b0:76:59:1f:0e:a4:91:03:df:eb:6f:8b:48:
d3:da:8a:c8:0b:f4:42:4c:35:cd:3f:a4:f4:05:e0:
45:dd:42:d7:1c:de:8d:78:2f:a4:23:08:26:d8:90:
22:77:22:62:c7:fa:ca:f4:f9:7b:12:7d:1b:83:70:
8b:f2:79:6c:4f:20:5a:36:1b:cf:4d:2b:d0:9b:88:
f0:a4:db:fb:79:04:90:16:16:e2:da:17:b4:6d:bb:
74:58:18:c8:73:ee:0c:c2:da:32:58:96:0c:03:0e:
4b:f6:7a:6b:b1:a1:11:83:47:f4:7b:32:f0:fb:47:
df:4a:82:e0:e1:24:25:f8:4d:c0:3b:5f:33:bc:99:
f7:eb:2c:a2:34:48:9e:bf:5b:84:9a:7a:67:80:99:
5e:7a:a4:45:1b:57:9c:08:d9:0d:1e:37:0d:68:10:
36:48:ca:61:03:dd:9f:f7:14:4d:82:bd:70:3a:dd:
2e:01:d2:b5:54:75:43:d7:b9:8e:ef:b0:6d:40:b0:
28:66:fe:a7:f6:82:f8:a2:dd:c9:41:41:4a:7c:7a:
08:cf:f0:e1:c8:a5:fb:3c:a3:88:4b:1b:14:97:f6:
c2:36:fe:5d:68:a2:ba:40:3d:d1:f2:10:3f:87:9c:
ed:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:6A:44:59:99:18:7C:DF:EE:7B:E4:94:84:95:A2:94:09:2F:BF:10
X509v3 Authority Key Identifier:
keyid:92:50:69:A5:D7:64:DA:25:59:54:DB:2E:E9:D1:24:3D:E1:6B:91:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/klBppddk2iVZVNsu6dEkPeFrkQE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/6788f5-4889-4be7-bb19-a9b8de611a96/1/klBppddk2iVZVNsu6dEkPeFrkQE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/6788f5-4889-4be7-bb19-a9b8de611a96/1/klBppddk2iVZVNsu6dEkPeFrkQE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:2e:1a:21:67:5a:cf:39:60:e7:58:a8:00:30:1e:d0:80:81:
58:06:e5:bc:4c:b9:2e:1e:5b:ac:8a:eb:b9:c1:d8:21:94:c7:
8c:40:b3:60:65:53:32:30:4c:2e:78:c9:b9:4a:be:6b:19:c4:
0e:1c:f1:8f:d1:88:89:54:ac:98:f6:23:64:65:c4:57:94:14:
4b:1a:89:e4:72:5a:15:e9:65:4b:43:9e:7e:ba:92:6a:79:dc:
60:98:c5:47:44:d7:de:f5:6d:08:9b:20:db:c1:ba:83:98:9f:
88:2e:4f:48:ca:aa:e6:bb:b2:55:f3:90:eb:f8:69:2b:96:da:
f5:4b:29:30:12:96:72:47:c1:05:90:a1:27:c6:7d:75:cb:f0:
50:b9:30:d4:ac:7a:43:6a:2f:75:97:9b:34:b6:da:e9:56:85:
bf:7d:e3:f3:9b:00:f1:b5:33:0c:54:09:0e:f0:34:a3:74:38:
0b:e6:a4:b3:5c:22:ce:22:e9:35:40:17:36:79:90:d5:f1:f3:
83:92:6d:99:b5:4b:7d:d3:81:92:84:e9:9e:db:83:0b:3b:c7:
b2:02:6d:ce:08:c7:7c:29:00:77:de:ce:af:ec:9b:8d:ba:41:
dd:79:0b:a4:27:99:73:5e:ed:eb:4a:84:71:f2:78:6a:f2:92:
f9:a9:42:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:48:25 2026 by rpki-client