Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f1/b717c5-a64b-4475-be3e-5da8d677d847/1/klbr9muA8IE1hY0UTO1veFg09fQ.mft
File: klbr9muA8IE1hY0UTO1veFg09fQ.mft (raw, json)
Hash identifier: gwI6BDvlK/xAe6mX61DDs0Rn+OjqhHRwWrnAiBj7So8=
Subject key identifier: 38:4F:51:A1:6A:00:EF:39:BF:60:5C:2A:0A:79:C1:B8:7D:50:9A:82
Authority key identifier: 92:56:EB:F6:6B:80:F0:81:35:85:8D:14:4C:ED:6F:78:58:34:F5:F4
Certificate issuer: /CN=9256ebf66b80f08135858d144ced6f785834f5f4
Certificate serial: 01A0D4267A855137CE7B592108B7077E3F3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/klbr9muA8IE1hY0UTO1veFg09fQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/b717c5-a64b-4475-be3e-5da8d677d847/1/klbr9muA8IE1hY0UTO1veFg09fQ.mft
Manifest number: 1A6E
Signing time: Thu 24 Sep 2026 16:01:26 +0000
Manifest this update: Thu 24 Sep 2026 16:01:26 +0000
Manifest next update: Fri 25 Sep 2026 16:01:26 +0000
Files and hashes: 1: 40z5BTIzE-Otta9d5IxXlYjWk7Y.roa (hash: /K+vL2kVy1Ot78ZCbPvu7R3pgRcpdRMgsyhuVzNibSE=)
2: FnnFa3pMmqf3MiWUuKMyoAVWg-s.roa (hash: 6fPOtoWUy4XsTgZEttrlKq8GChMydmNHVVGJEIcxPdY=)
3: J4mHGlSY7agF8AXFPW8l8IBLAAI.roa (hash: /s0Afv+pL0DwKivaJvq3/xoIpyRomxE5EF1DLE1ue6g=)
4: ePQMQe046NknExZADvr19blY0SA.roa (hash: wKoVniNasUoMb11Rk/qza9dNeWvntUlfFXzDDxceLEM=)
5: hcjtq7J7FKS0bIahe8TWZOilbrc.roa (hash: uOY6FMIgCoFqDzQfMMnNRctUj2RDP4gSOMAnS9KpjHI=)
6: klbr9muA8IE1hY0UTO1veFg09fQ.crl (hash: IDpUFmCFAgOMNuog8FiO7AUBTxWkxKicmVe1ysw6Sf4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/b717c5-a64b-4475-be3e-5da8d677d847/1/klbr9muA8IE1hY0UTO1veFg09fQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/b717c5-a64b-4475-be3e-5da8d677d847/1/klbr9muA8IE1hY0UTO1veFg09fQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/klbr9muA8IE1hY0UTO1veFg09fQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d4:26:7a:85:51:37:ce:7b:59:21:08:b7:07:7e:3f:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9256ebf66b80f08135858d144ced6f785834f5f4
Validity
Not Before: Sep 24 16:01:26 2026 GMT
Not After : Sep 25 16:01:26 2026 GMT
Subject: CN=384f51a16a00ef39bf605c2a0a79c1b87d509a82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:f2:8c:25:e2:25:30:4f:19:e7:3f:cb:21:54:
bf:2a:be:ae:4f:1c:a7:00:f4:a6:95:c2:bd:5e:6a:
ca:ed:c2:fa:fc:cd:ed:32:d1:3c:6d:30:59:b7:34:
64:81:10:3c:c2:bb:6f:bb:9c:9d:a8:75:3c:f2:35:
69:b6:cb:2c:4c:fe:32:39:86:ad:c8:49:db:93:5d:
d7:cf:73:17:8d:86:8c:53:d1:9a:c5:84:13:ef:9d:
4e:16:0a:c1:6f:a1:25:8b:ac:ab:c9:0f:83:f6:b3:
30:37:57:f6:65:1b:a7:91:f1:d9:99:8f:9f:95:fa:
80:c3:32:5e:a6:b6:1d:ac:04:3f:c5:e5:4f:7c:8c:
7a:df:ed:ff:1e:43:2a:f8:a2:86:c9:43:9d:c3:8d:
29:a0:d7:d8:13:a4:86:8c:62:fc:ea:ee:7e:73:82:
d5:57:65:ba:07:b4:8a:5b:92:15:79:21:93:2e:bb:
3a:9c:4a:bc:76:de:f1:d5:0d:d3:af:d7:c2:8d:a7:
f2:db:eb:e8:f1:80:54:de:8b:aa:4b:ab:e0:66:bf:
9f:d5:d4:a4:cc:2c:16:54:cd:c2:51:73:f8:60:ca:
2f:58:ac:9c:9f:8b:93:36:c6:a7:c4:e1:56:06:fe:
e8:81:fe:00:09:0d:ac:95:d8:74:fd:f0:f8:8b:89:
7f:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:4F:51:A1:6A:00:EF:39:BF:60:5C:2A:0A:79:C1:B8:7D:50:9A:82
X509v3 Authority Key Identifier:
keyid:92:56:EB:F6:6B:80:F0:81:35:85:8D:14:4C:ED:6F:78:58:34:F5:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/klbr9muA8IE1hY0UTO1veFg09fQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/b717c5-a64b-4475-be3e-5da8d677d847/1/klbr9muA8IE1hY0UTO1veFg09fQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/b717c5-a64b-4475-be3e-5da8d677d847/1/klbr9muA8IE1hY0UTO1veFg09fQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:03:41:c0:14:d3:e6:81:4a:92:9f:bd:05:40:20:25:f3:ed:
53:b0:29:2f:ea:7e:64:2b:c7:94:85:0d:50:fc:7e:54:f6:1d:
0a:e3:7a:20:d2:31:ca:c3:1d:94:b4:27:f6:54:66:85:a6:77:
80:c2:7b:a9:2d:b4:d3:34:a1:f8:24:03:27:58:75:5f:83:3f:
c3:92:83:ce:35:ca:99:72:47:eb:e2:5e:53:83:e7:c3:32:ad:
65:cc:3e:c3:cd:fe:37:c0:11:89:b9:98:46:44:9c:42:28:6e:
1a:50:1a:ed:8b:b7:ae:8b:04:4c:c2:36:0f:db:f2:ce:2d:c4:
62:24:43:cc:1b:84:55:6c:90:eb:93:73:c4:f6:d9:d4:eb:fd:
0f:06:ce:53:55:1d:13:0d:2e:5d:e3:58:2b:ab:c9:7b:29:13:
4c:09:81:71:f3:8c:fb:99:49:e3:a4:8f:a6:3c:fe:16:f8:e1:
f3:f5:4d:3c:bd:17:10:9c:de:45:d6:1f:3b:bb:57:48:55:96:
ea:9c:4b:3b:57:d6:ec:1e:b3:2e:f9:87:ec:0f:73:75:14:cd:
d8:53:a0:c9:52:43:6a:9e:8f:67:2e:ee:dd:eb:1a:de:24:4d:
d2:41:e9:3f:2c:77:f7:e4:c7:82:ee:85:8f:5e:ed:43:43:5a:
e1:80:cb:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 22:48:39 2026 by rpki-client