Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/53/f017df-0d0f-4a36-ac25-4968aaafc59b/1/fKlis7F-7waeOrohKIuyxkIhv-0.mft
File: fKlis7F-7waeOrohKIuyxkIhv-0.mft (raw, json)
Hash identifier: +LU9V0uYU3mSxIV9CsA6sQjyBd5F8CJkbjzyzYCN0E0=
Subject key identifier: D4:F7:DC:C7:82:37:01:5F:5E:61:E3:F0:F4:63:77:6E:9E:E5:71:E7
Authority key identifier: 7C:A9:62:B3:B1:7E:EF:06:9E:3A:BA:21:28:8B:B2:C6:42:21:BF:ED
Certificate issuer: /CN=7ca962b3b17eef069e3aba21288bb2c64221bfed
Certificate serial: 01A0D200FAB55969458D638871D4F435BDB6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fKlis7F-7waeOrohKIuyxkIhv-0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/f017df-0d0f-4a36-ac25-4968aaafc59b/1/fKlis7F-7waeOrohKIuyxkIhv-0.mft
Manifest number: 064A
Signing time: Thu 24 Sep 2026 06:01:14 +0000
Manifest this update: Thu 24 Sep 2026 06:01:14 +0000
Manifest next update: Fri 25 Sep 2026 06:01:14 +0000
Files and hashes: 1: 7CcrAdktIbmIWLIGRKt4XmzFkcg.roa (hash: iem2l37ZP4AP5T+ke2deoIOETFCnj1X7HBG1zJalTyg=)
2: fKlis7F-7waeOrohKIuyxkIhv-0.crl (hash: CfjXlUD0uw+2ks03UadaiwhhBJwQ3M9xyyK6JsnN7gg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/f017df-0d0f-4a36-ac25-4968aaafc59b/1/fKlis7F-7waeOrohKIuyxkIhv-0.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/f017df-0d0f-4a36-ac25-4968aaafc59b/1/fKlis7F-7waeOrohKIuyxkIhv-0.mft
rsync://rpki.ripe.net/repository/DEFAULT/fKlis7F-7waeOrohKIuyxkIhv-0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 06:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d2:00:fa:b5:59:69:45:8d:63:88:71:d4:f4:35:bd:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ca962b3b17eef069e3aba21288bb2c64221bfed
Validity
Not Before: Sep 24 06:01:14 2026 GMT
Not After : Sep 25 06:01:14 2026 GMT
Subject: CN=d4f7dcc78237015f5e61e3f0f463776e9ee571e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:9a:be:5f:f3:16:9b:86:e2:fb:73:19:39:d4:
b9:3a:b4:78:41:2e:f9:a2:92:a6:6f:19:1d:b1:1b:
92:59:0d:8b:9b:26:0a:71:1f:c3:ae:a8:56:f4:ae:
b4:32:5b:6a:77:c2:41:d1:e7:43:c7:de:ef:f9:30:
63:e0:59:a3:ca:47:b5:4f:43:51:cb:f6:0a:cd:c3:
90:a1:c7:ae:ef:ac:c5:b9:03:a2:24:93:50:16:9c:
e0:e2:93:a4:3a:16:96:41:95:a2:5b:57:34:7f:6d:
ca:d4:37:86:f4:d6:49:1d:f6:3b:76:ca:58:6e:20:
4e:42:d2:aa:9a:58:6b:74:e5:36:f9:4e:09:c2:a9:
6d:cb:92:03:57:3f:7b:d8:c6:31:cf:ef:d0:2a:4b:
66:d2:f8:09:ae:dd:27:ba:bb:6e:39:5c:80:d7:7c:
9c:f9:38:02:0e:97:75:b3:14:36:32:64:32:da:b2:
7b:b4:85:5c:25:09:2b:26:ec:72:d9:7c:af:4a:96:
10:7c:54:47:ef:95:5a:df:bd:45:6c:d1:68:3e:99:
e1:c4:6e:86:aa:70:63:6c:ec:02:0c:b4:0c:0d:17:
7d:d9:f5:51:b0:8d:f4:99:7f:75:8d:61:86:de:43:
df:1f:8f:27:27:b9:ee:29:e7:79:e8:33:c1:6e:08:
d4:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:F7:DC:C7:82:37:01:5F:5E:61:E3:F0:F4:63:77:6E:9E:E5:71:E7
X509v3 Authority Key Identifier:
keyid:7C:A9:62:B3:B1:7E:EF:06:9E:3A:BA:21:28:8B:B2:C6:42:21:BF:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fKlis7F-7waeOrohKIuyxkIhv-0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/f017df-0d0f-4a36-ac25-4968aaafc59b/1/fKlis7F-7waeOrohKIuyxkIhv-0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/f017df-0d0f-4a36-ac25-4968aaafc59b/1/fKlis7F-7waeOrohKIuyxkIhv-0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:a5:72:3a:f4:40:72:3e:0c:10:18:e1:64:f0:02:36:bd:9c:
e3:ea:e7:67:b0:bd:8e:24:e0:8a:39:98:06:69:9d:9a:fa:ff:
4b:16:d8:25:f9:9c:62:87:9c:33:84:35:41:d3:c6:3f:74:8a:
5b:57:71:09:9d:10:7c:76:1b:ed:04:15:43:53:06:a1:75:66:
3b:2d:7c:21:93:fc:4d:02:8d:17:19:48:6d:9a:13:06:df:90:
a6:28:10:fb:0e:e6:9a:b8:57:fd:db:9b:3d:b9:e0:0d:9e:1b:
65:37:b2:87:50:14:f5:dc:41:ef:06:3a:b5:a7:d6:a4:9a:43:
88:70:16:b2:10:b6:c0:89:08:11:8a:09:d1:d2:53:58:ec:f5:
d3:44:cf:11:35:9c:b9:00:e0:86:25:b3:86:14:2b:a5:26:b0:
c2:6f:da:86:86:97:68:61:db:16:37:69:37:37:c2:4e:24:fa:
26:a4:3b:41:a1:36:3e:37:bf:6f:8c:56:d2:bd:dc:0b:7a:41:
49:f1:0a:bb:f3:f7:10:ae:ce:52:4d:12:82:3b:d4:f4:08:38:
c2:e7:d9:e1:12:28:b4:e2:10:87:e7:8c:29:9a:18:7b:1c:69:
d4:3a:49:34:b5:4c:fe:d6:bf:79:cb:d9:75:09:3c:9a:87:4a:
15:eb:28:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 10:13:13 2026 by rpki-client