Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/f017df-0d0f-4a36-ac25-4968aaafc59b/1/fKlis7F-7waeOrohKIuyxkIhv-0.mft
File: fKlis7F-7waeOrohKIuyxkIhv-0.mft (raw, json)
Hash identifier: CK7KTuqbZ69u3QlOX1Ld2XIaoU+Ornb6ypIm1PmQnvg=
Subject key identifier: A8:7E:2C:DB:32:01:75:E9:3A:06:8D:23:02:FF:66:A0:FB:0E:7B:CE
Authority key identifier: 7C:A9:62:B3:B1:7E:EF:06:9E:3A:BA:21:28:8B:B2:C6:42:21:BF:ED
Certificate issuer: /CN=7ca962b3b17eef069e3aba21288bb2c64221bfed
Certificate serial: 019FAC75F7231B88CAFECC68BC3243BFA15F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fKlis7F-7waeOrohKIuyxkIhv-0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/f017df-0d0f-4a36-ac25-4968aaafc59b/1/fKlis7F-7waeOrohKIuyxkIhv-0.mft
Manifest number: 05B2
Signing time: Wed 29 Jul 2026 06:00:39 +0000
Manifest this update: Wed 29 Jul 2026 06:00:39 +0000
Manifest next update: Thu 30 Jul 2026 06:00:39 +0000
Files and hashes: 1: 7CcrAdktIbmIWLIGRKt4XmzFkcg.roa (hash: iem2l37ZP4AP5T+ke2deoIOETFCnj1X7HBG1zJalTyg=)
2: fKlis7F-7waeOrohKIuyxkIhv-0.crl (hash: Y9B/DXdlEkikQnVz5kgZ0Y1h5EPLgWqshu5p1URxXQg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/f017df-0d0f-4a36-ac25-4968aaafc59b/1/fKlis7F-7waeOrohKIuyxkIhv-0.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/f017df-0d0f-4a36-ac25-4968aaafc59b/1/fKlis7F-7waeOrohKIuyxkIhv-0.mft
rsync://rpki.ripe.net/repository/DEFAULT/fKlis7F-7waeOrohKIuyxkIhv-0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 06:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:75:f7:23:1b:88:ca:fe:cc:68:bc:32:43:bf:a1:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ca962b3b17eef069e3aba21288bb2c64221bfed
Validity
Not Before: Jul 29 06:00:39 2026 GMT
Not After : Jul 30 06:00:39 2026 GMT
Subject: CN=a87e2cdb320175e93a068d2302ff66a0fb0e7bce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:60:c7:7c:ac:20:e6:c5:e8:13:8c:88:89:1c:
31:d4:b0:af:0a:e7:aa:c8:50:1d:6f:c1:07:30:ed:
28:fa:d0:c0:99:f5:34:53:a8:e4:5b:c1:03:b1:57:
5f:ab:51:dc:7f:d3:81:91:02:69:d7:71:42:56:d7:
ae:06:6f:57:3a:46:2b:0f:cf:a9:98:91:ce:0b:5a:
d0:6c:c7:40:21:f0:70:7c:c4:5b:b0:99:5e:8b:74:
fb:cd:b9:9f:51:39:ca:63:c3:3e:0c:03:a5:15:57:
c6:b5:72:b0:99:bb:ff:eb:b8:6a:4d:a3:ff:8d:b9:
68:27:f2:0d:d2:2e:44:57:2e:55:a2:98:ad:d1:d7:
3c:eb:d1:70:c1:9a:4b:78:84:07:53:ca:f6:2f:dc:
63:6d:f9:fd:85:32:3c:1f:10:d4:d5:ee:2e:f9:f8:
62:67:5d:83:c1:d5:be:e5:38:d0:bd:9e:85:e3:03:
86:45:7f:e9:13:e2:92:20:67:62:b5:bf:03:b8:bd:
db:5e:1f:42:45:fb:76:f7:28:75:d6:d7:fa:ff:56:
9f:12:6d:35:13:28:09:dc:f4:1a:91:14:2d:cd:f9:
fc:11:ff:bd:f2:f6:a5:98:fb:fb:13:de:6b:32:8f:
a7:1c:11:bc:53:5c:f7:d9:5d:60:57:ee:1d:4f:3a:
d7:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:7E:2C:DB:32:01:75:E9:3A:06:8D:23:02:FF:66:A0:FB:0E:7B:CE
X509v3 Authority Key Identifier:
keyid:7C:A9:62:B3:B1:7E:EF:06:9E:3A:BA:21:28:8B:B2:C6:42:21:BF:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fKlis7F-7waeOrohKIuyxkIhv-0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/f017df-0d0f-4a36-ac25-4968aaafc59b/1/fKlis7F-7waeOrohKIuyxkIhv-0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/f017df-0d0f-4a36-ac25-4968aaafc59b/1/fKlis7F-7waeOrohKIuyxkIhv-0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:aa:09:bc:25:5d:b5:e5:88:42:a4:f3:9e:94:b9:c2:16:cc:
fa:1c:b6:41:a4:16:96:8d:d1:1f:86:55:98:71:a9:61:ff:9f:
20:5e:12:e4:8a:c0:2b:53:ec:bc:1c:42:83:06:85:47:82:88:
32:5c:eb:c9:b0:8a:32:c9:9c:a2:71:8f:e5:07:fd:47:23:22:
a8:3c:cb:c2:0d:82:fd:6d:92:69:8f:40:ab:ae:dd:68:7e:81:
21:e0:e6:6b:d1:11:33:b8:df:ad:f0:2f:12:30:88:84:44:10:
a5:71:1a:84:2d:1d:86:b5:83:d6:7a:14:75:3b:fd:7c:40:d8:
3a:1f:0b:21:8c:cd:44:81:ae:8d:34:3f:e1:c4:dd:37:d2:f5:
1e:ed:a0:b8:fb:15:eb:ea:cc:ed:39:46:5c:0d:06:dc:80:78:
27:17:e1:c1:c6:88:99:cf:02:b2:ed:f9:06:f2:46:91:2c:bd:
8b:ea:ea:30:94:2c:8e:a4:62:18:b8:9e:65:71:b0:2e:af:f8:
a6:e1:64:62:6d:1a:3f:04:62:a5:3e:24:68:c6:94:3f:30:c2:
cf:ce:83:ac:e1:b7:c1:57:9e:5c:59:c9:12:ed:10:97:08:a8:
5c:db:40:b0:92:fb:4b:94:6d:d3:b4:de:29:06:3b:96:05:da:
91:ae:6f:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 12:51:17 2026 by rpki-client