Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/0a50d0-564f-40e0-8589-c9f7d02f90c0/1/1-_Klpd9NlawBFcrtrRlLYmiPK7o.mft
File: 1-_Klpd9NlawBFcrtrRlLYmiPK7o.mft (raw, json)
Hash identifier: yLIWJs8AP1z1t5nnUusqrlSMHPvHQvLsjBTy5EBakTg=
Subject key identifier: 7B:BE:FA:63:A5:18:C4:3D:8F:AE:BD:CB:7C:08:35:BB:19:D3:7E:79
Authority key identifier: FB:F2:A5:A5:DF:4D:95:AC:01:15:CA:ED:AD:19:4B:62:68:8F:2B:BA
Certificate issuer: /CN=fbf2a5a5df4d95ac0115caedad194b62688f2bba
Certificate serial: 019D9AE2DE477F9628DE5AF31A0C75A02284
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-_Klpd9NlawBFcrtrRlLYmiPK7o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/0a50d0-564f-40e0-8589-c9f7d02f90c0/1/1-_Klpd9NlawBFcrtrRlLYmiPK7o.mft
Manifest number: 1348
Signing time: Fri 17 Apr 2026 10:00:52 +0000
Manifest this update: Fri 17 Apr 2026 10:00:52 +0000
Manifest next update: Sat 18 Apr 2026 10:00:52 +0000
Files and hashes: 1: 1-_Klpd9NlawBFcrtrRlLYmiPK7o.crl (hash: IBYs3DjbKburm757MGZgVocmfpEi1YHotvzc+d6Ru5M=)
2: nEwlFQn77GRj0a5PcdvpntXjCkk.roa (hash: 7O4FI78VSfvllLog9ZUlgueDZ+Vv0bklrjItMQ0ox9s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/0a50d0-564f-40e0-8589-c9f7d02f90c0/1/1-_Klpd9NlawBFcrtrRlLYmiPK7o.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/0a50d0-564f-40e0-8589-c9f7d02f90c0/1/1-_Klpd9NlawBFcrtrRlLYmiPK7o.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-_Klpd9NlawBFcrtrRlLYmiPK7o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 10:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:e2:de:47:7f:96:28:de:5a:f3:1a:0c:75:a0:22:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fbf2a5a5df4d95ac0115caedad194b62688f2bba
Validity
Not Before: Apr 17 10:00:52 2026 GMT
Not After : Apr 18 10:00:52 2026 GMT
Subject: CN=7bbefa63a518c43d8faebdcb7c0835bb19d37e79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:b4:48:31:c4:23:3e:57:c3:b5:2c:ce:15:38:
77:ea:e8:12:c3:e6:15:15:66:3a:a5:4c:70:07:bf:
9c:a2:a3:7b:68:4b:2c:54:30:cd:45:6e:72:02:5f:
6e:2e:5b:e0:44:33:46:26:73:84:03:01:80:8d:ee:
9c:6c:0b:51:30:08:32:42:15:ce:2d:bf:65:49:e8:
8d:a0:0c:0e:6c:b6:6e:4f:7d:f1:c9:75:37:eb:00:
8f:4a:7d:05:89:2d:83:86:c2:0c:fb:7c:a9:77:a4:
fa:de:2f:0e:02:fc:07:41:db:e9:3a:55:0e:25:93:
a6:f3:83:66:09:7d:71:c0:ef:2a:a7:aa:e6:64:15:
c3:e3:8e:b4:89:c6:ef:74:d1:26:42:65:a0:4f:19:
a3:b6:7e:e5:f1:7e:43:94:8d:bf:f8:f0:cc:00:80:
7c:bb:62:6a:c9:95:90:94:c2:1f:ce:a5:99:a4:e6:
cc:39:0b:1d:ea:00:c2:20:48:7c:6c:47:d7:c2:e3:
23:51:30:d5:8d:91:3e:88:dd:1d:66:43:59:cd:ec:
d3:de:88:19:0e:d4:60:39:67:7d:45:a1:a3:67:ea:
53:90:95:c7:ca:53:ef:26:91:bd:80:e6:26:f1:1d:
2b:ba:2a:43:67:87:83:41:46:ee:aa:db:48:1a:e5:
9c:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:BE:FA:63:A5:18:C4:3D:8F:AE:BD:CB:7C:08:35:BB:19:D3:7E:79
X509v3 Authority Key Identifier:
keyid:FB:F2:A5:A5:DF:4D:95:AC:01:15:CA:ED:AD:19:4B:62:68:8F:2B:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-_Klpd9NlawBFcrtrRlLYmiPK7o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/0a50d0-564f-40e0-8589-c9f7d02f90c0/1/1-_Klpd9NlawBFcrtrRlLYmiPK7o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/0a50d0-564f-40e0-8589-c9f7d02f90c0/1/1-_Klpd9NlawBFcrtrRlLYmiPK7o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:08:f6:04:3e:96:f7:8f:75:69:b7:41:e7:c9:5c:53:9d:90:
a6:0b:30:0c:b1:11:80:80:a3:89:f8:f1:57:ff:7b:68:f6:e5:
c6:46:6c:6a:75:8a:45:d5:f6:c0:74:33:0a:5c:cd:1c:e5:a0:
a3:2b:dc:65:76:69:a7:6a:78:a9:38:fb:f3:92:80:36:17:02:
6f:81:cc:6d:d1:90:c0:da:db:89:bb:1c:07:7b:95:57:bf:2a:
11:e1:74:ad:92:51:69:11:55:98:17:0c:19:26:e7:ef:01:56:
60:af:ce:0a:ee:0b:7f:ea:be:3f:7d:01:d3:17:41:8c:7a:27:
68:27:50:6d:9e:ec:17:d5:93:ef:70:96:3d:13:6f:74:37:49:
5b:b3:ba:3d:eb:2c:b2:7d:4f:34:bd:e5:a6:c8:7e:df:11:e8:
06:43:9d:22:f5:67:00:60:51:01:7f:53:d3:a8:06:0a:55:8f:
2f:7c:4b:41:53:ed:e0:e3:88:73:14:c6:9f:02:e9:18:90:be:
53:79:63:eb:b5:f1:7d:8f:d5:99:9f:94:d1:00:c3:3f:fb:f2:
b8:32:20:81:80:b4:28:4f:33:0e:05:08:62:07:c9:95:19:b4:
a0:11:9a:68:a3:01:d4:54:b5:ca:d7:72:5c:f3:50:a1:a8:91:
d3:ec:55:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:32:18 2026 by rpki-client