Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/0a50d0-564f-40e0-8589-c9f7d02f90c0/1/1-_Klpd9NlawBFcrtrRlLYmiPK7o.mft
File: 1-_Klpd9NlawBFcrtrRlLYmiPK7o.mft (raw, json)
Hash identifier: R3MO23AtqGheboUNz464YZI376u/Bc869jO94aAdUjo=
Subject key identifier: F2:71:96:D6:BA:06:00:05:8B:9F:0C:D5:94:A6:D4:56:68:71:FE:6B
Authority key identifier: FB:F2:A5:A5:DF:4D:95:AC:01:15:CA:ED:AD:19:4B:62:68:8F:2B:BA
Certificate issuer: /CN=fbf2a5a5df4d95ac0115caedad194b62688f2bba
Certificate serial: 019FA82B9CD46D6CCDF8B3BAFC2804726FC0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-_Klpd9NlawBFcrtrRlLYmiPK7o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/0a50d0-564f-40e0-8589-c9f7d02f90c0/1/1-_Klpd9NlawBFcrtrRlLYmiPK7o.mft
Manifest number: 1458
Signing time: Tue 28 Jul 2026 10:00:58 +0000
Manifest this update: Tue 28 Jul 2026 10:00:58 +0000
Manifest next update: Wed 29 Jul 2026 10:00:58 +0000
Files and hashes: 1: 1-_Klpd9NlawBFcrtrRlLYmiPK7o.crl (hash: 4sELKuhgFJgWHsxDWA/Jaov+MOUd23ikd8nCkAr9Iwo=)
2: nEwlFQn77GRj0a5PcdvpntXjCkk.roa (hash: 7O4FI78VSfvllLog9ZUlgueDZ+Vv0bklrjItMQ0ox9s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/0a50d0-564f-40e0-8589-c9f7d02f90c0/1/1-_Klpd9NlawBFcrtrRlLYmiPK7o.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/0a50d0-564f-40e0-8589-c9f7d02f90c0/1/1-_Klpd9NlawBFcrtrRlLYmiPK7o.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-_Klpd9NlawBFcrtrRlLYmiPK7o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 10:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:2b:9c:d4:6d:6c:cd:f8:b3:ba:fc:28:04:72:6f:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fbf2a5a5df4d95ac0115caedad194b62688f2bba
Validity
Not Before: Jul 28 10:00:58 2026 GMT
Not After : Jul 29 10:00:58 2026 GMT
Subject: CN=f27196d6ba0600058b9f0cd594a6d4566871fe6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:d0:98:f3:05:98:2e:08:32:cd:54:de:b1:22:
92:3a:ff:18:7c:50:9f:de:bd:cb:8e:80:fc:eb:ec:
00:4d:f0:1d:4d:5c:c2:45:cb:20:a3:7f:f3:96:17:
29:4b:4c:cb:c1:b6:92:f7:28:8f:36:9c:0e:fd:aa:
84:a3:1a:dc:0f:a1:f5:35:25:7d:7e:b2:b1:8e:51:
30:b5:46:c5:6f:81:f0:87:55:83:c3:04:e5:b2:ac:
d7:de:f7:93:c0:fb:72:39:fa:5c:23:a8:e5:32:bd:
8e:7c:dc:f7:31:3e:fc:d7:3f:05:0f:36:c2:2d:0c:
82:ca:52:af:f5:b1:d5:ef:68:27:9c:1d:8c:bc:6b:
8e:9c:30:49:4a:d9:1b:16:06:fc:8c:16:e9:b3:82:
b5:85:d2:7b:ff:2d:9c:63:07:f0:b9:a8:79:18:18:
af:6f:3a:92:8e:ce:5d:b5:b8:9f:64:24:02:d8:d2:
20:9b:e1:60:18:31:08:74:fc:3c:4b:dc:82:a8:e3:
4b:8a:bc:0c:98:50:1b:ed:c6:f8:11:d0:82:76:9a:
54:1c:5e:af:27:9b:bd:fb:eb:07:5c:12:18:7a:c2:
a1:39:28:b7:03:2f:c2:ed:96:c7:7b:26:d1:fd:e1:
84:ef:3a:51:49:d8:eb:d6:88:47:af:ee:42:24:88:
03:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:71:96:D6:BA:06:00:05:8B:9F:0C:D5:94:A6:D4:56:68:71:FE:6B
X509v3 Authority Key Identifier:
keyid:FB:F2:A5:A5:DF:4D:95:AC:01:15:CA:ED:AD:19:4B:62:68:8F:2B:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-_Klpd9NlawBFcrtrRlLYmiPK7o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/0a50d0-564f-40e0-8589-c9f7d02f90c0/1/1-_Klpd9NlawBFcrtrRlLYmiPK7o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/0a50d0-564f-40e0-8589-c9f7d02f90c0/1/1-_Klpd9NlawBFcrtrRlLYmiPK7o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:a5:8b:22:17:3c:45:d4:63:93:8e:90:6a:1b:ce:2f:56:19:
14:35:de:e7:b5:8a:63:e3:95:3c:ce:a4:b2:de:9f:d3:65:b1:
55:af:a1:2f:39:23:98:72:41:ab:e8:ba:35:95:59:8c:06:8a:
c2:2c:ca:e2:b8:21:18:89:45:87:5c:44:93:c2:bc:27:30:17:
65:a5:98:b0:12:3a:ef:7a:fe:09:a3:0d:87:e6:19:4a:d3:84:
ef:b3:19:39:de:da:74:27:12:85:e8:0e:b6:42:ba:81:50:b5:
55:8d:44:f7:96:9b:88:b3:e2:b4:c7:cb:c3:32:45:28:95:e5:
43:e7:f7:91:1a:14:e7:d0:b7:b6:93:5c:6b:6a:a2:1d:ff:32:
16:b6:ed:54:ba:96:b4:e0:55:d0:82:8b:77:d2:9e:7e:3f:8f:
ef:d9:ba:98:91:af:9d:43:7c:0b:40:24:c6:53:4f:9e:cd:f7:
04:2a:74:cc:01:4f:e9:65:d3:bc:ac:14:67:35:d1:08:de:0d:
f1:1b:95:72:5f:38:20:a1:93:b6:3d:53:b4:b4:14:4f:f6:36:
4d:0e:78:12:d4:65:c4:49:7e:49:ee:87:b3:2c:5e:c2:2a:59:
ae:bc:10:2b:ca:72:5e:2f:0d:3d:75:93:25:10:8a:28:c0:09:
0b:e2:01:73
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZ+oK5zUbWzN+LO6/CgEcm/AMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZiZjJhNWE1ZGY0ZDk1YWMwMTE1Y2FlZGFkMTk0YjYyNjg4
ZjJiYmEwHhcNMjYwNzI4MTAwMDU4WhcNMjYwNzI5MTAwMDU4WjAzMTEwLwYDVQQD
EyhmMjcxOTZkNmJhMDYwMDA1OGI5ZjBjZDU5NGE2ZDQ1NjY4NzFmZTZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl9CY8wWYLggyzVTesSKSOv8YfFCf
3r3LjoD86+wATfAdTVzCRcsgo3/zlhcpS0zLwbaS9yiPNpwO/aqEoxrcD6H1NSV9
frKxjlEwtUbFb4Hwh1WDwwTlsqzX3veTwPtyOfpcI6jlMr2OfNz3MT781z8FDzbC
LQyCylKv9bHV72gnnB2MvGuOnDBJStkbFgb8jBbps4K1hdJ7/y2cYwfwuah5GBiv
bzqSjs5dtbifZCQC2NIgm+FgGDEIdPw8S9yCqONLirwMmFAb7cb4EdCCdppUHF6v
J5u9++sHXBIYesKhOSi3Ay/C7ZbHeybR/eGE7zpRSdjr1ohHr+5CJIgDIQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFPJxlta6BgAFi58M1ZSm1FZocf5rMB8GA1UdIwQY
MBaAFPvypaXfTZWsARXK7a0ZS2Jojyu6MA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1fS2xwZDlObGF3QkZjcnRyUmxMWW1pUEs3by5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvY2EvMGE1MGQwLTU2NGYtNDBlMC04NTg5
LWM5ZjdkMDJmOTBjMC8xLzEtX0tscGQ5Tmxhd0JGY3J0clJsTFltaVBLN28ubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxUL2NhLzBhNTBkMC01NjRmLTQwZTAtODU4OS1jOWY3ZDAyZjkw
YzAvMS8xLV9LbHBkOU5sYXdCRmNydHJSbExZbWlQSzdvLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQqWL
Ihc8RdRjk46QahvOL1YZFDXe57WKY+OVPM6kst6f02WxVa+hLzkjmHJBq+i6NZVZ
jAaKwizK4rghGIlFh1xEk8K8JzAXZaWYsBI673r+CaMNh+YZStOE77MZOd7adCcS
hegOtkK6gVC1VY1E95abiLPitMfLwzJFKJXlQ+f3kRoU59C3tpNca2qiHf8yFrbt
VLqWtOBV0IKLd9Kefj+P79m6mJGvnUN8C0AkxlNPns33BCp0zAFP6WXTvKwUZzXR
CN4N8RuVcl84IKGTtj1TtLQUT/Y2TQ54EtRlxEl+Se6HsyxewipZrrwQK8pyXi8N
PXWTJRCKKMAJC+IBcw==
-----END CERTIFICATE-----
Generated at Tue Jul 28 19:39:37 2026 by rpki-client