Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/0a50d0-564f-40e0-8589-c9f7d02f90c0/1/1-_Klpd9NlawBFcrtrRlLYmiPK7o.mft
File: 1-_Klpd9NlawBFcrtrRlLYmiPK7o.mft (raw, json)
Hash identifier: SMBFOKJc9r1ap2Ap3qBz30UvKQo1yMyjUGZXmaTmHNQ=
Subject key identifier: 8F:E7:E4:0B:9D:77:B2:15:FC:37:4E:09:6F:29:4A:D0:17:8E:D4:F2
Authority key identifier: FB:F2:A5:A5:DF:4D:95:AC:01:15:CA:ED:AD:19:4B:62:68:8F:2B:BA
Certificate issuer: /CN=fbf2a5a5df4d95ac0115caedad194b62688f2bba
Certificate serial: 019CAD59B6C1710A3E61155E53950FAD450B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-_Klpd9NlawBFcrtrRlLYmiPK7o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/0a50d0-564f-40e0-8589-c9f7d02f90c0/1/1-_Klpd9NlawBFcrtrRlLYmiPK7o.mft
Manifest number: 12CD
Signing time: Mon 02 Mar 2026 07:01:03 +0000
Manifest this update: Mon 02 Mar 2026 07:01:03 +0000
Manifest next update: Tue 03 Mar 2026 07:01:03 +0000
Files and hashes: 1: 1-_Klpd9NlawBFcrtrRlLYmiPK7o.crl (hash: 2aQX5OFVUhfsdj/gVAtr1HbA7L5781uU+b+5zSYQrXg=)
2: nEwlFQn77GRj0a5PcdvpntXjCkk.roa (hash: 7O4FI78VSfvllLog9ZUlgueDZ+Vv0bklrjItMQ0ox9s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/0a50d0-564f-40e0-8589-c9f7d02f90c0/1/1-_Klpd9NlawBFcrtrRlLYmiPK7o.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/0a50d0-564f-40e0-8589-c9f7d02f90c0/1/1-_Klpd9NlawBFcrtrRlLYmiPK7o.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-_Klpd9NlawBFcrtrRlLYmiPK7o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 07:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:59:b6:c1:71:0a:3e:61:15:5e:53:95:0f:ad:45:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fbf2a5a5df4d95ac0115caedad194b62688f2bba
Validity
Not Before: Mar 2 07:01:03 2026 GMT
Not After : Mar 3 07:01:03 2026 GMT
Subject: CN=8fe7e40b9d77b215fc374e096f294ad0178ed4f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:6b:31:5f:eb:1e:1e:50:c8:b0:93:6c:f3:23:
70:43:f8:fd:cd:e9:b1:da:ac:8b:96:83:e5:62:e8:
0a:08:60:97:a1:9b:9e:93:63:3a:04:95:1a:54:3e:
22:60:78:90:55:d9:a4:68:04:37:ae:78:5c:ed:5f:
7c:ca:05:87:d1:2a:3b:af:b2:2d:93:5b:a0:54:13:
9d:bf:0a:3b:8b:86:a8:db:27:ee:05:91:d4:af:20:
1a:70:82:15:82:7d:9c:c3:1e:c6:68:bf:fa:d7:2f:
4f:0e:89:76:41:dd:68:b7:38:23:02:aa:94:e8:f8:
95:55:bf:f1:69:56:c5:33:ae:a2:a3:c3:1d:08:a1:
bd:ee:d3:ba:02:e2:a4:59:6a:16:78:ee:54:7e:85:
1c:0c:f7:54:b0:1e:da:90:4a:f6:3e:a8:94:14:04:
6e:b4:6e:c8:17:3e:58:00:f1:cd:3c:f1:d7:18:1f:
08:1c:20:4a:cd:cf:3d:2b:ae:4c:18:9c:96:13:96:
6a:11:21:ed:02:77:eb:2a:61:ed:31:bc:54:7c:38:
e6:61:77:dd:df:6e:b3:b9:78:f0:d6:6e:8f:b1:ed:
50:0e:14:31:8d:7b:9a:0d:66:84:d8:36:19:7d:01:
42:53:31:a9:1d:4e:22:d2:bf:ba:78:33:28:69:f5:
4b:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:E7:E4:0B:9D:77:B2:15:FC:37:4E:09:6F:29:4A:D0:17:8E:D4:F2
X509v3 Authority Key Identifier:
keyid:FB:F2:A5:A5:DF:4D:95:AC:01:15:CA:ED:AD:19:4B:62:68:8F:2B:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-_Klpd9NlawBFcrtrRlLYmiPK7o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/0a50d0-564f-40e0-8589-c9f7d02f90c0/1/1-_Klpd9NlawBFcrtrRlLYmiPK7o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/0a50d0-564f-40e0-8589-c9f7d02f90c0/1/1-_Klpd9NlawBFcrtrRlLYmiPK7o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:6f:87:eb:1b:1a:74:4a:83:8f:9a:44:d5:62:6a:f1:a0:ed:
fd:c7:1f:5a:31:08:c3:c9:da:83:24:a6:f9:0d:d3:a2:79:cd:
fe:44:24:9f:63:ee:27:5b:99:5f:20:0a:af:6a:42:58:87:c4:
12:34:e7:67:2a:33:36:7c:28:21:bf:7b:8a:2f:0a:30:1e:0f:
f7:d4:46:1d:05:da:df:f9:da:c4:0e:4e:2d:2c:f7:46:89:4a:
fe:6f:b6:54:aa:45:62:de:45:f8:d5:7b:2c:a7:c7:63:5d:14:
19:30:aa:ed:70:9a:7c:95:c0:a1:35:d4:3e:02:62:f2:02:83:
e3:42:18:dd:f4:ef:53:63:f8:69:c6:9f:5b:c6:13:60:5a:79:
cf:1c:cc:c4:ee:35:18:8c:0d:99:09:20:bd:29:79:f1:04:43:
e2:0e:c1:0f:6c:3e:35:61:e0:bf:6d:f7:a5:42:03:25:e0:c3:
ae:6e:1c:75:c4:b8:de:35:d4:91:56:78:06:43:f2:5c:9d:73:
e7:4c:26:4f:bc:6e:9c:22:05:89:87:ab:3b:d8:4f:6e:16:b8:
17:e4:72:26:0d:e9:2d:ce:10:1c:c1:dc:2d:a9:da:48:f6:04:
aa:cc:99:8d:68:0a:7e:7d:e3:bd:20:cb:3c:01:8e:98:6d:12:
83:1d:0f:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 18:28:41 2026 by rpki-client