
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/0a50d0-564f-40e0-8589-c9f7d02f90c0/1/1-_Klpd9NlawBFcrtrRlLYmiPK7o.mft
File: 1-_Klpd9NlawBFcrtrRlLYmiPK7o.mft (raw, json)
Hash identifier: H18+avSsZcaDP7FsFI445VmA5/PRrnPkQrTBNpLlFOA=
Subject key identifier: 98:16:B5:EB:43:49:71:1A:5B:85:AC:D3:96:A7:23:77:AF:B7:6A:D9
Authority key identifier: FB:F2:A5:A5:DF:4D:95:AC:01:15:CA:ED:AD:19:4B:62:68:8F:2B:BA
Certificate issuer: /CN=fbf2a5a5df4d95ac0115caedad194b62688f2bba
Certificate serial: 019EBE7F284AA52FD36893CAF7435BDA6DDD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-_Klpd9NlawBFcrtrRlLYmiPK7o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/0a50d0-564f-40e0-8589-c9f7d02f90c0/1/1-_Klpd9NlawBFcrtrRlLYmiPK7o.mft
Manifest number: 13DF
Signing time: Sat 13 Jun 2026 01:01:04 +0000
Manifest this update: Sat 13 Jun 2026 01:01:04 +0000
Manifest next update: Sun 14 Jun 2026 01:01:04 +0000
Files and hashes: 1: 1-_Klpd9NlawBFcrtrRlLYmiPK7o.crl (hash: psCdLZu3CkL8AVG7R0lFEiHgW+VWAa72icSTJH8bJrY=)
2: nEwlFQn77GRj0a5PcdvpntXjCkk.roa (hash: 7O4FI78VSfvllLog9ZUlgueDZ+Vv0bklrjItMQ0ox9s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/0a50d0-564f-40e0-8589-c9f7d02f90c0/1/1-_Klpd9NlawBFcrtrRlLYmiPK7o.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/0a50d0-564f-40e0-8589-c9f7d02f90c0/1/1-_Klpd9NlawBFcrtrRlLYmiPK7o.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-_Klpd9NlawBFcrtrRlLYmiPK7o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:be:7f:28:4a:a5:2f:d3:68:93:ca:f7:43:5b:da:6d:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fbf2a5a5df4d95ac0115caedad194b62688f2bba
Validity
Not Before: Jun 13 01:01:04 2026 GMT
Not After : Jun 14 01:01:04 2026 GMT
Subject: CN=9816b5eb4349711a5b85acd396a72377afb76ad9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:37:48:dd:43:12:59:e4:f4:a7:f3:c2:f0:9c:
9c:69:2b:6b:5e:c6:38:87:b8:75:61:89:de:4a:b8:
f5:84:6a:93:b5:1c:94:83:4f:65:8e:b4:78:3e:64:
3f:2a:7d:d6:8f:c6:05:d3:16:48:77:d9:16:79:9a:
cb:01:4e:f7:c8:d7:32:d0:d6:8e:de:f8:ff:8c:0e:
5a:c8:e2:8c:36:60:71:cc:54:2b:0c:8d:72:ab:70:
70:88:85:db:d7:e4:c3:e9:10:0e:57:0c:d8:1f:f4:
d2:7e:3e:56:17:27:c7:f8:40:8f:80:96:f5:04:a1:
5e:68:af:f3:e5:24:37:3e:9a:19:65:62:a8:96:9f:
1f:e8:eb:f4:c6:f2:21:55:38:84:dd:c7:cf:81:00:
a4:97:8e:89:3e:dc:da:6a:f5:ba:6c:8c:54:d7:58:
a0:6f:64:4b:b8:88:70:bb:6b:8c:4e:49:c3:a6:04:
91:d1:c6:55:6e:50:9b:99:48:54:9a:bc:e4:37:64:
b5:6e:6b:d6:95:36:2d:f4:aa:49:80:04:b8:c5:db:
d5:b2:ea:46:3f:0f:6e:a8:9f:90:15:f5:a9:6e:b2:
fe:42:42:bc:1c:6e:95:3d:73:28:2f:52:ed:71:af:
12:6f:b3:d3:c5:8d:3c:e0:ca:ea:6b:ed:13:72:56:
4f:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:16:B5:EB:43:49:71:1A:5B:85:AC:D3:96:A7:23:77:AF:B7:6A:D9
X509v3 Authority Key Identifier:
keyid:FB:F2:A5:A5:DF:4D:95:AC:01:15:CA:ED:AD:19:4B:62:68:8F:2B:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-_Klpd9NlawBFcrtrRlLYmiPK7o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/0a50d0-564f-40e0-8589-c9f7d02f90c0/1/1-_Klpd9NlawBFcrtrRlLYmiPK7o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/0a50d0-564f-40e0-8589-c9f7d02f90c0/1/1-_Klpd9NlawBFcrtrRlLYmiPK7o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:2b:24:45:69:05:f2:a6:17:0c:ae:7b:5d:48:6b:9f:1d:9b:
6c:74:c9:83:97:34:3e:83:6f:a8:87:9b:48:5e:b5:a0:b7:8c:
9c:85:10:96:68:06:a8:fc:d8:8c:c4:c6:d5:5a:8e:4a:8c:ff:
ac:bf:b9:27:ea:1e:8e:e5:ac:6c:b8:13:61:38:11:b1:62:b3:
c3:d4:f4:c6:b8:74:1d:74:33:69:41:4f:ba:d6:91:76:95:df:
51:c5:50:18:21:60:96:95:27:1c:b6:32:c8:b3:9f:3a:1a:63:
d1:77:71:09:ec:ed:3d:6a:0a:00:b1:53:51:4d:7e:9b:fe:0f:
30:92:61:eb:93:3b:62:d3:79:d3:37:2e:88:ca:df:9b:84:b7:
59:67:6a:ca:64:54:0c:25:00:10:5e:8b:32:13:db:f3:2f:5c:
e1:3f:4d:33:e5:e8:ce:67:29:13:a9:99:2d:70:c9:fb:d0:b2:
6a:02:fa:7d:8b:d5:4b:9d:ea:83:59:5d:36:e0:d6:b9:45:02:
b6:62:dc:ec:e3:25:61:0e:f1:2b:92:11:e6:b5:c5:ac:01:c5:
be:b0:98:46:2c:6a:62:85:55:4c:a5:c1:7e:74:5c:40:e5:43:
1f:1f:8f:f5:de:90:01:82:e9:0a:5c:c8:82:1e:df:dd:ea:e5:
8e:2a:bb:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:33:43 2026 by rpki-client