Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ca/0a50d0-564f-40e0-8589-c9f7d02f90c0/1/1-_Klpd9NlawBFcrtrRlLYmiPK7o.mft
File: 1-_Klpd9NlawBFcrtrRlLYmiPK7o.mft (raw, json)
Hash identifier: e40vcBuIxOjqP/J++iFeFob6UA3JZEg5LJbsDVK5pyQ=
Subject key identifier: 11:B8:AF:56:63:F7:12:16:3E:5C:61:80:7C:20:29:84:72:1A:E8:20
Authority key identifier: FB:F2:A5:A5:DF:4D:95:AC:01:15:CA:ED:AD:19:4B:62:68:8F:2B:BA
Certificate issuer: /CN=fbf2a5a5df4d95ac0115caedad194b62688f2bba
Certificate serial: 01A0FFEC520145AE958F9283DD5BA4357D8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-_Klpd9NlawBFcrtrRlLYmiPK7o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/0a50d0-564f-40e0-8589-c9f7d02f90c0/1/1-_Klpd9NlawBFcrtrRlLYmiPK7o.mft
Manifest number: 150A
Signing time: Sat 03 Oct 2026 04:01:12 +0000
Manifest this update: Sat 03 Oct 2026 04:01:12 +0000
Manifest next update: Sun 04 Oct 2026 04:01:12 +0000
Files and hashes: 1: 1-_Klpd9NlawBFcrtrRlLYmiPK7o.crl (hash: 8PHKdNMECL070PmHdeDEo1Zi6kMgw/QN5pC7UIRk73Y=)
2: nEwlFQn77GRj0a5PcdvpntXjCkk.roa (hash: 7O4FI78VSfvllLog9ZUlgueDZ+Vv0bklrjItMQ0ox9s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/0a50d0-564f-40e0-8589-c9f7d02f90c0/1/1-_Klpd9NlawBFcrtrRlLYmiPK7o.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/0a50d0-564f-40e0-8589-c9f7d02f90c0/1/1-_Klpd9NlawBFcrtrRlLYmiPK7o.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-_Klpd9NlawBFcrtrRlLYmiPK7o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 Oct 2026 02:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ff:ec:52:01:45:ae:95:8f:92:83:dd:5b:a4:35:7d:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fbf2a5a5df4d95ac0115caedad194b62688f2bba
Validity
Not Before: Oct 3 04:01:12 2026 GMT
Not After : Oct 4 04:01:12 2026 GMT
Subject: CN=11b8af5663f712163e5c61807c202984721ae820
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:b9:a4:bf:24:87:95:7d:28:64:e9:47:d3:5c:
fa:3f:b8:73:01:84:c0:12:0e:d3:e7:1e:d3:e7:16:
d3:77:92:f5:7d:1c:3f:9f:0f:7b:a5:b7:2b:30:d0:
10:56:26:bb:75:57:c2:72:1a:2a:c3:cb:cd:5d:25:
4a:3e:5e:e9:38:f9:46:74:22:d8:b9:97:83:c6:3d:
02:32:c6:63:51:44:b7:ed:73:bc:e5:6d:ce:51:05:
48:5d:5c:10:f1:f9:43:a7:2a:50:58:74:da:83:97:
1a:0c:ee:ed:56:b9:9a:86:16:89:94:b0:86:bc:a5:
d2:ee:65:d6:bf:d8:8e:9d:97:07:90:80:f3:e6:27:
2e:7a:7a:91:2a:6b:c8:d9:62:1c:69:b2:27:b5:77:
19:41:90:ad:14:cc:b4:7c:26:84:d6:90:8b:2e:20:
d3:82:52:5d:c3:91:86:03:ec:9f:79:a7:f4:b0:f2:
3c:60:47:cd:c7:b5:b4:3a:06:7a:a0:53:50:39:2a:
0b:9a:a3:e3:86:fb:f4:8c:0c:e0:ac:0d:93:2f:60:
e6:bd:33:c8:c5:f2:00:21:7c:b6:0e:ea:96:73:fd:
4c:33:86:6a:3a:dc:26:ed:96:cb:1e:3b:40:30:ae:
41:ef:20:77:ca:e3:a0:cf:1a:55:3c:e8:fe:50:23:
d0:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:B8:AF:56:63:F7:12:16:3E:5C:61:80:7C:20:29:84:72:1A:E8:20
X509v3 Authority Key Identifier:
keyid:FB:F2:A5:A5:DF:4D:95:AC:01:15:CA:ED:AD:19:4B:62:68:8F:2B:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-_Klpd9NlawBFcrtrRlLYmiPK7o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/0a50d0-564f-40e0-8589-c9f7d02f90c0/1/1-_Klpd9NlawBFcrtrRlLYmiPK7o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/0a50d0-564f-40e0-8589-c9f7d02f90c0/1/1-_Klpd9NlawBFcrtrRlLYmiPK7o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:00:04:bc:2b:73:40:ec:67:10:ec:a4:cf:93:70:6d:e0:36:
82:45:91:da:52:ca:00:44:43:71:5a:01:cd:ee:e8:6e:1a:17:
1c:44:8a:38:1a:64:a9:a5:48:6c:ef:02:39:16:08:37:b6:75:
26:04:34:31:11:36:2b:97:1d:02:e9:1f:57:e8:04:a1:9c:92:
4f:7a:07:2e:c9:98:43:ca:fb:3e:f3:a7:db:7e:87:1e:8c:e7:
e5:b6:0b:37:15:2d:3d:51:43:28:e5:79:09:1a:55:f9:19:74:
b6:0f:28:60:64:9a:15:1d:5e:27:f8:05:58:43:d9:08:61:e8:
6d:98:55:bf:1d:0a:d5:29:52:8f:26:5c:1c:ad:6e:e0:42:6b:
88:33:a5:ea:08:c7:df:26:34:e1:cb:83:a3:f9:2a:3e:d3:d2:
89:1f:fa:f8:88:f0:2e:0d:76:a0:ee:c4:b5:45:18:58:ba:5c:
1c:19:98:a7:73:5c:20:3e:59:f0:18:99:c1:93:e6:80:3b:aa:
08:41:2b:a8:21:a4:da:d3:6a:8d:b2:75:b0:4a:f8:88:08:0c:
4b:a6:8f:30:7b:ec:ef:0f:ba:bc:8b:e3:7f:86:89:89:59:25:
59:bc:f0:60:8c:6d:66:ee:5d:42:7c:75:48:08:84:1d:96:66:
70:ac:d4:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 10:34:42 2026 by rpki-client