Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/f017df-0d0f-4a36-ac25-4968aaafc59b/1/fKlis7F-7waeOrohKIuyxkIhv-0.mft
File: fKlis7F-7waeOrohKIuyxkIhv-0.mft (raw, json)
Hash identifier: Fju4Y6JbXgXtp3wgrO9RKpw8aXSTwTzxebP4iTqB+J4=
Subject key identifier: 5F:9B:86:64:35:A8:D3:B8:EF:9F:1C:BD:84:4C:0F:30:A1:02:F0:BC
Authority key identifier: 7C:A9:62:B3:B1:7E:EF:06:9E:3A:BA:21:28:8B:B2:C6:42:21:BF:ED
Certificate issuer: /CN=7ca962b3b17eef069e3aba21288bb2c64221bfed
Certificate serial: 019E2091C9ABEE704AFF338AE8C0DD40BCAB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fKlis7F-7waeOrohKIuyxkIhv-0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/f017df-0d0f-4a36-ac25-4968aaafc59b/1/fKlis7F-7waeOrohKIuyxkIhv-0.mft
Manifest number: 04E5
Signing time: Wed 13 May 2026 09:01:25 +0000
Manifest this update: Wed 13 May 2026 09:01:25 +0000
Manifest next update: Thu 14 May 2026 09:01:25 +0000
Files and hashes: 1: 7CcrAdktIbmIWLIGRKt4XmzFkcg.roa (hash: iem2l37ZP4AP5T+ke2deoIOETFCnj1X7HBG1zJalTyg=)
2: fKlis7F-7waeOrohKIuyxkIhv-0.crl (hash: GvpiPJ0ZQPcmwiuPuk7/Z7kw6R5kXXxBob0a7yN2SXs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/f017df-0d0f-4a36-ac25-4968aaafc59b/1/fKlis7F-7waeOrohKIuyxkIhv-0.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/f017df-0d0f-4a36-ac25-4968aaafc59b/1/fKlis7F-7waeOrohKIuyxkIhv-0.mft
rsync://rpki.ripe.net/repository/DEFAULT/fKlis7F-7waeOrohKIuyxkIhv-0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 09:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:91:c9:ab:ee:70:4a:ff:33:8a:e8:c0:dd:40:bc:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ca962b3b17eef069e3aba21288bb2c64221bfed
Validity
Not Before: May 13 09:01:25 2026 GMT
Not After : May 14 09:01:25 2026 GMT
Subject: CN=5f9b866435a8d3b8ef9f1cbd844c0f30a102f0bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:91:ea:a7:0b:a9:d9:5b:05:81:fa:97:e4:05:
85:65:53:15:c0:f0:8c:57:bf:ad:0a:48:5f:5b:64:
a2:c1:92:5b:0c:c4:e8:e9:4a:75:c9:92:16:85:07:
ee:2c:1b:08:21:cd:da:4b:4f:95:b3:a0:9e:8f:4e:
20:fb:bd:27:cb:8a:01:46:2f:1d:1a:1b:3a:ef:81:
bf:60:dc:ed:0c:6b:d2:ee:f9:bb:14:94:dc:0a:9e:
b6:95:04:40:c7:d4:45:0e:21:51:1d:9c:d9:e4:23:
90:a1:5a:33:2d:5b:22:7b:85:b4:80:57:5a:39:e5:
4f:72:fa:f5:82:f4:bc:84:ea:33:2e:0f:f0:7c:2e:
54:d7:89:07:77:70:4f:57:99:ed:65:c3:4c:60:9c:
a2:93:9d:7b:c2:22:e2:d5:e1:73:5a:0c:a4:e5:71:
15:83:6c:1a:5c:b9:85:63:bc:81:23:e4:68:34:81:
8c:7d:c9:35:54:9b:1b:d1:9a:7d:3a:1f:e3:86:1a:
10:fb:21:83:0b:a9:d8:04:4c:eb:68:63:1f:9b:5c:
6a:00:c4:86:63:48:9b:53:31:db:41:be:c9:76:bf:
04:2f:9e:e6:38:bd:0e:79:fe:83:32:49:b4:28:1b:
d2:06:d9:2d:f7:ab:47:87:aa:31:3f:e1:3b:7e:90:
b4:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:9B:86:64:35:A8:D3:B8:EF:9F:1C:BD:84:4C:0F:30:A1:02:F0:BC
X509v3 Authority Key Identifier:
keyid:7C:A9:62:B3:B1:7E:EF:06:9E:3A:BA:21:28:8B:B2:C6:42:21:BF:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fKlis7F-7waeOrohKIuyxkIhv-0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/f017df-0d0f-4a36-ac25-4968aaafc59b/1/fKlis7F-7waeOrohKIuyxkIhv-0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/f017df-0d0f-4a36-ac25-4968aaafc59b/1/fKlis7F-7waeOrohKIuyxkIhv-0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:dd:ed:0e:d3:d4:83:51:43:8c:b2:c3:7f:6a:23:4f:79:b3:
86:f6:81:7f:21:fe:ad:48:8e:a7:68:23:d2:2c:18:43:f1:7e:
6b:5a:5e:83:02:84:5a:fe:b5:60:17:ce:7a:2a:d1:32:bd:49:
d9:d4:e2:c9:62:80:f0:1b:75:89:61:be:0b:89:16:4e:67:c0:
6a:6f:c6:b4:15:b3:17:ff:c1:bb:33:06:ce:86:fd:0e:fa:a7:
78:f3:79:38:c3:03:c1:c5:c7:14:8f:90:e9:91:6a:c1:04:02:
ac:2a:e6:bd:ab:52:d2:45:a5:c8:eb:08:16:6a:ba:9d:c5:34:
2e:4e:e5:88:80:52:8f:5d:01:7c:3c:bc:cf:56:d3:e2:57:91:
7b:96:6a:85:30:9b:ee:11:26:6b:d9:5f:76:67:9e:68:4b:5d:
05:38:a7:eb:68:63:12:ab:de:b6:c4:39:71:81:1f:5b:30:37:
a4:3f:26:d0:f4:1a:8f:d9:2d:f0:f5:ad:68:20:2b:5c:6c:b9:
dd:f6:2b:f4:f5:39:2d:db:df:30:68:df:5f:b2:3e:e2:4e:97:
f3:b0:6e:03:84:f2:74:77:d5:c5:fd:b3:dc:29:b1:9a:6f:20:
4d:cd:48:28:07:9b:08:4b:30:b8:3d:64:b4:3f:c1:ce:72:f9:
ed:dc:9f:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 19:10:20 2026 by rpki-client