Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/53/f017df-0d0f-4a36-ac25-4968aaafc59b/1/fKlis7F-7waeOrohKIuyxkIhv-0.mft
File: fKlis7F-7waeOrohKIuyxkIhv-0.mft (raw, json)
Hash identifier: 0hhiyDUDj4sgEPnzDIdwX8yzp/oL0ErmOX+mkJpIS/A=
Subject key identifier: 1D:75:32:BC:83:51:C6:ED:D1:87:06:2E:B9:1C:16:93:B8:B2:EC:85
Authority key identifier: 7C:A9:62:B3:B1:7E:EF:06:9E:3A:BA:21:28:8B:B2:C6:42:21:BF:ED
Certificate issuer: /CN=7ca962b3b17eef069e3aba21288bb2c64221bfed
Certificate serial: 01A164C6EE7C58673515912287D46969FBC2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fKlis7F-7waeOrohKIuyxkIhv-0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/f017df-0d0f-4a36-ac25-4968aaafc59b/1/fKlis7F-7waeOrohKIuyxkIhv-0.mft
Manifest number: 0696
Signing time: Thu 22 Oct 2026 18:02:01 +0000
Manifest this update: Thu 22 Oct 2026 18:02:01 +0000
Manifest next update: Fri 23 Oct 2026 18:02:01 +0000
Files and hashes: 1: 7CcrAdktIbmIWLIGRKt4XmzFkcg.roa (hash: iem2l37ZP4AP5T+ke2deoIOETFCnj1X7HBG1zJalTyg=)
2: fKlis7F-7waeOrohKIuyxkIhv-0.crl (hash: o5BkM+vzSRfXlt5zzIqdSmvBaL3QO2oKjrm1Ys+UTIs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/f017df-0d0f-4a36-ac25-4968aaafc59b/1/fKlis7F-7waeOrohKIuyxkIhv-0.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/f017df-0d0f-4a36-ac25-4968aaafc59b/1/fKlis7F-7waeOrohKIuyxkIhv-0.mft
rsync://rpki.ripe.net/repository/DEFAULT/fKlis7F-7waeOrohKIuyxkIhv-0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 23 Oct 2026 17:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:64:c6:ee:7c:58:67:35:15:91:22:87:d4:69:69:fb:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ca962b3b17eef069e3aba21288bb2c64221bfed
Validity
Not Before: Oct 22 18:02:01 2026 GMT
Not After : Oct 23 18:02:01 2026 GMT
Subject: CN=1d7532bc8351c6edd187062eb91c1693b8b2ec85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:7e:a7:45:1f:d5:f1:df:2d:91:8f:46:ff:63:
40:22:f8:42:2c:4e:e3:2b:a9:48:a1:e7:c6:b6:a0:
cf:1e:7f:fd:50:a5:be:58:49:9f:7b:c7:0d:23:53:
b4:15:53:72:13:37:71:2c:2f:31:d3:8a:72:06:29:
31:6c:78:07:47:98:ea:66:2d:4a:50:f1:43:b7:68:
6b:fd:0b:1e:39:f6:29:f4:c2:31:60:f1:08:40:ba:
3e:13:a3:e7:1a:81:2a:5b:ef:84:b0:d6:83:1d:15:
4e:98:b1:e0:5e:58:6a:95:d1:e5:84:8e:72:e8:04:
f7:1b:6c:c3:72:92:e0:64:4e:0c:44:a1:12:12:d2:
d6:77:a1:a5:8a:70:1a:66:50:b5:1d:d5:bd:f6:1b:
af:95:c3:d9:85:c3:8e:14:7f:e0:c9:fe:53:de:d3:
0a:64:f1:5f:0a:2c:ba:62:c5:fc:ac:e2:cb:f8:f3:
f8:a2:34:af:3f:e4:52:e0:12:25:c0:e0:98:6e:3e:
90:2d:cc:19:0a:9d:5f:2e:65:61:bb:ac:6e:36:8d:
06:f4:3b:6d:a7:5e:8e:ff:e1:a2:d5:cf:8f:dd:75:
b7:cc:33:b2:4e:3c:76:26:b3:0d:db:71:4b:41:98:
6c:f3:d6:de:b5:86:a9:5a:98:38:f5:9f:75:36:2d:
05:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:75:32:BC:83:51:C6:ED:D1:87:06:2E:B9:1C:16:93:B8:B2:EC:85
X509v3 Authority Key Identifier:
keyid:7C:A9:62:B3:B1:7E:EF:06:9E:3A:BA:21:28:8B:B2:C6:42:21:BF:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fKlis7F-7waeOrohKIuyxkIhv-0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/f017df-0d0f-4a36-ac25-4968aaafc59b/1/fKlis7F-7waeOrohKIuyxkIhv-0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/f017df-0d0f-4a36-ac25-4968aaafc59b/1/fKlis7F-7waeOrohKIuyxkIhv-0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:b3:d2:4b:96:39:ea:cf:e2:4a:3e:c3:f1:d9:f3:26:d7:4c:
70:9c:4d:10:69:a7:48:f4:eb:bd:ef:48:82:f3:f0:b2:62:2b:
59:e1:83:c9:2f:f6:08:83:82:bf:07:a4:1b:fa:61:33:e1:98:
2c:a9:55:cd:a0:a8:95:4a:1d:e8:96:83:da:e0:d5:e9:20:48:
7f:70:00:d4:c0:de:88:9d:d8:cf:cd:52:5f:fe:80:bc:a8:0f:
12:7b:9f:aa:a6:f8:e5:90:3a:93:4d:05:11:90:1c:8c:29:84:
7e:a8:dc:28:7b:20:bf:74:3a:ea:69:8b:49:22:4e:af:86:75:
46:ee:2f:25:d0:c3:f9:d2:2c:eb:3a:b4:98:e9:2e:e5:5a:1e:
97:13:aa:6f:14:51:00:17:5c:52:ec:15:19:be:b8:72:b1:9d:
37:68:59:87:2b:75:46:c4:09:7b:03:19:4b:73:58:c2:52:a5:
50:52:1f:f9:eb:bc:1b:19:72:12:3b:f8:3f:c5:2d:f1:87:5e:
8e:06:ac:1e:ab:f6:95:b5:e4:2a:c0:68:96:59:5b:29:1f:da:
74:60:76:6e:cb:d3:22:7a:93:b2:8a:52:59:3b:2a:08:2e:6e:
0d:49:be:d7:5c:ab:62:7a:3c:bf:47:9f:36:ca:ff:a3:44:0c:
ea:af:5c:f8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaFkxu58WGc1FZEih9RpafvCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdjYTk2MmIzYjE3ZWVmMDY5ZTNhYmEyMTI4OGJiMmM2NDIy
MWJmZWQwHhcNMjYxMDIyMTgwMjAxWhcNMjYxMDIzMTgwMjAxWjAzMTEwLwYDVQQD
EygxZDc1MzJiYzgzNTFjNmVkZDE4NzA2MmViOTFjMTY5M2I4YjJlYzg1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4X6nRR/V8d8tkY9G/2NAIvhCLE7j
K6lIoefGtqDPHn/9UKW+WEmfe8cNI1O0FVNyEzdxLC8x04pyBikxbHgHR5jqZi1K
UPFDt2hr/QseOfYp9MIxYPEIQLo+E6PnGoEqW++EsNaDHRVOmLHgXlhqldHlhI5y
6AT3G2zDcpLgZE4MRKESEtLWd6GlinAaZlC1HdW99huvlcPZhcOOFH/gyf5T3tMK
ZPFfCiy6YsX8rOLL+PP4ojSvP+RS4BIlwOCYbj6QLcwZCp1fLmVhu6xuNo0G9Dtt
p16O/+Gi1c+P3XW3zDOyTjx2JrMN23FLQZhs89betYapWpg49Z91Ni0FsQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB11MryDUcbt0YcGLrkcFpO4suyFMB8GA1UdIwQY
MBaAFHypYrOxfu8Gnjq6ISiLssZCIb/tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZktsaXM3Ri03d2FlT3JvaEtJdXl4a0lodi0wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My9mMDE3ZGYtMGQwZi00YTM2LWFjMjUt
NDk2OGFhYWZjNTliLzEvZktsaXM3Ri03d2FlT3JvaEtJdXl4a0lodi0wLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81My9mMDE3ZGYtMGQwZi00YTM2LWFjMjUtNDk2OGFhYWZjNTli
LzEvZktsaXM3Ri03d2FlT3JvaEtJdXl4a0lodi0wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYLPSS5Y5
6s/iSj7D8dnzJtdMcJxNEGmnSPTrve9IgvPwsmIrWeGDyS/2CIOCvwekG/phM+GY
LKlVzaColUod6JaD2uDV6SBIf3AA1MDeiJ3Yz81SX/6AvKgPEnufqqb45ZA6k00F
EZAcjCmEfqjcKHsgv3Q66mmLSSJOr4Z1Ru4vJdDD+dIs6zq0mOku5VoelxOqbxRR
ABdcUuwVGb64crGdN2hZhyt1RsQJewMZS3NYwlKlUFIf+eu8GxlyEjv4P8Ut8Yde
jgasHqv2lbXkKsBolllbKR/adGB2bsvTInqTsopSWTsqCC5uDUm+11yrYno8v0ef
Nsr/o0QM6q9c+A==
-----END CERTIFICATE-----
Generated at Thu Oct 22 23:26:38 2026 by rpki-client