Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/f017df-0d0f-4a36-ac25-4968aaafc59b/1/fKlis7F-7waeOrohKIuyxkIhv-0.mft
File: fKlis7F-7waeOrohKIuyxkIhv-0.mft (raw, json)
Hash identifier: FCaJrOPWeOmBiYygufHHdm75zulID4qB6+Ev1NwhFhA=
Subject key identifier: 78:E8:81:DD:60:53:D0:04:BE:65:3B:CE:74:6E:A6:98:91:32:40:CF
Authority key identifier: 7C:A9:62:B3:B1:7E:EF:06:9E:3A:BA:21:28:8B:B2:C6:42:21:BF:ED
Certificate issuer: /CN=7ca962b3b17eef069e3aba21288bb2c64221bfed
Certificate serial: 019D0C682458A29125A220BFE7668188D207
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fKlis7F-7waeOrohKIuyxkIhv-0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/f017df-0d0f-4a36-ac25-4968aaafc59b/1/fKlis7F-7waeOrohKIuyxkIhv-0.mft
Manifest number: 0456
Signing time: Fri 20 Mar 2026 18:00:44 +0000
Manifest this update: Fri 20 Mar 2026 18:00:44 +0000
Manifest next update: Sat 21 Mar 2026 18:00:44 +0000
Files and hashes: 1: 7CcrAdktIbmIWLIGRKt4XmzFkcg.roa (hash: iem2l37ZP4AP5T+ke2deoIOETFCnj1X7HBG1zJalTyg=)
2: fKlis7F-7waeOrohKIuyxkIhv-0.crl (hash: ai7OeRdizzA6PGMQb6AkWk/zZVNB+blO/sDK4iimACM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/f017df-0d0f-4a36-ac25-4968aaafc59b/1/fKlis7F-7waeOrohKIuyxkIhv-0.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/f017df-0d0f-4a36-ac25-4968aaafc59b/1/fKlis7F-7waeOrohKIuyxkIhv-0.mft
rsync://rpki.ripe.net/repository/DEFAULT/fKlis7F-7waeOrohKIuyxkIhv-0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 21 Mar 2026 11:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:0c:68:24:58:a2:91:25:a2:20:bf:e7:66:81:88:d2:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ca962b3b17eef069e3aba21288bb2c64221bfed
Validity
Not Before: Mar 20 18:00:44 2026 GMT
Not After : Mar 21 18:00:44 2026 GMT
Subject: CN=78e881dd6053d004be653bce746ea698913240cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:42:b0:0b:17:e4:da:d7:0d:03:ce:48:10:4b:
e1:13:b4:dc:3c:09:51:d5:fb:e5:04:fe:7c:0b:81:
7d:13:c4:cc:ff:24:48:b8:0e:ea:59:06:21:d1:25:
a5:4f:f3:fb:ac:c5:f0:d7:eb:05:58:e6:82:d1:6f:
b6:7c:1b:69:09:4e:ec:bb:80:4a:ad:b3:40:27:1b:
15:94:7a:d8:ac:80:03:05:10:29:26:8f:3e:11:02:
48:3b:90:86:f2:02:ac:2b:d0:45:40:f8:ac:75:79:
75:e4:f0:85:bd:fd:f7:50:a7:71:83:61:4a:85:68:
f9:80:9a:ee:04:b7:1f:f1:b6:e1:3a:53:64:21:0e:
9e:78:f0:63:54:26:b9:00:8b:e5:cd:82:d2:cc:82:
b6:0e:bc:fe:b5:0d:4a:4b:d1:67:89:aa:42:cf:5f:
7a:81:59:0f:98:30:a8:b4:02:6b:20:b0:55:4c:bd:
bf:2b:89:f0:74:c1:52:e2:96:85:f8:bd:f8:e5:c4:
a9:02:ff:20:c3:40:10:a2:63:ff:1a:e7:2a:49:b7:
17:6b:79:32:9b:a9:d7:d6:a9:33:31:b5:37:f5:21:
e9:42:10:aa:a3:5f:20:e6:2f:49:b1:d6:77:02:6a:
54:fd:99:fa:6a:d1:df:61:db:e6:2e:d9:80:83:78:
6e:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:E8:81:DD:60:53:D0:04:BE:65:3B:CE:74:6E:A6:98:91:32:40:CF
X509v3 Authority Key Identifier:
keyid:7C:A9:62:B3:B1:7E:EF:06:9E:3A:BA:21:28:8B:B2:C6:42:21:BF:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fKlis7F-7waeOrohKIuyxkIhv-0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/f017df-0d0f-4a36-ac25-4968aaafc59b/1/fKlis7F-7waeOrohKIuyxkIhv-0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/f017df-0d0f-4a36-ac25-4968aaafc59b/1/fKlis7F-7waeOrohKIuyxkIhv-0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:0b:35:f1:a4:3b:55:55:f5:06:e9:df:e8:3e:c5:ac:83:c9:
99:41:b1:06:72:23:e8:f3:18:47:72:d3:39:79:7f:eb:e6:c1:
bc:1a:24:c3:71:2b:88:b1:c3:01:86:df:39:06:06:3b:73:73:
1f:38:e6:8b:d4:ed:04:6e:a3:50:68:85:d3:8e:20:dc:aa:40:
f4:50:7b:d2:af:50:01:b9:1a:22:d3:14:43:e6:0c:a2:f6:aa:
f4:7f:f3:e8:1b:88:83:52:96:62:35:92:b6:34:4a:fa:45:a9:
d6:c9:c3:55:1a:15:7b:2e:7f:66:0e:6a:67:52:d5:3c:27:fd:
a5:e9:df:db:a1:ba:6a:92:cf:c7:24:09:b8:bd:27:f2:77:e6:
2f:44:26:0e:fc:7d:4b:cb:80:44:91:70:8b:f1:51:0f:d1:af:
07:ed:80:70:7f:6b:bb:6d:e3:9d:a1:fb:61:a8:f5:ff:c5:29:
31:91:9d:cf:d3:1e:42:65:cc:ad:0b:66:9e:fb:78:7f:73:21:
47:4c:3c:79:23:31:2f:98:5b:a0:2e:5a:ef:f4:9a:e3:66:18:
88:b0:e2:ec:7f:d5:c0:84:ec:da:52:d3:6e:2f:08:b0:7f:6d:
52:1a:71:95:1d:43:66:87:7e:64:a9:22:2d:a6:31:dc:d6:29:
7c:4b:f9:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 20 21:14:49 2026 by rpki-client