Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/0a50d0-564f-40e0-8589-c9f7d02f90c0/1/1-_Klpd9NlawBFcrtrRlLYmiPK7o.mft
File: 1-_Klpd9NlawBFcrtrRlLYmiPK7o.mft (raw, json)
Hash identifier: XZQd1yVYNCSyHWPUOA9BC1mGZSpNsp6EUTsokiGVdj0=
Subject key identifier: FD:C7:95:5D:D1:13:F8:79:1B:DA:6F:2B:9E:FA:A1:10:18:28:0A:83
Authority key identifier: FB:F2:A5:A5:DF:4D:95:AC:01:15:CA:ED:AD:19:4B:62:68:8F:2B:BA
Certificate issuer: /CN=fbf2a5a5df4d95ac0115caedad194b62688f2bba
Certificate serial: 019D38666C812EAA9CC4175640E55708A343
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-_Klpd9NlawBFcrtrRlLYmiPK7o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/0a50d0-564f-40e0-8589-c9f7d02f90c0/1/1-_Klpd9NlawBFcrtrRlLYmiPK7o.mft
Manifest number: 1315
Signing time: Sun 29 Mar 2026 07:02:09 +0000
Manifest this update: Sun 29 Mar 2026 07:02:09 +0000
Manifest next update: Mon 30 Mar 2026 07:02:09 +0000
Files and hashes: 1: 1-_Klpd9NlawBFcrtrRlLYmiPK7o.crl (hash: v5DKzbyGB2BxoxiSCPJiJ0kKcUCFDQ4rADL7kV3HCaw=)
2: nEwlFQn77GRj0a5PcdvpntXjCkk.roa (hash: 7O4FI78VSfvllLog9ZUlgueDZ+Vv0bklrjItMQ0ox9s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/0a50d0-564f-40e0-8589-c9f7d02f90c0/1/1-_Klpd9NlawBFcrtrRlLYmiPK7o.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/0a50d0-564f-40e0-8589-c9f7d02f90c0/1/1-_Klpd9NlawBFcrtrRlLYmiPK7o.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-_Klpd9NlawBFcrtrRlLYmiPK7o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:6c:81:2e:aa:9c:c4:17:56:40:e5:57:08:a3:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fbf2a5a5df4d95ac0115caedad194b62688f2bba
Validity
Not Before: Mar 29 07:02:09 2026 GMT
Not After : Mar 30 07:02:09 2026 GMT
Subject: CN=fdc7955dd113f8791bda6f2b9efaa11018280a83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:9b:32:cb:1c:5e:1f:fc:4b:89:93:f6:a7:f4:
f4:61:1f:2e:63:28:54:b1:8f:63:d1:76:82:9c:51:
62:e3:1a:87:ce:e8:52:12:c9:4e:3d:43:5b:75:24:
8b:fa:fe:3e:3a:39:ef:ff:fa:78:52:25:89:3d:e1:
08:8d:99:f2:1d:65:be:b0:45:2f:48:c9:fe:39:74:
7b:44:65:2f:43:5d:94:4f:2d:fd:d9:93:1f:85:77:
1d:65:30:72:e1:a4:38:7c:cf:10:fb:26:9a:84:f1:
d1:05:8d:1c:a3:d4:97:b4:03:a7:52:3d:16:a1:b2:
5b:72:1c:1b:f1:52:38:fe:7a:d9:65:ea:fa:fa:d0:
96:1b:c4:f8:6d:b9:76:88:9e:47:11:9e:bc:f1:68:
b8:e7:f2:bb:4a:d3:cb:30:1c:09:69:f8:9c:63:6d:
16:c7:99:57:3d:1c:9e:7a:b0:ec:d3:a6:a9:64:b5:
85:5a:55:67:85:0e:0c:c4:1a:03:a2:1a:2a:a8:d4:
96:2a:23:4d:59:9a:e5:33:1e:25:f4:5a:4a:f2:7f:
7c:2a:3f:1f:bf:d4:76:15:4d:27:b5:0b:ac:d3:fc:
45:92:e3:fe:19:fe:42:77:92:7a:f8:22:15:41:58:
52:bf:06:fd:31:1b:43:2b:4b:68:6e:36:6d:cc:05:
a0:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:C7:95:5D:D1:13:F8:79:1B:DA:6F:2B:9E:FA:A1:10:18:28:0A:83
X509v3 Authority Key Identifier:
keyid:FB:F2:A5:A5:DF:4D:95:AC:01:15:CA:ED:AD:19:4B:62:68:8F:2B:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-_Klpd9NlawBFcrtrRlLYmiPK7o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/0a50d0-564f-40e0-8589-c9f7d02f90c0/1/1-_Klpd9NlawBFcrtrRlLYmiPK7o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/0a50d0-564f-40e0-8589-c9f7d02f90c0/1/1-_Klpd9NlawBFcrtrRlLYmiPK7o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:ac:dd:d3:a1:9a:ac:9d:73:f4:63:4c:b5:75:c3:72:e2:ea:
d9:20:e7:f2:75:ef:95:a3:3e:06:26:35:4e:f8:7f:50:26:73:
54:6d:96:ed:8c:99:d6:37:05:53:12:d7:2d:04:2d:60:ae:5a:
bf:3e:07:2e:1c:62:15:16:70:3d:5b:a6:cb:8c:34:c2:6b:bb:
c4:fe:d8:d2:57:be:ee:16:a5:d7:03:97:72:dc:e1:9e:cf:a8:
40:e9:c1:49:a3:42:14:ab:df:af:0f:f0:35:13:dc:81:00:ec:
ad:84:77:21:45:f7:e6:5f:f4:df:32:aa:00:fd:2d:39:69:9d:
eb:aa:6b:c0:9c:4b:ec:9b:51:a1:00:a5:15:3d:4e:c5:a4:df:
44:7e:de:91:39:32:71:25:64:f3:98:d3:e7:54:cc:5f:16:43:
3a:98:ba:7c:2e:ca:2a:d9:82:a7:e2:e7:74:79:24:79:d6:c2:
37:2b:9d:88:a9:cf:97:3a:06:60:17:35:3c:b8:1f:ab:32:50:
1e:bf:ab:47:f7:f4:7d:7d:9c:33:d6:19:a5:76:11:4d:97:08:
0f:0c:9f:bd:12:0c:18:5d:d3:92:20:ae:8f:1d:37:2a:59:09:
9a:2b:26:e7:d7:13:65:85:7f:f6:b2:2f:44:08:7c:d9:8e:20:
26:cb:e1:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:52:19 2026 by rpki-client