Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ca/0a50d0-564f-40e0-8589-c9f7d02f90c0/1/1-_Klpd9NlawBFcrtrRlLYmiPK7o.mft
File: 1-_Klpd9NlawBFcrtrRlLYmiPK7o.mft (raw, json)
Hash identifier: KOYSwqvFRUmq9bD8HW/MvPQXmIG9192wNoqkRTBn7Gs=
Subject key identifier: 8D:AB:D2:3E:91:9D:3C:CE:97:6D:62:E8:2C:2E:BC:1B:76:86:3C:F2
Authority key identifier: FB:F2:A5:A5:DF:4D:95:AC:01:15:CA:ED:AD:19:4B:62:68:8F:2B:BA
Certificate issuer: /CN=fbf2a5a5df4d95ac0115caedad194b62688f2bba
Certificate serial: 01A1494EB7A24713BF6B7D03957CB411335D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-_Klpd9NlawBFcrtrRlLYmiPK7o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/0a50d0-564f-40e0-8589-c9f7d02f90c0/1/1-_Klpd9NlawBFcrtrRlLYmiPK7o.mft
Manifest number: 1530
Signing time: Sat 17 Oct 2026 10:00:57 +0000
Manifest this update: Sat 17 Oct 2026 10:00:57 +0000
Manifest next update: Sun 18 Oct 2026 10:00:57 +0000
Files and hashes: 1: 1-_Klpd9NlawBFcrtrRlLYmiPK7o.crl (hash: sBTw5HdEfq4AEGcYZV3CLgNyWHIH9b1FM0fw8MKAviU=)
2: nEwlFQn77GRj0a5PcdvpntXjCkk.roa (hash: 7O4FI78VSfvllLog9ZUlgueDZ+Vv0bklrjItMQ0ox9s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/0a50d0-564f-40e0-8589-c9f7d02f90c0/1/1-_Klpd9NlawBFcrtrRlLYmiPK7o.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/0a50d0-564f-40e0-8589-c9f7d02f90c0/1/1-_Klpd9NlawBFcrtrRlLYmiPK7o.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-_Klpd9NlawBFcrtrRlLYmiPK7o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 18 Oct 2026 05:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:49:4e:b7:a2:47:13:bf:6b:7d:03:95:7c:b4:11:33:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fbf2a5a5df4d95ac0115caedad194b62688f2bba
Validity
Not Before: Oct 17 10:00:57 2026 GMT
Not After : Oct 18 10:00:57 2026 GMT
Subject: CN=8dabd23e919d3cce976d62e82c2ebc1b76863cf2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:f1:ec:f0:42:25:f6:b0:43:0e:bf:1d:b5:0b:
73:b7:bf:e0:67:c5:12:28:c1:87:98:d0:ad:d2:33:
63:56:4a:9d:82:c3:bb:39:e4:22:93:ed:e5:75:72:
ab:39:f3:db:51:35:b1:b1:e5:ef:08:7c:37:45:31:
b2:ac:36:4d:92:ab:d6:d5:68:ac:ef:e4:33:fa:6b:
4d:38:fc:ef:61:c5:a1:3d:55:1b:ba:17:18:63:c6:
b5:cf:24:56:ad:01:b7:75:31:e1:22:65:5d:d9:17:
ac:ba:df:1b:0a:37:55:80:e8:5a:34:15:9d:f2:8f:
40:2f:6a:52:87:28:08:b1:88:6e:e6:5e:58:64:84:
a2:d5:6e:ca:fa:70:bc:da:c9:32:17:d0:86:53:90:
d4:62:3d:de:b4:aa:04:c6:0d:32:dc:f5:7e:3e:a9:
41:a4:0e:b0:2b:d6:83:c7:4e:0e:e9:70:8d:f2:d7:
56:9a:74:98:7e:57:74:0b:7a:11:de:32:0e:39:bb:
fa:a7:fa:7f:41:78:ef:f9:10:6a:78:b7:11:29:05:
81:aa:67:7c:0c:9a:b1:0d:d2:fc:13:f2:7a:6c:ff:
de:1a:41:65:b2:c2:e0:c0:e5:e5:7a:f6:26:63:42:
59:46:2e:3f:17:d7:4b:45:08:9d:d3:f9:b5:e3:01:
3d:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:AB:D2:3E:91:9D:3C:CE:97:6D:62:E8:2C:2E:BC:1B:76:86:3C:F2
X509v3 Authority Key Identifier:
keyid:FB:F2:A5:A5:DF:4D:95:AC:01:15:CA:ED:AD:19:4B:62:68:8F:2B:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-_Klpd9NlawBFcrtrRlLYmiPK7o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/0a50d0-564f-40e0-8589-c9f7d02f90c0/1/1-_Klpd9NlawBFcrtrRlLYmiPK7o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/0a50d0-564f-40e0-8589-c9f7d02f90c0/1/1-_Klpd9NlawBFcrtrRlLYmiPK7o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:ba:24:c0:56:dd:b0:2f:fc:1d:77:a3:3c:8b:a9:35:ce:82:
4b:7c:84:8a:bf:a7:76:a9:1c:ee:78:48:56:b7:25:e8:43:d4:
04:43:ba:03:47:ea:1f:d1:97:f2:5b:9d:dc:2a:c0:53:f2:fc:
f0:39:f6:ab:ae:8f:62:04:0a:8c:6d:dd:03:26:98:1a:af:e7:
36:72:38:a7:fc:96:31:39:1e:d4:64:49:45:33:9d:5e:47:d6:
10:8e:e1:a9:3f:cf:3b:a3:b5:96:b6:16:d8:f2:33:21:0a:1b:
a6:71:fb:95:a7:af:e6:89:1f:59:9a:87:25:3b:37:6e:35:8b:
6a:37:e7:9b:9e:dd:99:7d:f0:29:b4:80:1d:cd:10:40:d1:e1:
02:ec:87:5f:c1:34:d6:a1:32:b7:54:b9:5d:e2:a0:cf:f8:f6:
8e:5c:a2:32:94:40:22:ec:87:0f:28:ef:3b:cd:97:80:f1:58:
04:98:89:0e:21:11:ce:7f:71:7b:7f:92:ea:ff:a1:70:26:9a:
27:43:a3:a9:ec:2a:b3:ae:35:4a:69:6f:1c:4a:16:39:35:46:
d5:ba:03:1d:f1:f3:5e:eb:79:01:a1:de:98:cd:1e:9c:5d:b4:
1a:db:18:87:6e:ce:66:85:06:4c:95:6d:20:29:78:a9:f6:44:
84:3b:72:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 17 12:59:20 2026 by rpki-client