Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/0a50d0-564f-40e0-8589-c9f7d02f90c0/1/1-_Klpd9NlawBFcrtrRlLYmiPK7o.mft
File: 1-_Klpd9NlawBFcrtrRlLYmiPK7o.mft (raw, json)
Hash identifier: EC9zx7GVnHIXtJGANgBw5BJ5k8ty/ujtJmeVEASFIV0=
Subject key identifier: E0:D3:ED:FB:8D:89:71:E7:D4:8B:22:8A:13:6C:F8:11:73:02:66:3D
Authority key identifier: FB:F2:A5:A5:DF:4D:95:AC:01:15:CA:ED:AD:19:4B:62:68:8F:2B:BA
Certificate issuer: /CN=fbf2a5a5df4d95ac0115caedad194b62688f2bba
Certificate serial: 01A0010199007632639AAF3B8DF52EB286CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-_Klpd9NlawBFcrtrRlLYmiPK7o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/0a50d0-564f-40e0-8589-c9f7d02f90c0/1/1-_Klpd9NlawBFcrtrRlLYmiPK7o.mft
Manifest number: 1486
Signing time: Fri 14 Aug 2026 16:01:16 +0000
Manifest this update: Fri 14 Aug 2026 16:01:16 +0000
Manifest next update: Sat 15 Aug 2026 16:01:16 +0000
Files and hashes: 1: 1-_Klpd9NlawBFcrtrRlLYmiPK7o.crl (hash: j2tOgFjl7P/O4ztLHlDRiA9P7wIAgEkUl6rowTKLyM0=)
2: nEwlFQn77GRj0a5PcdvpntXjCkk.roa (hash: 7O4FI78VSfvllLog9ZUlgueDZ+Vv0bklrjItMQ0ox9s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/0a50d0-564f-40e0-8589-c9f7d02f90c0/1/1-_Klpd9NlawBFcrtrRlLYmiPK7o.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/0a50d0-564f-40e0-8589-c9f7d02f90c0/1/1-_Klpd9NlawBFcrtrRlLYmiPK7o.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-_Klpd9NlawBFcrtrRlLYmiPK7o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:01:99:00:76:32:63:9a:af:3b:8d:f5:2e:b2:86:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fbf2a5a5df4d95ac0115caedad194b62688f2bba
Validity
Not Before: Aug 14 16:01:16 2026 GMT
Not After : Aug 15 16:01:16 2026 GMT
Subject: CN=e0d3edfb8d8971e7d48b228a136cf8117302663d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:ae:b3:e2:39:9a:7b:c0:fc:4c:da:c8:a3:2c:
94:10:ca:ea:90:b4:bf:e8:f6:01:e2:df:48:02:ed:
d1:b4:99:a4:4f:cd:f6:71:cf:18:3c:b2:45:c8:43:
1b:67:02:a4:55:ad:40:ab:45:b7:65:df:67:77:34:
42:5d:7b:15:a0:06:ae:09:a9:c9:7c:90:ff:04:1a:
a7:e0:8b:86:db:50:7e:b9:3b:a6:03:c0:27:f7:17:
19:3f:ab:03:5e:e8:48:ca:30:74:7e:34:2f:09:ce:
98:60:bf:23:9a:01:67:97:f3:e8:30:e0:cc:fd:49:
3d:96:95:fc:b5:49:63:b4:80:18:b2:e3:90:38:a3:
5d:2f:84:c7:7d:89:83:90:8d:fd:fa:4f:8a:97:c4:
a4:0a:a2:8f:2b:d8:f9:4a:a4:61:c1:c9:2b:4f:22:
24:ff:f4:40:b7:81:09:c2:8b:72:7d:4b:79:0d:53:
0d:56:08:a4:73:c2:0a:68:56:34:a9:c2:29:5f:96:
95:9f:7f:c9:b2:1e:a2:ea:35:18:25:d5:43:81:37:
06:7a:e5:5d:aa:86:05:97:ac:9c:4a:00:e0:72:ef:
ce:fc:e3:59:be:d0:28:e9:9a:d3:be:83:a1:eb:77:
83:47:2d:28:33:99:ed:51:cb:a5:1f:c6:49:c3:a7:
d8:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:D3:ED:FB:8D:89:71:E7:D4:8B:22:8A:13:6C:F8:11:73:02:66:3D
X509v3 Authority Key Identifier:
keyid:FB:F2:A5:A5:DF:4D:95:AC:01:15:CA:ED:AD:19:4B:62:68:8F:2B:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-_Klpd9NlawBFcrtrRlLYmiPK7o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/0a50d0-564f-40e0-8589-c9f7d02f90c0/1/1-_Klpd9NlawBFcrtrRlLYmiPK7o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/0a50d0-564f-40e0-8589-c9f7d02f90c0/1/1-_Klpd9NlawBFcrtrRlLYmiPK7o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:55:da:48:f7:d1:07:75:0d:8f:95:c5:a2:3d:13:ba:03:dc:
e2:98:12:e9:59:a4:d4:c1:0f:23:0e:ec:27:ef:17:27:89:bb:
e4:31:35:48:07:72:b6:af:8d:49:b3:3f:75:f6:e3:2f:c7:72:
0d:d0:b8:2f:60:b6:60:73:d7:31:c6:22:0d:92:f0:d4:21:60:
f8:45:05:be:13:d0:6e:60:0a:18:93:07:39:c9:45:69:c7:64:
87:95:99:f5:ee:87:c8:3a:d5:96:35:77:3d:73:0a:5f:7c:be:
56:d0:88:ab:ab:52:f0:e0:bf:fa:57:c9:4d:f5:40:02:16:97:
6d:c9:50:a5:9f:08:24:54:49:ae:5e:e9:fc:3a:9e:76:4d:c3:
d0:10:c3:7a:4a:8e:7b:8f:a0:25:a1:30:e1:cd:df:e1:a3:19:
01:d5:d5:a5:15:27:fd:96:56:4f:12:32:21:48:c9:6f:02:3b:
30:4e:0a:89:5f:71:c0:b9:58:dd:e6:90:79:79:0d:ae:94:56:
3d:ed:bb:24:8c:18:70:e6:f0:53:36:55:8e:11:a5:fb:a6:1d:
24:b5:2a:d0:3e:81:6b:70:c0:52:0d:a7:c7:3a:2a:c9:b1:b4:
c7:22:75:3d:cd:fe:e1:36:f2:0a:b0:13:e0:b7:44:6c:83:31:
cd:01:23:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 22:27:02 2026 by rpki-client