Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/f017df-0d0f-4a36-ac25-4968aaafc59b/1/fKlis7F-7waeOrohKIuyxkIhv-0.mft
File: fKlis7F-7waeOrohKIuyxkIhv-0.mft (raw, json)
Hash identifier: UGNC1La+Qinudge23uhYNwKSIio/Fdwp5NSrmAMAcfM=
Subject key identifier: D2:06:7A:7B:68:B0:0D:9D:8E:5A:AD:63:1A:57:79:F1:DB:85:5F:37
Authority key identifier: 7C:A9:62:B3:B1:7E:EF:06:9E:3A:BA:21:28:8B:B2:C6:42:21:BF:ED
Certificate issuer: /CN=7ca962b3b17eef069e3aba21288bb2c64221bfed
Certificate serial: 019F935BC79036924577771B3864AB09F595
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fKlis7F-7waeOrohKIuyxkIhv-0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/f017df-0d0f-4a36-ac25-4968aaafc59b/1/fKlis7F-7waeOrohKIuyxkIhv-0.mft
Manifest number: 05A5
Signing time: Fri 24 Jul 2026 09:01:33 +0000
Manifest this update: Fri 24 Jul 2026 09:01:33 +0000
Manifest next update: Sat 25 Jul 2026 09:01:33 +0000
Files and hashes: 1: 7CcrAdktIbmIWLIGRKt4XmzFkcg.roa (hash: iem2l37ZP4AP5T+ke2deoIOETFCnj1X7HBG1zJalTyg=)
2: fKlis7F-7waeOrohKIuyxkIhv-0.crl (hash: O7mzoIJJ8EkZZwx9BR17bEEGQ/x2UBce+wiEib2H/8c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/f017df-0d0f-4a36-ac25-4968aaafc59b/1/fKlis7F-7waeOrohKIuyxkIhv-0.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/f017df-0d0f-4a36-ac25-4968aaafc59b/1/fKlis7F-7waeOrohKIuyxkIhv-0.mft
rsync://rpki.ripe.net/repository/DEFAULT/fKlis7F-7waeOrohKIuyxkIhv-0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:5b:c7:90:36:92:45:77:77:1b:38:64:ab:09:f5:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ca962b3b17eef069e3aba21288bb2c64221bfed
Validity
Not Before: Jul 24 09:01:33 2026 GMT
Not After : Jul 25 09:01:33 2026 GMT
Subject: CN=d2067a7b68b00d9d8e5aad631a5779f1db855f37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:64:49:80:8b:24:fb:da:7d:c6:53:d6:36:5a:
3a:31:4f:bf:ca:d6:be:30:15:d3:4a:6b:87:80:50:
81:8d:2e:1c:56:b5:73:cd:93:26:d5:16:c6:b3:78:
b2:ec:4c:1c:f5:c9:47:ef:fc:3d:57:a4:43:68:d5:
ad:d2:d8:2a:d3:b8:5a:43:79:d8:0a:b8:25:8d:27:
55:e4:6a:5b:f2:9c:f7:07:49:0c:f1:1d:54:1e:72:
61:df:ab:84:c4:e1:ce:cd:72:dd:d3:be:91:2f:b3:
3b:dc:1d:73:9c:da:b2:f1:ce:d6:9f:48:c7:bf:15:
bf:ab:99:2a:8c:87:94:6f:b0:5d:ad:36:57:e6:42:
d7:bd:56:62:82:a8:1a:13:66:cb:b8:94:01:7d:f1:
6e:bf:c5:f6:b9:48:a1:4c:9c:1a:75:b5:8e:ae:1a:
09:dd:6c:05:f5:c2:dd:12:7b:5a:80:d4:28:d2:0c:
1a:77:08:16:b2:01:35:31:39:69:46:65:e5:6e:b0:
23:24:f0:9d:e8:9a:4c:86:71:15:87:1f:2c:43:80:
a8:84:88:0a:92:a5:a3:a7:e4:8a:da:fe:a2:a5:8d:
81:bc:c4:29:96:f4:8a:60:e9:5b:64:b6:62:df:ce:
2a:66:53:c2:58:65:bb:fa:e0:64:82:9b:4d:91:78:
65:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:06:7A:7B:68:B0:0D:9D:8E:5A:AD:63:1A:57:79:F1:DB:85:5F:37
X509v3 Authority Key Identifier:
keyid:7C:A9:62:B3:B1:7E:EF:06:9E:3A:BA:21:28:8B:B2:C6:42:21:BF:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fKlis7F-7waeOrohKIuyxkIhv-0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/f017df-0d0f-4a36-ac25-4968aaafc59b/1/fKlis7F-7waeOrohKIuyxkIhv-0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/f017df-0d0f-4a36-ac25-4968aaafc59b/1/fKlis7F-7waeOrohKIuyxkIhv-0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c8:ef:dd:87:61:54:30:3f:f3:09:e6:f2:0c:44:fa:03:0a:23:
d1:45:2e:bb:d5:53:7d:05:10:a1:32:af:24:20:61:15:4c:db:
d4:93:c8:92:f6:1c:78:4e:2c:82:4c:34:45:0a:b6:b6:bd:c0:
f7:03:1d:48:d6:5e:d7:db:a2:1e:39:8e:cd:a5:23:5b:69:0a:
fa:cc:ee:59:80:7f:c0:f5:ff:ec:af:5c:a3:50:07:bc:e1:ea:
cb:2a:08:0c:97:12:fe:dc:e4:d6:e0:c0:6a:d8:fe:4c:b3:58:
c4:dc:b5:77:66:84:05:0c:52:02:e7:ab:d9:b9:b4:65:7a:92:
e8:20:02:36:b5:86:12:72:3b:2d:fa:57:ad:9c:cf:cb:0d:92:
9e:ca:2b:e4:16:19:15:a3:ce:ac:6e:0c:33:e2:d8:ba:57:9b:
38:a7:a9:ef:64:06:78:d2:33:2f:41:e8:26:8e:44:e3:30:02:
c8:79:39:39:fb:54:89:a0:3b:21:bf:cc:7c:99:c2:07:c6:69:
64:bc:c8:46:62:4d:84:ee:f5:5c:9c:26:cc:df:65:b1:52:11:
7a:89:7d:33:4e:45:66:56:65:b8:cc:bf:a8:30:84:ce:bf:b5:
02:dd:90:a5:72:4c:30:5a:07:1f:6c:88:77:5c:8a:84:9b:21:
dd:fa:0c:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:55:59 2026 by rpki-client