Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/93/51a4a3-7304-4613-8a80-ca3b1cac69c7/1/klPiFMjlpvQTRb5oL2gmVbGr6ls.mft
File: klPiFMjlpvQTRb5oL2gmVbGr6ls.mft (raw, json)
Hash identifier: 70CyfKO+vilWYIXTxG9E2OpASogpyq1GpycqzvENNtM=
Subject key identifier: 50:09:6B:C6:6F:83:CE:8B:8E:E0:6D:EB:47:97:1C:E7:81:81:6E:4D
Authority key identifier: 92:53:E2:14:C8:E5:A6:F4:13:45:BE:68:2F:68:26:55:B1:AB:EA:5B
Certificate issuer: /CN=9253e214c8e5a6f41345be682f682655b1abea5b
Certificate serial: 01A0E3638223666AC9DE46183020A7372C57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/klPiFMjlpvQTRb5oL2gmVbGr6ls.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/51a4a3-7304-4613-8a80-ca3b1cac69c7/1/klPiFMjlpvQTRb5oL2gmVbGr6ls.mft
Manifest number: 0A31
Signing time: Sun 27 Sep 2026 15:02:24 +0000
Manifest this update: Sun 27 Sep 2026 15:02:24 +0000
Manifest next update: Mon 28 Sep 2026 15:02:24 +0000
Files and hashes: 1: klPiFMjlpvQTRb5oL2gmVbGr6ls.crl (hash: K+BLPawadVVV1FmLZyZ5CJukahpusrxegdtbMD48+HM=)
2: unNG_YoDGbRd0T_CTHVKD6yqRJU.roa (hash: ragskd0QOxK4kqVbi19DaJNXhncLtJyYx2SrNnDP25U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/51a4a3-7304-4613-8a80-ca3b1cac69c7/1/klPiFMjlpvQTRb5oL2gmVbGr6ls.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/51a4a3-7304-4613-8a80-ca3b1cac69c7/1/klPiFMjlpvQTRb5oL2gmVbGr6ls.mft
rsync://rpki.ripe.net/repository/DEFAULT/klPiFMjlpvQTRb5oL2gmVbGr6ls.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 14:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e3:63:82:23:66:6a:c9:de:46:18:30:20:a7:37:2c:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9253e214c8e5a6f41345be682f682655b1abea5b
Validity
Not Before: Sep 27 15:02:24 2026 GMT
Not After : Sep 28 15:02:24 2026 GMT
Subject: CN=50096bc66f83ce8b8ee06deb47971ce781816e4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:d4:22:49:38:39:2f:46:f0:c3:5f:24:8f:c3:
a1:bd:39:21:54:d0:75:22:87:8b:b4:a4:45:ab:da:
66:70:11:40:d7:53:81:50:78:00:a0:b3:0a:45:d6:
ce:3c:55:cf:64:62:54:ba:65:27:39:f7:69:b7:ee:
33:8d:3b:b7:5a:1d:0d:ff:94:d0:1d:85:7c:d3:5e:
c6:21:bc:35:bb:06:83:b2:49:73:2e:3a:88:ba:09:
ad:68:1e:c4:d1:a6:f7:c9:e3:cf:81:77:3b:5d:ff:
dd:3f:4e:d4:1f:8e:9d:1a:72:96:53:40:87:fa:bd:
68:a6:f4:c0:01:62:b6:fa:0c:fc:32:e6:e0:1c:74:
5c:15:fa:2c:b3:15:ff:25:a1:1c:0a:ea:a5:39:1c:
38:42:57:1a:95:c4:5d:ee:fd:51:6e:94:30:d1:57:
b2:c4:df:40:2c:7f:6d:3d:a9:4d:6f:4f:87:be:44:
03:23:1c:19:dc:9f:82:44:d9:c5:e5:29:8a:3b:28:
2b:a2:26:b9:7d:a8:60:ae:67:76:2c:f0:b3:58:e4:
c0:0a:d9:cb:26:45:81:3c:99:d4:af:1c:b3:fc:90:
15:33:d6:8c:38:96:e7:0b:7a:be:af:b4:23:c1:0a:
ae:c7:6f:09:0c:8c:2e:da:df:50:4e:a8:b3:52:f7:
ca:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:09:6B:C6:6F:83:CE:8B:8E:E0:6D:EB:47:97:1C:E7:81:81:6E:4D
X509v3 Authority Key Identifier:
keyid:92:53:E2:14:C8:E5:A6:F4:13:45:BE:68:2F:68:26:55:B1:AB:EA:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/klPiFMjlpvQTRb5oL2gmVbGr6ls.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/51a4a3-7304-4613-8a80-ca3b1cac69c7/1/klPiFMjlpvQTRb5oL2gmVbGr6ls.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/51a4a3-7304-4613-8a80-ca3b1cac69c7/1/klPiFMjlpvQTRb5oL2gmVbGr6ls.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:09:7d:9c:c9:6c:66:08:c1:47:54:86:6e:01:d3:05:81:b7:
e4:2c:1f:64:16:69:61:41:9d:74:67:7d:12:3e:7c:fd:6e:82:
f2:f0:bb:a9:bf:9e:73:74:de:f8:71:9d:94:e5:17:90:9f:2e:
8a:db:e2:01:30:76:ac:f9:c1:9a:3d:a7:38:d7:90:59:70:a8:
f2:e7:d2:b3:7a:33:bc:80:a3:a2:7e:64:32:6d:75:4a:5e:59:
13:0e:6d:26:72:8a:74:37:0d:1d:1a:2e:0d:76:44:9c:ce:2e:
f5:67:7b:cf:2e:30:38:c6:cb:24:c1:a4:c9:e7:72:97:89:54:
36:b5:ce:44:42:68:15:33:24:82:5b:c3:46:09:e2:50:96:de:
8c:8e:97:8b:8e:3f:91:65:53:12:d2:63:ea:a6:86:e6:6c:10:
ae:37:28:95:17:be:cc:ff:6c:37:8e:b2:01:d4:29:15:a9:51:
6a:4b:64:8e:ca:43:7b:8e:42:c6:13:53:8e:25:2c:46:01:64:
68:db:ca:59:98:d7:a4:6a:84:dc:05:8d:05:b0:06:30:63:33:
da:9d:81:fd:f9:4a:35:f9:54:62:53:0e:b3:b0:31:26:9d:9b:
50:49:46:37:79:d5:ef:c3:5a:f4:8b:75:65:10:a2:36:2c:55:
2f:7c:62:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 23:15:47 2026 by rpki-client