Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/51a4a3-7304-4613-8a80-ca3b1cac69c7/1/klPiFMjlpvQTRb5oL2gmVbGr6ls.mft
File: klPiFMjlpvQTRb5oL2gmVbGr6ls.mft (raw, json)
Hash identifier: fMZ86FF36uQWbZzFOa7NUglSYstg+ihksyaXCx46PGY=
Subject key identifier: 2A:2A:8B:66:A7:A4:F5:7E:2F:8A:BC:EA:DA:EB:DA:4F:9E:B6:B6:D4
Authority key identifier: 92:53:E2:14:C8:E5:A6:F4:13:45:BE:68:2F:68:26:55:B1:AB:EA:5B
Certificate issuer: /CN=9253e214c8e5a6f41345be682f682655b1abea5b
Certificate serial: 019F916C75DD208B28A9E27DB3EB1D54BCCB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/klPiFMjlpvQTRb5oL2gmVbGr6ls.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/51a4a3-7304-4613-8a80-ca3b1cac69c7/1/klPiFMjlpvQTRb5oL2gmVbGr6ls.mft
Manifest number: 0982
Signing time: Fri 24 Jul 2026 00:00:32 +0000
Manifest this update: Fri 24 Jul 2026 00:00:32 +0000
Manifest next update: Sat 25 Jul 2026 00:00:32 +0000
Files and hashes: 1: klPiFMjlpvQTRb5oL2gmVbGr6ls.crl (hash: +X6CxbeQpvj+otfvaQR/EUnrrfn9hC5eZDr4m8CA4NA=)
2: unNG_YoDGbRd0T_CTHVKD6yqRJU.roa (hash: ragskd0QOxK4kqVbi19DaJNXhncLtJyYx2SrNnDP25U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/51a4a3-7304-4613-8a80-ca3b1cac69c7/1/klPiFMjlpvQTRb5oL2gmVbGr6ls.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/51a4a3-7304-4613-8a80-ca3b1cac69c7/1/klPiFMjlpvQTRb5oL2gmVbGr6ls.mft
rsync://rpki.ripe.net/repository/DEFAULT/klPiFMjlpvQTRb5oL2gmVbGr6ls.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:6c:75:dd:20:8b:28:a9:e2:7d:b3:eb:1d:54:bc:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9253e214c8e5a6f41345be682f682655b1abea5b
Validity
Not Before: Jul 24 00:00:32 2026 GMT
Not After : Jul 25 00:00:32 2026 GMT
Subject: CN=2a2a8b66a7a4f57e2f8abceadaebda4f9eb6b6d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:1a:46:9b:0a:ba:f0:1a:11:6c:ee:c0:26:69:
fb:66:a1:ac:f0:d7:78:77:36:7a:d7:c0:df:09:45:
6e:16:b5:6f:b1:91:10:82:3b:40:46:45:00:62:46:
fb:ec:c0:51:e4:5f:01:f4:b2:54:9a:e5:8b:55:6f:
e1:f2:95:dc:b9:cf:07:55:0b:fe:0e:2c:ca:4c:7d:
3d:f2:d5:55:59:25:99:75:52:fa:54:e1:62:55:cb:
e4:0b:0d:46:44:7a:d3:aa:3e:56:be:cf:53:ad:78:
e4:c0:e0:5c:71:ca:6f:ca:f6:d1:4f:0c:89:81:7d:
52:09:a3:d3:39:1d:5d:be:90:1c:a5:9e:66:cf:74:
5e:a0:ac:4a:0e:04:cd:b9:fb:0a:d9:32:46:b1:78:
3a:69:13:64:ce:6f:7f:ff:1b:9d:c3:9a:4a:37:66:
0d:b1:02:ae:80:ef:75:10:44:84:5f:ab:51:39:38:
f8:0e:a2:1d:98:47:36:63:19:83:24:c6:86:ce:20:
ef:27:83:87:4b:3d:9a:1c:24:fc:55:37:90:ac:03:
f9:6a:c2:ad:69:2f:a5:80:59:a9:88:8a:90:00:27:
bd:7e:8c:2c:36:dd:25:a2:83:5e:3c:17:53:70:1e:
43:5f:a2:d5:94:76:70:78:45:b0:65:dc:0c:7c:17:
a2:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:2A:8B:66:A7:A4:F5:7E:2F:8A:BC:EA:DA:EB:DA:4F:9E:B6:B6:D4
X509v3 Authority Key Identifier:
keyid:92:53:E2:14:C8:E5:A6:F4:13:45:BE:68:2F:68:26:55:B1:AB:EA:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/klPiFMjlpvQTRb5oL2gmVbGr6ls.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/51a4a3-7304-4613-8a80-ca3b1cac69c7/1/klPiFMjlpvQTRb5oL2gmVbGr6ls.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/51a4a3-7304-4613-8a80-ca3b1cac69c7/1/klPiFMjlpvQTRb5oL2gmVbGr6ls.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:2e:87:ea:4a:49:71:8d:98:26:b3:dd:e1:cf:9d:bc:90:fb:
f3:54:6f:a5:86:95:40:a4:77:e5:fa:4d:1d:ff:24:c6:4a:7f:
23:5e:2f:bb:08:32:cc:b1:7a:ee:8f:64:41:31:f1:67:19:ba:
b4:61:0c:3e:6e:e5:20:14:55:50:6a:ee:9a:a5:c6:85:5d:ff:
a4:c0:78:1f:2a:9d:20:23:35:d0:b1:ef:b9:39:2d:5d:fa:ee:
60:3d:3c:e7:66:52:4a:2b:6f:c3:71:c3:05:9c:a0:ce:00:79:
83:91:0a:4b:4f:72:1a:40:de:10:fe:91:fb:8b:9b:51:86:3a:
fe:61:f8:67:ee:be:5a:70:e3:b2:0a:17:e7:15:9b:ab:89:b1:
ee:02:d0:f8:92:5d:8b:8f:17:d1:65:c6:54:9c:20:ad:74:47:
b2:ef:1f:06:43:a4:33:ba:4e:56:9e:c3:7b:49:b5:62:bf:03:
20:f3:17:25:24:47:d5:b7:9d:2c:83:28:4e:f4:96:26:27:0f:
04:55:43:bd:b7:14:95:69:b9:a4:3d:a8:b2:c5:ac:be:b0:2a:
1e:5f:71:31:55:9f:76:cf:0f:31:37:8b:c6:a7:86:32:ff:83:
93:b5:81:52:54:c3:ec:06:bb:7d:26:a3:ce:7a:50:6a:f0:66:
16:84:d6:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 06:40:40 2026 by rpki-client