Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/51a4a3-7304-4613-8a80-ca3b1cac69c7/1/klPiFMjlpvQTRb5oL2gmVbGr6ls.mft
File: klPiFMjlpvQTRb5oL2gmVbGr6ls.mft (raw, json)
Hash identifier: vE0LnWRRd0Wum4zlyy8H6UTuW3sp11JvsiYp8T93RN0=
Subject key identifier: FD:6A:A7:0C:FD:45:7C:BA:79:26:AC:1F:FC:4E:B1:8D:CE:65:33:93
Authority key identifier: 92:53:E2:14:C8:E5:A6:F4:13:45:BE:68:2F:68:26:55:B1:AB:EA:5B
Certificate issuer: /CN=9253e214c8e5a6f41345be682f682655b1abea5b
Certificate serial: 019E1EA3C5FAF98E820CFFC6D1A150778224
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/klPiFMjlpvQTRb5oL2gmVbGr6ls.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/51a4a3-7304-4613-8a80-ca3b1cac69c7/1/klPiFMjlpvQTRb5oL2gmVbGr6ls.mft
Manifest number: 08C2
Signing time: Wed 13 May 2026 00:01:49 +0000
Manifest this update: Wed 13 May 2026 00:01:49 +0000
Manifest next update: Thu 14 May 2026 00:01:49 +0000
Files and hashes: 1: klPiFMjlpvQTRb5oL2gmVbGr6ls.crl (hash: EaRiROWCnlbsHjQvGAchjMN2lglfbFO0DX+nLi0FPfM=)
2: unNG_YoDGbRd0T_CTHVKD6yqRJU.roa (hash: ragskd0QOxK4kqVbi19DaJNXhncLtJyYx2SrNnDP25U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/51a4a3-7304-4613-8a80-ca3b1cac69c7/1/klPiFMjlpvQTRb5oL2gmVbGr6ls.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/51a4a3-7304-4613-8a80-ca3b1cac69c7/1/klPiFMjlpvQTRb5oL2gmVbGr6ls.mft
rsync://rpki.ripe.net/repository/DEFAULT/klPiFMjlpvQTRb5oL2gmVbGr6ls.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:a3:c5:fa:f9:8e:82:0c:ff:c6:d1:a1:50:77:82:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9253e214c8e5a6f41345be682f682655b1abea5b
Validity
Not Before: May 13 00:01:49 2026 GMT
Not After : May 14 00:01:49 2026 GMT
Subject: CN=fd6aa70cfd457cba7926ac1ffc4eb18dce653393
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:48:5c:0e:de:68:cc:48:c1:7b:30:a7:07:e6:
f7:07:11:ce:84:1a:0c:1c:9a:40:df:43:07:66:51:
ac:68:5f:89:4d:64:80:98:f7:1b:e4:27:3b:39:ed:
1c:5d:a8:38:0d:e9:ce:44:75:5e:15:54:d7:ce:e9:
f6:3d:d7:1d:ea:75:07:13:8f:21:02:29:e5:fa:e0:
e6:7b:ba:60:01:44:ff:e6:ec:13:4f:7b:4f:79:a4:
c4:a5:30:c8:f9:74:65:12:d6:14:71:22:5f:ab:68:
85:fb:c1:b0:ae:d0:ac:b2:b0:16:09:a1:fe:f9:4f:
a8:d7:e9:a8:91:8a:42:6b:86:2f:a4:7b:b1:63:05:
27:e4:11:59:a9:96:b1:b4:f4:f5:60:b9:cf:93:58:
30:b6:27:7f:a6:a4:f3:90:5c:f9:a3:00:cb:8b:2b:
ff:d8:3f:24:6b:43:75:ad:2d:be:e8:c2:26:d0:57:
b4:0e:15:bf:57:06:41:99:44:7b:08:e0:17:64:1b:
92:64:84:43:25:e4:79:fc:bb:c5:7e:4b:13:b4:7d:
98:5d:72:28:c4:53:30:6f:78:fe:24:d1:47:6f:e2:
91:cb:dd:aa:ad:ee:02:12:8d:ec:76:79:33:d0:17:
7d:2c:e4:a2:f3:1c:09:2f:3e:a4:cf:24:22:52:00:
db:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:6A:A7:0C:FD:45:7C:BA:79:26:AC:1F:FC:4E:B1:8D:CE:65:33:93
X509v3 Authority Key Identifier:
keyid:92:53:E2:14:C8:E5:A6:F4:13:45:BE:68:2F:68:26:55:B1:AB:EA:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/klPiFMjlpvQTRb5oL2gmVbGr6ls.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/51a4a3-7304-4613-8a80-ca3b1cac69c7/1/klPiFMjlpvQTRb5oL2gmVbGr6ls.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/51a4a3-7304-4613-8a80-ca3b1cac69c7/1/klPiFMjlpvQTRb5oL2gmVbGr6ls.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:a6:ab:08:c9:fe:11:4f:ae:64:27:2f:99:c7:54:73:5d:40:
ef:4c:a2:da:e3:d6:ea:f3:05:e8:f9:a8:d3:4a:96:0c:64:93:
d1:24:98:10:e2:f3:cc:be:cb:2e:64:bf:c2:b0:36:76:af:e5:
47:0b:68:22:66:b9:55:78:3f:38:22:4f:54:04:0c:46:21:cd:
d5:72:71:1d:9d:78:87:c6:77:69:ea:c5:27:01:2a:7b:51:55:
ad:cb:c6:87:8b:3b:96:d2:3e:7a:c7:44:58:d4:df:29:6d:34:
3c:fb:a0:ec:85:60:d3:e3:a8:40:03:67:96:b7:26:19:87:b7:
3e:08:a0:f3:38:54:c8:56:d3:e3:9d:61:be:08:fc:f0:66:fb:
5c:6a:da:b5:cd:02:d0:44:b1:99:15:f5:43:fe:a5:81:07:d7:
ec:5e:ab:f0:3b:2c:08:68:30:ce:98:73:2d:c1:db:3f:21:5b:
bb:ba:ff:4f:4d:96:57:01:88:8f:65:63:9e:42:e0:22:b0:7e:
f3:79:94:6c:23:c0:b7:08:56:9a:e7:9e:dc:a1:9d:3b:9f:08:
7e:7d:9a:20:38:5e:7a:1d:11:5d:0c:0f:31:f0:cf:9b:38:55:
03:3c:7f:81:69:b7:dc:d5:12:26:a6:c3:93:16:f6:3c:19:c4:
6f:dc:c8:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:29:30 2026 by rpki-client