Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ca/0a50d0-564f-40e0-8589-c9f7d02f90c0/1/1-_Klpd9NlawBFcrtrRlLYmiPK7o.mft
File: 1-_Klpd9NlawBFcrtrRlLYmiPK7o.mft (raw, json)
Hash identifier: 49Yv2AmUnnBzXUMQcfmn8Xlp4V1oFvF0GZoMRQ2FDSM=
Subject key identifier: 0A:AB:31:07:AE:6D:01:A1:9B:5F:61:DC:3B:EA:22:41:BB:63:C7:5B
Authority key identifier: FB:F2:A5:A5:DF:4D:95:AC:01:15:CA:ED:AD:19:4B:62:68:8F:2B:BA
Certificate issuer: /CN=fbf2a5a5df4d95ac0115caedad194b62688f2bba
Certificate serial: 01A1341099AEF1983FCFE72CB62D2B3792C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-_Klpd9NlawBFcrtrRlLYmiPK7o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/0a50d0-564f-40e0-8589-c9f7d02f90c0/1/1-_Klpd9NlawBFcrtrRlLYmiPK7o.mft
Manifest number: 1525
Signing time: Tue 13 Oct 2026 07:01:05 +0000
Manifest this update: Tue 13 Oct 2026 07:01:05 +0000
Manifest next update: Wed 14 Oct 2026 07:01:05 +0000
Files and hashes: 1: 1-_Klpd9NlawBFcrtrRlLYmiPK7o.crl (hash: zYavSWdLxqB1LN61VFAX7LFkezGz9At8tuA24ZfZV5Y=)
2: nEwlFQn77GRj0a5PcdvpntXjCkk.roa (hash: 7O4FI78VSfvllLog9ZUlgueDZ+Vv0bklrjItMQ0ox9s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/0a50d0-564f-40e0-8589-c9f7d02f90c0/1/1-_Klpd9NlawBFcrtrRlLYmiPK7o.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/0a50d0-564f-40e0-8589-c9f7d02f90c0/1/1-_Klpd9NlawBFcrtrRlLYmiPK7o.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-_Klpd9NlawBFcrtrRlLYmiPK7o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 Oct 2026 07:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:34:10:99:ae:f1:98:3f:cf:e7:2c:b6:2d:2b:37:92:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fbf2a5a5df4d95ac0115caedad194b62688f2bba
Validity
Not Before: Oct 13 07:01:05 2026 GMT
Not After : Oct 14 07:01:05 2026 GMT
Subject: CN=0aab3107ae6d01a19b5f61dc3bea2241bb63c75b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:e7:0d:0b:cc:2e:b0:31:65:30:fc:5b:05:40:
f3:47:2a:7b:91:89:4e:69:26:1d:d6:0b:68:fd:ed:
cb:73:4d:d9:23:74:ee:f4:76:06:0a:6f:46:94:64:
cf:5b:e1:24:02:fe:06:9c:cf:cf:d6:8b:67:0d:b3:
bd:6b:25:50:f1:05:6f:99:ec:dd:98:24:fd:d1:ad:
8e:dc:0d:43:48:9f:fa:bf:ab:e3:09:05:9d:eb:51:
a3:88:f9:67:01:c6:d3:3f:c0:fd:07:d5:0b:c9:1e:
4a:d6:b3:70:fc:02:1a:25:67:e5:35:68:17:43:3d:
fe:fd:4c:b9:cf:10:53:d2:f3:6b:c2:3f:27:33:18:
0c:f5:f0:11:31:c6:ce:c3:e6:50:48:ae:71:81:7d:
15:19:7b:a1:00:ab:60:53:5b:12:51:15:8f:e3:2e:
40:eb:b7:2a:35:2f:37:f2:1f:e3:8d:28:4d:b1:83:
b2:39:fa:cc:40:19:11:c3:9c:59:31:5c:5c:c5:da:
82:2f:b6:80:19:7f:02:d7:59:47:87:05:61:51:4c:
8e:bb:43:92:47:04:16:fb:09:a8:b3:4d:26:28:ef:
8f:bb:36:bb:fd:28:75:64:be:20:e7:7c:d4:ec:c6:
99:09:5b:cc:df:34:e8:ff:e4:13:71:f2:99:8b:19:
cf:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:AB:31:07:AE:6D:01:A1:9B:5F:61:DC:3B:EA:22:41:BB:63:C7:5B
X509v3 Authority Key Identifier:
keyid:FB:F2:A5:A5:DF:4D:95:AC:01:15:CA:ED:AD:19:4B:62:68:8F:2B:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-_Klpd9NlawBFcrtrRlLYmiPK7o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/0a50d0-564f-40e0-8589-c9f7d02f90c0/1/1-_Klpd9NlawBFcrtrRlLYmiPK7o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/0a50d0-564f-40e0-8589-c9f7d02f90c0/1/1-_Klpd9NlawBFcrtrRlLYmiPK7o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:95:1a:c7:e6:1e:a6:ec:43:a8:a2:0c:17:49:40:2a:1a:56:
b6:12:e7:de:75:b9:5c:ce:44:86:0b:9a:da:c5:6d:4c:df:9b:
f9:5a:16:99:af:f3:1d:a9:9b:87:d6:f5:94:82:75:e9:99:8f:
93:cd:90:67:c0:22:f7:35:3a:d1:2c:78:69:01:22:35:6f:00:
58:ae:56:6e:88:31:43:63:e2:68:fe:0d:5d:11:bd:41:29:1a:
e8:7b:b0:9a:e8:36:18:93:93:30:36:6a:77:ec:6d:af:ff:57:
40:6d:71:c0:d3:be:cf:e3:4e:2f:65:08:4b:b1:9b:c3:39:6d:
f5:5a:ca:bb:ee:4b:78:bc:f2:53:93:b0:56:4f:35:ce:f5:eb:
97:de:cc:a2:38:2f:b1:57:2d:29:5c:51:e2:0e:7b:35:ac:fe:
69:f1:18:89:23:5a:b4:25:9d:e1:fa:47:d2:93:90:72:d5:5d:
1a:03:13:9b:50:0a:67:e6:eb:06:95:8e:53:50:c0:4f:50:d7:
1e:e7:ea:eb:1c:b0:83:49:6a:41:26:34:aa:b4:27:a9:54:40:
35:36:12:9f:b5:8e:ab:15:62:37:31:96:74:1c:d1:ac:81:b5:
2f:fd:20:3b:3b:ca:3a:ee:69:e8:93:4c:3e:1e:99:2d:d4:f9:
fc:8b:42:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 13:30:17 2026 by rpki-client