Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/0a50d0-564f-40e0-8589-c9f7d02f90c0/1/1-_Klpd9NlawBFcrtrRlLYmiPK7o.mft
File: 1-_Klpd9NlawBFcrtrRlLYmiPK7o.mft (raw, json)
Hash identifier: qmKgaxeXDryWIRR0LmBMnFZuIKFqtCDWZ9X9ahygdl8=
Subject key identifier: 15:17:07:19:E7:E6:F7:28:59:72:0F:1A:9F:0A:10:D1:97:12:B5:70
Authority key identifier: FB:F2:A5:A5:DF:4D:95:AC:01:15:CA:ED:AD:19:4B:62:68:8F:2B:BA
Certificate issuer: /CN=fbf2a5a5df4d95ac0115caedad194b62688f2bba
Certificate serial: 019F8F10A28DA99961DA922884669987D70A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-_Klpd9NlawBFcrtrRlLYmiPK7o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/0a50d0-564f-40e0-8589-c9f7d02f90c0/1/1-_Klpd9NlawBFcrtrRlLYmiPK7o.mft
Manifest number: 144B
Signing time: Thu 23 Jul 2026 13:00:59 +0000
Manifest this update: Thu 23 Jul 2026 13:00:59 +0000
Manifest next update: Fri 24 Jul 2026 13:00:59 +0000
Files and hashes: 1: 1-_Klpd9NlawBFcrtrRlLYmiPK7o.crl (hash: yC21VBKftfzkOc3lX8iA+EBkS84JfjxtPnxbgS+Cvk8=)
2: nEwlFQn77GRj0a5PcdvpntXjCkk.roa (hash: 7O4FI78VSfvllLog9ZUlgueDZ+Vv0bklrjItMQ0ox9s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/0a50d0-564f-40e0-8589-c9f7d02f90c0/1/1-_Klpd9NlawBFcrtrRlLYmiPK7o.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/0a50d0-564f-40e0-8589-c9f7d02f90c0/1/1-_Klpd9NlawBFcrtrRlLYmiPK7o.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-_Klpd9NlawBFcrtrRlLYmiPK7o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 13:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:10:a2:8d:a9:99:61:da:92:28:84:66:99:87:d7:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fbf2a5a5df4d95ac0115caedad194b62688f2bba
Validity
Not Before: Jul 23 13:00:59 2026 GMT
Not After : Jul 24 13:00:59 2026 GMT
Subject: CN=15170719e7e6f72859720f1a9f0a10d19712b570
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:61:4b:ac:9c:0a:30:65:9a:64:c2:75:6c:66:
a7:70:f7:e7:2b:64:d6:83:0a:72:8f:82:ad:82:78:
87:ab:09:94:34:a6:e5:91:eb:0a:98:85:85:f6:5a:
d5:5e:1a:e1:ed:b8:44:e8:65:49:27:44:5d:b3:96:
8a:21:6f:ff:53:7d:cb:3e:a5:3b:be:de:6b:8f:2d:
e4:d8:5f:5a:2a:48:40:ca:9f:d2:99:57:e9:a1:69:
3e:87:38:ff:bc:61:e0:8d:1d:54:f6:ed:51:ab:5a:
1b:7e:00:45:ee:55:03:dc:74:76:30:a7:e3:0a:f0:
ee:57:51:55:a5:a5:27:8d:50:9a:c8:a1:70:41:d6:
49:9f:66:4e:09:2b:dc:16:0a:c2:e3:95:64:d3:45:
b4:1a:1e:96:52:9a:f8:64:35:bd:da:96:07:8e:f0:
1d:08:1e:fe:7b:01:ce:ce:37:a7:96:43:b9:ac:a4:
44:46:28:6a:ae:ac:2b:6a:9c:06:9f:be:0a:f9:34:
fd:b8:ff:ec:9a:f5:8e:69:3b:25:73:58:d1:09:e6:
7e:d2:e7:6b:a7:3b:01:1e:ce:35:31:31:ad:15:1a:
2a:e8:0c:9b:26:2c:bf:ed:e5:2e:6a:b7:a0:61:41:
6e:61:f5:18:f4:c1:8b:17:7b:53:43:5e:fe:02:cb:
a6:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:17:07:19:E7:E6:F7:28:59:72:0F:1A:9F:0A:10:D1:97:12:B5:70
X509v3 Authority Key Identifier:
keyid:FB:F2:A5:A5:DF:4D:95:AC:01:15:CA:ED:AD:19:4B:62:68:8F:2B:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-_Klpd9NlawBFcrtrRlLYmiPK7o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/0a50d0-564f-40e0-8589-c9f7d02f90c0/1/1-_Klpd9NlawBFcrtrRlLYmiPK7o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/0a50d0-564f-40e0-8589-c9f7d02f90c0/1/1-_Klpd9NlawBFcrtrRlLYmiPK7o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:e9:ea:00:56:79:d2:2c:f2:29:79:4e:bd:8c:ae:93:1b:85:
30:b7:1e:a6:c7:92:4c:43:5b:9c:47:b4:a4:22:33:49:c0:3a:
3d:ec:0f:37:7f:a3:83:d4:db:4b:4b:07:93:26:26:9a:cf:68:
3c:4b:be:6e:0b:09:fe:ad:af:1f:45:69:aa:e8:bd:67:ec:d8:
9e:30:40:23:6d:97:f2:f4:2d:2e:c7:36:cb:64:c2:d6:06:3f:
ce:a5:6d:68:d8:42:10:a2:3f:e3:2b:f7:fc:ad:6e:a5:64:24:
c1:e8:d0:a0:ca:87:24:33:f7:d2:b1:73:13:5e:8d:ea:66:3e:
9a:92:24:11:50:11:f6:a0:d3:b4:da:10:0a:a9:05:2e:ce:69:
a6:7f:06:29:ee:bb:b2:42:00:a2:43:35:be:f5:28:d7:7e:e2:
4a:38:39:da:00:2f:7e:00:29:27:5d:ba:4f:06:74:2f:c3:47:
13:61:2a:3a:74:e9:5a:ad:75:ad:3d:ca:dc:24:b2:b3:e1:c1:
db:fc:70:92:85:67:e8:72:68:3d:b6:42:34:ba:f2:16:13:a6:
b1:76:fa:6b:9f:dd:61:32:af:97:dd:56:2c:99:4b:f6:30:6d:
bd:ac:4d:5c:6e:c8:fa:a7:8c:59:71:94:ff:ba:08:c2:c8:e9:
48:ff:da:10
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZ+PEKKNqZlh2pIohGaZh9cKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZiZjJhNWE1ZGY0ZDk1YWMwMTE1Y2FlZGFkMTk0YjYyNjg4
ZjJiYmEwHhcNMjYwNzIzMTMwMDU5WhcNMjYwNzI0MTMwMDU5WjAzMTEwLwYDVQQD
EygxNTE3MDcxOWU3ZTZmNzI4NTk3MjBmMWE5ZjBhMTBkMTk3MTJiNTcwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA02FLrJwKMGWaZMJ1bGancPfnK2TW
gwpyj4KtgniHqwmUNKblkesKmIWF9lrVXhrh7bhE6GVJJ0Rds5aKIW//U33LPqU7
vt5rjy3k2F9aKkhAyp/SmVfpoWk+hzj/vGHgjR1U9u1Rq1obfgBF7lUD3HR2MKfj
CvDuV1FVpaUnjVCayKFwQdZJn2ZOCSvcFgrC45Vk00W0Gh6WUpr4ZDW92pYHjvAd
CB7+ewHOzjenlkO5rKRERihqrqwrapwGn74K+TT9uP/smvWOaTslc1jRCeZ+0udr
pzsBHs41MTGtFRoq6AybJiy/7eUuaregYUFuYfUY9MGLF3tTQ17+Asum9QIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFBUXBxnn5vcoWXIPGp8KENGXErVwMB8GA1UdIwQY
MBaAFPvypaXfTZWsARXK7a0ZS2Jojyu6MA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1fS2xwZDlObGF3QkZjcnRyUmxMWW1pUEs3by5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvY2EvMGE1MGQwLTU2NGYtNDBlMC04NTg5
LWM5ZjdkMDJmOTBjMC8xLzEtX0tscGQ5Tmxhd0JGY3J0clJsTFltaVBLN28ubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxUL2NhLzBhNTBkMC01NjRmLTQwZTAtODU4OS1jOWY3ZDAyZjkw
YzAvMS8xLV9LbHBkOU5sYXdCRmNydHJSbExZbWlQSzdvLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPOnq
AFZ50izyKXlOvYyukxuFMLcepseSTENbnEe0pCIzScA6PewPN3+jg9TbS0sHkyYm
ms9oPEu+bgsJ/q2vH0Vpqui9Z+zYnjBAI22X8vQtLsc2y2TC1gY/zqVtaNhCEKI/
4yv3/K1upWQkwejQoMqHJDP30rFzE16N6mY+mpIkEVAR9qDTtNoQCqkFLs5ppn8G
Ke67skIAokM1vvUo137iSjg52gAvfgApJ126TwZ0L8NHE2EqOnTpWq11rT3K3CSy
s+HB2/xwkoVn6HJoPbZCNLryFhOmsXb6a5/dYTKvl91WLJlL9jBtvaxNXG7I+qeM
WXGU/7oIwsjpSP/aEA==
-----END CERTIFICATE-----
Generated at Thu Jul 23 23:29:02 2026 by rpki-client