Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/0a50d0-564f-40e0-8589-c9f7d02f90c0/1/1-_Klpd9NlawBFcrtrRlLYmiPK7o.mft
File: 1-_Klpd9NlawBFcrtrRlLYmiPK7o.mft (raw, json)
Hash identifier: C83VOQiG2JxBuwrH7qb4A7U8TM2mMp/VCHKLYQ5Ds/Q=
Subject key identifier: 49:B1:12:B5:8F:FB:3C:F5:2B:D7:FD:51:DA:D6:EF:D6:77:14:7A:F8
Authority key identifier: FB:F2:A5:A5:DF:4D:95:AC:01:15:CA:ED:AD:19:4B:62:68:8F:2B:BA
Certificate issuer: /CN=fbf2a5a5df4d95ac0115caedad194b62688f2bba
Certificate serial: 019D34890BFDFBDF4A7A6D242CA3E3F92951
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-_Klpd9NlawBFcrtrRlLYmiPK7o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/0a50d0-564f-40e0-8589-c9f7d02f90c0/1/1-_Klpd9NlawBFcrtrRlLYmiPK7o.mft
Manifest number: 1313
Signing time: Sat 28 Mar 2026 13:01:29 +0000
Manifest this update: Sat 28 Mar 2026 13:01:29 +0000
Manifest next update: Sun 29 Mar 2026 13:01:29 +0000
Files and hashes: 1: 1-_Klpd9NlawBFcrtrRlLYmiPK7o.crl (hash: xIrA8rrODmxCh1v07Ehgf/xhFzzBiyCsM6uoP7qxiQU=)
2: nEwlFQn77GRj0a5PcdvpntXjCkk.roa (hash: 7O4FI78VSfvllLog9ZUlgueDZ+Vv0bklrjItMQ0ox9s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/0a50d0-564f-40e0-8589-c9f7d02f90c0/1/1-_Klpd9NlawBFcrtrRlLYmiPK7o.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/0a50d0-564f-40e0-8589-c9f7d02f90c0/1/1-_Klpd9NlawBFcrtrRlLYmiPK7o.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-_Klpd9NlawBFcrtrRlLYmiPK7o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:34:89:0b:fd:fb:df:4a:7a:6d:24:2c:a3:e3:f9:29:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fbf2a5a5df4d95ac0115caedad194b62688f2bba
Validity
Not Before: Mar 28 13:01:29 2026 GMT
Not After : Mar 29 13:01:29 2026 GMT
Subject: CN=49b112b58ffb3cf52bd7fd51dad6efd677147af8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:ca:ee:51:95:91:58:99:2f:b9:2b:2e:23:8b:
8b:81:af:12:87:2f:b0:2e:22:54:01:1b:4a:28:20:
87:43:05:38:d0:c3:79:9d:5a:a9:29:0a:69:c3:c0:
48:89:be:ba:54:1b:9d:08:a1:d9:86:64:0e:09:51:
d0:65:74:3d:16:67:01:05:78:c6:00:98:ce:7f:1a:
c5:43:a1:41:2a:8c:9c:f6:7f:07:04:5d:b5:0c:4b:
87:52:cb:55:44:01:80:c4:41:a9:db:42:d0:b9:10:
d8:26:94:51:69:c3:35:3f:42:b0:60:5e:f4:04:6e:
3b:aa:18:7d:d1:24:b2:ff:2d:f6:30:71:3d:17:fd:
50:9a:4a:cc:fb:03:be:a6:df:43:28:ba:7c:1f:d1:
d8:3d:88:69:b4:83:1e:be:c0:3e:51:78:d3:e4:f9:
47:93:89:9d:4c:b3:49:d1:86:26:b8:5f:3a:65:f9:
d2:0f:15:12:4a:80:ff:29:9b:32:05:b5:07:cf:d9:
36:05:23:97:3e:83:1a:05:7e:29:02:ca:d5:9c:23:
4b:52:dc:84:b4:f9:a9:26:1e:bc:de:fb:a1:bc:c3:
33:d5:15:ab:90:77:6a:d0:09:f4:51:0a:8c:7f:35:
93:f9:f3:8c:f8:ad:0e:ae:90:3a:ed:bf:3e:bf:07:
48:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:B1:12:B5:8F:FB:3C:F5:2B:D7:FD:51:DA:D6:EF:D6:77:14:7A:F8
X509v3 Authority Key Identifier:
keyid:FB:F2:A5:A5:DF:4D:95:AC:01:15:CA:ED:AD:19:4B:62:68:8F:2B:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-_Klpd9NlawBFcrtrRlLYmiPK7o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/0a50d0-564f-40e0-8589-c9f7d02f90c0/1/1-_Klpd9NlawBFcrtrRlLYmiPK7o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/0a50d0-564f-40e0-8589-c9f7d02f90c0/1/1-_Klpd9NlawBFcrtrRlLYmiPK7o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:bd:30:cb:7d:57:17:11:37:ba:ac:9a:df:62:1f:21:9f:86:
c2:40:9d:62:02:83:2c:3e:98:75:bf:10:b4:75:1d:d6:d7:17:
70:26:0e:89:06:53:ae:a9:6a:07:56:f0:d7:3b:be:77:d8:03:
10:1e:96:91:32:80:06:37:62:5c:81:e9:87:5c:5e:ce:16:b4:
21:70:e9:d4:f3:1a:a2:65:cd:74:0d:75:7b:f8:2c:dc:4b:1b:
77:c2:ff:fc:4b:c5:cc:a5:70:28:29:d7:e1:d2:68:4e:2c:da:
d0:f0:af:e0:04:b6:13:f0:b1:3d:78:37:15:a3:6f:e3:f2:f3:
d2:32:6f:3b:f3:5d:d0:79:ec:84:4a:a3:d1:fe:74:9b:41:f9:
37:a8:96:09:ba:4b:da:8d:ab:b2:5e:31:2a:bb:3d:10:3e:9f:
ba:3b:9f:4b:b8:8d:23:49:6a:7b:40:f0:a0:08:66:bf:f5:e6:
34:a8:cf:6a:b5:48:1a:04:a6:6f:3e:08:9f:90:68:7d:e4:12:
28:d2:9e:1b:13:36:77:26:cb:ae:fc:05:2a:da:00:03:f0:27:
74:02:2c:c6:29:a1:40:59:62:af:41:30:4d:22:00:b8:06:e9:
f4:56:05:e6:3f:e9:41:13:98:13:ec:b7:28:b3:3a:53:e4:70:
27:5b:24:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 15:56:23 2026 by rpki-client