Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/b3fece-905f-4cb3-9a9a-e5afe263f0a2/1/1-LdgDngfkwW4jKSTGn2wCfjHKzo.mft
File: 1-LdgDngfkwW4jKSTGn2wCfjHKzo.mft (raw, json)
Hash identifier: rm5uolL7tmf1KvBU66NBJGICm1mGunlNG5I0GSrrBmg=
Subject key identifier: 37:A5:BE:19:7C:B2:13:4F:A1:18:BC:18:A4:0D:24:19:DA:09:93:D9
Authority key identifier: F8:B7:60:0E:78:1F:93:05:B8:8C:A4:93:1A:7D:B0:09:F8:C7:2B:3A
Certificate issuer: /CN=f8b7600e781f9305b88ca4931a7db009f8c72b3a
Certificate serial: 019D38D3743FA2648DE895C6D419EE911463
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-LdgDngfkwW4jKSTGn2wCfjHKzo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/b3fece-905f-4cb3-9a9a-e5afe263f0a2/1/1-LdgDngfkwW4jKSTGn2wCfjHKzo.mft
Manifest number: 0283
Signing time: Sun 29 Mar 2026 09:01:15 +0000
Manifest this update: Sun 29 Mar 2026 09:01:15 +0000
Manifest next update: Mon 30 Mar 2026 09:01:15 +0000
Files and hashes: 1: 1-LdgDngfkwW4jKSTGn2wCfjHKzo.crl (hash: r65d6ackPY705PByczGkCnmOgghkhFe/jvh0dbfYI9M=)
2: P77WX7NkoBtYUW9Zj0hOm_NZQsg.roa (hash: ZmxTADBDBcdVSd0ydXvKv1zAmFoyy7NrjZN7xgCiqr8=)
3: RsQ2F1hR8H3i7qc1K-1py98Y2oE.roa (hash: uYjJFeCzfVAYecHpU37zMUj8OmOaI8Jw7yaqtpm+414=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/b3fece-905f-4cb3-9a9a-e5afe263f0a2/1/1-LdgDngfkwW4jKSTGn2wCfjHKzo.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/b3fece-905f-4cb3-9a9a-e5afe263f0a2/1/1-LdgDngfkwW4jKSTGn2wCfjHKzo.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-LdgDngfkwW4jKSTGn2wCfjHKzo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:74:3f:a2:64:8d:e8:95:c6:d4:19:ee:91:14:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8b7600e781f9305b88ca4931a7db009f8c72b3a
Validity
Not Before: Mar 29 09:01:15 2026 GMT
Not After : Mar 30 09:01:15 2026 GMT
Subject: CN=37a5be197cb2134fa118bc18a40d2419da0993d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:56:9a:73:37:46:1e:f0:4a:27:99:45:a5:e1:
b4:9e:b2:b7:9e:9b:d8:f4:ec:4c:5d:fa:2e:48:6d:
6c:06:28:88:09:2d:cc:8c:57:38:01:cb:03:35:22:
5e:18:e7:7b:40:76:e9:af:29:91:50:e3:1e:50:70:
49:48:4c:4b:11:a4:28:e1:f4:80:b4:15:d5:ce:ba:
cb:c1:24:90:46:9c:1e:b4:ea:17:9a:15:06:97:b9:
ca:99:10:34:7f:1b:84:46:30:8a:9d:3f:19:6b:b8:
ad:ff:3d:8f:4a:0e:97:49:31:05:2a:eb:c4:af:b4:
ab:98:2c:8d:ca:da:e8:a9:c4:b2:07:31:7f:19:5d:
4a:7f:7c:a7:45:98:b9:a2:ae:b1:76:af:e8:21:50:
0b:2e:eb:28:eb:14:e8:12:d1:d2:4f:63:71:6e:61:
9a:5d:89:20:df:e1:0a:e9:da:68:24:18:9e:f8:ed:
9e:7b:88:08:2e:2f:a7:5b:da:be:e5:63:4f:ba:01:
02:a7:8d:35:18:3e:f0:9e:d9:8a:e4:a2:bb:ca:c1:
27:1f:c6:1d:c7:31:e1:aa:b4:ee:eb:e3:44:27:34:
84:7a:81:8a:1b:08:10:f0:12:c8:a4:b2:e9:36:a7:
21:ff:64:3d:10:fc:7d:21:56:44:1c:fd:b7:10:13:
97:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:A5:BE:19:7C:B2:13:4F:A1:18:BC:18:A4:0D:24:19:DA:09:93:D9
X509v3 Authority Key Identifier:
keyid:F8:B7:60:0E:78:1F:93:05:B8:8C:A4:93:1A:7D:B0:09:F8:C7:2B:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-LdgDngfkwW4jKSTGn2wCfjHKzo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/b3fece-905f-4cb3-9a9a-e5afe263f0a2/1/1-LdgDngfkwW4jKSTGn2wCfjHKzo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/b3fece-905f-4cb3-9a9a-e5afe263f0a2/1/1-LdgDngfkwW4jKSTGn2wCfjHKzo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:99:56:63:b2:46:c6:d5:fb:c6:4f:27:8d:07:f1:4d:86:fe:
7e:31:11:e9:c0:03:e8:de:e9:8e:74:6f:55:e1:40:d0:66:3c:
ec:90:e0:05:7b:3b:da:a3:8d:9b:bf:55:3c:c3:c4:3b:4a:6b:
29:fa:5a:ae:b8:04:0a:bf:e5:7e:fe:5a:e4:50:2b:d0:6a:46:
ce:89:8e:34:8f:33:3b:03:86:d2:f5:05:96:62:6f:b7:e8:54:
bf:d0:4f:47:69:25:51:ca:04:61:07:7b:a5:4d:25:9e:b4:24:
9c:41:6e:f3:ba:11:f5:9d:0c:1e:08:6e:6b:62:f3:80:f6:19:
db:08:4f:b8:0b:e3:80:80:c9:8c:bf:3a:b8:73:5c:ad:cf:44:
50:37:f0:12:b8:9d:80:2d:bd:11:c8:17:b5:29:60:ba:66:ab:
6d:a9:d4:4f:55:b8:bd:b7:d8:e9:99:7f:ec:f3:7b:38:d2:9e:
b4:3e:e1:bc:28:63:11:c9:32:37:d5:f1:6e:21:a0:8d:c8:21:
20:4a:6e:ac:a6:d9:35:2e:97:7e:ba:12:48:4c:11:c4:ae:1a:
74:0a:76:b3:07:f7:10:2d:9c:ad:ae:e5:a1:41:ef:db:80:f5:
df:32:b2:26:a3:93:ff:b2:e3:f8:23:79:0d:a3:e2:33:43:02:
bb:18:bf:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:43:44 2026 by rpki-client