Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1b/7757ed-d020-471f-bbc5-17bf202e5eee/1/1LvtYwkUOYI-05GkclNsD8r-iVc.mft
File: 1LvtYwkUOYI-05GkclNsD8r-iVc.mft (raw, json)
Hash identifier: ZuDnGmxSmE/svFkegJt5qKlmOKrhn6WGHZX0seyFqdQ=
Subject key identifier: E3:59:3E:DC:70:8C:4D:23:10:B8:CF:16:2C:EF:FB:09:3A:7B:4E:95
Authority key identifier: D4:BB:ED:63:09:14:39:82:3E:D3:91:A4:72:53:6C:0F:CA:FE:89:57
Certificate issuer: /CN=d4bbed63091439823ed391a472536c0fcafe8957
Certificate serial: 01A13E5C98CC70EDB3736613453E118321A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1LvtYwkUOYI-05GkclNsD8r-iVc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/7757ed-d020-471f-bbc5-17bf202e5eee/1/1LvtYwkUOYI-05GkclNsD8r-iVc.mft
Manifest number: 1AA4
Signing time: Thu 15 Oct 2026 07:00:17 +0000
Manifest this update: Thu 15 Oct 2026 07:00:17 +0000
Manifest next update: Fri 16 Oct 2026 07:00:17 +0000
Files and hashes: 1: 1LvtYwkUOYI-05GkclNsD8r-iVc.crl (hash: 8RioQKyjCJsT6g4Bs4gsNkUWj3ZoI/42ZlfDlyg4Jsc=)
2: 3Xes1MHD_a5bIGduyNKw431Rgic.roa (hash: Wc2i+E+YpkqUKLdM48sp0OfQBJ7K/jV9MpkIdBzD9ls=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/7757ed-d020-471f-bbc5-17bf202e5eee/1/1LvtYwkUOYI-05GkclNsD8r-iVc.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/7757ed-d020-471f-bbc5-17bf202e5eee/1/1LvtYwkUOYI-05GkclNsD8r-iVc.mft
rsync://rpki.ripe.net/repository/DEFAULT/1LvtYwkUOYI-05GkclNsD8r-iVc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3e:5c:98:cc:70:ed:b3:73:66:13:45:3e:11:83:21:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4bbed63091439823ed391a472536c0fcafe8957
Validity
Not Before: Oct 15 07:00:17 2026 GMT
Not After : Oct 16 07:00:17 2026 GMT
Subject: CN=e3593edc708c4d2310b8cf162ceffb093a7b4e95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:4c:f3:f8:62:45:85:4d:5f:81:c1:9b:2d:b2:
a1:05:17:e8:9c:07:eb:8f:ba:37:17:df:48:ce:df:
be:56:9a:7e:6e:8f:e6:b6:01:40:67:25:88:db:41:
d2:06:14:68:b9:a3:45:0a:7d:6f:9d:ae:a2:52:6f:
a6:59:d7:cc:bc:ab:06:48:13:d0:33:99:6d:46:00:
f3:1b:92:56:89:ff:0a:b0:bd:16:23:4e:01:a9:d9:
27:7e:f8:ad:6c:1f:50:c1:b4:a0:c7:21:02:a1:4e:
60:5a:77:fa:07:41:ac:6b:eb:9a:22:94:e4:b8:e6:
92:78:e5:71:4a:71:f3:b8:fb:7f:2f:4e:8c:08:43:
e5:e6:d7:8b:d5:94:39:19:2c:c9:90:cd:a0:fe:d1:
b9:7c:e5:97:00:d9:7b:e8:f6:ea:e7:24:1c:25:56:
e8:d8:58:14:30:43:2d:88:74:18:c2:c9:ff:cf:b3:
7d:08:89:d0:dc:51:cb:e5:2e:04:9a:aa:c8:43:fe:
b4:ef:fd:bd:05:d2:a0:79:d6:40:c2:ec:75:2d:21:
9c:b0:40:27:ac:76:41:76:93:bd:9d:e0:01:59:6b:
44:3b:0d:32:88:9b:d1:4e:46:54:96:04:95:48:98:
77:7f:06:53:6a:79:a1:30:c2:89:54:52:2c:56:62:
a1:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:59:3E:DC:70:8C:4D:23:10:B8:CF:16:2C:EF:FB:09:3A:7B:4E:95
X509v3 Authority Key Identifier:
keyid:D4:BB:ED:63:09:14:39:82:3E:D3:91:A4:72:53:6C:0F:CA:FE:89:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1LvtYwkUOYI-05GkclNsD8r-iVc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/7757ed-d020-471f-bbc5-17bf202e5eee/1/1LvtYwkUOYI-05GkclNsD8r-iVc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/7757ed-d020-471f-bbc5-17bf202e5eee/1/1LvtYwkUOYI-05GkclNsD8r-iVc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bf:e7:55:5c:ee:a9:86:1d:ea:0f:67:14:e0:f1:26:f4:24:b5:
78:ea:9a:03:5f:7c:ae:e7:18:6a:2c:29:35:df:64:17:34:e9:
98:2a:97:d3:3d:f0:10:32:6f:19:7f:1d:88:58:87:b1:b2:55:
fc:6c:de:fe:69:11:76:fb:05:f4:8d:e8:bf:c7:65:7d:99:67:
22:bb:60:3f:ef:80:7c:6c:5c:0f:cd:c9:57:a8:cf:18:a9:a3:
c2:d2:b2:e2:cc:0c:a2:4d:c4:3b:3a:ec:ca:a2:0c:ed:9e:fa:
96:a8:4f:d9:95:93:90:71:1e:a4:1d:e7:2d:35:24:ae:da:a1:
23:c9:a4:cc:47:ca:e8:76:79:51:45:36:d5:8c:d4:44:61:50:
31:c1:75:ab:aa:f2:81:2c:19:40:41:88:1f:af:62:2b:d8:cd:
a9:41:36:db:b1:36:eb:5c:c0:c7:81:e7:2d:38:93:12:59:3a:
a4:17:d2:8f:02:14:7c:81:71:6b:82:eb:98:8b:10:4e:b2:71:
77:b5:46:b6:17:81:24:4a:fe:7c:38:4c:68:b7:33:10:31:6d:
00:26:b7:fe:c9:75:57:68:89:30:8a:59:72:66:50:af:9a:f8:
b6:d8:4c:63:c4:13:8f:9c:2d:bc:74:e7:50:e3:b3:47:6f:42:
c6:1c:da:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 17:59:01 2026 by rpki-client