Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/7757ed-d020-471f-bbc5-17bf202e5eee/1/1LvtYwkUOYI-05GkclNsD8r-iVc.mft
File: 1LvtYwkUOYI-05GkclNsD8r-iVc.mft (raw, json)
Hash identifier: it1QH/2WhMy4qGOd14jobV27BFe+1hFljwJ6gm+asko=
Subject key identifier: 68:6E:5C:DD:B7:2B:98:37:E7:31:DB:C7:C5:08:CC:B6:F4:57:94:81
Authority key identifier: D4:BB:ED:63:09:14:39:82:3E:D3:91:A4:72:53:6C:0F:CA:FE:89:57
Certificate issuer: /CN=d4bbed63091439823ed391a472536c0fcafe8957
Certificate serial: 01A001A6812933B0EB59D40EF344221F7AEA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1LvtYwkUOYI-05GkclNsD8r-iVc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/7757ed-d020-471f-bbc5-17bf202e5eee/1/1LvtYwkUOYI-05GkclNsD8r-iVc.mft
Manifest number: 1A00
Signing time: Fri 14 Aug 2026 19:01:24 +0000
Manifest this update: Fri 14 Aug 2026 19:01:24 +0000
Manifest next update: Sat 15 Aug 2026 19:01:24 +0000
Files and hashes: 1: 1LvtYwkUOYI-05GkclNsD8r-iVc.crl (hash: 8Bk0IF4Uus86cetk4JhPQuz0991ZMgJq2OxhS5hQQWw=)
2: 3Xes1MHD_a5bIGduyNKw431Rgic.roa (hash: Wc2i+E+YpkqUKLdM48sp0OfQBJ7K/jV9MpkIdBzD9ls=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/7757ed-d020-471f-bbc5-17bf202e5eee/1/1LvtYwkUOYI-05GkclNsD8r-iVc.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/7757ed-d020-471f-bbc5-17bf202e5eee/1/1LvtYwkUOYI-05GkclNsD8r-iVc.mft
rsync://rpki.ripe.net/repository/DEFAULT/1LvtYwkUOYI-05GkclNsD8r-iVc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:a6:81:29:33:b0:eb:59:d4:0e:f3:44:22:1f:7a:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4bbed63091439823ed391a472536c0fcafe8957
Validity
Not Before: Aug 14 19:01:24 2026 GMT
Not After : Aug 15 19:01:24 2026 GMT
Subject: CN=686e5cddb72b9837e731dbc7c508ccb6f4579481
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:63:4a:34:69:e5:9f:23:b2:3a:f8:89:0c:24:
01:b4:6c:2f:47:45:56:56:55:ac:0f:a1:b8:79:6c:
f8:fa:4e:22:e8:ae:35:a8:6f:ee:51:f3:56:b1:16:
38:b5:ee:7f:22:59:3a:d6:67:0e:e2:be:1c:da:b4:
61:f4:e6:f3:23:55:05:7d:9d:c6:ad:b9:90:4e:fc:
b0:6d:c3:37:2e:4d:a0:26:31:9b:28:6d:fc:49:3b:
57:99:68:0a:b8:38:6d:63:9d:80:82:25:18:8f:6b:
54:2d:ea:fd:75:bb:4e:ba:ac:01:f2:ca:40:cd:21:
a4:71:1e:e8:b2:62:02:88:c4:9b:b7:c5:3a:1d:9b:
53:c5:df:90:4c:3a:55:29:f1:c3:56:25:ce:c9:84:
d6:19:ba:a5:c9:44:92:bf:7f:39:22:80:dd:88:be:
f1:d9:c7:15:17:98:a2:a3:34:52:24:3e:74:67:37:
e5:a1:0c:99:a9:56:2e:5d:27:85:92:8c:1b:fd:1f:
29:7c:27:f9:4d:a9:ef:3a:a3:38:9f:7f:22:5e:12:
74:05:49:ed:8f:50:ca:5a:a1:0c:74:d4:61:0a:47:
1d:ff:be:ec:39:8f:00:47:b2:d0:7c:5f:cc:bf:f8:
73:fa:91:50:9c:1d:5f:82:81:d1:41:a7:80:46:b6:
49:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:6E:5C:DD:B7:2B:98:37:E7:31:DB:C7:C5:08:CC:B6:F4:57:94:81
X509v3 Authority Key Identifier:
keyid:D4:BB:ED:63:09:14:39:82:3E:D3:91:A4:72:53:6C:0F:CA:FE:89:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1LvtYwkUOYI-05GkclNsD8r-iVc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/7757ed-d020-471f-bbc5-17bf202e5eee/1/1LvtYwkUOYI-05GkclNsD8r-iVc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/7757ed-d020-471f-bbc5-17bf202e5eee/1/1LvtYwkUOYI-05GkclNsD8r-iVc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:f8:f5:45:99:15:33:79:ee:21:25:59:17:79:a4:1c:66:8c:
a2:33:ce:37:8b:51:95:b5:d9:f5:d5:5e:3f:0d:1d:0f:32:dc:
9f:62:3b:d0:53:d6:85:b7:36:9a:ea:78:bf:b1:43:cb:76:57:
07:13:28:00:61:ae:75:3b:0a:21:7f:37:16:21:96:d0:05:7f:
34:f3:38:86:0f:c2:ff:ed:ab:23:87:ca:31:b9:c0:42:be:24:
30:8b:08:4d:df:4b:1e:32:f7:e2:87:11:3d:75:0b:a1:00:dc:
9e:94:72:28:54:fb:16:cc:25:14:c2:0a:c5:91:4c:b8:3a:f3:
56:2a:ef:65:41:07:6f:26:b7:3c:f0:9a:c5:40:f8:ed:37:9a:
74:24:96:55:ea:76:cf:03:82:06:08:80:20:14:29:16:5c:d5:
76:4e:92:0f:a5:c0:49:65:68:e4:6b:66:43:ae:36:f0:b3:63:
9e:7a:46:b6:63:ab:ac:2d:94:a3:f7:53:8d:c3:76:2a:03:2b:
7a:08:7b:5b:fd:b0:d3:18:d6:54:73:32:06:7a:c1:58:e1:28:
bf:7f:e0:f6:69:4f:e4:2a:48:5e:6a:0d:96:9a:bb:7e:5b:1c:
09:a2:86:57:5e:56:22:50:1f:87:8f:5d:5a:0d:21:8d:4c:e3:
d7:32:93:4f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaABpoEpM7DrWdQO80QiH3rqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ0YmJlZDYzMDkxNDM5ODIzZWQzOTFhNDcyNTM2YzBmY2Fm
ZTg5NTcwHhcNMjYwODE0MTkwMTI0WhcNMjYwODE1MTkwMTI0WjAzMTEwLwYDVQQD
Eyg2ODZlNWNkZGI3MmI5ODM3ZTczMWRiYzdjNTA4Y2NiNmY0NTc5NDgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2GNKNGnlnyOyOviJDCQBtGwvR0VW
VlWsD6G4eWz4+k4i6K41qG/uUfNWsRY4te5/Ilk61mcO4r4c2rRh9ObzI1UFfZ3G
rbmQTvywbcM3Lk2gJjGbKG38STtXmWgKuDhtY52AgiUYj2tULer9dbtOuqwB8spA
zSGkcR7osmICiMSbt8U6HZtTxd+QTDpVKfHDViXOyYTWGbqlyUSSv385IoDdiL7x
2ccVF5iiozRSJD50ZzfloQyZqVYuXSeFkowb/R8pfCf5TanvOqM4n38iXhJ0BUnt
j1DKWqEMdNRhCkcd/77sOY8AR7LQfF/Mv/hz+pFQnB1fgoHRQaeARrZJcQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGhuXN23K5g35zHbx8UIzLb0V5SBMB8GA1UdIwQY
MBaAFNS77WMJFDmCPtORpHJTbA/K/olXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMUx2dFl3a1VPWUktMDVHa2NsTnNEOHItaVZjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi83NzU3ZWQtZDAyMC00NzFmLWJiYzUt
MTdiZjIwMmU1ZWVlLzEvMUx2dFl3a1VPWUktMDVHa2NsTnNEOHItaVZjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYi83NzU3ZWQtZDAyMC00NzFmLWJiYzUtMTdiZjIwMmU1ZWVl
LzEvMUx2dFl3a1VPWUktMDVHa2NsTnNEOHItaVZjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAufj1RZkV
M3nuISVZF3mkHGaMojPON4tRlbXZ9dVePw0dDzLcn2I70FPWhbc2mup4v7FDy3ZX
BxMoAGGudTsKIX83FiGW0AV/NPM4hg/C/+2rI4fKMbnAQr4kMIsITd9LHjL34ocR
PXULoQDcnpRyKFT7FswlFMIKxZFMuDrzVirvZUEHbya3PPCaxUD47TeadCSWVep2
zwOCBgiAIBQpFlzVdk6SD6XASWVo5GtmQ6428LNjnnpGtmOrrC2Uo/dTjcN2KgMr
egh7W/2w0xjWVHMyBnrBWOEov3/g9mlP5CpIXmoNlpq7flscCaKGV15WIlAfh49d
Wg0hjUzj1zKTTw==
-----END CERTIFICATE-----
Generated at Fri Aug 14 23:36:14 2026 by rpki-client