Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/7757ed-d020-471f-bbc5-17bf202e5eee/1/1LvtYwkUOYI-05GkclNsD8r-iVc.mft
File: 1LvtYwkUOYI-05GkclNsD8r-iVc.mft (raw, json)
Hash identifier: T30ZXEWaBiDL+91Ij52wkvg4Xg/n686fgffdkQv6DPk=
Subject key identifier: AD:6A:08:38:5D:08:BD:A8:72:91:ED:03:0E:E4:38:A1:48:4C:97:08
Authority key identifier: D4:BB:ED:63:09:14:39:82:3E:D3:91:A4:72:53:6C:0F:CA:FE:89:57
Certificate issuer: /CN=d4bbed63091439823ed391a472536c0fcafe8957
Certificate serial: 019D371BB7663C4F6B37522CE8BAA78F9529
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1LvtYwkUOYI-05GkclNsD8r-iVc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/7757ed-d020-471f-bbc5-17bf202e5eee/1/1LvtYwkUOYI-05GkclNsD8r-iVc.mft
Manifest number: 188E
Signing time: Sun 29 Mar 2026 01:00:56 +0000
Manifest this update: Sun 29 Mar 2026 01:00:56 +0000
Manifest next update: Mon 30 Mar 2026 01:00:56 +0000
Files and hashes: 1: 1LvtYwkUOYI-05GkclNsD8r-iVc.crl (hash: t6Q/1Od4IACM40dJrikZxlJVi1inGRmuo/L3gIJf5cM=)
2: 3Xes1MHD_a5bIGduyNKw431Rgic.roa (hash: Wc2i+E+YpkqUKLdM48sp0OfQBJ7K/jV9MpkIdBzD9ls=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/7757ed-d020-471f-bbc5-17bf202e5eee/1/1LvtYwkUOYI-05GkclNsD8r-iVc.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/7757ed-d020-471f-bbc5-17bf202e5eee/1/1LvtYwkUOYI-05GkclNsD8r-iVc.mft
rsync://rpki.ripe.net/repository/DEFAULT/1LvtYwkUOYI-05GkclNsD8r-iVc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 01:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:1b:b7:66:3c:4f:6b:37:52:2c:e8:ba:a7:8f:95:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4bbed63091439823ed391a472536c0fcafe8957
Validity
Not Before: Mar 29 01:00:56 2026 GMT
Not After : Mar 30 01:00:56 2026 GMT
Subject: CN=ad6a08385d08bda87291ed030ee438a1484c9708
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:9c:5b:8c:6f:fd:60:02:5a:c6:7a:ba:cf:0a:
9d:3c:0b:51:af:9e:d6:16:79:87:ce:59:db:1f:cb:
10:01:38:c5:52:40:99:6a:24:13:a4:02:cd:ef:e8:
a2:28:a8:e9:ad:21:0d:b3:0e:40:30:0d:90:f5:c3:
4d:41:a5:5b:79:7e:5f:4c:72:f9:fa:44:5b:f4:e1:
9e:96:bc:22:17:b1:ca:a6:fe:0d:05:90:c6:14:1a:
75:54:55:c8:da:84:24:f9:a3:e7:0d:88:b1:51:6c:
a3:a7:32:c7:65:b9:0b:d8:e6:db:d3:03:43:32:c6:
6b:3c:7c:80:5e:38:4d:21:a6:af:29:48:3e:74:88:
86:7f:f5:0d:6b:9a:99:1f:0d:bf:56:03:6e:a6:47:
ea:b5:3c:1e:37:5a:9c:b6:5a:84:f6:8b:6a:eb:73:
f6:5b:fb:33:3c:92:c3:d3:ba:a3:06:98:26:96:ec:
09:47:64:1f:3d:63:7c:03:9e:4d:4b:d1:4f:3f:f5:
40:55:13:a5:72:f7:65:58:68:09:24:b6:5f:0b:64:
8f:78:20:70:82:8d:42:0b:b6:7d:42:f2:c6:f2:a3:
f5:68:f1:ed:1e:25:8c:56:d2:d2:da:8f:c5:8d:26:
7c:f0:87:88:4a:2b:d0:d0:8b:66:ec:b8:92:83:b9:
e1:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:6A:08:38:5D:08:BD:A8:72:91:ED:03:0E:E4:38:A1:48:4C:97:08
X509v3 Authority Key Identifier:
keyid:D4:BB:ED:63:09:14:39:82:3E:D3:91:A4:72:53:6C:0F:CA:FE:89:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1LvtYwkUOYI-05GkclNsD8r-iVc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/7757ed-d020-471f-bbc5-17bf202e5eee/1/1LvtYwkUOYI-05GkclNsD8r-iVc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/7757ed-d020-471f-bbc5-17bf202e5eee/1/1LvtYwkUOYI-05GkclNsD8r-iVc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:51:d6:cf:7d:73:89:f1:30:e1:9e:75:d0:4c:2d:69:ef:3f:
ed:a3:04:c6:6a:6d:79:ac:8f:4e:4e:cc:e4:f8:96:c5:9b:01:
ee:a1:6e:66:6e:30:85:69:31:c4:9b:b6:d5:16:1f:f2:76:a3:
8a:ce:80:1f:77:44:a9:a8:77:54:a3:78:cf:e5:33:6d:ae:bd:
eb:de:f0:97:e6:ac:42:ff:4e:7a:e7:08:a8:10:7e:13:10:fb:
0e:00:07:f9:a4:d9:04:9c:72:19:e2:b0:e3:0a:63:1d:67:05:
5c:6d:a5:2a:7c:f5:91:96:0f:a2:8d:30:ac:2b:cb:9a:80:7d:
2a:ee:af:c0:7d:cf:82:e3:51:9b:01:10:1a:8e:72:ef:f1:c7:
72:3b:2e:ea:5a:b7:d7:c5:56:be:fd:c3:f3:e8:e1:04:16:0a:
34:6b:d8:8a:cf:df:c3:9d:13:bf:64:d7:09:e9:06:eb:f5:2b:
29:fb:57:c2:f3:b8:aa:9c:ab:03:73:fc:18:c7:eb:45:ef:ca:
79:fd:01:7e:9e:0b:9d:ae:02:f1:3e:7c:58:e2:74:db:b1:b0:
b6:9a:06:57:2a:c4:85:20:e0:63:f4:e9:e5:34:44:a3:7b:05:
9f:97:b4:f7:dd:de:1c:19:43:be:2a:73:5c:f9:48:e7:d7:e7:
07:03:a7:6c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03G7dmPE9rN1Is6Lqnj5UpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ0YmJlZDYzMDkxNDM5ODIzZWQzOTFhNDcyNTM2YzBmY2Fm
ZTg5NTcwHhcNMjYwMzI5MDEwMDU2WhcNMjYwMzMwMDEwMDU2WjAzMTEwLwYDVQQD
EyhhZDZhMDgzODVkMDhiZGE4NzI5MWVkMDMwZWU0MzhhMTQ4NGM5NzA4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkZxbjG/9YAJaxnq6zwqdPAtRr57W
FnmHzlnbH8sQATjFUkCZaiQTpALN7+iiKKjprSENsw5AMA2Q9cNNQaVbeX5fTHL5
+kRb9OGelrwiF7HKpv4NBZDGFBp1VFXI2oQk+aPnDYixUWyjpzLHZbkL2Obb0wND
MsZrPHyAXjhNIaavKUg+dIiGf/UNa5qZHw2/VgNupkfqtTweN1qctlqE9otq63P2
W/szPJLD07qjBpgmluwJR2QfPWN8A55NS9FPP/VAVROlcvdlWGgJJLZfC2SPeCBw
go1CC7Z9QvLG8qP1aPHtHiWMVtLS2o/FjSZ88IeISivQ0Itm7LiSg7nhGwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK1qCDhdCL2ocpHtAw7kOKFITJcIMB8GA1UdIwQY
MBaAFNS77WMJFDmCPtORpHJTbA/K/olXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMUx2dFl3a1VPWUktMDVHa2NsTnNEOHItaVZjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi83NzU3ZWQtZDAyMC00NzFmLWJiYzUt
MTdiZjIwMmU1ZWVlLzEvMUx2dFl3a1VPWUktMDVHa2NsTnNEOHItaVZjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYi83NzU3ZWQtZDAyMC00NzFmLWJiYzUtMTdiZjIwMmU1ZWVl
LzEvMUx2dFl3a1VPWUktMDVHa2NsTnNEOHItaVZjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUVHWz31z
ifEw4Z510Ewtae8/7aMExmpteayPTk7M5PiWxZsB7qFuZm4whWkxxJu21RYf8naj
is6AH3dEqah3VKN4z+Uzba69697wl+asQv9OeucIqBB+ExD7DgAH+aTZBJxyGeKw
4wpjHWcFXG2lKnz1kZYPoo0wrCvLmoB9Ku6vwH3PguNRmwEQGo5y7/HHcjsu6lq3
18VWvv3D8+jhBBYKNGvYis/fw50Tv2TXCekG6/UrKftXwvO4qpyrA3P8GMfrRe/K
ef0Bfp4Lna4C8T58WOJ027GwtpoGVyrEhSDgY/Tp5TREo3sFn5e0993eHBlDvipz
XPlI59fnBwOnbA==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:27:46 2026 by rpki-client