Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/3253ac-8fa7-425b-8a90-9b9b401459e6/1/1-LdwFgVTdgw1Z99RqEftbFKcB4k.mft
File: 1-LdwFgVTdgw1Z99RqEftbFKcB4k.mft (raw, json)
Hash identifier: NoO7iLSzpmgL46eTVLJOvSISIW0ktj4z0f/Jc5I4hrA=
Subject key identifier: B9:3A:4B:A6:38:99:31:A8:9D:70:B0:8B:7E:DA:98:3A:D7:D4:E8:89
Authority key identifier: F8:B7:70:16:05:53:76:0C:35:67:DF:51:A8:47:ED:6C:52:9C:07:89
Certificate issuer: /CN=f8b770160553760c3567df51a847ed6c529c0789
Certificate serial: 019F189ED304D10F34FFD75503E69C64BC63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-LdwFgVTdgw1Z99RqEftbFKcB4k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/3253ac-8fa7-425b-8a90-9b9b401459e6/1/1-LdwFgVTdgw1Z99RqEftbFKcB4k.mft
Manifest number: 1303
Signing time: Tue 30 Jun 2026 13:01:29 +0000
Manifest this update: Tue 30 Jun 2026 13:01:29 +0000
Manifest next update: Wed 01 Jul 2026 13:01:29 +0000
Files and hashes: 1: 1-LdwFgVTdgw1Z99RqEftbFKcB4k.crl (hash: LnzxPg1Y/EBYhSEDJ2osPSxi7cRU+knA65XsnMFF3pc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/3253ac-8fa7-425b-8a90-9b9b401459e6/1/1-LdwFgVTdgw1Z99RqEftbFKcB4k.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/3253ac-8fa7-425b-8a90-9b9b401459e6/1/1-LdwFgVTdgw1Z99RqEftbFKcB4k.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-LdwFgVTdgw1Z99RqEftbFKcB4k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 13:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:9e:d3:04:d1:0f:34:ff:d7:55:03:e6:9c:64:bc:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8b770160553760c3567df51a847ed6c529c0789
Validity
Not Before: Jun 30 13:01:29 2026 GMT
Not After : Jul 1 13:01:29 2026 GMT
Subject: CN=b93a4ba6389931a89d70b08b7eda983ad7d4e889
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:27:78:be:bf:0e:47:dd:38:bc:f4:27:d7:58:
40:cb:a6:4b:57:75:30:7e:de:16:04:d7:d6:ed:15:
e1:f0:31:6f:00:90:9e:3a:84:82:2f:87:a7:e3:c4:
f9:37:97:84:f3:73:2e:4a:71:56:35:43:26:43:23:
67:9a:a8:9d:15:24:44:96:58:39:9f:5d:30:d6:a7:
24:01:13:69:49:33:00:36:ae:47:eb:1b:5e:c8:99:
f8:b5:6e:4a:3b:e0:a0:48:0b:da:4b:e4:41:73:d6:
4f:9f:da:35:c6:2b:da:16:d9:34:24:c0:2f:2c:1f:
31:91:35:af:cc:ab:31:88:c3:6c:03:bc:05:45:48:
77:77:33:ea:95:08:09:4b:38:b6:f4:22:7e:26:9f:
21:27:f0:2b:7f:3b:c6:5d:f0:7a:cc:0c:57:84:60:
73:45:09:3f:c9:f7:23:ab:cd:88:b6:20:65:79:81:
e0:78:58:ab:70:bc:d9:aa:a3:0e:c3:d2:c5:1f:53:
f3:6b:ec:15:22:d1:b0:26:59:2d:36:a6:81:0c:63:
a8:6c:8b:21:63:6a:7c:14:85:e6:f2:f4:ce:4c:de:
0b:1b:f4:87:c1:e5:99:df:60:01:66:35:2d:73:e1:
72:c9:21:0a:c4:b4:db:fa:15:cc:10:70:da:af:96:
02:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:3A:4B:A6:38:99:31:A8:9D:70:B0:8B:7E:DA:98:3A:D7:D4:E8:89
X509v3 Authority Key Identifier:
keyid:F8:B7:70:16:05:53:76:0C:35:67:DF:51:A8:47:ED:6C:52:9C:07:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-LdwFgVTdgw1Z99RqEftbFKcB4k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/3253ac-8fa7-425b-8a90-9b9b401459e6/1/1-LdwFgVTdgw1Z99RqEftbFKcB4k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/3253ac-8fa7-425b-8a90-9b9b401459e6/1/1-LdwFgVTdgw1Z99RqEftbFKcB4k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:f9:4c:9f:51:da:bc:37:b9:69:7b:ac:f6:66:95:3c:c5:07:
32:df:9a:df:4a:f2:1b:e1:1a:34:92:4a:fb:02:a2:8d:5a:71:
c8:8c:48:62:ae:c9:a1:08:09:3a:1c:9f:fc:8b:00:8c:69:e9:
da:28:02:92:8a:fe:c0:7e:b7:fb:6a:93:8a:53:0b:11:5e:9d:
a1:53:bc:b3:b5:24:7a:a8:42:61:a0:17:44:4f:4e:95:ee:6d:
6d:52:c4:38:71:a5:2a:cf:13:ff:b7:92:1f:72:45:c8:bf:c7:
06:79:0b:ae:8c:e4:ad:8a:19:5f:19:81:95:da:d2:bb:be:59:
be:77:57:04:1d:69:6a:f3:68:9b:28:c8:c6:5a:18:cb:ed:75:
86:8f:ac:19:4a:4e:3d:1f:25:72:52:13:91:4b:6d:e4:57:dc:
3d:41:ce:11:7c:a2:a0:17:bc:9a:a3:c0:e3:c2:2a:63:e1:c9:
b2:f0:55:03:34:e9:4d:e3:71:79:d3:fd:91:f1:98:3b:0d:11:
9f:16:f4:13:db:a1:90:1d:7d:09:0e:96:b4:23:bf:45:c7:25:
92:93:c6:93:d3:3f:67:99:cc:50:de:0d:8d:82:91:c3:a9:12:
65:dd:bc:5a:5b:ca:8e:70:c9:60:03:b2:0d:88:62:a9:3b:28:
0a:04:51:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:18:13 2026 by rpki-client