Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/d59246-953e-423a-9704-931414101a01/1/1-ldVdi3-THDNg7MKE7eCxP_BX1o.mft
File: 1-ldVdi3-THDNg7MKE7eCxP_BX1o.mft (raw, json)
Hash identifier: 36wK3jX6/mTUaNgUNOd2En3Ag0XmhWLxGXKombsXXaU=
Subject key identifier: 0E:B5:04:51:45:EF:33:40:D2:90:02:DA:B9:3A:B4:65:83:F2:CE:7A
Authority key identifier: FA:57:55:76:2D:FE:4C:70:CD:83:B3:0A:13:B7:82:C4:FF:C1:5F:5A
Certificate issuer: /CN=fa5755762dfe4c70cd83b30a13b782c4ffc15f5a
Certificate serial: 019E9138127B8DA07B5D3A9CFC6922E2F514
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-ldVdi3-THDNg7MKE7eCxP_BX1o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/d59246-953e-423a-9704-931414101a01/1/1-ldVdi3-THDNg7MKE7eCxP_BX1o.mft
Manifest number: 02A7
Signing time: Thu 04 Jun 2026 06:00:31 +0000
Manifest this update: Thu 04 Jun 2026 06:00:31 +0000
Manifest next update: Fri 05 Jun 2026 06:00:31 +0000
Files and hashes: 1: 1-ldVdi3-THDNg7MKE7eCxP_BX1o.crl (hash: 6WGUrOtyIB9FgD+a7uldAGQZQ6wVQsGIC9TKuRwWdAM=)
2: pDA7nhW3yNSdUeX1KR6FhLMPZZY.roa (hash: ZZ1m4P8j+XlJcdrV7Ome2UFD4l54PQHH5x2pAoymEag=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/d59246-953e-423a-9704-931414101a01/1/1-ldVdi3-THDNg7MKE7eCxP_BX1o.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/d59246-953e-423a-9704-931414101a01/1/1-ldVdi3-THDNg7MKE7eCxP_BX1o.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-ldVdi3-THDNg7MKE7eCxP_BX1o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 05 Jun 2026 06:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:91:38:12:7b:8d:a0:7b:5d:3a:9c:fc:69:22:e2:f5:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa5755762dfe4c70cd83b30a13b782c4ffc15f5a
Validity
Not Before: Jun 4 06:00:31 2026 GMT
Not After : Jun 5 06:00:31 2026 GMT
Subject: CN=0eb5045145ef3340d29002dab93ab46583f2ce7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:71:76:ed:d6:da:a6:fc:7b:ab:80:72:26:6e:
b9:c3:4b:5b:f0:04:5b:6e:2c:1d:6b:d5:60:da:e7:
03:9e:02:b7:2b:b6:1a:19:d7:95:1f:68:25:10:21:
51:9f:47:a3:f2:c0:18:8f:cc:52:a6:85:71:f8:03:
0d:bc:59:98:47:53:7c:fc:7b:25:fb:d2:f1:3d:9e:
10:65:10:9f:86:f6:4b:9b:4c:78:19:30:68:27:a7:
af:42:11:1a:65:11:f1:d6:ac:ce:cc:4b:0c:8b:b1:
1f:9e:d5:f3:11:14:be:45:95:be:5b:49:86:12:46:
32:9f:d5:65:c6:ed:9e:1c:d0:a3:ec:dc:5c:a4:29:
84:20:f0:6e:8a:a2:f9:77:c6:a4:ab:d6:42:2a:76:
bd:b6:bd:31:9c:d9:6d:ca:22:76:48:1f:6c:fc:17:
41:4d:65:16:9f:fb:69:72:5d:ed:72:95:fb:fd:a5:
b3:86:ea:2d:d0:19:12:90:89:a8:9e:7e:13:96:f3:
99:77:8f:c8:a3:cc:f8:92:1c:1a:8b:28:eb:87:6b:
48:ca:42:a9:fe:9b:7c:ea:16:3c:b4:e0:9a:60:17:
b1:56:83:c6:89:44:26:fb:82:94:86:0b:2f:34:e0:
d2:1c:c2:7e:9b:b2:54:46:a2:b6:a0:4c:54:89:09:
9b:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:B5:04:51:45:EF:33:40:D2:90:02:DA:B9:3A:B4:65:83:F2:CE:7A
X509v3 Authority Key Identifier:
keyid:FA:57:55:76:2D:FE:4C:70:CD:83:B3:0A:13:B7:82:C4:FF:C1:5F:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-ldVdi3-THDNg7MKE7eCxP_BX1o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/d59246-953e-423a-9704-931414101a01/1/1-ldVdi3-THDNg7MKE7eCxP_BX1o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/d59246-953e-423a-9704-931414101a01/1/1-ldVdi3-THDNg7MKE7eCxP_BX1o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:7d:e4:cb:ef:52:a1:90:be:dd:46:17:1f:d0:2e:e5:2e:7d:
6e:38:64:86:eb:39:08:48:98:fa:ed:79:13:48:70:4c:93:5c:
40:9f:44:57:a6:c3:c8:0d:ac:48:b1:8f:5e:3d:9c:6f:8a:03:
49:3a:dc:66:3e:9f:7b:f6:bb:e5:3f:bb:c2:59:32:69:e6:59:
d6:d7:ce:14:ba:1e:92:6e:bc:0a:43:47:0d:b9:69:50:41:a5:
0b:7f:13:3b:a3:0d:fb:3b:e7:27:97:ef:cb:86:76:ea:e2:5c:
5f:eb:96:f1:f1:3f:f4:0a:9b:ef:32:fc:8a:32:ca:bf:04:22:
ba:72:dd:32:53:f7:54:82:d6:dd:54:ad:8c:4c:00:14:c0:24:
77:93:cf:d2:e7:0c:36:f2:76:92:40:9c:82:d9:73:54:48:5f:
26:b8:5a:52:bd:21:09:38:95:ce:f8:47:4f:95:69:2d:80:b7:
87:69:21:01:63:19:ed:5c:58:76:30:06:b6:93:f2:c3:ed:73:
00:1a:fd:e0:33:02:4a:94:a8:09:bc:1b:21:92:62:50:74:23:
e8:2b:da:c7:3d:4c:67:67:e8:90:4a:61:4c:cb:e7:62:7b:f6:
9f:82:b8:38:fd:44:7c:33:cd:4f:1b:18:9e:96:c5:04:64:80:
6e:14:7c:a6
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZ6ROBJ7jaB7XTqc/Gki4vUUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZhNTc1NTc2MmRmZTRjNzBjZDgzYjMwYTEzYjc4MmM0ZmZj
MTVmNWEwHhcNMjYwNjA0MDYwMDMxWhcNMjYwNjA1MDYwMDMxWjAzMTEwLwYDVQQD
EygwZWI1MDQ1MTQ1ZWYzMzQwZDI5MDAyZGFiOTNhYjQ2NTgzZjJjZTdhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvXF27dbapvx7q4ByJm65w0tb8ARb
biwda9Vg2ucDngK3K7YaGdeVH2glECFRn0ej8sAYj8xSpoVx+AMNvFmYR1N8/Hsl
+9LxPZ4QZRCfhvZLm0x4GTBoJ6evQhEaZRHx1qzOzEsMi7EfntXzERS+RZW+W0mG
EkYyn9Vlxu2eHNCj7NxcpCmEIPBuiqL5d8akq9ZCKna9tr0xnNltyiJ2SB9s/BdB
TWUWn/tpcl3tcpX7/aWzhuot0BkSkImonn4TlvOZd4/Io8z4khwaiyjrh2tIykKp
/pt86hY8tOCaYBexVoPGiUQm+4KUhgsvNODSHMJ+m7JURqK2oExUiQmbGwIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFA61BFFF7zNA0pAC2rk6tGWD8s56MB8GA1UdIwQY
MBaAFPpXVXYt/kxwzYOzChO3gsT/wV9aMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1sZFZkaTMtVEhETmc3TUtFN2VDeFBfQlgxby5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvN2IvZDU5MjQ2LTk1M2UtNDIzYS05NzA0
LTkzMTQxNDEwMWEwMS8xLzEtbGRWZGkzLVRIRE5nN01LRTdlQ3hQX0JYMW8ubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzdiL2Q1OTI0Ni05NTNlLTQyM2EtOTcwNC05MzE0MTQxMDFh
MDEvMS8xLWxkVmRpMy1USEROZzdNS0U3ZUN4UF9CWDFvLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmX3k
y+9SoZC+3UYXH9Au5S59bjhkhus5CEiY+u15E0hwTJNcQJ9EV6bDyA2sSLGPXj2c
b4oDSTrcZj6fe/a75T+7wlkyaeZZ1tfOFLoekm68CkNHDblpUEGlC38TO6MN+zvn
J5fvy4Z26uJcX+uW8fE/9Aqb7zL8ijLKvwQiunLdMlP3VILW3VStjEwAFMAkd5PP
0ucMNvJ2kkCcgtlzVEhfJrhaUr0hCTiVzvhHT5VpLYC3h2khAWMZ7VxYdjAGtpPy
w+1zABr94DMCSpSoCbwbIZJiUHQj6Cvaxz1MZ2fokEphTMvnYnv2n4K4OP1EfDPN
TxsYnpbFBGSAbhR8pg==
-----END CERTIFICATE-----
Generated at Thu Jun 4 12:04:09 2026 by rpki-client