Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/d59246-953e-423a-9704-931414101a01/1/1-ldVdi3-THDNg7MKE7eCxP_BX1o.mft
File: 1-ldVdi3-THDNg7MKE7eCxP_BX1o.mft (raw, json)
Hash identifier: /dyZVUSgfsUO1cNWZ+Y9oCoSuGJXSJJAZddAZ5Fecv0=
Subject key identifier: C8:16:45:62:5B:56:79:D2:08:BC:85:84:8F:A9:6F:37:E7:AF:D5:2B
Authority key identifier: FA:57:55:76:2D:FE:4C:70:CD:83:B3:0A:13:B7:82:C4:FF:C1:5F:5A
Certificate issuer: /CN=fa5755762dfe4c70cd83b30a13b782c4ffc15f5a
Certificate serial: 019F848CCA9727D431AE635CD1CC4C0B8827
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-ldVdi3-THDNg7MKE7eCxP_BX1o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/d59246-953e-423a-9704-931414101a01/1/1-ldVdi3-THDNg7MKE7eCxP_BX1o.mft
Manifest number: 0325
Signing time: Tue 21 Jul 2026 12:00:47 +0000
Manifest this update: Tue 21 Jul 2026 12:00:47 +0000
Manifest next update: Wed 22 Jul 2026 12:00:47 +0000
Files and hashes: 1: 1-ldVdi3-THDNg7MKE7eCxP_BX1o.crl (hash: Zahpyduogc4CGpKYvGNpCLC+KE78YKEz+Kgo7LTxRHs=)
2: pDA7nhW3yNSdUeX1KR6FhLMPZZY.roa (hash: ZZ1m4P8j+XlJcdrV7Ome2UFD4l54PQHH5x2pAoymEag=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/d59246-953e-423a-9704-931414101a01/1/1-ldVdi3-THDNg7MKE7eCxP_BX1o.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/d59246-953e-423a-9704-931414101a01/1/1-ldVdi3-THDNg7MKE7eCxP_BX1o.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-ldVdi3-THDNg7MKE7eCxP_BX1o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 12:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:84:8c:ca:97:27:d4:31:ae:63:5c:d1:cc:4c:0b:88:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa5755762dfe4c70cd83b30a13b782c4ffc15f5a
Validity
Not Before: Jul 21 12:00:47 2026 GMT
Not After : Jul 22 12:00:47 2026 GMT
Subject: CN=c81645625b5679d208bc85848fa96f37e7afd52b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:ce:b7:38:73:4d:97:65:05:73:03:e8:98:df:
02:a1:44:ef:68:4c:d0:b3:c4:ef:f9:85:30:07:41:
52:cd:e7:66:14:d5:aa:48:21:be:23:e8:71:d7:95:
2f:61:ad:58:3c:11:c8:63:66:c2:f6:05:71:38:3a:
d8:3f:df:47:6d:65:51:c2:22:62:52:20:23:60:0c:
74:7e:52:8e:7f:f8:5c:92:34:03:f8:62:76:73:5f:
f2:85:49:ea:0a:a1:70:68:a8:fe:86:b1:a4:2b:ec:
f5:0b:80:3d:80:c2:40:05:17:c9:cb:12:62:29:96:
2d:37:67:64:29:be:cf:be:39:8a:6b:1f:f0:cf:88:
ec:aa:a4:01:66:e4:02:96:a0:c1:9d:9b:76:e3:99:
24:3a:d7:10:df:a7:c2:02:77:83:1a:d4:f6:16:b7:
52:aa:c9:50:28:aa:a1:5a:1e:73:fc:e7:2c:dc:5e:
f2:30:59:c4:6a:52:c2:9a:21:82:38:cf:0f:b8:1f:
75:fa:a6:ba:1c:04:aa:d5:61:fe:3b:5f:2f:1f:50:
44:c4:c9:5f:e9:fb:d1:b0:a2:72:7b:e4:20:73:51:
1e:6f:26:e9:78:3a:10:fc:2a:00:3d:f7:ed:00:64:
c2:47:72:13:2e:3e:2e:52:37:36:d0:59:cd:7b:b8:
5e:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:16:45:62:5B:56:79:D2:08:BC:85:84:8F:A9:6F:37:E7:AF:D5:2B
X509v3 Authority Key Identifier:
keyid:FA:57:55:76:2D:FE:4C:70:CD:83:B3:0A:13:B7:82:C4:FF:C1:5F:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-ldVdi3-THDNg7MKE7eCxP_BX1o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/d59246-953e-423a-9704-931414101a01/1/1-ldVdi3-THDNg7MKE7eCxP_BX1o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/d59246-953e-423a-9704-931414101a01/1/1-ldVdi3-THDNg7MKE7eCxP_BX1o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:0f:6b:f3:49:d5:31:fa:f8:a3:a1:cf:4d:44:78:ea:62:6e:
3c:6d:a9:bb:5f:4d:d3:c6:fa:a5:f1:e6:3c:fd:43:e3:e3:68:
26:9a:ca:e7:ee:e8:28:b2:68:7f:ba:d0:f8:c2:1e:63:47:24:
d1:da:98:01:b7:ac:a1:c5:99:d0:b0:d4:4d:6a:f5:15:cd:3e:
b7:12:77:a3:49:a8:92:d7:64:aa:10:ae:b2:5b:53:c7:ac:60:
9e:c0:9d:a2:bf:5d:4b:ce:6f:be:57:32:52:ce:79:2f:b8:09:
56:f4:37:ac:a9:2d:36:15:24:2c:72:2a:6e:d1:83:7d:6c:4e:
47:11:20:68:29:90:b2:63:9a:f3:7e:7a:ee:64:39:14:69:43:
91:1e:82:b4:e3:e3:e6:dd:42:67:a2:ce:70:ec:36:b6:dc:f7:
38:17:b9:63:f4:9c:35:27:4f:94:ab:26:b8:4e:fd:ee:7c:8d:
20:f0:64:ef:3f:65:f5:26:02:69:83:cb:c4:4b:ed:78:64:33:
64:87:51:36:aa:d7:8d:ac:d4:81:48:19:54:74:84:2a:b0:e3:
f2:91:87:18:b9:35:e0:1c:32:49:20:46:6f:8b:41:7a:58:d9:
b4:55:2d:4d:63:c5:8c:9d:7b:b6:5f:da:e4:b5:c1:4b:34:9d:
33:72:3b:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 19:58:16 2026 by rpki-client