Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/8b58e9-3230-4418-8f68-81224e480c03/1/1-LPVjZk_lghA9-8v4gwAityXH5c.mft
File: 1-LPVjZk_lghA9-8v4gwAityXH5c.mft (raw, json)
Hash identifier: cU+RjedUvR2Ox7Scl5uiLdUO3RPO3nqESvWZk/Am7xs=
Subject key identifier: CA:2C:C5:3D:B5:A0:0C:F4:BB:B1:04:16:09:49:EB:4B:A3:74:B0:AD
Authority key identifier: F8:B3:D5:8D:99:3F:96:08:40:F7:EF:2F:E2:0C:00:8A:DC:97:1F:97
Certificate issuer: /CN=f8b3d58d993f960840f7ef2fe20c008adc971f97
Certificate serial: 019FCAEF2B5D0F9101461D0465E2BA68F457
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-LPVjZk_lghA9-8v4gwAityXH5c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/8b58e9-3230-4418-8f68-81224e480c03/1/1-LPVjZk_lghA9-8v4gwAityXH5c.mft
Manifest number: 19E3
Signing time: Tue 04 Aug 2026 04:01:39 +0000
Manifest this update: Tue 04 Aug 2026 04:01:39 +0000
Manifest next update: Wed 05 Aug 2026 04:01:39 +0000
Files and hashes: 1: 1-LPVjZk_lghA9-8v4gwAityXH5c.crl (hash: Kxm43FC/nYC/8N6FVKxkya/42p60Sc3ZVJVChDeNlZo=)
2: FMo7TJvkPpYtgzLEkKIdGr7kRp4.roa (hash: SV7/k04fYgWabF2RHzjM0CZofp3MWJKlFtmZhh/YzbY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/8b58e9-3230-4418-8f68-81224e480c03/1/1-LPVjZk_lghA9-8v4gwAityXH5c.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/8b58e9-3230-4418-8f68-81224e480c03/1/1-LPVjZk_lghA9-8v4gwAityXH5c.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-LPVjZk_lghA9-8v4gwAityXH5c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Aug 2026 04:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ca:ef:2b:5d:0f:91:01:46:1d:04:65:e2:ba:68:f4:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8b3d58d993f960840f7ef2fe20c008adc971f97
Validity
Not Before: Aug 4 04:01:39 2026 GMT
Not After : Aug 5 04:01:39 2026 GMT
Subject: CN=ca2cc53db5a00cf4bbb104160949eb4ba374b0ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:4c:91:54:07:d8:c2:4d:e1:72:92:48:cb:24:
e4:57:30:b8:92:3c:07:c8:b5:24:c9:72:ac:cc:cb:
bf:ee:3e:fb:5d:ac:a7:4e:0e:57:14:4f:eb:66:11:
57:03:07:49:3b:ac:e1:2a:ef:08:21:a4:a3:43:fc:
d3:6c:93:6e:13:f9:37:c5:6d:71:68:a1:fe:1d:75:
07:34:5a:00:dd:4a:84:3a:7a:3d:cf:ca:9a:7a:65:
8c:d2:b3:ef:e0:3a:ab:f0:c9:1f:b4:78:19:6d:8b:
e6:02:6b:f0:8c:5f:84:7a:3c:73:e2:36:bc:71:96:
3d:43:4f:05:4a:f2:21:25:bf:43:c8:6b:43:e8:81:
ca:f1:35:c6:9b:a4:60:31:76:2b:dc:31:ad:f8:8d:
73:d9:a9:93:e7:66:26:e4:27:82:01:66:a8:fd:ed:
ff:4c:b3:46:24:04:5b:bc:07:7a:ec:df:f9:01:80:
7d:e4:a6:56:35:48:97:a1:ca:d0:45:59:d2:f1:f5:
cc:75:7c:4b:db:28:bc:a7:b2:df:3f:7d:57:09:52:
c2:b7:bf:de:2b:05:8a:1c:a7:d7:58:e7:44:0f:23:
27:49:6f:85:1f:28:fa:70:ae:61:93:90:42:b3:9e:
7b:6a:52:cc:27:df:d7:2a:f6:73:4a:6e:5e:a2:d4:
bf:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:2C:C5:3D:B5:A0:0C:F4:BB:B1:04:16:09:49:EB:4B:A3:74:B0:AD
X509v3 Authority Key Identifier:
keyid:F8:B3:D5:8D:99:3F:96:08:40:F7:EF:2F:E2:0C:00:8A:DC:97:1F:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-LPVjZk_lghA9-8v4gwAityXH5c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/8b58e9-3230-4418-8f68-81224e480c03/1/1-LPVjZk_lghA9-8v4gwAityXH5c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/8b58e9-3230-4418-8f68-81224e480c03/1/1-LPVjZk_lghA9-8v4gwAityXH5c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:fa:35:15:12:c8:be:a1:8b:d3:e9:6c:82:93:7b:b9:83:a0:
18:54:b2:2d:8c:10:03:f6:58:b3:ce:b6:58:09:82:07:19:d9:
5f:92:a3:95:88:37:ed:7d:e5:30:a5:fd:0f:3e:6a:2d:42:89:
fa:4d:f0:c8:40:5d:4d:81:e8:93:60:dd:63:e0:66:2b:62:8b:
90:28:ec:e4:0b:42:f9:95:e3:69:a1:e1:f7:82:97:cd:91:0e:
b1:48:f4:d2:e6:bc:87:86:41:52:7f:4e:31:c8:73:be:82:6e:
23:e5:f3:82:15:f8:a2:eb:81:5a:cf:23:3b:0d:1a:a2:42:0f:
e3:3c:35:1f:30:21:e7:5a:87:1c:9d:09:40:cd:8c:8a:31:f8:
b7:d7:79:99:33:40:5b:14:6a:de:2e:77:7a:7c:8b:d8:8f:41:
1e:e4:0d:b3:65:0e:6f:36:0d:8c:44:0b:f2:ed:b8:bd:37:f0:
04:fa:fb:38:cd:05:a2:fb:fa:29:ea:c9:61:8c:b2:f2:ca:a3:
72:4e:b9:23:af:ea:6b:94:22:dd:1e:53:83:00:b5:ae:68:05:
e3:49:66:b1:8b:4a:f6:15:f8:b2:b1:13:2a:f0:42:01:13:9a:
58:72:2d:05:d9:d7:0e:d6:5f:72:74:07:ee:63:38:7e:34:69:
25:f2:e9:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 4 13:39:45 2026 by rpki-client