
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/8b58e9-3230-4418-8f68-81224e480c03/1/1-LPVjZk_lghA9-8v4gwAityXH5c.mft
File: 1-LPVjZk_lghA9-8v4gwAityXH5c.mft (raw, json)
Hash identifier: kYK3ObHVp39Aly31O0kbmMnEZN0zZtGKwd+QgEE8ja8=
Subject key identifier: 41:8C:F9:4E:9D:93:4A:6A:82:36:20:CF:72:46:56:59:07:7D:74:22
Authority key identifier: F8:B3:D5:8D:99:3F:96:08:40:F7:EF:2F:E2:0C:00:8A:DC:97:1F:97
Certificate issuer: /CN=f8b3d58d993f960840f7ef2fe20c008adc971f97
Certificate serial: 019D0FD7D6045C08407E81D2254A2621A895
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-LPVjZk_lghA9-8v4gwAityXH5c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/8b58e9-3230-4418-8f68-81224e480c03/1/1-LPVjZk_lghA9-8v4gwAityXH5c.mft
Manifest number: 1879
Signing time: Sat 21 Mar 2026 10:01:36 +0000
Manifest this update: Sat 21 Mar 2026 10:01:36 +0000
Manifest next update: Sun 22 Mar 2026 10:01:36 +0000
Files and hashes: 1: 1-LPVjZk_lghA9-8v4gwAityXH5c.crl (hash: 1N4Tpm9z5khEMZ0afFXPIAjiaTbIXgGgYD7IbkyBL6s=)
2: FMo7TJvkPpYtgzLEkKIdGr7kRp4.roa (hash: SV7/k04fYgWabF2RHzjM0CZofp3MWJKlFtmZhh/YzbY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/8b58e9-3230-4418-8f68-81224e480c03/1/1-LPVjZk_lghA9-8v4gwAityXH5c.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/8b58e9-3230-4418-8f68-81224e480c03/1/1-LPVjZk_lghA9-8v4gwAityXH5c.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-LPVjZk_lghA9-8v4gwAityXH5c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 22 Mar 2026 05:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:0f:d7:d6:04:5c:08:40:7e:81:d2:25:4a:26:21:a8:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8b3d58d993f960840f7ef2fe20c008adc971f97
Validity
Not Before: Mar 21 10:01:36 2026 GMT
Not After : Mar 22 10:01:36 2026 GMT
Subject: CN=418cf94e9d934a6a823620cf72465659077d7422
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:66:dc:d8:24:c5:21:ee:41:fe:30:aa:a4:2e:
c0:39:ac:fb:53:04:fa:88:38:ee:13:00:03:c5:ff:
e3:4b:ee:f7:76:25:17:f9:52:a0:70:1c:2a:97:35:
d9:43:3e:44:cc:48:65:ab:8e:06:9c:d2:a8:7d:97:
2a:f1:26:24:a7:e3:43:44:f1:e8:84:f9:06:b0:2a:
0b:aa:5d:8b:33:98:93:76:1d:ce:8e:ce:bd:d7:47:
98:20:d8:04:46:6e:3a:13:50:7d:f7:78:83:29:b5:
f5:9b:03:fa:fc:c8:bb:16:95:df:6a:e5:06:fe:fc:
1f:36:a6:aa:93:48:b6:15:8d:24:0b:2d:44:23:37:
9f:dc:b5:38:da:e4:a9:16:65:20:e0:19:2c:82:52:
ee:64:2e:11:d4:bc:73:c5:3e:d7:d2:98:06:7e:3a:
79:96:29:03:e6:50:28:a4:81:64:07:6c:d5:70:7e:
88:02:c1:2a:12:c5:c2:f8:49:4a:6e:4d:1e:2f:e4:
7e:fc:5d:cc:1d:49:27:44:13:6f:16:18:b7:a3:93:
31:ed:b8:6b:01:8b:0a:e7:9f:7c:6f:54:92:d3:eb:
b4:a8:f6:76:8e:38:9f:2a:32:e8:05:db:28:28:e0:
10:1b:87:b7:f7:51:47:e8:e5:56:f7:97:41:cd:da:
5b:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:8C:F9:4E:9D:93:4A:6A:82:36:20:CF:72:46:56:59:07:7D:74:22
X509v3 Authority Key Identifier:
keyid:F8:B3:D5:8D:99:3F:96:08:40:F7:EF:2F:E2:0C:00:8A:DC:97:1F:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-LPVjZk_lghA9-8v4gwAityXH5c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/8b58e9-3230-4418-8f68-81224e480c03/1/1-LPVjZk_lghA9-8v4gwAityXH5c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/8b58e9-3230-4418-8f68-81224e480c03/1/1-LPVjZk_lghA9-8v4gwAityXH5c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:05:56:bd:dd:6a:19:24:5e:4d:36:ea:e1:1b:02:ba:85:80:
c9:5f:ac:d3:54:af:0a:be:da:c1:c4:53:c8:da:8c:6b:cc:a2:
bf:f3:08:54:a0:25:98:77:b0:c9:8f:e6:7f:01:a7:32:ce:f2:
c7:16:c9:47:bd:fd:61:0e:25:0f:7e:dc:d2:bc:8b:da:c4:dd:
7d:ab:4f:15:85:d0:17:70:3c:62:a8:5c:38:66:72:b6:5c:a7:
f8:67:44:60:0c:5b:0a:f4:53:db:14:5c:95:e7:5f:8c:9e:58:
af:85:3a:e6:c1:de:38:75:6a:c9:bc:16:82:d2:97:f5:f7:f0:
6b:e8:06:fd:84:95:1c:a9:65:d0:35:32:77:09:67:02:90:ce:
df:54:27:d8:98:4e:09:b3:7f:93:d3:09:78:68:ac:72:34:33:
d9:3b:a6:4d:05:9e:0f:4c:90:10:8c:08:61:52:b8:11:d8:3f:
ff:83:ff:85:3b:93:92:ca:6d:62:49:58:5a:01:7e:cf:57:ca:
6c:b2:28:c7:4a:73:da:31:7e:28:ba:11:23:14:1a:9d:a8:f9:
d7:0a:47:7f:f7:9a:d0:7f:0e:89:8a:97:11:04:75:a1:32:b4:
0d:3e:5a:24:dd:07:44:0e:6c:a7:6f:a1:fd:d3:65:93:57:bd:
88:71:4d:03
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZ0P19YEXAhAfoHSJUomIaiVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY4YjNkNThkOTkzZjk2MDg0MGY3ZWYyZmUyMGMwMDhhZGM5
NzFmOTcwHhcNMjYwMzIxMTAwMTM2WhcNMjYwMzIyMTAwMTM2WjAzMTEwLwYDVQQD
Eyg0MThjZjk0ZTlkOTM0YTZhODIzNjIwY2Y3MjQ2NTY1OTA3N2Q3NDIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8Gbc2CTFIe5B/jCqpC7AOaz7UwT6
iDjuEwADxf/jS+73diUX+VKgcBwqlzXZQz5EzEhlq44GnNKofZcq8SYkp+NDRPHo
hPkGsCoLql2LM5iTdh3Ojs6910eYINgERm46E1B993iDKbX1mwP6/Mi7FpXfauUG
/vwfNqaqk0i2FY0kCy1EIzef3LU42uSpFmUg4BksglLuZC4R1LxzxT7X0pgGfjp5
likD5lAopIFkB2zVcH6IAsEqEsXC+ElKbk0eL+R+/F3MHUknRBNvFhi3o5Mx7bhr
AYsK5598b1SS0+u0qPZ2jjifKjLoBdsoKOAQG4e391FH6OVW95dBzdpb4wIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFEGM+U6dk0pqgjYgz3JGVlkHfXQiMB8GA1UdIwQY
MBaAFPiz1Y2ZP5YIQPfvL+IMAIrclx+XMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1MUFZqWmtfbGdoQTktOHY0Z3dBaXR5WEg1Yy5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTIvOGI1OGU5LTMyMzAtNDQxOC04ZjY4
LTgxMjI0ZTQ4MGMwMy8xLzEtTFBWalprX2xnaEE5LTh2NGd3QWl0eVhINWMubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxUL2EyLzhiNThlOS0zMjMwLTQ0MTgtOGY2OC04MTIyNGU0ODBj
MDMvMS8xLUxQVmpaa19sZ2hBOS04djRnd0FpdHlYSDVjLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoQVW
vd1qGSReTTbq4RsCuoWAyV+s01SvCr7awcRTyNqMa8yiv/MIVKAlmHewyY/mfwGn
Ms7yxxbJR739YQ4lD37c0ryL2sTdfatPFYXQF3A8YqhcOGZytlyn+GdEYAxbCvRT
2xRcledfjJ5Yr4U65sHeOHVqybwWgtKX9ffwa+gG/YSVHKll0DUydwlnApDO31Qn
2JhOCbN/k9MJeGiscjQz2TumTQWeD0yQEIwIYVK4Edg//4P/hTuTksptYklYWgF+
z1fKbLIox0pz2jF+KLoRIxQanaj51wpHf/ea0H8OiYqXEQR1oTK0DT5aJN0HRA5s
p2+h/dNlk1e9iHFNAw==
-----END CERTIFICATE-----
Generated at Sat Mar 21 13:19:02 2026 by rpki-client