Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/82ec13-82cf-4eb7-b1e4-9a55885e5f66/1/1-LnOH73nyKTFjBblVGQ66nPn0Vg.mft
File: 1-LnOH73nyKTFjBblVGQ66nPn0Vg.mft (raw, json)
Hash identifier: x7la+E4yDEfMz8aBd7zHt3iLREBgXtXtUXtCB1Cakf8=
Subject key identifier: F4:8C:B9:F2:26:D4:4B:65:BC:79:60:65:66:31:28:DB:A1:68:4D:E1
Authority key identifier: F8:B9:CE:1F:BD:E7:C8:A4:C5:8C:16:E5:54:64:3A:EA:73:E7:D1:58
Certificate issuer: /CN=f8b9ce1fbde7c8a4c58c16e554643aea73e7d158
Certificate serial: 019CE3A2D5F32EF9D2D7123010AB530086FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-LnOH73nyKTFjBblVGQ66nPn0Vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/82ec13-82cf-4eb7-b1e4-9a55885e5f66/1/1-LnOH73nyKTFjBblVGQ66nPn0Vg.mft
Manifest number: 7B
Signing time: Thu 12 Mar 2026 20:00:25 +0000
Manifest this update: Thu 12 Mar 2026 20:00:25 +0000
Manifest next update: Fri 13 Mar 2026 20:00:25 +0000
Files and hashes: 1: 1-LnOH73nyKTFjBblVGQ66nPn0Vg.crl (hash: OONOjn6953J9zpB+7RtVEFgxS6jmCcTLHAvE5IwfrEs=)
2: Wlc1mb_xj0DVaYUUDsBCwlVjTTI.roa (hash: OHp7KIYzafsL5kJAIldfo0uoA+OMQo8MF+eM1s5TkVM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/82ec13-82cf-4eb7-b1e4-9a55885e5f66/1/1-LnOH73nyKTFjBblVGQ66nPn0Vg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/82ec13-82cf-4eb7-b1e4-9a55885e5f66/1/1-LnOH73nyKTFjBblVGQ66nPn0Vg.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-LnOH73nyKTFjBblVGQ66nPn0Vg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Mar 2026 20:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e3:a2:d5:f3:2e:f9:d2:d7:12:30:10:ab:53:00:86:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8b9ce1fbde7c8a4c58c16e554643aea73e7d158
Validity
Not Before: Mar 12 20:00:25 2026 GMT
Not After : Mar 13 20:00:25 2026 GMT
Subject: CN=f48cb9f226d44b65bc796065663128dba1684de1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:1c:cb:81:a7:36:b6:d6:4a:a2:1f:51:91:c6:
3a:93:93:b9:7d:f6:46:d6:6c:b0:ae:a5:e1:77:27:
1a:98:a6:96:71:85:4c:fd:3c:cc:b5:2f:86:8e:e6:
de:58:0a:39:22:1d:9f:91:86:2d:59:b4:7d:50:0b:
ff:28:ef:17:37:d3:d6:fb:11:05:1c:cb:14:7c:f9:
1a:65:83:4d:41:a4:c7:0a:54:3d:91:b1:ed:0e:ec:
db:25:c8:4b:e3:4a:39:d2:12:ee:90:2a:7f:07:9a:
72:83:0c:51:11:de:6c:0e:62:f7:69:b0:0d:ef:ba:
7c:8b:9b:51:a5:21:5e:45:3d:2e:64:56:c0:3b:c6:
11:d2:66:d5:fd:e3:7d:2a:a0:85:35:5b:94:33:96:
bd:ad:aa:08:8c:d1:f5:17:91:e2:cf:06:a9:7c:8a:
b0:9e:3b:5d:3c:25:7b:e9:56:b5:2b:f5:2d:78:ec:
60:a4:22:a8:a9:4f:50:10:bb:55:da:a8:7d:5d:fd:
d4:1d:70:9b:bf:d4:44:ef:1d:d3:74:c8:a7:2a:e0:
4b:54:28:5b:3e:75:0b:bc:5c:0c:89:ab:9b:64:b5:
77:f1:dd:5e:1a:80:d0:33:fc:76:1b:1e:a3:fb:4a:
e4:27:a3:be:c1:60:20:c8:a7:2b:61:6f:dc:1f:71:
70:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:8C:B9:F2:26:D4:4B:65:BC:79:60:65:66:31:28:DB:A1:68:4D:E1
X509v3 Authority Key Identifier:
keyid:F8:B9:CE:1F:BD:E7:C8:A4:C5:8C:16:E5:54:64:3A:EA:73:E7:D1:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-LnOH73nyKTFjBblVGQ66nPn0Vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/82ec13-82cf-4eb7-b1e4-9a55885e5f66/1/1-LnOH73nyKTFjBblVGQ66nPn0Vg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/82ec13-82cf-4eb7-b1e4-9a55885e5f66/1/1-LnOH73nyKTFjBblVGQ66nPn0Vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:9d:33:88:ff:91:5d:8b:33:02:ad:0c:70:4e:4a:64:0d:c6:
a9:4b:4f:e4:11:8c:a7:d3:d7:1d:8a:89:49:57:d8:60:5b:0b:
b8:e4:33:4b:6c:53:16:66:95:a9:e8:0d:82:ee:3e:f4:a7:52:
ce:11:3e:31:3d:b9:32:b9:8e:d6:b6:a5:61:11:51:8c:7c:e3:
76:b3:3b:98:c6:dc:b0:96:0a:94:b7:46:c4:c5:c1:b6:e7:8f:
a5:e3:82:02:18:31:09:60:d1:25:ef:3d:58:d1:1c:4f:42:b9:
0e:d2:97:38:42:7c:51:e5:55:09:9d:bb:55:4d:2e:99:53:cd:
16:1f:64:05:ba:09:5f:11:48:43:cf:57:d5:54:e8:bb:74:f0:
76:27:b7:1c:9a:a6:38:88:6a:22:a8:eb:45:ed:f9:48:bc:0d:
61:ac:a9:d7:0e:d3:5f:72:17:11:f5:ee:fa:10:03:49:29:09:
22:dc:6a:f1:89:ea:08:08:58:b0:0f:99:97:8a:cd:37:8b:ea:
9c:23:f0:19:71:c4:d8:6b:43:b1:e6:e4:92:52:2a:e8:38:b1:
6c:c9:6e:56:ae:88:98:c7:39:4a:00:79:96:f0:1c:77:74:1d:
e9:4a:37:11:fe:c3:c5:a5:44:b6:9c:4d:2a:4a:7b:04:de:53:
cb:0f:11:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 04:55:50 2026 by rpki-client