Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/82ec13-82cf-4eb7-b1e4-9a55885e5f66/1/1-LnOH73nyKTFjBblVGQ66nPn0Vg.mft
File: 1-LnOH73nyKTFjBblVGQ66nPn0Vg.mft (raw, json)
Hash identifier: t6D1MXwDdBtpdiXNgWqVrba6Yj36WP4J8wDuTI+Ys8g=
Subject key identifier: 1D:D1:52:07:6A:5B:00:51:36:10:77:7E:B2:3F:6C:A2:30:F7:8F:27
Authority key identifier: F8:B9:CE:1F:BD:E7:C8:A4:C5:8C:16:E5:54:64:3A:EA:73:E7:D1:58
Certificate issuer: /CN=f8b9ce1fbde7c8a4c58c16e554643aea73e7d158
Certificate serial: 019DCD501428EECA595F6834CE8D2B96D5FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-LnOH73nyKTFjBblVGQ66nPn0Vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/82ec13-82cf-4eb7-b1e4-9a55885e5f66/1/1-LnOH73nyKTFjBblVGQ66nPn0Vg.mft
Manifest number: F4
Signing time: Mon 27 Apr 2026 05:01:10 +0000
Manifest this update: Mon 27 Apr 2026 05:01:10 +0000
Manifest next update: Tue 28 Apr 2026 05:01:10 +0000
Files and hashes: 1: 1-LnOH73nyKTFjBblVGQ66nPn0Vg.crl (hash: MfF4vyj8kn1uR7HfVYSeKid/tWLLfTt4SlGYpNoJ4Tg=)
2: Wlc1mb_xj0DVaYUUDsBCwlVjTTI.roa (hash: OHp7KIYzafsL5kJAIldfo0uoA+OMQo8MF+eM1s5TkVM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/82ec13-82cf-4eb7-b1e4-9a55885e5f66/1/1-LnOH73nyKTFjBblVGQ66nPn0Vg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/82ec13-82cf-4eb7-b1e4-9a55885e5f66/1/1-LnOH73nyKTFjBblVGQ66nPn0Vg.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-LnOH73nyKTFjBblVGQ66nPn0Vg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 05:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cd:50:14:28:ee:ca:59:5f:68:34:ce:8d:2b:96:d5:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8b9ce1fbde7c8a4c58c16e554643aea73e7d158
Validity
Not Before: Apr 27 05:01:10 2026 GMT
Not After : Apr 28 05:01:10 2026 GMT
Subject: CN=1dd152076a5b00513610777eb23f6ca230f78f27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:91:98:b4:ea:af:0a:49:d5:ad:98:cd:5c:42:
ef:3c:c1:6c:3c:9c:22:db:fe:93:19:b2:d2:73:1e:
e0:ee:df:1d:16:54:6f:6a:1e:16:32:ef:6e:42:67:
e8:f2:94:5a:dd:35:55:6c:39:8e:6f:55:64:23:d3:
e3:ca:02:c8:52:8f:29:fc:f8:7c:99:0f:7c:d9:dc:
98:7b:94:39:d1:a6:48:a5:40:be:46:d4:37:72:e6:
02:86:63:eb:18:06:ea:28:fc:9b:1f:20:17:6d:ba:
b7:56:04:37:45:70:5e:d7:20:b9:11:f3:d1:0c:04:
7a:5c:3d:9e:fd:d9:f0:63:1d:0c:14:a3:4e:6f:5e:
81:b7:35:7c:80:ca:99:6d:32:68:5e:56:e5:dc:b3:
02:2b:7d:f8:76:74:17:03:72:1c:0e:9b:05:a0:34:
f8:8a:24:f9:37:74:26:00:20:a9:75:38:cf:d3:87:
0d:76:22:92:7a:43:7e:d3:1c:ac:00:85:9f:b5:cb:
77:c3:3b:a3:51:73:a0:2b:43:f8:d4:9d:59:76:ff:
29:c8:3e:2a:cc:a6:2e:7c:0b:95:3f:c7:38:e7:f6:
fa:ec:d5:6e:a7:28:f8:a4:29:91:c0:43:c3:27:dc:
ea:82:7b:6a:53:39:55:d5:4b:4e:23:44:82:3a:2a:
65:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:D1:52:07:6A:5B:00:51:36:10:77:7E:B2:3F:6C:A2:30:F7:8F:27
X509v3 Authority Key Identifier:
keyid:F8:B9:CE:1F:BD:E7:C8:A4:C5:8C:16:E5:54:64:3A:EA:73:E7:D1:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-LnOH73nyKTFjBblVGQ66nPn0Vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/82ec13-82cf-4eb7-b1e4-9a55885e5f66/1/1-LnOH73nyKTFjBblVGQ66nPn0Vg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/82ec13-82cf-4eb7-b1e4-9a55885e5f66/1/1-LnOH73nyKTFjBblVGQ66nPn0Vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:90:90:1b:a7:af:8e:b8:0d:7d:e4:0f:d2:6b:18:1f:16:e9:
73:2f:5e:ba:f2:72:fb:d6:b8:06:d1:1c:76:92:09:d2:2b:02:
77:39:35:0e:6c:49:8e:20:af:4c:f0:24:9f:25:74:6e:d2:f1:
fa:fa:e4:ba:50:26:b9:0e:cc:0d:c0:fa:92:95:d3:34:68:b5:
b6:3f:2e:8e:ac:f3:24:18:4f:17:7a:09:8f:49:d7:b1:a4:7f:
b3:95:aa:78:25:2b:9f:bf:a3:39:e7:33:b4:b7:1b:de:f6:52:
43:ba:5f:ec:7b:81:16:25:90:0e:01:e6:83:5b:84:c1:e8:3b:
51:f5:a8:d3:1f:66:28:68:c5:79:b1:7e:0a:b4:a3:59:56:d0:
7d:c2:8d:04:10:f9:3e:8b:e9:98:f2:72:9a:7a:e2:0b:fe:d4:
a2:2d:85:d4:58:a3:d4:f4:3e:ca:45:f8:b9:59:88:d3:ea:b7:
f2:a9:e9:b5:2a:d8:30:1b:78:5f:32:dc:95:c8:29:86:8d:7e:
ec:15:a3:b4:06:86:32:d5:8a:20:e1:02:88:ea:66:af:28:41:
8e:32:fa:5f:8f:fb:d8:91:b2:ec:99:f1:3e:6e:c6:bb:0d:74:
ef:f9:d2:e8:bc:b2:2c:28:8a:e4:ec:c2:78:e4:8d:fc:37:fc:
81:28:94:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 09:56:28 2026 by rpki-client