Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/be/dcf5ed-a1cb-4963-88af-4d77298b3b3b/1/1-LPhsj40sT9vfvKx5_p32iD-ZBI.mft
File: 1-LPhsj40sT9vfvKx5_p32iD-ZBI.mft (raw, json)
Hash identifier: jLgDfesyVNnUEyOOHooRoEnistJAcCwkiDwB2JItk1I=
Subject key identifier: AC:20:6B:35:0E:5C:EE:5D:4F:FB:DC:1A:50:3E:F3:D4:CA:23:57:78
Authority key identifier: F8:B3:E1:B2:3E:34:B1:3F:6F:7E:F2:B1:E7:FA:77:DA:20:FE:64:12
Certificate issuer: /CN=f8b3e1b23e34b13f6f7ef2b1e7fa77da20fe6412
Certificate serial: 01A13DB8CD20228DD3403284A0FC9AA29BF8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-LPhsj40sT9vfvKx5_p32iD-ZBI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/dcf5ed-a1cb-4963-88af-4d77298b3b3b/1/1-LPhsj40sT9vfvKx5_p32iD-ZBI.mft
Manifest number: 1AA1
Signing time: Thu 15 Oct 2026 04:01:23 +0000
Manifest this update: Thu 15 Oct 2026 04:01:23 +0000
Manifest next update: Fri 16 Oct 2026 04:01:23 +0000
Files and hashes: 1: 1-LPhsj40sT9vfvKx5_p32iD-ZBI.crl (hash: i2NCG1aqCgzY+fkzxaP4FrKn8TLRC8kHNO8dOylLHxg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/dcf5ed-a1cb-4963-88af-4d77298b3b3b/1/1-LPhsj40sT9vfvKx5_p32iD-ZBI.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/dcf5ed-a1cb-4963-88af-4d77298b3b3b/1/1-LPhsj40sT9vfvKx5_p32iD-ZBI.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-LPhsj40sT9vfvKx5_p32iD-ZBI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 04:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3d:b8:cd:20:22:8d:d3:40:32:84:a0:fc:9a:a2:9b:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8b3e1b23e34b13f6f7ef2b1e7fa77da20fe6412
Validity
Not Before: Oct 15 04:01:23 2026 GMT
Not After : Oct 16 04:01:23 2026 GMT
Subject: CN=ac206b350e5cee5d4ffbdc1a503ef3d4ca235778
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:50:8a:7a:50:60:d4:a5:75:05:8f:d9:a0:9b:
b2:8a:b8:1f:b1:7a:9e:b5:be:a0:ce:05:df:9a:23:
64:ec:69:b6:00:0b:5f:df:0c:d1:43:fe:21:45:22:
7f:4e:31:7b:74:03:49:cf:80:62:d9:fe:ea:b0:08:
8b:8a:4f:f7:f1:18:c6:b2:55:ae:f8:67:5c:08:1b:
83:82:62:7c:97:99:bf:06:99:77:7e:fc:1a:d2:48:
87:08:7d:f3:68:5c:fd:69:9c:7a:3f:2b:f3:6e:7a:
b2:a6:d0:9d:2d:e1:9e:2a:7e:7b:f7:92:0c:84:2e:
75:6d:b2:7f:a7:ed:2f:3d:aa:16:6f:9a:f7:83:34:
92:ca:ff:d1:fa:ea:d5:11:71:07:4f:eb:b7:d6:a8:
e5:6d:6c:b3:7c:df:3a:e4:fc:66:04:70:0c:72:fe:
95:30:72:f7:60:3b:b6:39:75:40:b1:0b:0e:31:8e:
e7:b4:d8:73:16:d1:21:90:9a:09:5b:bb:5b:b1:20:
0f:b2:a9:36:98:2d:73:a7:58:b5:3c:0e:3a:2e:bc:
49:7d:17:cf:26:41:b9:e9:fc:e5:28:0b:00:3f:13:
1d:b5:98:ae:5c:0f:ac:57:fd:2e:2c:ee:a4:79:05:
cf:c9:54:59:d8:47:56:6b:41:50:91:a7:9f:bc:49:
8e:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:20:6B:35:0E:5C:EE:5D:4F:FB:DC:1A:50:3E:F3:D4:CA:23:57:78
X509v3 Authority Key Identifier:
keyid:F8:B3:E1:B2:3E:34:B1:3F:6F:7E:F2:B1:E7:FA:77:DA:20:FE:64:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-LPhsj40sT9vfvKx5_p32iD-ZBI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/dcf5ed-a1cb-4963-88af-4d77298b3b3b/1/1-LPhsj40sT9vfvKx5_p32iD-ZBI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/dcf5ed-a1cb-4963-88af-4d77298b3b3b/1/1-LPhsj40sT9vfvKx5_p32iD-ZBI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:03:2b:d2:44:5c:32:30:76:fa:2b:8d:3d:67:5f:3d:f5:10:
76:f4:b6:85:9f:8c:c7:ec:97:08:9f:de:08:f2:ea:0b:83:81:
c0:a8:d0:ce:8b:e8:d8:23:eb:19:9b:af:9f:86:4d:fd:64:eb:
8a:00:d3:5d:16:28:19:95:a7:47:dc:3e:99:92:65:41:59:d4:
21:0f:56:cd:7a:33:43:ac:60:75:bd:36:a2:4e:13:16:28:98:
83:18:41:c4:69:5a:59:ef:ef:cc:23:ce:04:41:d9:e9:04:78:
86:70:06:8d:d5:33:f0:78:c1:34:67:80:3f:22:b4:92:0a:5f:
b7:08:ae:c0:86:ae:90:55:1e:38:d3:cb:dd:d2:a0:a0:ba:0e:
96:73:7a:a9:a7:70:38:c1:8a:fe:be:75:84:7d:07:be:f0:07:
21:dc:0e:a1:ac:68:34:65:70:7b:e8:34:46:f0:f0:4c:6d:f9:
30:07:d4:91:4a:d9:a8:10:b9:45:3d:25:09:d8:60:b7:49:14:
f6:20:b8:f6:f0:2d:69:e5:ca:ed:fb:52:de:f7:9d:73:3b:9e:
76:b0:d1:63:d9:d4:de:dc:98:68:3c:62:38:5e:e7:49:c5:77:
94:db:eb:b7:9e:f1:7a:eb:7d:5c:51:f4:9d:21:ed:f3:90:3f:
d5:6b:1d:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 12:39:09 2026 by rpki-client