Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/dcf5ed-a1cb-4963-88af-4d77298b3b3b/1/1-LPhsj40sT9vfvKx5_p32iD-ZBI.mft
File: 1-LPhsj40sT9vfvKx5_p32iD-ZBI.mft (raw, json)
Hash identifier: fNq6uC3ihtq6ViLzYsqQn1qE9884y13jMcUwApC0JiQ=
Subject key identifier: 9D:79:D7:0F:77:47:8D:73:6A:08:97:56:5A:4C:84:FB:CB:AA:56:26
Authority key identifier: F8:B3:E1:B2:3E:34:B1:3F:6F:7E:F2:B1:E7:FA:77:DA:20:FE:64:12
Certificate issuer: /CN=f8b3e1b23e34b13f6f7ef2b1e7fa77da20fe6412
Certificate serial: 019D386623885B601E89570DDEFD93F83A4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-LPhsj40sT9vfvKx5_p32iD-ZBI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/dcf5ed-a1cb-4963-88af-4d77298b3b3b/1/1-LPhsj40sT9vfvKx5_p32iD-ZBI.mft
Manifest number: 188C
Signing time: Sun 29 Mar 2026 07:01:50 +0000
Manifest this update: Sun 29 Mar 2026 07:01:50 +0000
Manifest next update: Mon 30 Mar 2026 07:01:50 +0000
Files and hashes: 1: 1-LPhsj40sT9vfvKx5_p32iD-ZBI.crl (hash: kKnmXh4O3cXPsXHM0cBkJACyWcjmPo8dgo6VQBndN/s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/dcf5ed-a1cb-4963-88af-4d77298b3b3b/1/1-LPhsj40sT9vfvKx5_p32iD-ZBI.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/dcf5ed-a1cb-4963-88af-4d77298b3b3b/1/1-LPhsj40sT9vfvKx5_p32iD-ZBI.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-LPhsj40sT9vfvKx5_p32iD-ZBI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:23:88:5b:60:1e:89:57:0d:de:fd:93:f8:3a:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8b3e1b23e34b13f6f7ef2b1e7fa77da20fe6412
Validity
Not Before: Mar 29 07:01:50 2026 GMT
Not After : Mar 30 07:01:50 2026 GMT
Subject: CN=9d79d70f77478d736a0897565a4c84fbcbaa5626
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:d5:f5:00:05:b3:82:f8:3e:8b:6b:0e:83:e6:
42:62:59:5d:d5:4c:c6:57:d0:b1:3f:be:dd:f8:46:
d4:84:2e:a1:0b:7a:9c:7f:d5:a5:9e:06:f5:ac:4f:
dc:e0:7a:74:6e:88:1a:6b:18:42:8f:56:75:ba:34:
bc:c4:7c:fd:c8:44:13:32:44:a6:7d:eb:c1:80:23:
c0:1c:8d:fc:b6:74:b9:2a:86:8b:2d:a6:83:1b:aa:
55:6a:1d:a8:2d:ad:aa:65:6e:aa:5c:1d:c8:21:05:
79:0a:ac:45:81:36:45:16:24:c2:e7:47:51:78:1a:
9b:0c:df:f9:ec:14:20:41:9a:b1:7f:91:b2:d4:eb:
85:c8:a9:76:11:64:89:37:fa:d7:9d:b8:b6:3f:43:
77:3b:ce:96:c1:ed:5c:58:00:46:00:07:88:fa:74:
ca:5e:e8:77:b8:b1:6b:ab:e3:9a:9e:87:01:de:3f:
fe:17:6e:a8:3f:69:04:f0:ba:f6:26:21:e8:70:68:
90:83:63:98:5b:37:43:a6:4b:22:ff:3e:4b:8d:63:
ca:96:81:a3:c9:7c:84:fa:00:fb:86:d5:fb:d1:a7:
72:f9:68:12:8f:54:91:69:a9:d7:bd:e0:6b:00:0b:
4e:7f:94:b1:dd:40:80:85:48:30:13:7f:38:33:d6:
bf:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:79:D7:0F:77:47:8D:73:6A:08:97:56:5A:4C:84:FB:CB:AA:56:26
X509v3 Authority Key Identifier:
keyid:F8:B3:E1:B2:3E:34:B1:3F:6F:7E:F2:B1:E7:FA:77:DA:20:FE:64:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-LPhsj40sT9vfvKx5_p32iD-ZBI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/dcf5ed-a1cb-4963-88af-4d77298b3b3b/1/1-LPhsj40sT9vfvKx5_p32iD-ZBI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/dcf5ed-a1cb-4963-88af-4d77298b3b3b/1/1-LPhsj40sT9vfvKx5_p32iD-ZBI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:fa:d7:d2:6a:f7:73:0f:24:89:66:bb:7e:d6:75:76:b8:b1:
52:3c:99:09:84:d4:dd:27:48:26:96:e8:49:a8:f2:a6:d2:20:
6a:d5:eb:15:c8:d2:f0:4e:00:0b:2a:86:ce:20:cd:7a:b7:de:
c0:dc:d2:3c:f5:bb:53:71:d6:48:06:08:96:c7:d5:31:44:7c:
56:6f:db:c0:91:31:02:b5:c4:8f:92:25:6e:ad:29:84:47:fd:
13:f5:76:07:fb:16:07:3e:e3:46:19:58:5d:f1:b5:de:c2:d7:
39:f7:0f:cc:e1:ec:fe:e7:5f:a9:e1:15:6a:f3:0e:dd:b2:1e:
47:b0:51:01:13:1d:9a:41:01:1c:4a:09:05:8c:83:68:03:80:
c8:ca:bb:38:e0:cc:55:2f:7a:61:c4:fa:f6:35:0c:4b:14:37:
43:9c:30:54:8c:d8:f6:75:1c:48:cd:16:fa:1c:13:3c:e2:be:
3f:08:e4:f1:74:b4:ac:3c:e6:cf:f8:0b:3b:ea:f4:4d:e6:cd:
f6:96:c1:dc:4b:de:f1:78:37:22:75:d3:df:2e:8b:26:5d:5e:
70:c6:60:bb:e1:29:8c:fc:f7:39:b2:3a:55:7f:0b:a3:d1:78:
32:99:05:cb:85:78:d1:ef:6f:01:d8:b7:b9:10:65:7a:56:2e:
56:d7:35:1b
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZ04ZiOIW2AeiVcN3v2T+DpMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY4YjNlMWIyM2UzNGIxM2Y2ZjdlZjJiMWU3ZmE3N2RhMjBm
ZTY0MTIwHhcNMjYwMzI5MDcwMTUwWhcNMjYwMzMwMDcwMTUwWjAzMTEwLwYDVQQD
Eyg5ZDc5ZDcwZjc3NDc4ZDczNmEwODk3NTY1YTRjODRmYmNiYWE1NjI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy9X1AAWzgvg+i2sOg+ZCYlld1UzG
V9CxP77d+EbUhC6hC3qcf9Wlngb1rE/c4Hp0bogaaxhCj1Z1ujS8xHz9yEQTMkSm
fevBgCPAHI38tnS5KoaLLaaDG6pVah2oLa2qZW6qXB3IIQV5CqxFgTZFFiTC50dR
eBqbDN/57BQgQZqxf5Gy1OuFyKl2EWSJN/rXnbi2P0N3O86Wwe1cWABGAAeI+nTK
Xuh3uLFrq+OanocB3j/+F26oP2kE8Lr2JiHocGiQg2OYWzdDpksi/z5LjWPKloGj
yXyE+gD7htX70ady+WgSj1SRaanXveBrAAtOf5Sx3UCAhUgwE384M9a//QIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFJ151w93R41zagiXVlpMhPvLqlYmMB8GA1UdIwQY
MBaAFPiz4bI+NLE/b37ysef6d9og/mQSMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1MUGhzajQwc1Q5dmZ2S3g1X3AzMmlELVpCSS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYmUvZGNmNWVkLWExY2ItNDk2My04OGFm
LTRkNzcyOThiM2IzYi8xLzEtTFBoc2o0MHNUOXZmdkt4NV9wMzJpRC1aQkkubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxUL2JlL2RjZjVlZC1hMWNiLTQ5NjMtODhhZi00ZDc3Mjk4YjNi
M2IvMS8xLUxQaHNqNDBzVDl2ZnZLeDVfcDMyaUQtWkJJLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADPrX
0mr3cw8kiWa7ftZ1drixUjyZCYTU3SdIJpboSajyptIgatXrFcjS8E4ACyqGziDN
erfewNzSPPW7U3HWSAYIlsfVMUR8Vm/bwJExArXEj5Ilbq0phEf9E/V2B/sWBz7j
RhlYXfG13sLXOfcPzOHs/udfqeEVavMO3bIeR7BRARMdmkEBHEoJBYyDaAOAyMq7
OODMVS96YcT69jUMSxQ3Q5wwVIzY9nUcSM0W+hwTPOK+Pwjk8XS0rDzmz/gLO+r0
TebN9pbB3Eve8Xg3InXT3y6LJl1ecMZgu+EpjPz3ObI6VX8Lo9F4MpkFy4V40e9v
Adi3uRBlelYuVtc1Gw==
-----END CERTIFICATE-----
Generated at Sun Mar 29 14:09:48 2026 by rpki-client