Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/dcf5ed-a1cb-4963-88af-4d77298b3b3b/1/1-LPhsj40sT9vfvKx5_p32iD-ZBI.mft
File: 1-LPhsj40sT9vfvKx5_p32iD-ZBI.mft (raw, json)
Hash identifier: 0WLkjYqAJC/PE/hZdwHkAEp5PiKZNJ+nVW2tGxDXkDw=
Subject key identifier: B0:5A:3E:4C:E9:4E:29:FA:B9:84:0F:4C:94:80:41:4A:D4:21:DA:E8
Authority key identifier: F8:B3:E1:B2:3E:34:B1:3F:6F:7E:F2:B1:E7:FA:77:DA:20:FE:64:12
Certificate issuer: /CN=f8b3e1b23e34b13f6f7ef2b1e7fa77da20fe6412
Certificate serial: 019E2F970E34EEE8E53805E03C6356D2A64A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-LPhsj40sT9vfvKx5_p32iD-ZBI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/dcf5ed-a1cb-4963-88af-4d77298b3b3b/1/1-LPhsj40sT9vfvKx5_p32iD-ZBI.mft
Manifest number: 190C
Signing time: Sat 16 May 2026 07:01:29 +0000
Manifest this update: Sat 16 May 2026 07:01:29 +0000
Manifest next update: Sun 17 May 2026 07:01:29 +0000
Files and hashes: 1: 1-LPhsj40sT9vfvKx5_p32iD-ZBI.crl (hash: zQQCyx/dBQyut/bY55LL/p+rqxxtjy4NMEqr1eD7KpM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/dcf5ed-a1cb-4963-88af-4d77298b3b3b/1/1-LPhsj40sT9vfvKx5_p32iD-ZBI.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/dcf5ed-a1cb-4963-88af-4d77298b3b3b/1/1-LPhsj40sT9vfvKx5_p32iD-ZBI.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-LPhsj40sT9vfvKx5_p32iD-ZBI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 07:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:2f:97:0e:34:ee:e8:e5:38:05:e0:3c:63:56:d2:a6:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8b3e1b23e34b13f6f7ef2b1e7fa77da20fe6412
Validity
Not Before: May 16 07:01:29 2026 GMT
Not After : May 17 07:01:29 2026 GMT
Subject: CN=b05a3e4ce94e29fab9840f4c9480414ad421dae8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:19:7e:6a:a8:a8:dd:b9:77:9a:44:07:66:cf:
ae:09:f3:20:b1:ee:7f:d6:25:22:1b:b8:33:18:a6:
b2:b6:d1:88:9e:44:58:46:66:a0:04:04:e8:6e:72:
ba:af:5f:ec:aa:69:d2:0d:a2:76:57:54:6c:26:ed:
69:8a:44:98:43:91:fb:7e:bb:17:1c:ec:89:7c:16:
36:94:8d:77:24:8a:ba:5c:37:b8:ab:63:a0:a4:f8:
58:b2:47:0b:d9:bf:8b:f8:94:ba:72:aa:de:e9:5a:
da:9f:c3:1f:c9:cb:59:2b:75:63:3a:fb:35:d9:85:
cd:9d:1e:ae:34:3e:bf:31:30:15:6d:4f:11:3d:18:
18:01:6c:4c:ca:3d:3a:b9:bf:03:5b:37:02:e5:57:
fe:dc:b0:5a:96:77:04:2d:58:61:9f:f2:92:09:23:
f9:a2:2f:28:1d:33:ee:6e:4d:33:3b:bd:e4:f2:4d:
81:bb:0f:d2:3e:26:46:ea:65:3b:ed:de:81:25:20:
ab:d8:de:4c:cf:2d:90:3d:f2:06:16:0e:9b:c6:43:
38:d9:61:b9:48:00:bf:cf:56:99:05:ec:63:1b:5c:
f7:21:a4:ea:69:e2:e9:e5:da:30:54:91:ee:6f:7f:
26:6a:56:cc:70:0c:22:96:02:92:e0:c7:cf:24:59:
1c:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:5A:3E:4C:E9:4E:29:FA:B9:84:0F:4C:94:80:41:4A:D4:21:DA:E8
X509v3 Authority Key Identifier:
keyid:F8:B3:E1:B2:3E:34:B1:3F:6F:7E:F2:B1:E7:FA:77:DA:20:FE:64:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-LPhsj40sT9vfvKx5_p32iD-ZBI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/dcf5ed-a1cb-4963-88af-4d77298b3b3b/1/1-LPhsj40sT9vfvKx5_p32iD-ZBI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/dcf5ed-a1cb-4963-88af-4d77298b3b3b/1/1-LPhsj40sT9vfvKx5_p32iD-ZBI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:aa:eb:e5:f1:b8:d0:a2:77:23:1e:d8:e0:12:fb:f7:ff:03:
8e:45:4f:f6:9f:f0:82:0f:cf:59:b3:2c:19:43:c9:a5:e4:7b:
eb:58:57:c4:e6:d7:cc:0f:f7:c0:87:cf:0c:a6:75:52:6a:dc:
aa:00:fe:fd:41:ee:38:3f:1e:ce:15:c7:6c:13:15:10:b4:d4:
40:be:35:cf:a1:43:79:c9:28:83:0e:63:7b:be:52:9e:01:9c:
12:8e:4f:f5:96:8e:21:47:59:11:b4:26:40:65:da:99:92:a5:
44:09:5d:b3:64:f9:55:5a:92:dd:de:3e:52:da:15:03:a7:12:
81:aa:04:e7:a8:cd:4d:7e:b9:0a:b2:38:2e:dc:07:46:bc:5b:
07:1b:00:53:b0:d8:eb:fd:d5:2d:ab:f0:68:81:9f:65:c2:47:
cd:85:7b:03:57:e2:8c:04:42:5c:f8:e8:6b:2a:c6:71:d7:4d:
f3:6c:44:0d:4d:5a:76:2f:ea:2b:c3:3b:b1:93:90:9d:50:86:
48:86:e2:9f:21:2e:a7:ed:9b:fa:44:67:f7:00:9d:cd:3f:cb:
7d:c9:8e:bd:eb:2f:0a:79:ae:72:0a:2a:dc:1c:12:ca:3c:da:
f2:82:f8:78:34:d9:6b:60:b5:a3:49:99:e4:af:64:92:11:2b:
6d:6e:57:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 16:26:52 2026 by rpki-client