Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/dcf5ed-a1cb-4963-88af-4d77298b3b3b/1/1-LPhsj40sT9vfvKx5_p32iD-ZBI.mft
File: 1-LPhsj40sT9vfvKx5_p32iD-ZBI.mft (raw, json)
Hash identifier: yYlJemxx47IrV5wT2HtWRlaRRjWD+I/d78BTBPvcWJ0=
Subject key identifier: 29:53:00:BD:80:A4:D1:4C:FF:8D:D4:47:00:B9:DC:C8:99:2A:0E:78
Authority key identifier: F8:B3:E1:B2:3E:34:B1:3F:6F:7E:F2:B1:E7:FA:77:DA:20:FE:64:12
Certificate issuer: /CN=f8b3e1b23e34b13f6f7ef2b1e7fa77da20fe6412
Certificate serial: 019F19431EEF872942ADBBE409E4E537CB0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-LPhsj40sT9vfvKx5_p32iD-ZBI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/dcf5ed-a1cb-4963-88af-4d77298b3b3b/1/1-LPhsj40sT9vfvKx5_p32iD-ZBI.mft
Manifest number: 1985
Signing time: Tue 30 Jun 2026 16:00:56 +0000
Manifest this update: Tue 30 Jun 2026 16:00:56 +0000
Manifest next update: Wed 01 Jul 2026 16:00:56 +0000
Files and hashes: 1: 1-LPhsj40sT9vfvKx5_p32iD-ZBI.crl (hash: O+yWEG1YE80jC71yQ4NrDhSZvmk0QlNjhsq5w5PiyQ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/dcf5ed-a1cb-4963-88af-4d77298b3b3b/1/1-LPhsj40sT9vfvKx5_p32iD-ZBI.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/dcf5ed-a1cb-4963-88af-4d77298b3b3b/1/1-LPhsj40sT9vfvKx5_p32iD-ZBI.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-LPhsj40sT9vfvKx5_p32iD-ZBI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 14:31:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:19:43:1e:ef:87:29:42:ad:bb:e4:09:e4:e5:37:cb:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8b3e1b23e34b13f6f7ef2b1e7fa77da20fe6412
Validity
Not Before: Jun 30 16:00:56 2026 GMT
Not After : Jul 1 16:00:56 2026 GMT
Subject: CN=295300bd80a4d14cff8dd44700b9dcc8992a0e78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:10:74:4f:ac:11:56:0f:16:9b:2a:96:9d:f8:
da:94:68:db:aa:60:d3:9c:2f:9a:b3:60:4a:bf:fb:
b7:40:f5:47:23:50:d5:6e:d6:72:62:a6:e7:8e:de:
b0:c5:93:71:6e:65:6f:36:ff:97:25:a4:7e:0f:19:
3a:59:bc:6e:67:41:10:34:35:f2:72:6d:e8:bc:bb:
32:38:f5:a6:79:fc:07:2a:bb:1e:40:42:31:04:3b:
05:99:83:2c:e7:5f:e5:c9:bc:a7:79:61:e5:68:84:
ec:36:17:32:52:3f:48:f6:0b:8b:7f:92:31:01:c3:
bb:86:7e:08:f7:61:c9:0f:81:30:e3:1f:ad:a9:34:
d6:61:22:c9:61:9f:28:36:e6:e6:bf:db:0b:ea:b7:
10:ca:99:be:93:5b:30:0b:2d:79:9f:99:42:4e:7a:
0c:80:63:79:8f:08:96:4d:5e:da:ce:bf:f2:53:fe:
39:28:6a:8f:b8:74:5d:a6:17:f8:2c:ee:f8:42:c6:
e7:0c:98:2d:e2:b0:0b:18:0c:fa:e9:ab:43:5e:d3:
ef:c6:0f:25:0c:1c:ff:16:11:8b:ee:31:8f:bc:4f:
2c:12:bd:f8:98:6a:3b:36:ac:db:f8:09:3a:b4:6e:
d3:b5:a6:8d:9b:d4:f1:a0:d5:72:81:d0:cd:71:79:
8e:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:53:00:BD:80:A4:D1:4C:FF:8D:D4:47:00:B9:DC:C8:99:2A:0E:78
X509v3 Authority Key Identifier:
keyid:F8:B3:E1:B2:3E:34:B1:3F:6F:7E:F2:B1:E7:FA:77:DA:20:FE:64:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-LPhsj40sT9vfvKx5_p32iD-ZBI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/dcf5ed-a1cb-4963-88af-4d77298b3b3b/1/1-LPhsj40sT9vfvKx5_p32iD-ZBI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/dcf5ed-a1cb-4963-88af-4d77298b3b3b/1/1-LPhsj40sT9vfvKx5_p32iD-ZBI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:35:3f:23:d3:f3:b6:9a:4f:ea:4a:69:9a:e4:ce:f8:85:8e:
ce:7b:32:0f:ca:13:84:08:79:a9:97:85:d6:2a:70:02:00:0c:
2b:f5:1e:a0:4c:7d:10:fa:20:77:b6:eb:b6:e3:a8:6c:62:6d:
c6:7d:0d:a5:35:96:c1:33:ca:87:ca:13:84:67:ab:b0:9e:e3:
03:0e:47:f0:0e:c1:e4:6f:60:23:74:b0:ba:8f:3c:7d:10:2b:
7b:3d:ec:45:70:dd:b3:09:5a:d2:8d:2b:3c:a1:57:04:69:4d:
66:f6:63:8b:ea:17:05:1e:9c:c4:4a:84:95:c7:90:8c:b9:6f:
e6:98:b1:96:8d:3b:d2:06:d3:70:7f:50:bb:e7:80:7e:bf:70:
9f:de:c0:b7:8f:66:e9:5e:a7:00:72:a3:98:06:cd:d3:ad:fa:
d3:1c:7c:14:cf:47:7a:35:e3:68:22:79:d8:80:92:57:53:fc:
16:2d:cc:4a:04:da:0e:e2:b7:c7:12:23:76:9a:21:52:97:f3:
09:da:b6:94:cc:f8:d4:41:71:64:ca:e8:b4:d4:0f:53:62:00:
ed:14:da:9d:45:da:4a:52:1b:81:5d:9d:81:69:0d:de:59:24:
fc:83:3d:b8:f6:a7:ca:2a:62:b8:c6:a9:54:54:b3:8e:36:ee:
70:8d:89:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:27:16 2026 by rpki-client