Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/dcf5ed-a1cb-4963-88af-4d77298b3b3b/1/1-LPhsj40sT9vfvKx5_p32iD-ZBI.mft
File: 1-LPhsj40sT9vfvKx5_p32iD-ZBI.mft (raw, json)
Hash identifier: 4GQDqCuTiT3hMMz+FklWSohKlQMzh8ycDniLhAL4K8U=
Subject key identifier: 71:9C:CD:7B:C5:BD:B3:47:AB:53:A2:87:79:37:96:B5:C6:2B:BF:8C
Authority key identifier: F8:B3:E1:B2:3E:34:B1:3F:6F:7E:F2:B1:E7:FA:77:DA:20:FE:64:12
Certificate issuer: /CN=f8b3e1b23e34b13f6f7ef2b1e7fa77da20fe6412
Certificate serial: 01A00101238F99F43A14BB5400686C96F2E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-LPhsj40sT9vfvKx5_p32iD-ZBI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/dcf5ed-a1cb-4963-88af-4d77298b3b3b/1/1-LPhsj40sT9vfvKx5_p32iD-ZBI.mft
Manifest number: 19FD
Signing time: Fri 14 Aug 2026 16:00:46 +0000
Manifest this update: Fri 14 Aug 2026 16:00:46 +0000
Manifest next update: Sat 15 Aug 2026 16:00:46 +0000
Files and hashes: 1: 1-LPhsj40sT9vfvKx5_p32iD-ZBI.crl (hash: n39x1lE9rfvRjPlaOzkwMt0R4mN5/slAbUB+TCUuKFs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/dcf5ed-a1cb-4963-88af-4d77298b3b3b/1/1-LPhsj40sT9vfvKx5_p32iD-ZBI.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/dcf5ed-a1cb-4963-88af-4d77298b3b3b/1/1-LPhsj40sT9vfvKx5_p32iD-ZBI.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-LPhsj40sT9vfvKx5_p32iD-ZBI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:01:23:8f:99:f4:3a:14:bb:54:00:68:6c:96:f2:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8b3e1b23e34b13f6f7ef2b1e7fa77da20fe6412
Validity
Not Before: Aug 14 16:00:46 2026 GMT
Not After : Aug 15 16:00:46 2026 GMT
Subject: CN=719ccd7bc5bdb347ab53a287793796b5c62bbf8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:33:51:0b:e8:e6:4a:82:b2:7c:1a:04:56:67:
9a:4d:17:fb:bc:17:15:8f:f5:01:97:ff:43:7a:5c:
1d:50:92:25:b7:1c:a6:46:d0:75:ba:cb:0e:37:57:
b2:e5:38:38:af:64:56:d0:3f:65:c5:b2:b9:93:91:
6c:f7:a9:ab:60:d7:03:5c:5c:5e:1f:e5:90:11:74:
79:8b:86:1f:73:0a:68:63:4c:30:ee:7e:74:20:f7:
43:c8:23:b1:e6:67:5e:91:27:7d:85:72:fe:97:1a:
f1:ca:bb:53:bc:79:62:89:91:5f:ac:d5:64:33:fd:
c7:53:2d:c3:5b:f4:38:a8:71:38:31:2a:9e:fe:4d:
f7:af:cc:c3:04:8e:63:7c:65:7f:1b:06:c6:3d:63:
39:f8:56:db:3a:88:c5:9f:ae:53:ab:2c:4b:90:fe:
3c:5b:e1:41:11:1e:9d:5a:32:c5:f8:32:8f:1e:f5:
7e:0c:b5:9e:28:3b:ba:a5:c3:5a:1a:db:0d:ba:de:
73:85:6a:64:95:3e:b9:4f:88:18:71:83:29:0d:10:
6d:b0:18:51:87:ad:e0:d2:3a:c9:d0:1f:21:68:11:
1f:36:cb:c5:9e:c6:0a:99:1d:69:be:e9:63:54:20:
32:08:49:7c:b2:e0:4b:8b:76:69:68:2f:c9:1c:37:
83:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:9C:CD:7B:C5:BD:B3:47:AB:53:A2:87:79:37:96:B5:C6:2B:BF:8C
X509v3 Authority Key Identifier:
keyid:F8:B3:E1:B2:3E:34:B1:3F:6F:7E:F2:B1:E7:FA:77:DA:20:FE:64:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-LPhsj40sT9vfvKx5_p32iD-ZBI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/dcf5ed-a1cb-4963-88af-4d77298b3b3b/1/1-LPhsj40sT9vfvKx5_p32iD-ZBI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/dcf5ed-a1cb-4963-88af-4d77298b3b3b/1/1-LPhsj40sT9vfvKx5_p32iD-ZBI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:61:ce:e3:8f:78:e4:2d:d2:bf:d9:ce:6c:f3:a9:e0:84:5c:
52:d6:68:05:23:63:e8:21:b8:0f:c0:33:23:99:44:d5:b0:af:
52:85:54:67:af:60:b1:14:6b:d7:fd:7a:d8:ae:47:55:25:81:
78:92:00:a2:11:a9:94:be:65:8a:5d:a0:fb:9b:04:eb:3e:e6:
7a:44:dd:f4:49:92:8c:c4:55:cb:7a:bd:d8:7a:86:af:dd:37:
f6:a4:d0:50:23:fb:f4:b0:35:be:04:6b:68:73:d4:b1:1a:1a:
98:57:3a:40:8e:8f:ab:c5:c4:5f:03:9a:74:c6:29:1b:31:b1:
6c:83:1d:5d:3a:7a:38:d1:14:9e:89:a9:66:6e:79:7b:4d:7a:
fa:1a:5e:64:93:9c:9b:af:3f:c6:1a:48:2c:4f:dc:cb:e6:64:
1f:44:da:32:4a:d0:f9:eb:a7:19:89:a0:0b:92:a7:dd:37:99:
ee:a1:24:49:c5:3c:b1:77:33:2a:55:2d:a1:fe:52:2c:17:10:
bc:41:d1:29:d7:a5:b6:68:1c:e4:bd:9e:c6:78:ce:82:7b:89:
b4:24:48:c5:e5:57:0c:59:f6:f3:e4:d9:50:bc:58:ec:fd:81:
fd:c8:ea:c8:b6:f2:b4:de:75:5d:27:71:cc:1f:86:2d:71:6f:
e9:fc:d8:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 23:37:02 2026 by rpki-client