
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/4db93d-fc87-4e16-9b3b-79453b474e2e/1/1LDBHmZmz8G38baZTg9Dcymt7AQ.mft
File: 1LDBHmZmz8G38baZTg9Dcymt7AQ.mft (raw, json)
Hash identifier: KtX0gGqHcOmGWX4tdMIeZWQprWGomAZrGcqeUDd5wcM=
Subject key identifier: AC:91:D6:B9:13:21:20:D9:FB:54:FC:ED:BD:B0:D9:E5:2E:60:D9:27
Authority key identifier: D4:B0:C1:1E:66:66:CF:C1:B7:F1:B6:99:4E:0F:43:73:29:AD:EC:04
Certificate issuer: /CN=d4b0c11e6666cfc1b7f1b6994e0f437329adec04
Certificate serial: 019EFD95F51391B7E9F27966A200679271A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1LDBHmZmz8G38baZTg9Dcymt7AQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/4db93d-fc87-4e16-9b3b-79453b474e2e/1/1LDBHmZmz8G38baZTg9Dcymt7AQ.mft
Manifest number: 190D
Signing time: Thu 25 Jun 2026 07:02:03 +0000
Manifest this update: Thu 25 Jun 2026 07:02:03 +0000
Manifest next update: Fri 26 Jun 2026 07:02:03 +0000
Files and hashes: 1: 1LDBHmZmz8G38baZTg9Dcymt7AQ.crl (hash: 43mv8KKWvnunj4UUW6k153fWY43U84eUMw+s/QT0Sog=)
2: jGUPhdM1XZTdzsS3lD-IYIE9S9g.roa (hash: 69/RQWyt8lYUh/QhtvMFFUSfV50PWIikyQS0MBItp/o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/4db93d-fc87-4e16-9b3b-79453b474e2e/1/1LDBHmZmz8G38baZTg9Dcymt7AQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/4db93d-fc87-4e16-9b3b-79453b474e2e/1/1LDBHmZmz8G38baZTg9Dcymt7AQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1LDBHmZmz8G38baZTg9Dcymt7AQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 26 Jun 2026 07:02:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:fd:95:f5:13:91:b7:e9:f2:79:66:a2:00:67:92:71:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4b0c11e6666cfc1b7f1b6994e0f437329adec04
Validity
Not Before: Jun 25 07:02:03 2026 GMT
Not After : Jun 26 07:02:03 2026 GMT
Subject: CN=ac91d6b9132120d9fb54fcedbdb0d9e52e60d927
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:2d:d8:52:d9:da:8e:7a:2f:ef:9f:e4:8b:ce:
48:73:19:52:ed:70:cf:e7:83:56:e3:1d:53:66:36:
eb:17:8c:da:b6:14:38:51:ef:c3:ba:e2:a9:07:68:
19:77:b0:72:45:64:1c:77:75:15:59:16:e8:1e:c7:
14:e0:07:5a:24:bb:fd:2d:69:69:7d:cf:33:37:0e:
72:62:ed:84:57:48:4a:0d:9c:0a:1b:e8:07:02:aa:
af:af:3d:9c:56:a0:71:d8:36:89:22:e4:51:83:49:
e3:ad:ba:71:eb:30:54:56:2e:90:bc:2c:a9:3d:18:
7c:c6:73:98:4f:34:ab:db:af:6b:df:cd:8e:b5:f0:
35:aa:75:c2:6e:30:6a:e1:df:97:5b:d3:73:bf:0c:
5a:4c:69:12:9c:71:91:87:c1:75:09:65:63:7b:f2:
a1:10:9a:d8:3d:68:2b:84:32:2d:d8:2e:a6:5f:3c:
85:05:81:be:9e:29:81:61:cb:1a:3c:06:f1:38:9e:
20:0f:0c:17:59:ab:77:ca:3e:b3:14:58:f9:13:ad:
02:f8:69:a1:60:7e:54:13:17:d5:59:a3:a1:34:3e:
85:a6:12:03:82:a6:1d:97:7c:b8:b6:92:f7:09:9e:
31:ce:cb:c6:d0:fa:56:72:a6:12:8f:c7:ed:47:30:
4b:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:91:D6:B9:13:21:20:D9:FB:54:FC:ED:BD:B0:D9:E5:2E:60:D9:27
X509v3 Authority Key Identifier:
keyid:D4:B0:C1:1E:66:66:CF:C1:B7:F1:B6:99:4E:0F:43:73:29:AD:EC:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1LDBHmZmz8G38baZTg9Dcymt7AQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/4db93d-fc87-4e16-9b3b-79453b474e2e/1/1LDBHmZmz8G38baZTg9Dcymt7AQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/4db93d-fc87-4e16-9b3b-79453b474e2e/1/1LDBHmZmz8G38baZTg9Dcymt7AQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:87:87:58:17:3d:19:62:44:24:db:22:19:ae:bd:98:dc:cf:
b0:97:8c:de:2a:68:48:b3:5b:9f:c2:8f:4a:9a:81:22:c2:66:
23:7f:ab:a6:18:47:54:e6:f7:74:63:88:70:50:47:86:39:9b:
bc:89:40:89:87:d3:5c:48:0a:fe:a2:8c:43:79:eb:42:35:a2:
4f:db:0d:7b:6e:c3:39:81:f5:e7:7f:32:f5:68:14:3f:c3:a4:
e0:15:ed:69:5e:6d:43:84:9d:57:39:da:d8:c1:85:68:d1:f6:
55:79:c3:bc:29:68:a9:9a:31:1f:5c:8c:27:1f:1c:d9:3f:97:
66:50:69:8b:88:76:68:ab:db:05:3f:81:9d:05:a8:dd:dc:62:
24:73:75:88:7a:bd:b1:48:71:5b:20:35:03:09:47:88:bb:83:
ae:cb:7a:f7:0f:25:78:f4:81:d3:1d:aa:71:1f:3b:85:9b:61:
d2:a8:b2:ba:37:bd:f4:8e:11:c5:71:a1:99:34:02:29:5f:d2:
f7:c8:6d:74:f9:8e:af:e5:89:9f:e9:11:fa:5f:3d:be:27:e0:
83:f6:87:e4:d9:83:00:fb:51:01:07:c7:09:bc:b6:d0:87:a7:
95:5f:27:50:d9:26:c0:26:56:d2:6c:b9:70:59:9a:7e:d8:d4:
35:4a:b3:74
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ79lfUTkbfp8nlmogBnknGlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ0YjBjMTFlNjY2NmNmYzFiN2YxYjY5OTRlMGY0MzczMjlh
ZGVjMDQwHhcNMjYwNjI1MDcwMjAzWhcNMjYwNjI2MDcwMjAzWjAzMTEwLwYDVQQD
EyhhYzkxZDZiOTEzMjEyMGQ5ZmI1NGZjZWRiZGIwZDllNTJlNjBkOTI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvy3YUtnajnov75/ki85IcxlS7XDP
54NW4x1TZjbrF4zathQ4Ue/DuuKpB2gZd7ByRWQcd3UVWRboHscU4AdaJLv9LWlp
fc8zNw5yYu2EV0hKDZwKG+gHAqqvrz2cVqBx2DaJIuRRg0njrbpx6zBUVi6QvCyp
PRh8xnOYTzSr269r382OtfA1qnXCbjBq4d+XW9NzvwxaTGkSnHGRh8F1CWVje/Kh
EJrYPWgrhDIt2C6mXzyFBYG+nimBYcsaPAbxOJ4gDwwXWat3yj6zFFj5E60C+Gmh
YH5UExfVWaOhND6FphIDgqYdl3y4tpL3CZ4xzsvG0PpWcqYSj8ftRzBLRwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKyR1rkTISDZ+1T87b2w2eUuYNknMB8GA1UdIwQY
MBaAFNSwwR5mZs/Bt/G2mU4PQ3MprewEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMUxEQkhtWm16OEczOGJhWlRnOURjeW10N0FRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS80ZGI5M2QtZmM4Ny00ZTE2LTliM2It
Nzk0NTNiNDc0ZTJlLzEvMUxEQkhtWm16OEczOGJhWlRnOURjeW10N0FRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNS80ZGI5M2QtZmM4Ny00ZTE2LTliM2ItNzk0NTNiNDc0ZTJl
LzEvMUxEQkhtWm16OEczOGJhWlRnOURjeW10N0FRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVoeHWBc9
GWJEJNsiGa69mNzPsJeM3ipoSLNbn8KPSpqBIsJmI3+rphhHVOb3dGOIcFBHhjmb
vIlAiYfTXEgK/qKMQ3nrQjWiT9sNe27DOYH1538y9WgUP8Ok4BXtaV5tQ4SdVzna
2MGFaNH2VXnDvCloqZoxH1yMJx8c2T+XZlBpi4h2aKvbBT+BnQWo3dxiJHN1iHq9
sUhxWyA1AwlHiLuDrst69w8lePSB0x2qcR87hZth0qiyuje99I4RxXGhmTQCKV/S
98htdPmOr+WJn+kR+l89vifgg/aH5NmDAPtRAQfHCby20IenlV8nUNkmwCZW0my5
cFmaftjUNUqzdA==
-----END CERTIFICATE-----
Generated at Thu Jun 25 15:34:04 2026 by rpki-client