Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f5/4db93d-fc87-4e16-9b3b-79453b474e2e/1/1LDBHmZmz8G38baZTg9Dcymt7AQ.mft
File: 1LDBHmZmz8G38baZTg9Dcymt7AQ.mft (raw, json)
Hash identifier: VHyd9wQlpcZRq+lXw3EIh6hI+thYk7NJMxhZSHcZHmo=
Subject key identifier: A9:A3:6A:4A:52:B7:34:39:8E:E3:3F:83:98:F7:A3:60:C8:1F:AC:A0
Authority key identifier: D4:B0:C1:1E:66:66:CF:C1:B7:F1:B6:99:4E:0F:43:73:29:AD:EC:04
Certificate issuer: /CN=d4b0c11e6666cfc1b7f1b6994e0f437329adec04
Certificate serial: 01A13D13E09C02903D5914797039C8D3B683
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1LDBHmZmz8G38baZTg9Dcymt7AQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/4db93d-fc87-4e16-9b3b-79453b474e2e/1/1LDBHmZmz8G38baZTg9Dcymt7AQ.mft
Manifest number: 1A37
Signing time: Thu 15 Oct 2026 01:01:15 +0000
Manifest this update: Thu 15 Oct 2026 01:01:15 +0000
Manifest next update: Fri 16 Oct 2026 01:01:15 +0000
Files and hashes: 1: 1LDBHmZmz8G38baZTg9Dcymt7AQ.crl (hash: DJxhQhqQiXfsFcP021t4PIQQeoV3Cm72jqi1e8N443w=)
2: jGUPhdM1XZTdzsS3lD-IYIE9S9g.roa (hash: 69/RQWyt8lYUh/QhtvMFFUSfV50PWIikyQS0MBItp/o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/4db93d-fc87-4e16-9b3b-79453b474e2e/1/1LDBHmZmz8G38baZTg9Dcymt7AQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/4db93d-fc87-4e16-9b3b-79453b474e2e/1/1LDBHmZmz8G38baZTg9Dcymt7AQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1LDBHmZmz8G38baZTg9Dcymt7AQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 23:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3d:13:e0:9c:02:90:3d:59:14:79:70:39:c8:d3:b6:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4b0c11e6666cfc1b7f1b6994e0f437329adec04
Validity
Not Before: Oct 15 01:01:15 2026 GMT
Not After : Oct 16 01:01:15 2026 GMT
Subject: CN=a9a36a4a52b734398ee33f8398f7a360c81faca0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:21:a1:25:99:d0:36:d9:3a:17:8a:84:4d:a7:
c9:67:50:16:71:20:ab:48:f8:ed:bd:d0:0f:9c:7b:
21:8c:e1:3a:a0:87:a5:dd:60:5f:21:bd:f8:d3:38:
fb:dd:67:5d:87:ae:d0:d7:9f:be:2f:8a:c8:5f:93:
fd:b1:b5:94:31:53:56:eb:7e:2a:08:bd:b7:a0:b4:
23:57:6a:80:e7:88:fd:fa:a6:33:e9:28:6c:4e:40:
9e:4e:3c:ac:f4:72:e2:1e:05:cc:b9:e3:90:1a:98:
dd:d9:ab:70:c8:4e:1c:e9:12:ac:5f:2f:5e:14:52:
34:33:d1:a7:29:88:e2:b9:d8:bf:01:71:80:d7:c1:
dc:b4:52:26:d3:ce:01:bc:21:7a:8a:63:a6:8f:bf:
de:a8:8b:b5:43:5b:06:3e:8d:b8:1f:8e:13:f1:58:
e6:34:44:e3:b8:cc:74:2b:64:ad:04:65:7e:05:5a:
d6:f8:35:11:38:1e:30:f6:2d:05:62:86:11:10:f3:
71:1a:d5:0e:63:44:69:d2:1d:b0:16:64:29:87:eb:
aa:af:e9:22:8e:ef:c3:f6:04:61:68:9b:ef:4e:71:
ae:c2:42:19:77:d3:93:69:02:38:49:64:c0:e4:94:
bc:1a:1c:4c:47:ed:a3:fa:c1:38:91:9f:c7:45:e7:
9c:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:A3:6A:4A:52:B7:34:39:8E:E3:3F:83:98:F7:A3:60:C8:1F:AC:A0
X509v3 Authority Key Identifier:
keyid:D4:B0:C1:1E:66:66:CF:C1:B7:F1:B6:99:4E:0F:43:73:29:AD:EC:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1LDBHmZmz8G38baZTg9Dcymt7AQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/4db93d-fc87-4e16-9b3b-79453b474e2e/1/1LDBHmZmz8G38baZTg9Dcymt7AQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/4db93d-fc87-4e16-9b3b-79453b474e2e/1/1LDBHmZmz8G38baZTg9Dcymt7AQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:85:d8:2f:0c:1c:97:89:88:e2:e4:74:9a:d0:42:fa:87:89:
40:7f:fe:cb:80:76:09:f2:7b:49:65:d3:67:99:b0:1e:a9:f3:
09:28:bf:74:c8:1d:b9:27:27:00:13:74:b1:fd:82:65:c9:1e:
e8:c2:19:8f:28:ac:e5:72:61:cb:1c:f1:ae:11:ce:53:37:84:
56:9f:59:48:31:f0:fe:29:62:e7:a4:c4:78:ac:cf:fb:d6:74:
85:bc:59:82:e0:b0:24:15:68:25:b2:d3:48:9f:92:d1:1b:50:
19:96:60:6e:9c:21:fd:40:d3:8a:02:c2:17:5b:36:6c:9a:1d:
83:a7:52:8a:45:33:c5:8d:32:9e:d7:f2:d7:f8:4d:3d:60:e4:
5f:a4:2b:32:0d:21:41:f5:6d:81:fe:2e:68:48:ae:24:09:ba:
0d:c0:b2:b1:db:e6:8d:62:9c:6d:16:57:3b:6d:fb:31:1e:ab:
a0:de:a8:d6:ce:c9:a4:6b:b0:fa:50:eb:66:ec:f7:00:37:dc:
ad:65:90:5e:8a:6f:7b:64:6f:79:75:90:fe:c0:f6:49:59:5e:
41:19:09:30:d5:d2:f0:e1:a7:ed:c8:de:67:60:2a:ff:18:d2:
0f:fb:4d:bf:9e:44:cf:60:30:06:dd:b8:21:c9:fa:ca:7b:77:
ee:62:f4:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 10:31:14 2026 by rpki-client