Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/4db93d-fc87-4e16-9b3b-79453b474e2e/1/1LDBHmZmz8G38baZTg9Dcymt7AQ.mft
File: 1LDBHmZmz8G38baZTg9Dcymt7AQ.mft (raw, json)
Hash identifier: ovUaCVlzuFvhYVs91siogJOkVU+TBifXVRf3UxoWrGQ=
Subject key identifier: 6E:FC:DF:2D:BA:11:83:FA:0C:70:73:BC:B2:27:96:06:F3:D4:1C:DE
Authority key identifier: D4:B0:C1:1E:66:66:CF:C1:B7:F1:B6:99:4E:0F:43:73:29:AD:EC:04
Certificate issuer: /CN=d4b0c11e6666cfc1b7f1b6994e0f437329adec04
Certificate serial: 019CB46DF9653AC0D1181728FBFE8186DE8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1LDBHmZmz8G38baZTg9Dcymt7AQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/4db93d-fc87-4e16-9b3b-79453b474e2e/1/1LDBHmZmz8G38baZTg9Dcymt7AQ.mft
Manifest number: 17DE
Signing time: Tue 03 Mar 2026 16:00:31 +0000
Manifest this update: Tue 03 Mar 2026 16:00:31 +0000
Manifest next update: Wed 04 Mar 2026 16:00:31 +0000
Files and hashes: 1: 1LDBHmZmz8G38baZTg9Dcymt7AQ.crl (hash: VlcjQAfdKJKVDKSmQNTE0wO2dWo3lxgUySkj6aUbjOw=)
2: jGUPhdM1XZTdzsS3lD-IYIE9S9g.roa (hash: 69/RQWyt8lYUh/QhtvMFFUSfV50PWIikyQS0MBItp/o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/4db93d-fc87-4e16-9b3b-79453b474e2e/1/1LDBHmZmz8G38baZTg9Dcymt7AQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/4db93d-fc87-4e16-9b3b-79453b474e2e/1/1LDBHmZmz8G38baZTg9Dcymt7AQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1LDBHmZmz8G38baZTg9Dcymt7AQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 04 Mar 2026 15:20:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:b4:6d:f9:65:3a:c0:d1:18:17:28:fb:fe:81:86:de:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4b0c11e6666cfc1b7f1b6994e0f437329adec04
Validity
Not Before: Mar 3 16:00:31 2026 GMT
Not After : Mar 4 16:00:31 2026 GMT
Subject: CN=6efcdf2dba1183fa0c7073bcb2279606f3d41cde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:9f:12:f1:9f:4f:43:9a:da:a4:03:84:ee:26:
b6:03:b1:a5:68:5b:14:22:17:b2:fd:1b:d2:6d:71:
14:cd:41:cd:12:69:61:34:9e:b0:03:28:48:90:7c:
59:a9:78:b1:e7:96:ac:d7:5e:08:0c:6d:f3:5a:a1:
6e:06:5e:72:ff:b9:b4:ff:37:6c:79:5b:e9:5a:f9:
d2:29:b8:8d:97:4f:bd:44:a4:36:8a:30:e2:e6:e0:
48:79:85:98:bd:21:68:b3:d9:ac:65:f7:67:75:af:
93:ad:4a:1f:f0:eb:c7:31:c4:79:8c:ac:23:ff:45:
f2:69:d9:d6:97:8c:53:6e:43:b0:d2:be:9e:aa:1c:
0e:9c:d8:a8:1b:93:b0:7e:43:ae:17:40:3b:bc:a8:
d3:a8:a6:4a:f5:cd:84:d3:f1:da:2f:aa:a3:43:d4:
bd:31:fc:ab:68:9b:67:32:29:02:3b:4b:6b:16:ba:
8b:80:d2:af:71:15:e2:5f:61:db:9e:6d:d7:3e:a2:
b5:3b:30:8b:c6:ef:a6:62:49:ad:df:31:1c:ee:23:
00:d8:bf:a4:4e:dc:ec:8a:2d:d4:30:04:cb:d4:a8:
57:84:fb:e3:f6:79:7d:2e:29:d1:78:cb:30:f9:ce:
77:6e:c4:30:e2:16:a3:8d:7f:7b:cf:a0:59:d8:96:
fe:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:FC:DF:2D:BA:11:83:FA:0C:70:73:BC:B2:27:96:06:F3:D4:1C:DE
X509v3 Authority Key Identifier:
keyid:D4:B0:C1:1E:66:66:CF:C1:B7:F1:B6:99:4E:0F:43:73:29:AD:EC:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1LDBHmZmz8G38baZTg9Dcymt7AQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/4db93d-fc87-4e16-9b3b-79453b474e2e/1/1LDBHmZmz8G38baZTg9Dcymt7AQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/4db93d-fc87-4e16-9b3b-79453b474e2e/1/1LDBHmZmz8G38baZTg9Dcymt7AQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:3c:06:fc:cc:c4:34:5d:b9:c5:d3:13:0e:3c:a8:ae:7d:ea:
d5:62:6f:93:03:dd:b7:51:60:64:dc:33:88:72:dd:e5:f8:93:
47:24:1d:a2:39:b4:55:14:de:d7:19:47:3f:2e:3e:9d:ac:e2:
c3:4a:8a:a2:81:87:7d:16:15:e6:99:cb:98:a3:2d:75:ea:59:
db:d6:ec:2c:2e:ef:49:e1:32:d4:a7:26:a4:36:3f:37:8f:33:
31:11:cd:dd:8b:4c:9f:bb:0b:44:60:c7:a0:17:d0:ae:d1:00:
af:eb:ad:ab:45:27:17:ad:84:5a:97:cc:af:5a:6b:74:5e:10:
37:40:fa:c4:b2:62:12:0a:37:b2:31:20:ca:a9:24:72:6e:38:
21:34:06:f3:58:38:5b:24:95:2d:21:da:e0:f8:ff:c0:72:ed:
8c:42:35:5e:3b:aa:c9:af:dc:38:89:07:74:e7:43:07:2a:f2:
83:ca:3c:73:5c:c1:ae:0c:e5:ac:52:fe:f2:ab:70:0c:cd:c0:
2d:7c:b3:ec:55:c5:f7:ef:61:be:1b:8f:16:54:e1:6a:8b:a9:
b8:c7:6d:28:1f:2e:e4:33:63:99:3b:a1:54:85:c2:77:ae:f8:
9e:26:0d:93:39:f1:92:61:68:f2:b3:c4:32:eb:47:8d:14:a2:
99:2b:8f:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 18:22:26 2026 by rpki-client