Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1b/7757ed-d020-471f-bbc5-17bf202e5eee/1/1LvtYwkUOYI-05GkclNsD8r-iVc.mft
File: 1LvtYwkUOYI-05GkclNsD8r-iVc.mft (raw, json)
Hash identifier: L5mh+jEni3xeQm+MR2dgSwczuJInXD4iJUWvK9Mow3Y=
Subject key identifier: 41:32:A4:D1:A6:7D:BB:32:23:AC:7E:FE:CD:5F:45:42:CD:56:3D:42
Authority key identifier: D4:BB:ED:63:09:14:39:82:3E:D3:91:A4:72:53:6C:0F:CA:FE:89:57
Certificate issuer: /CN=d4bbed63091439823ed391a472536c0fcafe8957
Certificate serial: 01A0C88F8D3F9CD47E033C9F2A4305941621
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1LvtYwkUOYI-05GkclNsD8r-iVc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/7757ed-d020-471f-bbc5-17bf202e5eee/1/1LvtYwkUOYI-05GkclNsD8r-iVc.mft
Manifest number: 1A67
Signing time: Tue 22 Sep 2026 10:00:45 +0000
Manifest this update: Tue 22 Sep 2026 10:00:45 +0000
Manifest next update: Wed 23 Sep 2026 10:00:45 +0000
Files and hashes: 1: 1LvtYwkUOYI-05GkclNsD8r-iVc.crl (hash: 4wHfmdTTi3oOhy+HAWx51t4WfTkzzoIyZbhwgF0jtMg=)
2: 3Xes1MHD_a5bIGduyNKw431Rgic.roa (hash: Wc2i+E+YpkqUKLdM48sp0OfQBJ7K/jV9MpkIdBzD9ls=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/7757ed-d020-471f-bbc5-17bf202e5eee/1/1LvtYwkUOYI-05GkclNsD8r-iVc.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/7757ed-d020-471f-bbc5-17bf202e5eee/1/1LvtYwkUOYI-05GkclNsD8r-iVc.mft
rsync://rpki.ripe.net/repository/DEFAULT/1LvtYwkUOYI-05GkclNsD8r-iVc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 10:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c8:8f:8d:3f:9c:d4:7e:03:3c:9f:2a:43:05:94:16:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4bbed63091439823ed391a472536c0fcafe8957
Validity
Not Before: Sep 22 10:00:45 2026 GMT
Not After : Sep 23 10:00:45 2026 GMT
Subject: CN=4132a4d1a67dbb3223ac7efecd5f4542cd563d42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:90:3b:90:86:cd:b1:3b:e4:c8:ab:c8:54:15:
6a:c8:5f:28:78:1d:25:7d:9f:74:35:17:16:c1:0d:
37:7b:e2:f4:6c:08:0c:e0:6a:56:4c:c0:39:a2:e8:
4f:57:bb:29:5b:0e:f9:61:3a:8b:8b:3f:51:95:89:
59:87:b0:33:48:ce:d3:9b:e7:52:bb:c9:43:4c:f1:
29:03:7b:9a:df:47:c8:33:f5:d4:02:ce:93:99:5f:
4d:95:be:8a:30:54:89:51:33:07:24:0a:d8:de:05:
d2:aa:39:d8:a6:a6:6a:43:c3:27:d6:cf:3c:cf:54:
52:a4:21:0f:e6:29:f3:99:4d:32:6e:fa:df:6e:d4:
cf:20:57:9d:3c:02:7d:7e:be:39:6f:74:90:f1:2b:
dd:79:0e:17:46:c3:9d:14:8d:6c:4e:90:82:26:97:
f2:f8:07:e7:1d:f8:35:ed:49:a8:3d:0c:e6:11:c1:
f9:7a:5c:de:6d:75:54:20:a2:e4:bc:d1:c5:7c:55:
88:b5:8f:d0:b6:e0:68:9c:f4:6a:77:b5:80:25:50:
6f:91:68:72:ac:d6:a6:95:79:d9:ec:34:ce:6f:a6:
ef:12:68:c2:9e:19:3d:59:04:bf:fa:c7:f9:19:24:
8c:3e:5f:68:ab:17:ab:4d:69:4a:d6:26:d2:1e:23:
ef:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:32:A4:D1:A6:7D:BB:32:23:AC:7E:FE:CD:5F:45:42:CD:56:3D:42
X509v3 Authority Key Identifier:
keyid:D4:BB:ED:63:09:14:39:82:3E:D3:91:A4:72:53:6C:0F:CA:FE:89:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1LvtYwkUOYI-05GkclNsD8r-iVc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/7757ed-d020-471f-bbc5-17bf202e5eee/1/1LvtYwkUOYI-05GkclNsD8r-iVc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/7757ed-d020-471f-bbc5-17bf202e5eee/1/1LvtYwkUOYI-05GkclNsD8r-iVc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:68:c9:ae:6a:3d:b4:6b:b9:8a:3a:0a:60:13:82:ee:ca:a1:
86:aa:6a:22:f2:63:a8:db:72:c5:0e:ff:ad:80:16:aa:f1:8a:
92:27:af:8c:68:38:4b:78:a5:76:ed:da:28:30:dd:ec:e1:a1:
9d:42:68:f3:6c:6f:20:4b:98:93:2e:d9:dd:60:8d:bc:b1:f5:
5a:a9:22:86:5a:48:a4:b8:81:af:23:b3:9e:5d:c0:0e:98:85:
c8:77:db:97:d6:0b:e0:ba:fc:8e:77:54:35:ca:ec:94:85:fe:
19:bb:05:b4:b4:d2:18:b8:8c:9b:9a:2b:09:ad:1a:3e:95:95:
54:ce:5d:45:12:c3:7b:c7:ad:26:e5:bf:4f:d6:33:f8:6f:5c:
73:07:26:60:99:2c:c9:9f:1a:ac:35:ee:63:2f:c2:8d:a2:08:
63:56:65:e5:a8:a3:e5:bd:31:06:68:f1:22:63:00:af:20:94:
f5:75:1f:e3:a6:cd:7b:42:10:3a:a0:0a:d3:f9:b2:c9:2e:d8:
8f:e6:7b:d3:88:7b:18:0b:63:71:32:6e:5d:f0:97:5e:26:86:
eb:06:17:7a:36:b8:22:d3:dd:4f:0f:87:4e:25:49:27:18:a8:
a9:51:38:2f:67:26:55:66:3a:9d:44:6f:85:f0:e9:35:cf:9c:
0d:01:9d:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 18:47:34 2026 by rpki-client