Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/7757ed-d020-471f-bbc5-17bf202e5eee/1/1LvtYwkUOYI-05GkclNsD8r-iVc.mft
File: 1LvtYwkUOYI-05GkclNsD8r-iVc.mft (raw, json)
Hash identifier: OBDXXK7Dmm9z/SRcoDUFE2aHhNcdQ/J+KP4LdCVqiBQ=
Subject key identifier: CB:ED:18:DC:D1:17:C2:BF:93:BA:D5:E6:CB:FA:95:F9:14:9B:01:FB
Authority key identifier: D4:BB:ED:63:09:14:39:82:3E:D3:91:A4:72:53:6C:0F:CA:FE:89:57
Certificate issuer: /CN=d4bbed63091439823ed391a472536c0fcafe8957
Certificate serial: 019FA8D07BD28B927B1CBA199035F13855B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1LvtYwkUOYI-05GkclNsD8r-iVc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/7757ed-d020-471f-bbc5-17bf202e5eee/1/1LvtYwkUOYI-05GkclNsD8r-iVc.mft
Manifest number: 19D2
Signing time: Tue 28 Jul 2026 13:01:03 +0000
Manifest this update: Tue 28 Jul 2026 13:01:03 +0000
Manifest next update: Wed 29 Jul 2026 13:01:03 +0000
Files and hashes: 1: 1LvtYwkUOYI-05GkclNsD8r-iVc.crl (hash: G+SoZj9mWVnGacDF70QGz35vPmxahdblKIObuJJsQVo=)
2: 3Xes1MHD_a5bIGduyNKw431Rgic.roa (hash: Wc2i+E+YpkqUKLdM48sp0OfQBJ7K/jV9MpkIdBzD9ls=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/7757ed-d020-471f-bbc5-17bf202e5eee/1/1LvtYwkUOYI-05GkclNsD8r-iVc.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/7757ed-d020-471f-bbc5-17bf202e5eee/1/1LvtYwkUOYI-05GkclNsD8r-iVc.mft
rsync://rpki.ripe.net/repository/DEFAULT/1LvtYwkUOYI-05GkclNsD8r-iVc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 13:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:d0:7b:d2:8b:92:7b:1c:ba:19:90:35:f1:38:55:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4bbed63091439823ed391a472536c0fcafe8957
Validity
Not Before: Jul 28 13:01:03 2026 GMT
Not After : Jul 29 13:01:03 2026 GMT
Subject: CN=cbed18dcd117c2bf93bad5e6cbfa95f9149b01fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:ef:e4:52:c6:af:dc:d3:5b:22:40:68:36:58:
6b:58:bc:d8:8e:7f:a3:97:59:79:17:8e:93:0f:fe:
85:89:62:fb:1d:3e:95:ce:3d:df:dd:fc:54:81:00:
90:99:d4:ad:ba:04:cd:94:e1:26:d1:b0:21:4c:72:
d6:1d:73:b2:b6:98:16:c3:e1:49:7d:04:78:7a:92:
12:4e:3e:c8:59:b4:b5:f5:f3:15:c7:cc:29:50:6f:
e6:91:fa:60:ec:a9:6c:09:bc:06:49:b8:07:80:1e:
b9:05:36:57:fa:6f:7d:61:ed:4e:d2:77:80:b9:30:
80:32:4b:bc:a1:18:53:b7:8f:49:e5:29:a5:34:f0:
f5:66:a1:59:a4:2e:63:bd:88:f9:f5:7e:f0:db:e7:
01:73:ba:ce:6a:77:da:b0:76:ef:1d:c5:69:79:97:
11:de:46:e8:8f:68:13:de:2e:aa:37:18:8b:b2:ad:
2a:33:81:33:0f:c4:52:ff:c2:f0:9e:09:67:4e:c4:
f1:6e:96:50:1a:5d:c7:1e:e5:3a:e8:b6:c0:b8:e8:
da:12:cf:5d:eb:a2:25:dc:4f:bb:e3:3a:7a:02:89:
3a:c4:9d:e6:43:0f:7a:da:76:66:f7:1d:23:9f:5b:
45:47:75:cd:b1:24:e5:18:fd:b1:c2:db:e1:04:3d:
1f:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:ED:18:DC:D1:17:C2:BF:93:BA:D5:E6:CB:FA:95:F9:14:9B:01:FB
X509v3 Authority Key Identifier:
keyid:D4:BB:ED:63:09:14:39:82:3E:D3:91:A4:72:53:6C:0F:CA:FE:89:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1LvtYwkUOYI-05GkclNsD8r-iVc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/7757ed-d020-471f-bbc5-17bf202e5eee/1/1LvtYwkUOYI-05GkclNsD8r-iVc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/7757ed-d020-471f-bbc5-17bf202e5eee/1/1LvtYwkUOYI-05GkclNsD8r-iVc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:bb:7d:44:aa:da:39:2f:49:aa:8b:20:ad:3e:96:d7:7a:54:
d3:ca:b8:f4:ff:29:72:2c:46:3c:4e:1e:bb:7a:7f:21:d9:67:
35:36:c1:d5:83:4b:49:c0:e0:f8:e0:6d:2f:72:e7:ae:c4:8d:
19:ba:9d:0f:81:7d:5c:da:3b:ae:13:b9:95:f5:82:6d:5c:cd:
45:85:f8:98:05:fc:7d:0e:47:3a:c9:d1:08:c2:38:04:d4:fd:
03:77:21:ce:b0:f3:31:c8:f3:44:19:b3:28:17:b6:b5:81:58:
c4:15:4c:04:37:5c:9b:75:49:a5:af:87:91:0f:42:ed:35:ff:
eb:03:8b:4d:8c:32:f7:34:dd:83:18:ad:a2:89:51:05:7b:00:
5e:f4:60:19:58:2e:97:fd:f6:cb:91:8e:56:64:cb:be:f0:7b:
23:f1:d2:5c:e1:77:72:ac:f0:cd:2d:67:d6:19:7f:d6:58:0a:
15:98:f7:cb:68:4e:17:5e:49:fb:ed:81:b3:6c:00:94:cd:ff:
93:2c:54:05:04:c6:5a:e1:65:3f:ed:d4:df:16:74:1a:e8:ad:
9f:78:68:ca:19:f0:f8:ba:a8:5a:a7:70:a4:d8:46:ac:02:f4:
7b:cf:5e:ee:5e:b1:5e:0d:d9:97:c4:94:15:60:59:e2:12:f1:
3e:5b:15:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:56:23 2026 by rpki-client