Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/7757ed-d020-471f-bbc5-17bf202e5eee/1/1LvtYwkUOYI-05GkclNsD8r-iVc.mft
File: 1LvtYwkUOYI-05GkclNsD8r-iVc.mft (raw, json)
Hash identifier: Mo/JWFGBKaCiiljqqktZqltlOo1+Bj8PIX8Jl/zHrFk=
Subject key identifier: E2:26:4B:9D:28:AC:8A:FB:78:54:3D:44:85:3E:05:FB:67:3F:47:C8
Authority key identifier: D4:BB:ED:63:09:14:39:82:3E:D3:91:A4:72:53:6C:0F:CA:FE:89:57
Certificate issuer: /CN=d4bbed63091439823ed391a472536c0fcafe8957
Certificate serial: 019EBF23D7DC382D06FB02FB5C0C87269A9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1LvtYwkUOYI-05GkclNsD8r-iVc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/7757ed-d020-471f-bbc5-17bf202e5eee/1/1LvtYwkUOYI-05GkclNsD8r-iVc.mft
Manifest number: 1959
Signing time: Sat 13 Jun 2026 04:00:57 +0000
Manifest this update: Sat 13 Jun 2026 04:00:57 +0000
Manifest next update: Sun 14 Jun 2026 04:00:57 +0000
Files and hashes: 1: 1LvtYwkUOYI-05GkclNsD8r-iVc.crl (hash: ksW1XUKhZnZ50FfY7bzq8k49GWWZsa2lytdR+/Y/icE=)
2: 3Xes1MHD_a5bIGduyNKw431Rgic.roa (hash: Wc2i+E+YpkqUKLdM48sp0OfQBJ7K/jV9MpkIdBzD9ls=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/7757ed-d020-471f-bbc5-17bf202e5eee/1/1LvtYwkUOYI-05GkclNsD8r-iVc.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/7757ed-d020-471f-bbc5-17bf202e5eee/1/1LvtYwkUOYI-05GkclNsD8r-iVc.mft
rsync://rpki.ripe.net/repository/DEFAULT/1LvtYwkUOYI-05GkclNsD8r-iVc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bf:23:d7:dc:38:2d:06:fb:02:fb:5c:0c:87:26:9a:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4bbed63091439823ed391a472536c0fcafe8957
Validity
Not Before: Jun 13 04:00:57 2026 GMT
Not After : Jun 14 04:00:57 2026 GMT
Subject: CN=e2264b9d28ac8afb78543d44853e05fb673f47c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:1a:cd:a6:56:db:37:a4:8f:0c:0b:9b:ab:6b:
03:42:95:5b:bf:55:2e:6a:54:59:a6:65:85:69:eb:
9f:95:3b:cc:ed:ea:3b:c8:4b:9a:03:cb:91:01:1d:
9c:68:37:4e:2d:18:cd:fa:e1:38:af:86:50:12:2d:
28:c0:b6:de:45:30:8e:2b:3d:b4:18:66:3a:8d:20:
9b:68:be:6f:eb:94:5b:fd:45:6c:3d:a1:3f:bd:d0:
04:c6:7c:4d:a6:57:29:34:cd:60:75:a5:d7:b6:b7:
bc:35:fd:63:00:4d:5d:57:cb:b3:31:8b:8e:28:15:
e0:81:68:67:b6:f1:70:60:b8:f4:ed:eb:d2:a1:49:
d3:52:93:62:a9:12:eb:12:5c:d4:95:2f:8c:25:61:
74:c1:3c:dd:6c:13:3b:d5:f6:4e:f3:b9:a7:84:f9:
75:7c:d5:d8:f1:03:85:7d:a9:14:f4:99:5c:da:c7:
ce:0c:13:dc:96:82:fe:d2:05:5a:1a:eb:16:05:b1:
2e:fb:d6:61:bc:ed:70:25:2a:6e:15:1f:2b:02:dd:
e7:cd:61:fd:0d:43:98:56:3e:64:bb:59:d6:5e:7d:
02:b5:7d:59:9d:a5:e8:c1:40:b8:a5:ca:81:62:4d:
3c:7d:db:5d:ca:00:88:78:49:74:03:74:8c:8f:f3:
70:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:26:4B:9D:28:AC:8A:FB:78:54:3D:44:85:3E:05:FB:67:3F:47:C8
X509v3 Authority Key Identifier:
keyid:D4:BB:ED:63:09:14:39:82:3E:D3:91:A4:72:53:6C:0F:CA:FE:89:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1LvtYwkUOYI-05GkclNsD8r-iVc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/7757ed-d020-471f-bbc5-17bf202e5eee/1/1LvtYwkUOYI-05GkclNsD8r-iVc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/7757ed-d020-471f-bbc5-17bf202e5eee/1/1LvtYwkUOYI-05GkclNsD8r-iVc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:2e:fc:16:9a:19:2f:c7:38:5b:5d:cc:ff:69:7b:42:64:51:
fe:9e:49:dd:bb:42:cf:63:20:d2:52:cc:5d:a3:32:ee:90:0e:
43:16:eb:c2:43:c6:f3:ff:ee:1a:e5:a3:6e:b4:de:33:2c:57:
55:83:05:19:e6:e7:c4:f6:c9:b6:aa:d4:90:ac:08:98:bd:db:
d0:a8:e5:4a:e1:23:ca:fe:81:4d:4c:8d:df:f8:56:3e:85:15:
63:05:69:80:b7:3f:a5:61:f4:4b:63:50:3a:18:80:3c:28:f8:
b0:c6:06:b9:ff:6c:5e:44:44:ee:88:56:64:95:30:51:ac:64:
87:95:78:12:65:b7:16:e2:ff:f7:be:98:94:93:a5:06:a3:98:
0d:07:d4:70:08:a3:e3:14:f1:58:e4:24:09:c4:76:bc:f4:fd:
7d:91:65:95:b9:41:43:63:d3:32:2e:5c:2a:34:d6:0a:2c:5b:
58:fe:9b:e5:26:08:2d:70:b7:7a:32:7c:90:a3:63:df:35:a8:
16:fa:ac:2b:ff:28:9d:cd:b3:4b:7b:63:7c:5e:43:bc:4d:c8:
3f:6a:b8:85:d7:81:37:71:00:9b:82:e0:dc:17:28:7f:26:2e:
8b:09:47:f9:ff:82:e0:ed:01:3f:7e:9d:4c:7a:a5:20:6f:e2:
3c:60:70:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:26:45 2026 by rpki-client