Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/7757ed-d020-471f-bbc5-17bf202e5eee/1/1LvtYwkUOYI-05GkclNsD8r-iVc.mft
File: 1LvtYwkUOYI-05GkclNsD8r-iVc.mft (raw, json)
Hash identifier: 7LOjB38T3jaGBUfRA7bsO6wun+Ir2OQit6ZXQOg6wgs=
Subject key identifier: EB:E8:BC:27:DF:3A:D5:52:9A:8D:84:A0:A1:3D:A2:E5:E8:50:F3:5F
Authority key identifier: D4:BB:ED:63:09:14:39:82:3E:D3:91:A4:72:53:6C:0F:CA:FE:89:57
Certificate issuer: /CN=d4bbed63091439823ed391a472536c0fcafe8957
Certificate serial: 019CAA21AF46D2125493174A8B6602FF0E34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1LvtYwkUOYI-05GkclNsD8r-iVc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/7757ed-d020-471f-bbc5-17bf202e5eee/1/1LvtYwkUOYI-05GkclNsD8r-iVc.mft
Manifest number: 1845
Signing time: Sun 01 Mar 2026 16:01:00 +0000
Manifest this update: Sun 01 Mar 2026 16:01:00 +0000
Manifest next update: Mon 02 Mar 2026 16:01:00 +0000
Files and hashes: 1: 1LvtYwkUOYI-05GkclNsD8r-iVc.crl (hash: NePOy8+Xerlu6znpYJMn28Lq2+BYGnVFUz8dSjc4/Bk=)
2: 3Xes1MHD_a5bIGduyNKw431Rgic.roa (hash: Wc2i+E+YpkqUKLdM48sp0OfQBJ7K/jV9MpkIdBzD9ls=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/7757ed-d020-471f-bbc5-17bf202e5eee/1/1LvtYwkUOYI-05GkclNsD8r-iVc.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/7757ed-d020-471f-bbc5-17bf202e5eee/1/1LvtYwkUOYI-05GkclNsD8r-iVc.mft
rsync://rpki.ripe.net/repository/DEFAULT/1LvtYwkUOYI-05GkclNsD8r-iVc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:21:af:46:d2:12:54:93:17:4a:8b:66:02:ff:0e:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4bbed63091439823ed391a472536c0fcafe8957
Validity
Not Before: Mar 1 16:01:00 2026 GMT
Not After : Mar 2 16:01:00 2026 GMT
Subject: CN=ebe8bc27df3ad5529a8d84a0a13da2e5e850f35f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:87:86:60:3b:4c:ba:54:bb:7b:97:09:1e:2f:
81:f9:da:e8:e2:6c:31:bf:32:1b:d7:07:0f:fd:dd:
71:a7:2f:32:c0:e1:02:71:e6:9d:e5:79:1e:a8:14:
3d:fb:04:03:35:f7:42:56:45:aa:44:f9:d9:c4:fc:
48:02:52:04:9a:9f:74:98:8c:05:c6:ed:2a:dc:ca:
b9:56:91:60:01:57:d7:c6:99:9a:3e:a0:07:91:39:
1d:15:b7:70:2f:ac:25:78:e8:ac:cc:0b:4f:a8:d8:
8e:a3:b7:70:ec:d3:ab:49:0e:95:88:7d:51:f5:71:
99:6b:70:36:61:f2:4c:62:39:72:98:58:1d:f8:ed:
30:76:80:00:12:f2:d2:81:9b:f5:e3:9c:6d:fb:c5:
e7:10:9e:22:b3:fc:35:95:f9:3d:7b:db:2b:69:a8:
b0:5f:b8:d2:94:01:c8:05:e8:0e:be:2d:71:a2:0a:
2b:44:9a:d8:ec:d6:0a:fc:dd:9e:79:4a:76:ee:82:
dc:c1:49:25:d1:8a:18:54:5d:1f:8c:a3:fd:a0:c8:
13:ed:cf:96:90:fd:53:4d:13:d2:5a:8c:64:3b:d7:
b2:ba:35:cf:68:c7:ba:86:9f:36:dd:3d:7e:27:89:
ba:e9:3c:78:b2:d1:b8:a0:42:2f:36:e3:fb:64:f1:
be:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:E8:BC:27:DF:3A:D5:52:9A:8D:84:A0:A1:3D:A2:E5:E8:50:F3:5F
X509v3 Authority Key Identifier:
keyid:D4:BB:ED:63:09:14:39:82:3E:D3:91:A4:72:53:6C:0F:CA:FE:89:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1LvtYwkUOYI-05GkclNsD8r-iVc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/7757ed-d020-471f-bbc5-17bf202e5eee/1/1LvtYwkUOYI-05GkclNsD8r-iVc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/7757ed-d020-471f-bbc5-17bf202e5eee/1/1LvtYwkUOYI-05GkclNsD8r-iVc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:30:33:ae:ac:33:31:bc:e0:5b:0a:74:43:39:5c:1d:25:05:
97:c9:e4:47:b1:e6:94:a0:b2:15:9d:1c:94:9d:ca:33:9e:c1:
40:cd:69:a8:07:44:95:48:55:ff:98:83:fa:93:38:e1:19:59:
06:a2:21:d7:7c:77:f4:64:dc:3d:82:c9:8f:8f:4d:69:7a:41:
dc:22:c3:5c:7c:86:f5:07:84:1b:39:e0:24:42:f4:2a:eb:16:
25:81:8a:d5:a3:d9:05:1a:a0:95:ec:80:7c:8b:54:dd:5f:33:
23:6d:66:41:46:55:bc:0d:89:86:6d:c6:19:7c:9a:09:9d:03:
16:61:c9:5d:a9:12:f8:16:c4:e7:95:9f:e9:85:d5:dc:a0:eb:
ef:de:a4:24:40:e1:51:4f:6a:89:0d:ea:39:3f:38:b7:83:de:
81:98:85:d9:a0:a5:9d:58:29:ed:21:0a:5e:e6:39:02:c1:93:
c8:bb:6c:33:ec:3c:e4:57:15:6f:d5:ae:86:e3:5b:31:0b:24:
27:17:16:af:a5:6d:86:5d:1c:2a:61:43:16:25:6d:b1:cb:f8:
ba:71:72:4c:e6:d6:7d:4a:0b:91:b0:5b:3b:e0:6e:b6:e5:cf:
92:1a:6e:8a:85:eb:56:32:10:92:10:18:ab:00:80:52:18:22:
f6:c6:e9:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:16:44 2026 by rpki-client