Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/3253ac-8fa7-425b-8a90-9b9b401459e6/1/1-LdwFgVTdgw1Z99RqEftbFKcB4k.mft
File: 1-LdwFgVTdgw1Z99RqEftbFKcB4k.mft (raw, json)
Hash identifier: elCxbqSNrRq3ZlGQpR9eZLcY6Wz9Uaj0H3xeNVJQA9M=
Subject key identifier: 39:A0:9B:96:D3:01:13:3F:A5:97:91:C9:73:59:2B:E2:BD:11:F3:89
Authority key identifier: F8:B7:70:16:05:53:76:0C:35:67:DF:51:A8:47:ED:6C:52:9C:07:89
Certificate issuer: /CN=f8b770160553760c3567df51a847ed6c529c0789
Certificate serial: 019CAEA3A07B3CF60522B6A7329D3B3F7CFA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-LdwFgVTdgw1Z99RqEftbFKcB4k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/3253ac-8fa7-425b-8a90-9b9b401459e6/1/1-LdwFgVTdgw1Z99RqEftbFKcB4k.mft
Manifest number: 11C3
Signing time: Mon 02 Mar 2026 13:01:24 +0000
Manifest this update: Mon 02 Mar 2026 13:01:24 +0000
Manifest next update: Tue 03 Mar 2026 13:01:24 +0000
Files and hashes: 1: 1-LdwFgVTdgw1Z99RqEftbFKcB4k.crl (hash: FrE8SRUCrOng9x2RVW751Kglq146tuov20w7Amh9Xew=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/3253ac-8fa7-425b-8a90-9b9b401459e6/1/1-LdwFgVTdgw1Z99RqEftbFKcB4k.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/3253ac-8fa7-425b-8a90-9b9b401459e6/1/1-LdwFgVTdgw1Z99RqEftbFKcB4k.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-LdwFgVTdgw1Z99RqEftbFKcB4k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 13:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:a3:a0:7b:3c:f6:05:22:b6:a7:32:9d:3b:3f:7c:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8b770160553760c3567df51a847ed6c529c0789
Validity
Not Before: Mar 2 13:01:24 2026 GMT
Not After : Mar 3 13:01:24 2026 GMT
Subject: CN=39a09b96d301133fa59791c973592be2bd11f389
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:f4:d8:56:f3:38:8a:13:b2:bc:09:95:d0:b3:
f9:ea:3a:dc:cb:14:8f:50:fa:63:12:b6:8b:78:fb:
4e:dc:6d:d4:e8:27:72:45:ce:f5:c1:b6:6e:e2:85:
b4:57:ed:e1:9a:63:99:79:7b:96:99:17:f8:61:ff:
09:d3:84:85:21:1e:57:be:e0:41:72:ab:1f:ad:f0:
e5:fa:ff:2d:d9:dc:ed:8d:79:4a:af:86:6a:3a:72:
0d:f0:85:73:1c:41:16:c4:24:46:f8:be:a2:48:c8:
3b:76:49:11:27:ca:06:27:3c:cc:21:89:01:4a:fd:
88:0e:8a:6a:30:5e:6f:b1:ea:31:15:71:3a:d4:96:
c2:81:64:12:6f:6a:ea:a2:ad:e5:88:67:b2:52:c7:
61:3a:8e:e5:3a:c0:ff:1f:47:77:f3:d9:b0:fb:2a:
6b:64:1e:fa:70:d1:8b:dc:a8:2d:28:78:9c:41:98:
2a:2e:63:3d:6c:19:ab:cc:c8:66:58:93:f2:b6:21:
cf:8b:92:50:39:b3:80:04:21:7f:13:99:f2:bb:9a:
23:42:ae:60:ae:03:79:ca:15:35:01:e1:32:de:47:
15:8b:bb:28:ef:20:f3:17:19:5e:7a:a7:7b:ac:db:
f8:22:a9:5e:ee:cd:af:dc:c8:b4:bb:c8:93:3b:5a:
37:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:A0:9B:96:D3:01:13:3F:A5:97:91:C9:73:59:2B:E2:BD:11:F3:89
X509v3 Authority Key Identifier:
keyid:F8:B7:70:16:05:53:76:0C:35:67:DF:51:A8:47:ED:6C:52:9C:07:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-LdwFgVTdgw1Z99RqEftbFKcB4k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/3253ac-8fa7-425b-8a90-9b9b401459e6/1/1-LdwFgVTdgw1Z99RqEftbFKcB4k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/3253ac-8fa7-425b-8a90-9b9b401459e6/1/1-LdwFgVTdgw1Z99RqEftbFKcB4k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:c0:d4:d2:d4:32:b3:e1:19:7b:e1:07:10:dd:85:69:e0:77:
c3:85:f6:d6:d4:e3:7a:f2:b5:5e:db:f9:a1:04:7f:98:0a:c0:
a7:d9:b9:93:be:64:72:fc:88:14:a7:cf:6e:7d:7b:d9:e2:d0:
99:72:1f:fb:18:26:ff:d0:5f:f8:14:85:5a:ed:45:5f:d4:8e:
c8:bf:66:e1:2c:e4:4a:26:3a:4a:47:7c:c6:b2:b2:be:b9:03:
c0:15:f4:4f:9b:56:b3:ee:19:22:68:52:28:da:db:5e:83:ee:
8d:04:86:46:92:fa:d3:42:b7:06:3d:d8:a9:c1:84:f5:8f:de:
6c:29:70:62:f0:e3:5a:67:6c:90:07:bb:d4:3c:2c:bc:e7:8e:
17:6f:e7:0a:4e:67:6c:e4:56:f1:bb:71:af:56:62:1d:7c:38:
09:91:b6:b1:e9:ed:9a:25:b9:92:99:ff:e5:24:bf:b3:c1:6c:
07:b5:08:03:a4:a2:00:00:9c:bd:e0:3b:46:8e:7e:25:6f:84:
15:f1:f0:4c:cd:54:f1:fa:1c:3d:92:bf:c2:32:e8:84:68:4a:
23:bf:b7:2b:55:70:30:aa:35:1a:cb:10:1b:5c:18:8f:02:ce:
d7:82:22:6a:73:b4:23:fd:fa:6d:ec:ad:ee:62:ac:dd:c9:10:
43:28:93:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 19:42:16 2026 by rpki-client