Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/3253ac-8fa7-425b-8a90-9b9b401459e6/1/1-LdwFgVTdgw1Z99RqEftbFKcB4k.mft
File: 1-LdwFgVTdgw1Z99RqEftbFKcB4k.mft (raw, json)
Hash identifier: Nvu6TRnrA2BpElyDp1WH22IsNwtXBP/ujPhxsZYl/7s=
Subject key identifier: CB:2F:47:CE:73:87:53:FD:6B:0C:19:CB:9E:44:8A:4C:E6:49:1C:42
Authority key identifier: F8:B7:70:16:05:53:76:0C:35:67:DF:51:A8:47:ED:6C:52:9C:07:89
Certificate issuer: /CN=f8b770160553760c3567df51a847ed6c529c0789
Certificate serial: 019D9850B3E6B1768BFDE287FD4EE923DF7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-LdwFgVTdgw1Z99RqEftbFKcB4k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/3253ac-8fa7-425b-8a90-9b9b401459e6/1/1-LdwFgVTdgw1Z99RqEftbFKcB4k.mft
Manifest number: 123C
Signing time: Thu 16 Apr 2026 22:01:58 +0000
Manifest this update: Thu 16 Apr 2026 22:01:58 +0000
Manifest next update: Fri 17 Apr 2026 22:01:58 +0000
Files and hashes: 1: 1-LdwFgVTdgw1Z99RqEftbFKcB4k.crl (hash: il1Opr5i+GQkNOTk49U+7vDenBlVgeGkCTdhhMuyl08=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/3253ac-8fa7-425b-8a90-9b9b401459e6/1/1-LdwFgVTdgw1Z99RqEftbFKcB4k.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/3253ac-8fa7-425b-8a90-9b9b401459e6/1/1-LdwFgVTdgw1Z99RqEftbFKcB4k.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-LdwFgVTdgw1Z99RqEftbFKcB4k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:50:b3:e6:b1:76:8b:fd:e2:87:fd:4e:e9:23:df:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8b770160553760c3567df51a847ed6c529c0789
Validity
Not Before: Apr 16 22:01:58 2026 GMT
Not After : Apr 17 22:01:58 2026 GMT
Subject: CN=cb2f47ce738753fd6b0c19cb9e448a4ce6491c42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:70:87:e1:78:bc:c3:a1:f7:af:20:10:0f:3e:
d7:58:0f:80:bc:a8:a2:8b:24:64:ac:d3:7f:7a:50:
62:21:59:a1:f9:5d:3d:3c:ba:77:eb:93:3e:d8:0c:
99:56:f7:ae:c5:60:cc:ad:3e:9e:e3:c4:93:1c:d7:
f2:32:03:f6:f1:6d:ea:79:a6:fa:a8:ac:74:cd:36:
36:b6:4e:06:c0:41:26:35:54:bb:87:09:ec:bc:72:
e6:35:5d:a1:e4:f4:42:38:62:01:f9:59:af:c0:97:
fd:a0:8f:1d:bd:85:32:33:a8:b9:da:fe:d9:78:36:
fd:51:49:b8:7a:35:59:77:93:d9:00:52:79:21:5c:
28:8a:33:07:0a:1c:55:31:43:41:1b:60:4f:b1:f1:
f2:18:23:e5:9c:19:e4:d6:66:a9:e5:56:10:ee:65:
66:ac:51:ff:33:fb:6f:52:38:e0:0e:0b:f2:09:b7:
be:34:85:fd:1a:84:56:10:51:81:61:2e:d1:c1:98:
16:77:7d:40:22:b9:5e:04:15:e8:c0:43:3e:e7:a3:
01:41:0f:6d:ee:e6:59:57:32:e9:70:e1:9a:fa:67:
56:54:f1:72:7e:ea:0c:e9:ed:bb:e0:80:22:10:c1:
0a:49:95:8f:85:2e:86:c0:88:f0:ac:7b:c5:4d:51:
7a:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:2F:47:CE:73:87:53:FD:6B:0C:19:CB:9E:44:8A:4C:E6:49:1C:42
X509v3 Authority Key Identifier:
keyid:F8:B7:70:16:05:53:76:0C:35:67:DF:51:A8:47:ED:6C:52:9C:07:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-LdwFgVTdgw1Z99RqEftbFKcB4k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/3253ac-8fa7-425b-8a90-9b9b401459e6/1/1-LdwFgVTdgw1Z99RqEftbFKcB4k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/3253ac-8fa7-425b-8a90-9b9b401459e6/1/1-LdwFgVTdgw1Z99RqEftbFKcB4k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:46:4b:c8:25:6b:03:c7:aa:c9:06:90:a8:6e:24:7f:de:b8:
56:e3:01:96:49:ac:1c:f1:e2:40:88:4a:da:7b:12:3f:91:ab:
aa:bb:c6:a5:f9:7c:75:34:75:b3:0e:a2:c8:24:ca:96:20:83:
84:1d:d2:44:a1:32:86:d0:bd:aa:72:cf:fd:50:ea:10:1d:b3:
1d:cb:fa:07:8f:8d:5c:2b:89:7b:8f:dd:21:b7:c1:6a:bf:79:
cc:11:a5:9a:4a:34:2c:8c:dc:9e:95:18:ca:58:e3:63:ad:97:
bc:64:da:49:1a:54:04:4b:23:21:dd:53:7b:d7:c0:03:fe:aa:
06:d8:18:45:46:b8:fe:22:64:9a:d9:03:4f:80:e0:cd:c1:69:
e2:27:4f:e2:0d:07:00:25:61:7d:7e:1b:bf:27:00:bc:02:23:
38:45:67:0f:3e:95:93:bd:ed:a8:fe:1b:a7:13:b6:dc:93:de:
f2:05:ac:8f:f1:9e:3a:54:aa:de:d4:d1:dd:0a:ce:a1:aa:78:
68:c2:fa:65:88:37:bd:12:46:33:1e:52:a6:a7:3d:19:12:14:
4a:0a:21:4c:1d:fc:e7:20:c3:90:95:63:a8:2d:b4:2a:da:b9:
35:0e:18:a7:9e:ad:17:00:d7:df:25:f3:0d:28:2a:a4:b8:d5:
78:7d:01:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 04:16:32 2026 by rpki-client