Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/d59246-953e-423a-9704-931414101a01/1/1-ldVdi3-THDNg7MKE7eCxP_BX1o.mft
File: 1-ldVdi3-THDNg7MKE7eCxP_BX1o.mft (raw, json)
Hash identifier: dvFK0bXUEKlBBDE7EoQ/04aQfpK9NYWP66VnmzNmItI=
Subject key identifier: 03:C5:AE:74:39:61:C6:14:00:E9:9B:95:43:F1:AE:04:9B:3F:1D:BC
Authority key identifier: FA:57:55:76:2D:FE:4C:70:CD:83:B3:0A:13:B7:82:C4:FF:C1:5F:5A
Certificate issuer: /CN=fa5755762dfe4c70cd83b30a13b782c4ffc15f5a
Certificate serial: 019CAC7DDA1499400379BC3CD139AB271CF1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-ldVdi3-THDNg7MKE7eCxP_BX1o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/d59246-953e-423a-9704-931414101a01/1/1-ldVdi3-THDNg7MKE7eCxP_BX1o.mft
Manifest number: 01AC
Signing time: Mon 02 Mar 2026 03:00:54 +0000
Manifest this update: Mon 02 Mar 2026 03:00:54 +0000
Manifest next update: Tue 03 Mar 2026 03:00:54 +0000
Files and hashes: 1: 1-ldVdi3-THDNg7MKE7eCxP_BX1o.crl (hash: aE082vanMiBgl/OrcKt6N1dKAP67ZLU5nq1fyKSOMt8=)
2: pDA7nhW3yNSdUeX1KR6FhLMPZZY.roa (hash: ZZ1m4P8j+XlJcdrV7Ome2UFD4l54PQHH5x2pAoymEag=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/d59246-953e-423a-9704-931414101a01/1/1-ldVdi3-THDNg7MKE7eCxP_BX1o.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/d59246-953e-423a-9704-931414101a01/1/1-ldVdi3-THDNg7MKE7eCxP_BX1o.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-ldVdi3-THDNg7MKE7eCxP_BX1o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:7d:da:14:99:40:03:79:bc:3c:d1:39:ab:27:1c:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa5755762dfe4c70cd83b30a13b782c4ffc15f5a
Validity
Not Before: Mar 2 03:00:54 2026 GMT
Not After : Mar 3 03:00:54 2026 GMT
Subject: CN=03c5ae743961c61400e99b9543f1ae049b3f1dbc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:9d:60:85:50:db:32:c7:02:17:58:f3:50:7f:
44:c6:f6:14:8d:81:fd:3a:a6:22:fe:c7:9c:00:5b:
ea:e3:9d:6c:7c:ab:a6:b6:97:75:7a:bb:4c:c9:6e:
6b:13:e9:58:7c:6a:30:84:0b:7d:4a:8b:76:e1:4c:
d6:10:03:af:e2:b0:65:bc:76:9a:d8:85:b5:74:b0:
86:cb:23:e4:3a:aa:89:02:31:70:af:b9:7d:3a:8e:
cf:24:00:2b:58:9b:a2:59:19:81:b1:eb:db:f6:9c:
fb:c8:84:c6:cf:3e:8e:94:2f:0f:65:39:2b:18:14:
00:46:fb:ac:1b:6d:f8:cb:ed:5d:e8:d0:43:96:54:
f1:c6:e8:21:31:76:42:67:2a:9b:92:e3:a0:f6:05:
05:52:6a:78:fc:9d:15:0f:fa:46:80:3c:47:e5:96:
d0:ce:83:17:c1:28:a7:58:a7:51:68:39:b0:e2:eb:
48:c8:b0:c7:d4:46:5b:57:d4:01:ac:c4:9f:98:9c:
38:a5:4a:ad:0a:91:e6:20:9d:6b:6e:01:1e:20:42:
a7:45:d1:33:40:95:92:54:3e:34:34:46:31:5f:17:
ac:d7:84:2e:f5:2e:ec:74:40:5d:3e:a3:87:48:ce:
8f:3f:de:fa:58:95:0d:06:9a:57:ce:db:97:f9:3f:
75:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:C5:AE:74:39:61:C6:14:00:E9:9B:95:43:F1:AE:04:9B:3F:1D:BC
X509v3 Authority Key Identifier:
keyid:FA:57:55:76:2D:FE:4C:70:CD:83:B3:0A:13:B7:82:C4:FF:C1:5F:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-ldVdi3-THDNg7MKE7eCxP_BX1o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/d59246-953e-423a-9704-931414101a01/1/1-ldVdi3-THDNg7MKE7eCxP_BX1o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/d59246-953e-423a-9704-931414101a01/1/1-ldVdi3-THDNg7MKE7eCxP_BX1o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:5b:0b:e8:5c:ec:60:ad:0e:85:36:0c:e8:cd:bd:ee:c0:dd:
99:08:01:f6:c4:e7:c1:55:1e:69:f4:de:3d:24:ce:0c:e2:6f:
3a:33:1d:a6:87:50:cd:2b:5e:c8:39:45:7e:ef:9c:ed:58:db:
01:11:48:b9:04:99:89:a0:be:9e:e8:cd:75:6c:33:43:23:21:
3b:63:01:68:17:ac:02:0f:1d:da:d2:21:bf:f7:54:2c:5f:2b:
c4:e5:fb:2b:ad:13:7d:66:bf:c4:6c:69:07:49:eb:76:2c:d4:
70:b0:ce:e7:d1:33:f1:08:0a:80:b0:f0:39:0e:72:36:58:40:
b3:88:8d:5e:23:46:40:53:59:d5:6c:a1:63:05:f2:e5:02:64:
bc:32:6e:96:8a:6d:0e:14:fd:73:8d:ea:16:ed:a1:9e:db:bc:
90:85:02:39:d9:66:b1:e6:6c:b9:54:6a:e8:56:5d:5d:cb:ec:
e8:4a:e5:b9:59:b6:06:76:9e:c0:81:45:5e:e2:fd:4a:91:00:
7d:2e:b1:ae:42:05:48:53:fe:c6:a9:59:09:69:33:44:36:1e:
1d:94:53:9f:e2:c7:e2:a4:f9:97:d7:12:bc:0a:57:44:f6:88:
67:e2:7f:bc:29:f4:d4:b7:0e:9b:10:ae:95:41:1f:0d:46:ac:
29:de:9f:93
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZysfdoUmUADebw80TmrJxzxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZhNTc1NTc2MmRmZTRjNzBjZDgzYjMwYTEzYjc4MmM0ZmZj
MTVmNWEwHhcNMjYwMzAyMDMwMDU0WhcNMjYwMzAzMDMwMDU0WjAzMTEwLwYDVQQD
EygwM2M1YWU3NDM5NjFjNjE0MDBlOTliOTU0M2YxYWUwNDliM2YxZGJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoZ1ghVDbMscCF1jzUH9ExvYUjYH9
OqYi/secAFvq451sfKumtpd1ertMyW5rE+lYfGowhAt9Sot24UzWEAOv4rBlvHaa
2IW1dLCGyyPkOqqJAjFwr7l9Oo7PJAArWJuiWRmBsevb9pz7yITGzz6OlC8PZTkr
GBQARvusG234y+1d6NBDllTxxughMXZCZyqbkuOg9gUFUmp4/J0VD/pGgDxH5ZbQ
zoMXwSinWKdRaDmw4utIyLDH1EZbV9QBrMSfmJw4pUqtCpHmIJ1rbgEeIEKnRdEz
QJWSVD40NEYxXxes14Qu9S7sdEBdPqOHSM6PP976WJUNBppXztuX+T91HwIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFAPFrnQ5YcYUAOmblUPxrgSbPx28MB8GA1UdIwQY
MBaAFPpXVXYt/kxwzYOzChO3gsT/wV9aMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1sZFZkaTMtVEhETmc3TUtFN2VDeFBfQlgxby5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvN2IvZDU5MjQ2LTk1M2UtNDIzYS05NzA0
LTkzMTQxNDEwMWEwMS8xLzEtbGRWZGkzLVRIRE5nN01LRTdlQ3hQX0JYMW8ubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzdiL2Q1OTI0Ni05NTNlLTQyM2EtOTcwNC05MzE0MTQxMDFh
MDEvMS8xLWxkVmRpMy1USEROZzdNS0U3ZUN4UF9CWDFvLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnVsL
6FzsYK0OhTYM6M297sDdmQgB9sTnwVUeafTePSTODOJvOjMdpodQzSteyDlFfu+c
7VjbARFIuQSZiaC+nujNdWwzQyMhO2MBaBesAg8d2tIhv/dULF8rxOX7K60TfWa/
xGxpB0nrdizUcLDO59Ez8QgKgLDwOQ5yNlhAs4iNXiNGQFNZ1WyhYwXy5QJkvDJu
loptDhT9c43qFu2hntu8kIUCOdlmseZsuVRq6FZdXcvs6ErluVm2BnaewIFFXuL9
SpEAfS6xrkIFSFP+xqlZCWkzRDYeHZRTn+LH4qT5l9cSvApXRPaIZ+J/vCn01LcO
mxCulUEfDUasKd6fkw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 10:39:14 2026 by rpki-client