Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/d59246-953e-423a-9704-931414101a01/1/1-ldVdi3-THDNg7MKE7eCxP_BX1o.mft
File: 1-ldVdi3-THDNg7MKE7eCxP_BX1o.mft (raw, json)
Hash identifier: Q4W2Yefp0tb6BTPwLjDIHDK/oF+UCTDs7K4ugS5Gp9A=
Subject key identifier: 85:AE:06:92:A1:0E:EB:44:50:1A:31:CB:F3:46:42:22:A3:A6:57:D4
Authority key identifier: FA:57:55:76:2D:FE:4C:70:CD:83:B3:0A:13:B7:82:C4:FF:C1:5F:5A
Certificate issuer: /CN=fa5755762dfe4c70cd83b30a13b782c4ffc15f5a
Certificate serial: 019D9BF581DA4E1F4A5074AE87D366F5F00D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-ldVdi3-THDNg7MKE7eCxP_BX1o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/d59246-953e-423a-9704-931414101a01/1/1-ldVdi3-THDNg7MKE7eCxP_BX1o.mft
Manifest number: 0228
Signing time: Fri 17 Apr 2026 15:00:51 +0000
Manifest this update: Fri 17 Apr 2026 15:00:51 +0000
Manifest next update: Sat 18 Apr 2026 15:00:51 +0000
Files and hashes: 1: 1-ldVdi3-THDNg7MKE7eCxP_BX1o.crl (hash: C6An/IFPU7kAiRJnBi5z1KvNL3BzOGWhFbWfZXgip/g=)
2: pDA7nhW3yNSdUeX1KR6FhLMPZZY.roa (hash: ZZ1m4P8j+XlJcdrV7Ome2UFD4l54PQHH5x2pAoymEag=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/d59246-953e-423a-9704-931414101a01/1/1-ldVdi3-THDNg7MKE7eCxP_BX1o.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/d59246-953e-423a-9704-931414101a01/1/1-ldVdi3-THDNg7MKE7eCxP_BX1o.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-ldVdi3-THDNg7MKE7eCxP_BX1o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 15:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:f5:81:da:4e:1f:4a:50:74:ae:87:d3:66:f5:f0:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa5755762dfe4c70cd83b30a13b782c4ffc15f5a
Validity
Not Before: Apr 17 15:00:51 2026 GMT
Not After : Apr 18 15:00:51 2026 GMT
Subject: CN=85ae0692a10eeb44501a31cbf3464222a3a657d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:ba:45:85:5d:e1:7e:d3:e1:85:1c:20:d9:8f:
a4:1d:87:c3:cc:7e:63:52:62:50:8e:87:71:eb:91:
a1:b8:6c:33:96:14:4f:ab:a0:64:49:f5:a9:6a:95:
0c:8d:be:82:27:e2:1c:f3:1e:52:6d:68:0e:d9:04:
d6:c4:07:18:b8:d3:9f:92:7b:83:b8:a0:0d:65:90:
c2:f9:a3:e9:44:be:56:7c:90:11:a3:65:cd:b4:4c:
da:d9:38:3d:ba:c5:c8:3d:bd:ee:b5:bf:c1:12:2f:
b3:80:4c:55:b2:c3:91:86:2a:1e:55:d5:63:0b:47:
a4:04:ac:36:b0:cd:1b:3a:68:b9:32:b0:81:1d:0a:
d5:a6:c5:de:33:07:f5:1d:e1:05:70:72:26:43:4a:
b9:f1:cc:11:ac:d9:9a:fe:3f:4d:95:c7:2b:54:d4:
c9:fc:a2:7e:19:1b:c0:b5:a3:dc:50:a2:22:61:be:
b5:68:ec:69:2d:f8:37:c7:c5:26:48:df:cf:4e:c2:
47:97:8b:96:a8:17:d4:27:4b:03:ed:9f:11:2c:5d:
f3:8c:68:84:24:ab:2e:de:d0:47:67:a4:ec:8a:77:
5a:7a:91:0e:b1:97:31:19:b9:27:c3:e4:cb:5e:16:
a2:a5:07:b1:c1:70:7c:bf:ea:c1:0e:02:b4:2c:c5:
00:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:AE:06:92:A1:0E:EB:44:50:1A:31:CB:F3:46:42:22:A3:A6:57:D4
X509v3 Authority Key Identifier:
keyid:FA:57:55:76:2D:FE:4C:70:CD:83:B3:0A:13:B7:82:C4:FF:C1:5F:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-ldVdi3-THDNg7MKE7eCxP_BX1o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/d59246-953e-423a-9704-931414101a01/1/1-ldVdi3-THDNg7MKE7eCxP_BX1o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/d59246-953e-423a-9704-931414101a01/1/1-ldVdi3-THDNg7MKE7eCxP_BX1o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:ce:bc:ee:43:e4:fc:d5:5c:9a:c7:54:54:65:31:2d:23:ff:
44:da:ab:c4:bb:b4:de:41:64:11:93:22:88:e9:c2:95:c0:96:
af:7b:ec:dc:32:a4:92:e4:30:db:c2:22:ea:27:ad:fa:28:2b:
c3:23:b8:87:4e:17:b3:b6:f8:32:54:ea:3b:0d:1f:d6:06:29:
47:72:e3:4d:56:59:92:6e:df:c3:70:54:76:d4:1a:99:e1:91:
67:c2:8a:42:4d:92:c5:41:8c:ce:9b:41:b9:c5:d9:55:f7:c3:
8e:53:a1:17:e4:fe:fa:a1:20:37:dc:08:eb:a4:36:32:32:5a:
87:19:ea:68:d1:3c:61:43:f2:e2:fb:2a:1e:fe:35:2d:12:fa:
d1:c9:1b:da:e9:57:f7:43:c7:aa:c8:c7:48:54:fb:0b:fd:38:
fe:f2:fd:c8:e2:f0:4a:bb:0a:d1:19:3b:eb:8b:00:2f:4e:3c:
12:b2:44:e8:54:7b:dc:0d:83:28:48:7d:1d:f0:af:b4:24:f3:
28:b9:63:df:5f:17:c7:eb:6c:0f:69:1d:46:a9:f3:2c:3a:92:
39:94:f1:64:14:7d:0d:59:78:69:4b:68:49:05:39:c1:c0:c0:
92:83:6f:28:7f:b8:d8:48:4f:a7:94:b5:1a:4f:03:0a:63:41:
e5:2d:3d:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:28:37 2026 by rpki-client