Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/d59246-953e-423a-9704-931414101a01/1/1-ldVdi3-THDNg7MKE7eCxP_BX1o.mft
File: 1-ldVdi3-THDNg7MKE7eCxP_BX1o.mft (raw, json)
Hash identifier: SN2cGymbZ1WvdYshui1sW7omAoepZHry31fdmN3vmTo=
Subject key identifier: 38:4C:90:1F:E6:1E:27:6F:3C:55:23:A7:50:91:EE:ED:A9:77:C6:24
Authority key identifier: FA:57:55:76:2D:FE:4C:70:CD:83:B3:0A:13:B7:82:C4:FF:C1:5F:5A
Certificate issuer: /CN=fa5755762dfe4c70cd83b30a13b782c4ffc15f5a
Certificate serial: 019FAB2C149F3A6D66C581F85D458F85ED4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-ldVdi3-THDNg7MKE7eCxP_BX1o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/d59246-953e-423a-9704-931414101a01/1/1-ldVdi3-THDNg7MKE7eCxP_BX1o.mft
Manifest number: 0339
Signing time: Wed 29 Jul 2026 00:00:20 +0000
Manifest this update: Wed 29 Jul 2026 00:00:20 +0000
Manifest next update: Thu 30 Jul 2026 00:00:20 +0000
Files and hashes: 1: 1-ldVdi3-THDNg7MKE7eCxP_BX1o.crl (hash: bab2Vpyyf2IuDhMyxoIlbUJnhkcVXwVhZHTO3bOJtAw=)
2: pDA7nhW3yNSdUeX1KR6FhLMPZZY.roa (hash: ZZ1m4P8j+XlJcdrV7Ome2UFD4l54PQHH5x2pAoymEag=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/d59246-953e-423a-9704-931414101a01/1/1-ldVdi3-THDNg7MKE7eCxP_BX1o.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/d59246-953e-423a-9704-931414101a01/1/1-ldVdi3-THDNg7MKE7eCxP_BX1o.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-ldVdi3-THDNg7MKE7eCxP_BX1o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:2c:14:9f:3a:6d:66:c5:81:f8:5d:45:8f:85:ed:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa5755762dfe4c70cd83b30a13b782c4ffc15f5a
Validity
Not Before: Jul 29 00:00:20 2026 GMT
Not After : Jul 30 00:00:20 2026 GMT
Subject: CN=384c901fe61e276f3c5523a75091eeeda977c624
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:c7:91:45:1e:1f:48:88:fa:7f:ca:ec:47:af:
36:a6:14:d3:25:a9:52:c2:01:0f:56:6a:84:ab:a3:
80:d5:30:2d:5b:41:98:dc:fd:5b:45:8b:63:c7:97:
ef:02:7c:bd:9b:7b:22:6f:88:ab:c0:a9:10:33:db:
6c:1f:f9:9d:b9:f3:d9:d6:fe:15:9c:47:61:bf:d9:
cf:e2:5e:78:33:5b:18:15:90:d2:0f:18:1b:f2:e2:
0c:35:05:3b:2c:3c:b3:ec:d1:ca:0a:90:07:f4:f6:
a1:46:a9:ef:54:82:0a:cc:83:54:20:b7:3f:88:a8:
33:0a:e7:e0:45:43:3a:a8:a5:aa:75:40:d0:2b:14:
b6:1b:4d:08:88:e3:ed:3a:d1:eb:e5:cc:7f:0b:e5:
eb:21:72:88:57:eb:c0:2c:23:5d:f0:cb:ca:51:10:
e8:b2:51:b8:fa:94:e4:7e:85:2f:87:74:9b:0b:1f:
65:5b:5f:6f:3a:21:fa:56:e1:46:89:8e:8d:a7:70:
5d:d2:8f:7e:b5:53:24:cf:94:f9:6b:60:ca:bd:f7:
ec:ef:61:5f:15:f1:1a:e0:01:50:45:d5:79:e8:9f:
7e:59:b5:13:7c:60:eb:c9:54:b1:4e:e4:e9:ed:a8:
a3:1c:3d:c1:1a:be:ba:27:86:e5:50:04:e5:f1:14:
e7:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:4C:90:1F:E6:1E:27:6F:3C:55:23:A7:50:91:EE:ED:A9:77:C6:24
X509v3 Authority Key Identifier:
keyid:FA:57:55:76:2D:FE:4C:70:CD:83:B3:0A:13:B7:82:C4:FF:C1:5F:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-ldVdi3-THDNg7MKE7eCxP_BX1o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/d59246-953e-423a-9704-931414101a01/1/1-ldVdi3-THDNg7MKE7eCxP_BX1o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/d59246-953e-423a-9704-931414101a01/1/1-ldVdi3-THDNg7MKE7eCxP_BX1o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:f6:15:d3:cf:92:c7:66:3f:c9:98:5d:86:a5:df:ec:29:92:
ab:9f:46:08:70:a2:2a:12:e2:9c:69:9c:e3:ff:dd:39:2a:3b:
fe:34:c9:8a:02:e9:73:12:b4:2c:6e:8f:a6:45:aa:16:51:39:
9c:28:2c:ea:29:d0:5a:8e:a4:8f:52:ed:2c:4e:fd:82:66:0c:
ee:20:10:9d:ed:2f:a6:38:37:27:16:13:03:e7:4e:3b:11:22:
85:f1:55:c9:63:7f:9d:50:ab:b8:85:c2:37:3d:3d:cb:88:32:
aa:6f:7b:26:19:84:45:a9:f0:b1:17:48:28:1c:06:ce:bc:25:
de:fd:ff:61:ce:f5:17:44:9c:3b:61:66:36:07:83:44:ec:7d:
09:50:8a:7b:41:fd:d3:85:06:e6:f6:db:79:38:5a:96:1e:bd:
a7:98:7b:84:76:84:67:87:4a:e6:81:87:90:6e:4f:b6:b8:c1:
05:e4:f8:a4:1d:08:2d:d2:e9:aa:ae:bb:64:6e:02:15:82:d9:
37:d7:b1:b4:c4:ec:e4:fc:86:3f:16:e0:0d:93:37:dd:6f:44:
97:f5:f3:18:ed:bd:83:b0:64:f1:89:6b:1e:23:d9:29:08:7a:
43:21:36:3e:32:4a:4b:34:ad:8b:d6:3e:c3:3a:1c:7d:da:44:
2f:99:b8:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 02:07:49 2026 by rpki-client