Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a2/8b58e9-3230-4418-8f68-81224e480c03/1/1-LPVjZk_lghA9-8v4gwAityXH5c.mft
File: 1-LPVjZk_lghA9-8v4gwAityXH5c.mft (raw, json)
Hash identifier: 5kZtw+zsWJ9neO3VSgsvUSsrI7I8so5aWHaZzdkumgg=
Subject key identifier: 23:9D:E0:56:88:D0:26:9D:7C:5F:B8:62:E3:FB:FA:46:5E:FD:3F:17
Authority key identifier: F8:B3:D5:8D:99:3F:96:08:40:F7:EF:2F:E2:0C:00:8A:DC:97:1F:97
Certificate issuer: /CN=f8b3d58d993f960840f7ef2fe20c008adc971f97
Certificate serial: 01A0E2F44E769A3EC8B55408754CBE590087
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-LPVjZk_lghA9-8v4gwAityXH5c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/8b58e9-3230-4418-8f68-81224e480c03/1/1-LPVjZk_lghA9-8v4gwAityXH5c.mft
Manifest number: 1A74
Signing time: Sun 27 Sep 2026 13:00:56 +0000
Manifest this update: Sun 27 Sep 2026 13:00:56 +0000
Manifest next update: Mon 28 Sep 2026 13:00:56 +0000
Files and hashes: 1: 1-LPVjZk_lghA9-8v4gwAityXH5c.crl (hash: IcC8/+BsUteCOyzLRdywL7HYD3lNVHg37ozftt63W34=)
2: FMo7TJvkPpYtgzLEkKIdGr7kRp4.roa (hash: SV7/k04fYgWabF2RHzjM0CZofp3MWJKlFtmZhh/YzbY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/8b58e9-3230-4418-8f68-81224e480c03/1/1-LPVjZk_lghA9-8v4gwAityXH5c.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/8b58e9-3230-4418-8f68-81224e480c03/1/1-LPVjZk_lghA9-8v4gwAityXH5c.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-LPVjZk_lghA9-8v4gwAityXH5c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 10:02:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e2:f4:4e:76:9a:3e:c8:b5:54:08:75:4c:be:59:00:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8b3d58d993f960840f7ef2fe20c008adc971f97
Validity
Not Before: Sep 27 13:00:56 2026 GMT
Not After : Sep 28 13:00:56 2026 GMT
Subject: CN=239de05688d0269d7c5fb862e3fbfa465efd3f17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:3d:ac:1a:4d:0f:35:e1:d6:59:6a:6d:3c:6b:
ac:96:36:40:08:43:06:f2:60:89:52:29:2b:ba:fd:
e3:25:de:6c:f9:e1:b1:9d:ba:dd:c1:09:1f:15:38:
ec:9f:6a:77:6d:b0:a0:91:96:93:4a:09:29:7d:c8:
fc:7a:b1:3e:71:28:59:8f:f2:c4:b9:48:b4:3a:3d:
33:df:0a:94:3a:b4:ea:cf:ed:47:08:ac:c3:72:ec:
2a:d6:4d:67:3a:8e:45:8f:7c:26:0e:59:1d:52:4c:
13:0d:50:b4:a8:d4:25:04:84:e3:fb:01:b9:9c:27:
87:0e:76:66:3c:75:c2:81:2d:f2:4d:3a:4c:28:bf:
25:cd:a0:34:8a:f9:4e:66:a5:ef:d1:f5:a3:b3:ad:
34:fc:b5:dc:5b:44:b1:8a:0b:cf:bd:f1:65:0c:92:
71:b7:ab:c2:2a:b8:9b:e9:6c:53:47:41:f5:87:61:
d2:da:f1:8a:91:2f:cf:c3:f4:38:29:01:3b:fb:a7:
e3:22:0b:43:be:77:88:b8:41:64:12:d7:05:7f:11:
74:eb:b7:2b:07:d4:f2:7d:45:47:1b:d8:82:b3:30:
7d:e5:26:06:07:e8:a6:35:f1:de:74:ad:33:2b:bc:
27:6a:42:6d:72:91:85:86:f8:c9:02:86:e4:63:0c:
02:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:9D:E0:56:88:D0:26:9D:7C:5F:B8:62:E3:FB:FA:46:5E:FD:3F:17
X509v3 Authority Key Identifier:
keyid:F8:B3:D5:8D:99:3F:96:08:40:F7:EF:2F:E2:0C:00:8A:DC:97:1F:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-LPVjZk_lghA9-8v4gwAityXH5c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/8b58e9-3230-4418-8f68-81224e480c03/1/1-LPVjZk_lghA9-8v4gwAityXH5c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/8b58e9-3230-4418-8f68-81224e480c03/1/1-LPVjZk_lghA9-8v4gwAityXH5c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:ce:d7:c2:42:a3:ad:16:be:17:7e:5a:22:4f:59:ea:84:34:
97:3d:48:a9:93:5a:13:ec:59:8a:62:b0:48:28:31:fb:75:d2:
46:9f:61:34:79:84:91:f3:bc:fc:6f:fe:d3:38:2d:a4:5d:8e:
b4:84:80:c5:04:e7:13:78:0f:71:16:5a:03:b2:ea:cd:1a:72:
6c:b8:be:b8:ff:7d:6c:f5:56:15:53:c3:48:a4:eb:ae:32:6a:
ce:c3:b3:07:3c:22:bf:a9:ff:73:a0:14:1a:91:a7:f6:2e:2b:
36:2f:ed:66:93:ea:08:d2:af:aa:04:88:38:f1:ee:fd:f5:58:
3c:e3:43:4b:c7:53:f7:e7:1b:fe:7b:cc:4b:99:9f:44:93:0c:
a5:ca:de:61:c9:2a:22:64:63:2a:7f:6c:08:3d:96:db:9c:5e:
00:48:76:4b:37:07:ed:95:cf:50:6b:8e:01:9b:c4:73:4c:cc:
4b:d9:b9:2d:57:cd:0c:93:35:5b:48:38:e7:cc:1c:c0:ae:31:
c0:b8:4b:5f:df:b1:3d:c8:a8:fb:49:b9:54:c3:fd:02:7d:29:
24:03:39:85:b7:a4:f4:e2:c9:f7:4c:57:f0:f5:b7:07:7c:ed:
da:b8:e8:72:dc:6f:cb:02:33:10:89:51:33:a3:1c:01:b7:7b:
db:d3:50:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 15:46:48 2026 by rpki-client