Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/8b58e9-3230-4418-8f68-81224e480c03/1/1-LPVjZk_lghA9-8v4gwAityXH5c.mft
File: 1-LPVjZk_lghA9-8v4gwAityXH5c.mft (raw, json)
Hash identifier: UhI2PDcTSQ8ZyTCBCjOdGgu5Vu9tBfclnlDsHLvRBJM=
Subject key identifier: AB:ED:38:00:D9:74:43:78:F4:D8:1C:92:22:01:63:50:91:82:D3:27
Authority key identifier: F8:B3:D5:8D:99:3F:96:08:40:F7:EF:2F:E2:0C:00:8A:DC:97:1F:97
Certificate issuer: /CN=f8b3d58d993f960840f7ef2fe20c008adc971f97
Certificate serial: 019D9AE29BCCABA5DB742603EB1DFBD1CC2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-LPVjZk_lghA9-8v4gwAityXH5c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/8b58e9-3230-4418-8f68-81224e480c03/1/1-LPVjZk_lghA9-8v4gwAityXH5c.mft
Manifest number: 18C1
Signing time: Fri 17 Apr 2026 10:00:35 +0000
Manifest this update: Fri 17 Apr 2026 10:00:35 +0000
Manifest next update: Sat 18 Apr 2026 10:00:35 +0000
Files and hashes: 1: 1-LPVjZk_lghA9-8v4gwAityXH5c.crl (hash: EYHFKo0nJ3ly0utbA1zem2SJ+ZCF9NzESjgHdhFrel0=)
2: FMo7TJvkPpYtgzLEkKIdGr7kRp4.roa (hash: SV7/k04fYgWabF2RHzjM0CZofp3MWJKlFtmZhh/YzbY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/8b58e9-3230-4418-8f68-81224e480c03/1/1-LPVjZk_lghA9-8v4gwAityXH5c.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/8b58e9-3230-4418-8f68-81224e480c03/1/1-LPVjZk_lghA9-8v4gwAityXH5c.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-LPVjZk_lghA9-8v4gwAityXH5c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:e2:9b:cc:ab:a5:db:74:26:03:eb:1d:fb:d1:cc:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8b3d58d993f960840f7ef2fe20c008adc971f97
Validity
Not Before: Apr 17 10:00:35 2026 GMT
Not After : Apr 18 10:00:35 2026 GMT
Subject: CN=abed3800d9744378f4d81c92220163509182d327
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:e2:63:a7:75:1c:c8:75:09:84:fd:4c:9b:1f:
fa:01:67:40:84:27:11:b7:e6:7f:01:74:b2:e8:6d:
16:54:02:df:28:74:a5:cf:0e:08:c3:d1:ee:0e:90:
7f:13:0e:df:d3:01:b8:3a:01:73:4c:b8:0b:b8:e0:
51:46:28:b3:5f:a7:6c:f0:3d:81:2d:a5:ba:28:f1:
e7:4f:99:3b:55:24:14:e6:07:85:16:a4:48:bd:0c:
13:1b:74:15:4d:79:ed:66:0d:a0:c5:5d:9c:d7:48:
33:98:86:36:2d:14:d4:67:59:48:4f:42:47:0b:ef:
81:4a:7d:07:4c:68:5d:40:49:07:c5:c2:6b:8c:50:
1f:6e:6b:2e:b3:2a:7d:64:07:14:64:b4:22:32:0f:
34:60:5c:6e:32:d8:50:c4:4b:30:8a:f8:02:06:fb:
e0:b2:23:fa:ad:8e:f3:c2:de:d9:ef:83:ae:95:cd:
fb:5e:d3:0f:8f:08:2a:77:c0:bd:ce:42:b4:68:1e:
a0:ab:d0:ff:eb:b3:12:87:28:7b:3f:34:b6:10:6f:
97:dd:0a:48:0c:3e:d6:4d:71:f6:aa:dc:ec:2e:62:
83:af:d9:e5:d9:df:cc:8c:f0:fb:e6:4c:bb:31:56:
bd:9e:ac:8f:a7:c6:26:62:8c:90:5c:58:44:d9:d1:
50:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:ED:38:00:D9:74:43:78:F4:D8:1C:92:22:01:63:50:91:82:D3:27
X509v3 Authority Key Identifier:
keyid:F8:B3:D5:8D:99:3F:96:08:40:F7:EF:2F:E2:0C:00:8A:DC:97:1F:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-LPVjZk_lghA9-8v4gwAityXH5c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/8b58e9-3230-4418-8f68-81224e480c03/1/1-LPVjZk_lghA9-8v4gwAityXH5c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/8b58e9-3230-4418-8f68-81224e480c03/1/1-LPVjZk_lghA9-8v4gwAityXH5c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:e3:90:42:54:11:05:8d:90:a3:18:33:30:2c:2d:85:02:29:
44:b9:af:e9:8a:39:40:bb:71:75:d2:9d:32:16:85:d1:20:38:
7a:ad:fc:0c:48:f7:69:3d:8b:53:e8:b2:e4:74:61:8f:8c:0a:
b2:57:58:a2:41:2c:36:1f:c8:1a:af:95:f6:35:31:fd:d6:66:
f7:ed:21:a6:ab:7c:95:8a:7d:49:93:fd:cd:30:33:87:bb:21:
bd:1c:1e:9d:b3:72:d8:b9:02:76:33:b8:03:61:bf:24:84:18:
de:a8:a6:16:eb:a9:c3:10:5a:ba:aa:2b:6d:53:8f:2c:ce:78:
8d:5e:ab:be:37:1b:f9:21:66:f0:8a:75:9c:1b:e0:f3:6b:d4:
75:24:f5:61:b3:c0:b4:0b:f8:eb:e5:e4:40:b3:78:48:5b:fc:
07:03:37:7b:72:94:fc:23:c8:0b:5d:4e:05:a5:d3:20:1b:e1:
b6:b9:5e:14:ed:98:a9:d8:78:b9:7f:4e:df:93:3b:25:54:53:
8e:d7:ff:f5:6e:9b:6e:42:36:6b:c3:d3:14:02:bb:15:5b:52:
24:33:84:5f:ba:e1:a9:a5:a5:43:72:94:c1:68:74:9b:e4:d6:
95:4a:8d:6e:9b:03:f5:d8:19:78:a7:9e:37:c5:d2:d7:6a:9c:
02:4a:6a:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:24:25 2026 by rpki-client