Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/b331cc-6b6d-4693-9267-b422779160bb/1/1-LGChfQu1nwR2Pg99IixD8h_F78.mft
File: 1-LGChfQu1nwR2Pg99IixD8h_F78.mft (raw, json)
Hash identifier: TttzKQsrg+lDakqjVgtMQ8N0lYHiRiLU0+2vdk1ifiA=
Subject key identifier: C3:14:BC:10:3B:C7:12:1D:D1:83:6B:61:2A:46:1E:B3:B4:37:AB:B7
Authority key identifier: F8:B1:82:85:F4:2E:D6:7C:11:D8:F8:3D:F4:88:B1:0F:C8:7F:17:BF
Certificate issuer: /CN=f8b18285f42ed67c11d8f83df488b10fc87f17bf
Certificate serial: 019D9A75047C7A662D0D45B8EACDA4435736
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-LGChfQu1nwR2Pg99IixD8h_F78.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/b331cc-6b6d-4693-9267-b422779160bb/1/1-LGChfQu1nwR2Pg99IixD8h_F78.mft
Manifest number: 0FAB
Signing time: Fri 17 Apr 2026 08:00:53 +0000
Manifest this update: Fri 17 Apr 2026 08:00:53 +0000
Manifest next update: Sat 18 Apr 2026 08:00:53 +0000
Files and hashes: 1: 1-LGChfQu1nwR2Pg99IixD8h_F78.crl (hash: qFJvcR1JnFnHweGJvJQnF+OxQY0Wsn8G2tfT3va6b38=)
2: znlH05wUUI_cREyEO6A7B87acRI.roa (hash: MtJpDkpsvsN3UGCwGXX+CpXcpcwlJRAixBEzCR1dqmY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/b331cc-6b6d-4693-9267-b422779160bb/1/1-LGChfQu1nwR2Pg99IixD8h_F78.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/b331cc-6b6d-4693-9267-b422779160bb/1/1-LGChfQu1nwR2Pg99IixD8h_F78.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-LGChfQu1nwR2Pg99IixD8h_F78.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:75:04:7c:7a:66:2d:0d:45:b8:ea:cd:a4:43:57:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8b18285f42ed67c11d8f83df488b10fc87f17bf
Validity
Not Before: Apr 17 08:00:53 2026 GMT
Not After : Apr 18 08:00:53 2026 GMT
Subject: CN=c314bc103bc7121dd1836b612a461eb3b437abb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:4e:53:b6:a9:7b:65:18:d0:e6:4c:09:1e:e1:
f9:7b:84:57:06:5f:1e:a7:69:e5:36:da:c4:a1:57:
43:5d:c3:ea:4b:5b:bf:c1:b4:f1:d6:58:60:c6:63:
44:18:b1:2f:05:3c:50:9d:43:c8:74:d7:ea:e2:05:
e9:ca:96:95:34:5c:1a:34:d4:0b:16:eb:14:1e:68:
25:d8:09:39:10:3d:f8:2f:b4:95:f4:af:de:4e:e4:
a5:fb:85:e0:51:d1:99:1e:df:a0:2c:f9:e4:6a:b3:
89:06:67:73:0a:45:f2:23:65:fb:ca:5b:81:35:14:
5b:a3:f4:ab:e8:47:73:61:d6:ee:b6:e3:d4:50:f7:
db:7c:10:bf:0f:00:09:0c:02:5a:cb:92:7b:ea:27:
a2:d4:bb:df:6a:fa:30:da:4f:c2:60:3d:d4:08:aa:
c9:fd:51:d1:88:20:5d:41:2c:09:34:06:44:1b:df:
b2:58:6f:d5:89:38:71:10:9a:58:55:45:fa:e2:71:
28:26:58:4d:13:97:d0:6c:0c:ab:1b:95:4e:eb:52:
52:96:83:ae:7c:5c:fd:64:61:ad:55:d6:8c:f3:c7:
4c:ea:06:8b:a9:9d:79:64:ec:19:88:3a:2f:2c:c1:
2f:77:60:5e:08:18:cb:10:c5:ad:04:e7:ea:e6:35:
94:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:14:BC:10:3B:C7:12:1D:D1:83:6B:61:2A:46:1E:B3:B4:37:AB:B7
X509v3 Authority Key Identifier:
keyid:F8:B1:82:85:F4:2E:D6:7C:11:D8:F8:3D:F4:88:B1:0F:C8:7F:17:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-LGChfQu1nwR2Pg99IixD8h_F78.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/b331cc-6b6d-4693-9267-b422779160bb/1/1-LGChfQu1nwR2Pg99IixD8h_F78.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/b331cc-6b6d-4693-9267-b422779160bb/1/1-LGChfQu1nwR2Pg99IixD8h_F78.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:4c:fd:89:cc:14:12:c9:51:c0:bb:61:da:a8:59:bc:26:51:
e3:3d:69:b8:85:f8:3f:c7:cd:99:b3:90:e2:52:ef:ff:16:01:
48:e6:48:99:e4:34:ca:d5:2b:a5:84:c7:e2:21:d1:18:39:e3:
bb:8d:c2:a7:6e:ec:e2:bd:67:b5:42:6e:7a:96:f1:de:5d:16:
a9:d5:d7:41:12:80:e5:a2:cb:b6:25:b7:ab:4d:78:84:d1:37:
28:1e:c4:b6:74:ce:2e:e4:3b:b7:d5:cb:aa:12:3c:54:65:80:
0f:e5:59:a6:f3:8f:97:dc:d5:c7:b9:73:4e:82:fe:4c:e9:ec:
74:44:51:8a:8f:1b:34:66:d3:26:86:06:3c:bf:82:75:a8:6d:
cc:ff:12:6e:9a:2a:80:7f:5c:3a:9d:a0:e3:2f:36:25:80:2f:
e4:77:0c:3e:1e:1f:a7:cb:08:f4:30:e4:53:ac:f1:4b:ed:d9:
6b:00:c8:1a:81:20:85:10:3c:30:28:61:df:46:c0:d6:f4:84:
7f:ee:4b:83:e9:60:90:1c:42:c2:44:ff:0d:9d:66:33:f4:3e:
32:20:aa:ca:8b:44:16:71:bb:c0:aa:07:8d:86:22:4e:86:e0:
77:bd:16:98:d3:8c:3d:ee:67:bf:2d:8f:67:69:85:71:7a:d0:
15:9b:e6:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:33:39 2026 by rpki-client