Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/82ec13-82cf-4eb7-b1e4-9a55885e5f66/1/1-LnOH73nyKTFjBblVGQ66nPn0Vg.mft
File: 1-LnOH73nyKTFjBblVGQ66nPn0Vg.mft (raw, json)
Hash identifier: qWHVdPmnKVld/qMrTGlk69mnyji33NudNVVupHWQKk0=
Subject key identifier: 97:35:2A:19:1A:5F:6C:47:00:71:35:65:2C:A3:01:1C:A1:22:9C:2D
Authority key identifier: F8:B9:CE:1F:BD:E7:C8:A4:C5:8C:16:E5:54:64:3A:EA:73:E7:D1:58
Certificate issuer: /CN=f8b9ce1fbde7c8a4c58c16e554643aea73e7d158
Certificate serial: 019DA4C1AD04964E2387E0A6FE0DEF2013B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-LnOH73nyKTFjBblVGQ66nPn0Vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/82ec13-82cf-4eb7-b1e4-9a55885e5f66/1/1-LnOH73nyKTFjBblVGQ66nPn0Vg.mft
Manifest number: DF
Signing time: Sun 19 Apr 2026 08:00:49 +0000
Manifest this update: Sun 19 Apr 2026 08:00:49 +0000
Manifest next update: Mon 20 Apr 2026 08:00:49 +0000
Files and hashes: 1: 1-LnOH73nyKTFjBblVGQ66nPn0Vg.crl (hash: ghH4lAIGZJ3O/NCncM3moHQSkbZaLOXoxWMkJyTFZcM=)
2: Wlc1mb_xj0DVaYUUDsBCwlVjTTI.roa (hash: OHp7KIYzafsL5kJAIldfo0uoA+OMQo8MF+eM1s5TkVM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/82ec13-82cf-4eb7-b1e4-9a55885e5f66/1/1-LnOH73nyKTFjBblVGQ66nPn0Vg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/82ec13-82cf-4eb7-b1e4-9a55885e5f66/1/1-LnOH73nyKTFjBblVGQ66nPn0Vg.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-LnOH73nyKTFjBblVGQ66nPn0Vg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 04:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:c1:ad:04:96:4e:23:87:e0:a6:fe:0d:ef:20:13:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8b9ce1fbde7c8a4c58c16e554643aea73e7d158
Validity
Not Before: Apr 19 08:00:49 2026 GMT
Not After : Apr 20 08:00:49 2026 GMT
Subject: CN=97352a191a5f6c47007135652ca3011ca1229c2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:e3:ad:32:55:59:cc:f8:d8:f8:47:bf:3b:7d:
be:93:3d:79:cb:ef:a8:67:b6:bf:b1:ba:01:b6:4c:
43:04:c3:18:e8:88:f1:d2:65:90:1b:35:dd:06:de:
5c:fb:a5:47:10:7d:a4:09:52:0a:7d:2b:c5:eb:30:
52:76:4e:8a:13:90:82:8e:2e:9e:37:f0:0e:26:86:
90:13:75:93:fc:2a:60:c2:02:58:0b:7d:79:60:fb:
3f:af:57:1c:18:f4:21:59:c0:20:0a:45:1b:7f:00:
f3:00:af:d1:bd:18:3f:1b:b1:4c:3d:7b:f7:23:ef:
49:f6:70:19:0d:17:1d:e1:70:ed:97:bf:23:76:4d:
91:37:f0:2f:29:4d:d1:f3:29:20:b0:07:38:7b:af:
35:b0:05:37:af:84:9a:82:ef:9b:40:d1:8f:d2:31:
50:07:6b:32:f1:d9:f5:d7:67:61:0e:e5:51:61:b9:
1f:f0:db:2e:ae:74:68:da:17:ef:34:5f:84:08:ff:
9f:c3:be:1c:c8:3d:b1:57:d2:a6:3d:c9:00:d0:e2:
8b:b2:37:38:1d:ce:ee:80:59:d8:51:f4:a6:3c:ce:
20:1f:e0:19:22:bc:e4:38:d1:7c:73:a3:e4:09:fb:
5c:ab:6f:0d:66:30:01:8b:b8:9e:db:a4:f2:7e:70:
8e:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:35:2A:19:1A:5F:6C:47:00:71:35:65:2C:A3:01:1C:A1:22:9C:2D
X509v3 Authority Key Identifier:
keyid:F8:B9:CE:1F:BD:E7:C8:A4:C5:8C:16:E5:54:64:3A:EA:73:E7:D1:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-LnOH73nyKTFjBblVGQ66nPn0Vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/82ec13-82cf-4eb7-b1e4-9a55885e5f66/1/1-LnOH73nyKTFjBblVGQ66nPn0Vg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/82ec13-82cf-4eb7-b1e4-9a55885e5f66/1/1-LnOH73nyKTFjBblVGQ66nPn0Vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:23:f7:8c:df:bc:71:fa:36:84:2f:8c:7b:bd:c8:f9:20:ef:
e2:85:a5:e0:88:29:d7:5b:8d:cf:a7:c1:e6:12:c2:33:01:d4:
4b:7f:bd:20:6c:49:e5:45:4d:45:35:7c:fa:50:df:0f:21:cb:
d4:d2:a6:f1:63:f4:b4:2e:30:20:08:c5:b0:39:ac:28:a3:24:
9c:96:f4:a9:9d:ab:8d:f3:65:88:4e:01:d1:42:de:c7:96:ab:
46:c5:53:04:50:66:61:7c:25:cd:6f:89:32:a5:8f:cc:be:00:
68:b8:27:f6:bf:97:2c:91:1c:9e:9e:eb:cb:41:4a:a7:21:9b:
f4:be:6a:ff:2a:17:94:c9:19:c1:bf:15:57:55:9b:7a:fa:a6:
8c:66:6f:39:02:4d:b8:01:6e:aa:e5:13:d6:59:54:3f:ad:31:
9e:b7:c5:cd:cb:eb:3d:fe:ec:e0:fc:0f:95:6a:85:cb:f7:e6:
29:9f:e3:71:dc:ab:b4:e3:96:c9:a9:64:6f:18:07:08:32:62:
72:92:86:03:ee:69:a1:d1:71:87:76:38:66:e1:38:a7:83:9e:
02:06:a1:47:5d:fb:49:12:fd:b5:75:6a:40:e9:55:5d:42:fa:
ca:fb:61:11:ce:96:cd:72:bf:ce:ee:27:41:0b:4c:97:ad:d5:
c2:87:90:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 14:07:38 2026 by rpki-client