Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/82ec13-82cf-4eb7-b1e4-9a55885e5f66/1/1-LnOH73nyKTFjBblVGQ66nPn0Vg.mft
File: 1-LnOH73nyKTFjBblVGQ66nPn0Vg.mft (raw, json)
Hash identifier: O40tx+gkulAeaU+kba7DoFPgk2pbiUmeiPEMcOm/Xwo=
Subject key identifier: 25:33:72:94:AA:63:99:ED:47:E5:2B:74:90:0E:08:5B:67:47:56:F7
Authority key identifier: F8:B9:CE:1F:BD:E7:C8:A4:C5:8C:16:E5:54:64:3A:EA:73:E7:D1:58
Certificate issuer: /CN=f8b9ce1fbde7c8a4c58c16e554643aea73e7d158
Certificate serial: 019FAA50BD06BDFB4B8381C3CED471FE8AAC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-LnOH73nyKTFjBblVGQ66nPn0Vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/82ec13-82cf-4eb7-b1e4-9a55885e5f66/1/1-LnOH73nyKTFjBblVGQ66nPn0Vg.mft
Manifest number: 01EB
Signing time: Tue 28 Jul 2026 20:00:45 +0000
Manifest this update: Tue 28 Jul 2026 20:00:45 +0000
Manifest next update: Wed 29 Jul 2026 20:00:45 +0000
Files and hashes: 1: 1-LnOH73nyKTFjBblVGQ66nPn0Vg.crl (hash: 0/DeEgsv3fKPQbwkSgf8EvefqZpQ5iOwq6bg2TVSe+I=)
2: Wlc1mb_xj0DVaYUUDsBCwlVjTTI.roa (hash: OHp7KIYzafsL5kJAIldfo0uoA+OMQo8MF+eM1s5TkVM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/82ec13-82cf-4eb7-b1e4-9a55885e5f66/1/1-LnOH73nyKTFjBblVGQ66nPn0Vg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/82ec13-82cf-4eb7-b1e4-9a55885e5f66/1/1-LnOH73nyKTFjBblVGQ66nPn0Vg.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-LnOH73nyKTFjBblVGQ66nPn0Vg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 20:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:50:bd:06:bd:fb:4b:83:81:c3:ce:d4:71:fe:8a:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8b9ce1fbde7c8a4c58c16e554643aea73e7d158
Validity
Not Before: Jul 28 20:00:45 2026 GMT
Not After : Jul 29 20:00:45 2026 GMT
Subject: CN=25337294aa6399ed47e52b74900e085b674756f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:3f:9c:53:53:fa:41:7d:c5:af:39:14:a8:88:
26:cc:f5:d9:00:90:4b:71:7d:7a:ce:c2:6f:96:c4:
9b:73:d8:62:c6:0a:72:17:7a:cb:08:82:aa:a5:b0:
90:72:7a:6d:3c:74:ce:fc:a1:17:75:43:1a:b1:c8:
3a:87:b7:4f:b8:2b:cc:bf:6a:77:44:97:80:30:03:
70:1a:72:5f:a4:49:d7:88:f6:95:d4:58:38:43:32:
3a:b4:fc:0c:d9:40:19:d7:7e:46:cf:c8:51:3c:f3:
f2:8c:ae:5b:86:03:a8:b0:2b:66:81:72:88:26:c0:
c0:a6:3a:7a:13:88:42:37:9c:54:19:58:63:23:09:
3c:0e:ea:c0:c7:b7:0e:58:0f:9e:65:13:ac:42:e0:
c2:e1:01:ff:81:29:d5:d9:45:36:6c:d3:8e:91:2d:
a9:1c:9b:0f:9d:34:8d:df:00:19:bf:71:4f:8d:c7:
fe:ab:19:41:87:c1:14:c8:c8:cd:7c:8f:1d:d7:e2:
4e:0e:63:39:e4:9c:94:1a:70:b5:5f:d8:0a:dc:ef:
76:d7:4c:b6:37:31:73:b8:36:1b:88:4c:a1:68:49:
04:c7:70:d4:a0:46:43:77:61:93:c5:fc:6b:83:b9:
f9:3d:c5:2e:d5:f4:50:11:a3:18:95:c8:5e:37:06:
c6:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:33:72:94:AA:63:99:ED:47:E5:2B:74:90:0E:08:5B:67:47:56:F7
X509v3 Authority Key Identifier:
keyid:F8:B9:CE:1F:BD:E7:C8:A4:C5:8C:16:E5:54:64:3A:EA:73:E7:D1:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-LnOH73nyKTFjBblVGQ66nPn0Vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/82ec13-82cf-4eb7-b1e4-9a55885e5f66/1/1-LnOH73nyKTFjBblVGQ66nPn0Vg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/82ec13-82cf-4eb7-b1e4-9a55885e5f66/1/1-LnOH73nyKTFjBblVGQ66nPn0Vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:b4:29:6b:cb:1f:66:b8:2f:55:e5:3f:e7:fe:a0:d2:fd:6a:
d3:d1:ce:f0:31:ad:30:16:ab:f7:f1:0c:dc:cf:4c:06:dc:3d:
e8:15:50:23:9c:ec:98:7b:7b:03:17:08:21:96:e1:86:4b:a0:
4a:c1:2e:57:6f:f7:31:5a:e0:1b:16:5d:52:7c:6f:31:7f:86:
ac:80:06:d1:a2:7d:e4:fc:4d:f9:84:ef:c6:29:f2:be:f7:f6:
66:46:18:b4:b8:bb:99:fb:bc:c9:d8:d1:72:f9:4a:1c:b3:bf:
07:ac:29:b9:23:5f:cf:5f:82:f3:57:32:58:d1:0c:81:5b:66:
3f:32:0c:b5:52:f7:b0:39:28:e0:54:32:b7:d1:aa:1f:bb:f6:
cb:dd:ab:94:21:b1:61:c7:c9:09:2f:22:d5:3e:d2:6f:f7:22:
b0:4c:da:c0:38:27:1a:01:b4:57:49:62:4b:57:e6:39:9c:19:
55:22:96:ba:4b:ee:38:8d:02:00:48:cf:48:25:b8:0b:78:a8:
21:7d:d4:e0:fd:29:a0:eb:f1:45:0c:92:ab:e9:4a:65:21:6d:
b2:1d:5d:4e:f9:da:ec:fa:49:c8:a6:f7:9d:33:4c:fb:a0:2e:
ec:73:36:24:b1:2f:72:2e:8f:44:e6:ec:fc:b3:90:fe:13:2a:
85:10:bf:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 02:44:48 2026 by rpki-client