Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/dcf5ed-a1cb-4963-88af-4d77298b3b3b/1/1-LPhsj40sT9vfvKx5_p32iD-ZBI.mft
File: 1-LPhsj40sT9vfvKx5_p32iD-ZBI.mft (raw, json)
Hash identifier: BdE/HjI3WqZeYIDXOfDZ2areMw3vi41Hxo1CRk+EGPk=
Subject key identifier: A3:FF:A6:B9:1B:1E:7F:2E:E3:59:E2:F1:70:88:0E:68:A0:F2:28:77
Authority key identifier: F8:B3:E1:B2:3E:34:B1:3F:6F:7E:F2:B1:E7:FA:77:DA:20:FE:64:12
Certificate issuer: /CN=f8b3e1b23e34b13f6f7ef2b1e7fa77da20fe6412
Certificate serial: 019EBE7F94E0B402B1148B8E08C04272DE39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-LPhsj40sT9vfvKx5_p32iD-ZBI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/dcf5ed-a1cb-4963-88af-4d77298b3b3b/1/1-LPhsj40sT9vfvKx5_p32iD-ZBI.mft
Manifest number: 1956
Signing time: Sat 13 Jun 2026 01:01:32 +0000
Manifest this update: Sat 13 Jun 2026 01:01:32 +0000
Manifest next update: Sun 14 Jun 2026 01:01:32 +0000
Files and hashes: 1: 1-LPhsj40sT9vfvKx5_p32iD-ZBI.crl (hash: yF5EvAwzyG51wN/rUPOd+d7ZPsvwAULamhscnjb8kh4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/dcf5ed-a1cb-4963-88af-4d77298b3b3b/1/1-LPhsj40sT9vfvKx5_p32iD-ZBI.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/dcf5ed-a1cb-4963-88af-4d77298b3b3b/1/1-LPhsj40sT9vfvKx5_p32iD-ZBI.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-LPhsj40sT9vfvKx5_p32iD-ZBI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:be:7f:94:e0:b4:02:b1:14:8b:8e:08:c0:42:72:de:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8b3e1b23e34b13f6f7ef2b1e7fa77da20fe6412
Validity
Not Before: Jun 13 01:01:32 2026 GMT
Not After : Jun 14 01:01:32 2026 GMT
Subject: CN=a3ffa6b91b1e7f2ee359e2f170880e68a0f22877
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:6b:ef:de:f3:bc:ea:9f:f6:41:dc:35:bb:95:
28:d5:a7:b7:40:61:5c:5c:65:25:f6:f5:3e:85:9c:
fd:68:02:1b:04:d6:95:92:ba:c2:ad:a7:be:8a:0c:
2e:b7:76:90:ac:a0:0a:2a:40:2f:68:e4:55:8c:01:
d9:f4:83:05:0f:b1:a2:ca:61:f3:5e:2e:4e:6c:4e:
c7:ec:dd:7a:5c:0c:21:78:11:ea:0c:b0:97:6b:a2:
68:d1:5a:2b:67:ad:72:29:1f:62:60:fb:d4:58:7d:
4d:5e:f0:74:10:1c:97:3b:a7:3b:b8:4e:5d:3b:b0:
f3:7e:a3:b4:b2:93:2e:42:ba:fb:d0:91:46:90:84:
99:b4:8f:f8:27:2f:1d:e5:e4:f9:ae:42:35:ef:67:
d3:43:70:e4:ed:2e:7a:fa:c5:e3:1c:05:a5:d4:79:
e4:bf:15:dd:ad:53:d7:6d:ff:3e:81:e3:08:75:c3:
94:1f:c3:68:8a:45:d3:d8:c0:3e:b7:56:27:cf:fd:
d8:38:c3:fc:13:bc:5f:27:52:89:eb:58:b5:87:89:
99:fe:d8:b3:2f:12:ad:aa:c3:ff:3d:fc:f0:ce:ac:
f6:fa:4d:08:b7:30:d1:89:d9:45:ff:3a:bc:f8:04:
7a:6f:a5:5b:a4:0e:98:48:38:ab:7b:42:47:a3:8c:
02:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:FF:A6:B9:1B:1E:7F:2E:E3:59:E2:F1:70:88:0E:68:A0:F2:28:77
X509v3 Authority Key Identifier:
keyid:F8:B3:E1:B2:3E:34:B1:3F:6F:7E:F2:B1:E7:FA:77:DA:20:FE:64:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-LPhsj40sT9vfvKx5_p32iD-ZBI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/dcf5ed-a1cb-4963-88af-4d77298b3b3b/1/1-LPhsj40sT9vfvKx5_p32iD-ZBI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/dcf5ed-a1cb-4963-88af-4d77298b3b3b/1/1-LPhsj40sT9vfvKx5_p32iD-ZBI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:ef:fa:65:e4:86:bd:c2:d5:6f:c2:5e:2b:14:f0:e4:50:cf:
f0:68:39:15:d3:67:97:06:4e:94:b6:b1:83:e9:dd:5c:4e:c8:
0b:8c:3e:1f:ed:70:7b:9b:22:41:70:89:be:21:e1:68:04:6f:
eb:34:64:29:82:70:c6:ff:f3:f3:ca:8b:69:39:1b:c8:81:11:
ad:10:0a:e6:67:d2:c7:16:f7:ea:1e:48:85:70:ff:d7:fc:a5:
45:12:63:28:3f:fc:a8:1c:c3:ad:3d:b8:33:72:63:55:48:bd:
7f:a7:83:ef:08:71:88:27:1c:71:77:e5:96:e1:8e:ea:f3:fe:
b4:86:7b:21:31:9f:c8:8e:49:8c:6b:39:d8:b4:68:ee:63:73:
16:29:05:62:d6:df:ea:b9:d8:e6:db:45:ad:35:05:74:4c:20:
ea:a5:8e:b2:0c:12:f4:79:28:9e:a2:59:57:28:58:1d:49:3f:
70:3d:7d:b6:bd:94:99:92:e8:97:55:a4:8e:6a:4f:60:04:54:
19:6b:7e:e0:16:e3:41:da:95:af:9d:48:4e:f2:39:26:30:31:
b6:c2:7d:18:e2:16:f2:ea:b6:1a:4a:d7:a5:bc:37:7e:66:e9:
52:ff:b6:89:44:af:0a:9e:89:f9:31:6b:ad:72:eb:d8:50:df:
26:2a:bf:b7
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZ6+f5TgtAKxFIuOCMBCct45MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY4YjNlMWIyM2UzNGIxM2Y2ZjdlZjJiMWU3ZmE3N2RhMjBm
ZTY0MTIwHhcNMjYwNjEzMDEwMTMyWhcNMjYwNjE0MDEwMTMyWjAzMTEwLwYDVQQD
EyhhM2ZmYTZiOTFiMWU3ZjJlZTM1OWUyZjE3MDg4MGU2OGEwZjIyODc3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArGvv3vO86p/2Qdw1u5Uo1ae3QGFc
XGUl9vU+hZz9aAIbBNaVkrrCrae+igwut3aQrKAKKkAvaORVjAHZ9IMFD7GiymHz
Xi5ObE7H7N16XAwheBHqDLCXa6Jo0VorZ61yKR9iYPvUWH1NXvB0EByXO6c7uE5d
O7DzfqO0spMuQrr70JFGkISZtI/4Jy8d5eT5rkI172fTQ3Dk7S56+sXjHAWl1Hnk
vxXdrVPXbf8+geMIdcOUH8NoikXT2MA+t1Ynz/3YOMP8E7xfJ1KJ61i1h4mZ/tiz
LxKtqsP/Pfzwzqz2+k0ItzDRidlF/zq8+AR6b6VbpA6YSDire0JHo4wCswIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFKP/prkbHn8u41ni8XCIDmig8ih3MB8GA1UdIwQY
MBaAFPiz4bI+NLE/b37ysef6d9og/mQSMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1MUGhzajQwc1Q5dmZ2S3g1X3AzMmlELVpCSS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYmUvZGNmNWVkLWExY2ItNDk2My04OGFm
LTRkNzcyOThiM2IzYi8xLzEtTFBoc2o0MHNUOXZmdkt4NV9wMzJpRC1aQkkubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxUL2JlL2RjZjVlZC1hMWNiLTQ5NjMtODhhZi00ZDc3Mjk4YjNi
M2IvMS8xLUxQaHNqNDBzVDl2ZnZLeDVfcDMyaUQtWkJJLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAie/6
ZeSGvcLVb8JeKxTw5FDP8Gg5FdNnlwZOlLaxg+ndXE7IC4w+H+1we5siQXCJviHh
aARv6zRkKYJwxv/z88qLaTkbyIERrRAK5mfSxxb36h5IhXD/1/ylRRJjKD/8qBzD
rT24M3JjVUi9f6eD7whxiCcccXflluGO6vP+tIZ7ITGfyI5JjGs52LRo7mNzFikF
Ytbf6rnY5ttFrTUFdEwg6qWOsgwS9HkonqJZVyhYHUk/cD19tr2UmZLol1WkjmpP
YARUGWt+4BbjQdqVr51ITvI5JjAxtsJ9GOIW8uq2GkrXpbw3fmbpUv+2iUSvCp6J
+TFrrXLr2FDfJiq/tw==
-----END CERTIFICATE-----
Generated at Sat Jun 13 07:30:33 2026 by rpki-client