Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/be/dcf5ed-a1cb-4963-88af-4d77298b3b3b/1/1-LPhsj40sT9vfvKx5_p32iD-ZBI.mft
File: 1-LPhsj40sT9vfvKx5_p32iD-ZBI.mft (raw, json)
Hash identifier: Uvj4XJA2C9yzIqxz3Xm6Xj2Vq/EHq0bR69om1WoORtU=
Subject key identifier: 48:4D:18:34:AE:38:D8:8B:FC:99:15:61:C5:BA:D3:47:CE:32:F6:36
Authority key identifier: F8:B3:E1:B2:3E:34:B1:3F:6F:7E:F2:B1:E7:FA:77:DA:20:FE:64:12
Certificate issuer: /CN=f8b3e1b23e34b13f6f7ef2b1e7fa77da20fe6412
Certificate serial: 01A1249DD395EBB9D8C7BF6B7C987CC077EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-LPhsj40sT9vfvKx5_p32iD-ZBI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/dcf5ed-a1cb-4963-88af-4d77298b3b3b/1/1-LPhsj40sT9vfvKx5_p32iD-ZBI.mft
Manifest number: 1A94
Signing time: Sat 10 Oct 2026 07:01:25 +0000
Manifest this update: Sat 10 Oct 2026 07:01:25 +0000
Manifest next update: Sun 11 Oct 2026 07:01:25 +0000
Files and hashes: 1: 1-LPhsj40sT9vfvKx5_p32iD-ZBI.crl (hash: TAlibsx6q/cObrsp7HPJSnQjGaKt372XqZC9LpYbjFw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/dcf5ed-a1cb-4963-88af-4d77298b3b3b/1/1-LPhsj40sT9vfvKx5_p32iD-ZBI.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/dcf5ed-a1cb-4963-88af-4d77298b3b3b/1/1-LPhsj40sT9vfvKx5_p32iD-ZBI.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-LPhsj40sT9vfvKx5_p32iD-ZBI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 02:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:24:9d:d3:95:eb:b9:d8:c7:bf:6b:7c:98:7c:c0:77:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8b3e1b23e34b13f6f7ef2b1e7fa77da20fe6412
Validity
Not Before: Oct 10 07:01:25 2026 GMT
Not After : Oct 11 07:01:25 2026 GMT
Subject: CN=484d1834ae38d88bfc991561c5bad347ce32f636
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:20:77:25:46:79:19:32:2d:2b:1a:03:d0:a0:
62:2e:ee:45:d2:94:13:ba:fe:2e:dd:03:d5:8c:21:
d0:51:7c:31:09:92:80:fb:4d:de:76:2a:e5:62:6b:
a8:03:fc:e1:2a:66:ac:13:a9:d5:62:5c:48:82:62:
55:31:b4:a7:a1:ea:d6:ec:d0:32:a1:38:5e:0b:6b:
c4:ca:32:f8:de:a5:2f:87:3f:f8:f0:35:b3:a2:d4:
de:f0:40:d3:a0:e0:37:29:b0:04:01:f2:24:a9:25:
8e:09:6b:e3:e9:e7:d9:00:71:cd:cd:b1:31:a1:c6:
61:3a:41:c5:39:30:df:44:f9:69:91:37:bf:7a:81:
da:a8:17:7a:93:d7:96:f3:73:44:3f:c3:58:e2:3a:
04:36:e6:00:bc:31:0c:ba:fb:4d:54:97:90:3b:a7:
06:69:05:e3:bd:ca:d1:07:91:9e:1d:64:9e:4e:b4:
05:81:b7:2a:e3:1e:93:b1:76:6b:67:7c:df:aa:f5:
75:e0:a6:0e:a4:93:f1:bb:9f:c8:da:1f:04:c1:17:
85:05:0f:37:bd:da:a1:e4:66:36:33:08:e3:ab:e4:
20:3e:68:f2:99:12:a3:08:47:b5:e4:c0:26:8f:07:
a1:8d:71:9d:c1:bc:a0:b5:51:48:5b:e8:82:9e:c9:
60:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:4D:18:34:AE:38:D8:8B:FC:99:15:61:C5:BA:D3:47:CE:32:F6:36
X509v3 Authority Key Identifier:
keyid:F8:B3:E1:B2:3E:34:B1:3F:6F:7E:F2:B1:E7:FA:77:DA:20:FE:64:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-LPhsj40sT9vfvKx5_p32iD-ZBI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/dcf5ed-a1cb-4963-88af-4d77298b3b3b/1/1-LPhsj40sT9vfvKx5_p32iD-ZBI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/dcf5ed-a1cb-4963-88af-4d77298b3b3b/1/1-LPhsj40sT9vfvKx5_p32iD-ZBI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:34:4c:1e:89:76:88:73:ec:f7:09:9b:22:d5:9b:8a:79:e3:
45:8f:02:1f:e8:f2:ea:34:ed:15:9f:f7:ff:88:06:54:a5:e1:
0c:66:6f:75:64:9f:df:b8:d3:15:90:b9:12:5a:2d:0b:74:39:
66:b5:6b:af:91:7d:82:ea:ea:8f:42:41:27:ec:ab:5c:82:46:
ff:80:f8:5e:fa:60:d9:44:61:9f:21:2b:f9:47:6c:18:b9:0f:
70:99:1b:15:f9:45:4b:f8:63:86:cc:54:33:0b:11:1c:a1:9d:
1b:83:bb:59:34:a2:d4:d9:dd:44:b8:67:36:79:cd:00:b5:37:
ff:1e:68:6b:d6:27:21:23:40:21:d2:2e:8e:72:83:a6:ee:00:
f6:c2:0f:26:01:99:ef:92:9a:8d:7f:c1:30:a0:eb:6b:9a:dc:
af:93:90:1a:d9:8c:12:4d:cd:1d:0e:06:75:74:62:44:cc:2a:
c1:71:b3:59:4f:af:98:e3:94:51:36:a1:10:68:56:3f:2d:f1:
8b:71:d1:10:9e:79:92:fa:64:76:4d:b3:b2:07:b0:9d:6d:0e:
84:97:d1:16:3d:df:b2:b9:e1:78:e1:02:42:1f:19:2f:55:6e:
79:1c:28:8c:02:a5:be:a6:0d:5b:e2:46:89:33:bb:5a:a2:39:
9a:12:5a:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 13:01:35 2026 by rpki-client