Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/dcf5ed-a1cb-4963-88af-4d77298b3b3b/1/1-LPhsj40sT9vfvKx5_p32iD-ZBI.mft
File: 1-LPhsj40sT9vfvKx5_p32iD-ZBI.mft (raw, json)
Hash identifier: miWZJ/xf6NIeDEN9efqypjswjtXyjVecgNc/EMpa9nA=
Subject key identifier: 31:E2:00:8B:BB:3C:02:93:EF:2F:AB:3F:1A:5F:31:B6:8B:EA:D7:66
Authority key identifier: F8:B3:E1:B2:3E:34:B1:3F:6F:7E:F2:B1:E7:FA:77:DA:20:FE:64:12
Certificate issuer: /CN=f8b3e1b23e34b13f6f7ef2b1e7fa77da20fe6412
Certificate serial: 019D9AE3321760D418AAB1472C6C7255CC2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-LPhsj40sT9vfvKx5_p32iD-ZBI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/dcf5ed-a1cb-4963-88af-4d77298b3b3b/1/1-LPhsj40sT9vfvKx5_p32iD-ZBI.mft
Manifest number: 18BF
Signing time: Fri 17 Apr 2026 10:01:13 +0000
Manifest this update: Fri 17 Apr 2026 10:01:13 +0000
Manifest next update: Sat 18 Apr 2026 10:01:13 +0000
Files and hashes: 1: 1-LPhsj40sT9vfvKx5_p32iD-ZBI.crl (hash: UCuT9r/hF/ZUcnhMJPXVI4KWK2xhUq1ewQP4B6BcL2I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/dcf5ed-a1cb-4963-88af-4d77298b3b3b/1/1-LPhsj40sT9vfvKx5_p32iD-ZBI.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/dcf5ed-a1cb-4963-88af-4d77298b3b3b/1/1-LPhsj40sT9vfvKx5_p32iD-ZBI.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-LPhsj40sT9vfvKx5_p32iD-ZBI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:e3:32:17:60:d4:18:aa:b1:47:2c:6c:72:55:cc:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8b3e1b23e34b13f6f7ef2b1e7fa77da20fe6412
Validity
Not Before: Apr 17 10:01:13 2026 GMT
Not After : Apr 18 10:01:13 2026 GMT
Subject: CN=31e2008bbb3c0293ef2fab3f1a5f31b68bead766
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:d8:1e:8c:28:f9:2c:84:70:85:c5:2e:e3:af:
c5:0b:6c:bc:b9:62:5b:da:49:1e:d1:3d:0f:0c:55:
98:f1:2f:2b:18:26:f7:26:2f:ec:7c:20:b4:d3:f1:
31:ce:a9:56:5c:89:91:04:4e:fe:d5:43:ab:99:d0:
01:c1:65:7d:b4:b9:20:05:19:c7:f2:7f:c6:b3:a7:
dc:5d:15:af:d8:8d:28:24:ec:96:a5:83:ce:72:1d:
4b:69:a3:d0:87:53:87:e5:9b:e0:58:78:1b:eb:ba:
5e:f1:79:1f:c6:bf:d5:a8:08:87:b4:aa:b2:d8:4c:
92:06:db:2d:5c:33:d0:a5:8a:30:ef:db:d8:d7:8e:
ca:58:22:1d:33:95:f2:fd:c1:0e:d1:85:15:59:c7:
92:44:e5:2a:ee:14:bf:9c:f1:0f:07:2c:04:ac:59:
4e:95:11:c7:27:d1:42:8c:11:c1:41:2b:b1:3a:00:
cf:d5:0c:b4:2f:f3:ff:32:4b:b7:b4:e9:8e:b3:31:
c9:e9:3d:24:3f:ae:38:f6:d2:10:8f:5b:50:9c:bc:
8b:df:49:0b:e7:8f:1c:98:23:82:61:75:b2:ab:83:
a0:ad:51:2b:df:8b:9b:a6:a2:20:98:79:fc:da:68:
b2:8c:6b:e0:e6:d0:f0:6d:93:34:e9:bb:10:34:cc:
0a:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:E2:00:8B:BB:3C:02:93:EF:2F:AB:3F:1A:5F:31:B6:8B:EA:D7:66
X509v3 Authority Key Identifier:
keyid:F8:B3:E1:B2:3E:34:B1:3F:6F:7E:F2:B1:E7:FA:77:DA:20:FE:64:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-LPhsj40sT9vfvKx5_p32iD-ZBI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/dcf5ed-a1cb-4963-88af-4d77298b3b3b/1/1-LPhsj40sT9vfvKx5_p32iD-ZBI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/dcf5ed-a1cb-4963-88af-4d77298b3b3b/1/1-LPhsj40sT9vfvKx5_p32iD-ZBI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:6a:37:4f:4e:68:9c:9a:96:c0:6c:ce:d3:a9:c2:05:b0:25:
6f:77:8c:e5:ee:44:fa:18:8e:d1:43:78:a9:0b:69:66:9f:53:
8b:08:c1:21:73:5d:6c:73:98:ff:79:a4:a6:ae:bb:0b:15:34:
36:42:5d:3f:cd:5e:a8:0b:76:92:af:20:e4:9f:b9:e0:ee:f7:
73:69:d8:81:a8:c4:0b:2b:5a:7d:33:9d:32:4e:ae:27:65:10:
3f:8c:f3:ae:08:d5:30:61:ba:0f:b3:96:81:39:e3:ed:e1:5d:
a0:d3:bb:90:02:f0:47:18:ec:b1:c4:69:79:3e:3a:85:25:74:
97:3d:80:ae:5e:0e:28:36:49:77:49:d1:55:9b:b2:bb:c3:bc:
df:cc:67:00:ef:eb:fe:81:68:42:60:19:e0:2a:40:d0:61:1c:
16:bb:1e:35:4c:0e:8f:0e:18:90:3e:c1:8b:8d:96:e8:53:ff:
4a:b5:2d:8a:e0:11:23:b4:0a:15:f4:f6:4b:6a:5a:1f:2d:d9:
f7:92:49:ba:29:d3:11:15:9a:64:4a:ae:cb:e5:fb:58:a7:05:
fb:40:bc:04:5d:7a:01:8e:ee:d5:8d:5c:9c:bc:73:90:dc:b4:
bb:7f:ab:8a:2e:e9:31:3e:c6:80:92:2e:c2:ea:7b:5e:c0:c1:
4e:be:d5:98
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZ2a4zIXYNQYqrFHLGxyVcwtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY4YjNlMWIyM2UzNGIxM2Y2ZjdlZjJiMWU3ZmE3N2RhMjBm
ZTY0MTIwHhcNMjYwNDE3MTAwMTEzWhcNMjYwNDE4MTAwMTEzWjAzMTEwLwYDVQQD
EygzMWUyMDA4YmJiM2MwMjkzZWYyZmFiM2YxYTVmMzFiNjhiZWFkNzY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArdgejCj5LIRwhcUu46/FC2y8uWJb
2kke0T0PDFWY8S8rGCb3Ji/sfCC00/ExzqlWXImRBE7+1UOrmdABwWV9tLkgBRnH
8n/Gs6fcXRWv2I0oJOyWpYPOch1LaaPQh1OH5ZvgWHgb67pe8Xkfxr/VqAiHtKqy
2EySBtstXDPQpYow79vY147KWCIdM5Xy/cEO0YUVWceSROUq7hS/nPEPBywErFlO
lRHHJ9FCjBHBQSuxOgDP1Qy0L/P/Mku3tOmOszHJ6T0kP6449tIQj1tQnLyL30kL
548cmCOCYXWyq4OgrVEr34ubpqIgmHn82miyjGvg5tDwbZM06bsQNMwKrQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFDHiAIu7PAKT7y+rPxpfMbaL6tdmMB8GA1UdIwQY
MBaAFPiz4bI+NLE/b37ysef6d9og/mQSMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1MUGhzajQwc1Q5dmZ2S3g1X3AzMmlELVpCSS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYmUvZGNmNWVkLWExY2ItNDk2My04OGFm
LTRkNzcyOThiM2IzYi8xLzEtTFBoc2o0MHNUOXZmdkt4NV9wMzJpRC1aQkkubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxUL2JlL2RjZjVlZC1hMWNiLTQ5NjMtODhhZi00ZDc3Mjk4YjNi
M2IvMS8xLUxQaHNqNDBzVDl2ZnZLeDVfcDMyaUQtWkJJLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUGo3
T05onJqWwGzO06nCBbAlb3eM5e5E+hiO0UN4qQtpZp9TiwjBIXNdbHOY/3mkpq67
CxU0NkJdP81eqAt2kq8g5J+54O73c2nYgajECytafTOdMk6uJ2UQP4zzrgjVMGG6
D7OWgTnj7eFdoNO7kALwRxjsscRpeT46hSV0lz2Arl4OKDZJd0nRVZuyu8O838xn
AO/r/oFoQmAZ4CpA0GEcFrseNUwOjw4YkD7Bi42W6FP/SrUtiuARI7QKFfT2S2pa
Hy3Z95JJuinTERWaZEquy+X7WKcF+0C8BF16AY7u1Y1cnLxzkNy0u3+rii7pMT7G
gJIuwup7XsDBTr7VmA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 16:26:13 2026 by rpki-client