Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/dcf5ed-a1cb-4963-88af-4d77298b3b3b/1/1-LPhsj40sT9vfvKx5_p32iD-ZBI.mft
File: 1-LPhsj40sT9vfvKx5_p32iD-ZBI.mft (raw, json)
Hash identifier: ZjhFAFMSukY90Oieb4Td5p6LmOt7oC7KqqxDU4UXEoo=
Subject key identifier: F4:75:B0:D8:1D:3F:2C:4D:5D:3B:EB:B9:C3:50:D4:E7:B1:83:E1:94
Authority key identifier: F8:B3:E1:B2:3E:34:B1:3F:6F:7E:F2:B1:E7:FA:77:DA:20:FE:64:12
Certificate issuer: /CN=f8b3e1b23e34b13f6f7ef2b1e7fa77da20fe6412
Certificate serial: 019CAD59CF2BAFC672903667667775D6074A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-LPhsj40sT9vfvKx5_p32iD-ZBI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/dcf5ed-a1cb-4963-88af-4d77298b3b3b/1/1-LPhsj40sT9vfvKx5_p32iD-ZBI.mft
Manifest number: 1844
Signing time: Mon 02 Mar 2026 07:01:09 +0000
Manifest this update: Mon 02 Mar 2026 07:01:09 +0000
Manifest next update: Tue 03 Mar 2026 07:01:09 +0000
Files and hashes: 1: 1-LPhsj40sT9vfvKx5_p32iD-ZBI.crl (hash: yipKdRjejpVraG5+xgQ57NSrvteFMhEqZRA8AkYHJGo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/dcf5ed-a1cb-4963-88af-4d77298b3b3b/1/1-LPhsj40sT9vfvKx5_p32iD-ZBI.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/dcf5ed-a1cb-4963-88af-4d77298b3b3b/1/1-LPhsj40sT9vfvKx5_p32iD-ZBI.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-LPhsj40sT9vfvKx5_p32iD-ZBI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:59:cf:2b:af:c6:72:90:36:67:66:77:75:d6:07:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8b3e1b23e34b13f6f7ef2b1e7fa77da20fe6412
Validity
Not Before: Mar 2 07:01:09 2026 GMT
Not After : Mar 3 07:01:09 2026 GMT
Subject: CN=f475b0d81d3f2c4d5d3bebb9c350d4e7b183e194
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:5e:77:a5:ae:79:5e:92:67:e8:25:9d:94:93:
8d:71:07:9f:71:54:40:28:4c:da:56:3f:01:ea:39:
9a:98:1f:d2:5d:5a:93:0c:5c:9d:d1:1f:73:04:d9:
98:5f:a7:67:6e:f3:c3:f2:6f:48:d9:11:9e:d3:9d:
e6:0e:8d:14:03:fd:cf:9e:b8:39:bc:07:ce:20:dd:
23:fa:b3:49:9b:71:5a:f9:d0:e7:9d:89:32:13:38:
5c:ce:d3:1d:94:e6:f0:8b:a7:a0:3f:06:61:6c:9d:
bf:50:e4:a1:11:dd:65:45:8a:29:14:08:6e:dc:06:
23:d5:c2:bb:57:12:68:05:09:ac:1f:cd:be:44:08:
34:b7:60:cb:a8:19:fd:a7:af:dd:4d:28:78:87:17:
c9:1a:50:5b:12:da:75:7f:96:92:fa:f1:4c:3c:c2:
ae:87:67:5b:77:8e:86:d4:05:78:24:1c:f7:b9:c3:
b3:a4:ce:50:83:db:86:63:8e:46:c5:54:3e:70:2b:
b7:d8:ba:32:40:da:be:f0:2d:e6:b4:7b:c6:d2:31:
c4:60:e6:f3:7d:2e:f3:ab:94:9c:13:92:76:5f:75:
38:19:ad:c2:75:d3:50:fc:b5:a5:95:a6:ac:1f:89:
96:4c:2e:c2:53:61:f4:2b:e8:96:7e:11:0f:f5:0c:
3e:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:75:B0:D8:1D:3F:2C:4D:5D:3B:EB:B9:C3:50:D4:E7:B1:83:E1:94
X509v3 Authority Key Identifier:
keyid:F8:B3:E1:B2:3E:34:B1:3F:6F:7E:F2:B1:E7:FA:77:DA:20:FE:64:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-LPhsj40sT9vfvKx5_p32iD-ZBI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/dcf5ed-a1cb-4963-88af-4d77298b3b3b/1/1-LPhsj40sT9vfvKx5_p32iD-ZBI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/dcf5ed-a1cb-4963-88af-4d77298b3b3b/1/1-LPhsj40sT9vfvKx5_p32iD-ZBI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:bc:2b:4a:53:42:f9:a3:06:51:c0:5e:ad:8b:ee:ce:75:86:
b4:ba:99:d1:27:93:af:8d:cd:ca:b2:0d:10:95:15:2e:12:9d:
fa:13:c0:d9:3d:14:f5:e3:69:8f:82:c9:d2:5d:df:f7:ad:95:
f6:7b:d3:ce:d7:86:17:c6:21:56:2e:6e:78:06:06:a4:ff:46:
f4:2e:ba:73:61:1a:8c:1a:d0:7e:48:64:c3:32:b5:80:78:5d:
2c:7c:24:ae:f3:b6:14:a3:e1:12:82:e0:0e:4e:c6:b9:9c:ae:
45:f2:2e:ad:db:e0:5d:c5:d6:c4:fe:8a:f8:3a:a6:58:2c:86:
de:ab:bd:22:50:b8:89:a8:90:39:6d:37:4a:42:8c:32:80:e3:
0a:05:49:81:0a:17:38:50:e3:64:95:c0:68:00:11:90:5f:13:
de:25:e5:e4:b9:8a:b7:02:52:e3:73:c2:f1:bc:f4:94:f8:9b:
a5:77:7f:d9:c1:c7:19:d2:97:fb:23:55:dd:90:cb:0a:43:bc:
95:e6:f6:8f:37:21:ac:5d:4e:b4:09:a0:f7:c8:c5:94:48:f7:
7e:9d:f7:af:7d:7e:d4:cc:bd:89:17:e4:67:f0:84:eb:58:f2:
b1:db:38:ef:cc:53:51:59:8b:98:6b:0f:13:ea:35:84:01:3c:
52:1a:e2:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:48:22 2026 by rpki-client