Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/4db93d-fc87-4e16-9b3b-79453b474e2e/1/1LDBHmZmz8G38baZTg9Dcymt7AQ.mft
File: 1LDBHmZmz8G38baZTg9Dcymt7AQ.mft (raw, json)
Hash identifier: hEOBiyZz6qZnhDNHh4kwUFXLYb5ccherbyfmRCsAsH4=
Subject key identifier: A4:1C:19:69:1C:C0:82:8F:58:48:1F:6B:4D:96:D4:21:16:36:7A:B7
Authority key identifier: D4:B0:C1:1E:66:66:CF:C1:B7:F1:B6:99:4E:0F:43:73:29:AD:EC:04
Certificate issuer: /CN=d4b0c11e6666cfc1b7f1b6994e0f437329adec04
Certificate serial: 019CACB4F8EDC5FE0A69E01CFB358EEA8A48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1LDBHmZmz8G38baZTg9Dcymt7AQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/4db93d-fc87-4e16-9b3b-79453b474e2e/1/1LDBHmZmz8G38baZTg9Dcymt7AQ.mft
Manifest number: 17DA
Signing time: Mon 02 Mar 2026 04:01:07 +0000
Manifest this update: Mon 02 Mar 2026 04:01:07 +0000
Manifest next update: Tue 03 Mar 2026 04:01:07 +0000
Files and hashes: 1: 1LDBHmZmz8G38baZTg9Dcymt7AQ.crl (hash: G6q5iHmOU9+ZJ1TX8qIkdXa/U/k7bDp8pqnDxrVPfsU=)
2: jGUPhdM1XZTdzsS3lD-IYIE9S9g.roa (hash: 69/RQWyt8lYUh/QhtvMFFUSfV50PWIikyQS0MBItp/o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/4db93d-fc87-4e16-9b3b-79453b474e2e/1/1LDBHmZmz8G38baZTg9Dcymt7AQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/4db93d-fc87-4e16-9b3b-79453b474e2e/1/1LDBHmZmz8G38baZTg9Dcymt7AQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1LDBHmZmz8G38baZTg9Dcymt7AQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:b4:f8:ed:c5:fe:0a:69:e0:1c:fb:35:8e:ea:8a:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4b0c11e6666cfc1b7f1b6994e0f437329adec04
Validity
Not Before: Mar 2 04:01:07 2026 GMT
Not After : Mar 3 04:01:07 2026 GMT
Subject: CN=a41c19691cc0828f58481f6b4d96d42116367ab7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:0f:83:4d:db:f6:3a:42:6a:bb:b8:c1:31:11:
19:36:b4:02:95:dd:61:84:c2:c6:6c:7f:6a:f3:67:
96:57:13:95:b5:bc:4e:a3:63:64:85:c9:c1:0f:b9:
1c:86:70:41:bd:09:3f:11:78:75:c9:1b:f7:84:c5:
1e:42:73:25:e8:7a:45:b4:02:a1:d6:f0:86:e4:a0:
50:ea:19:b0:97:08:ec:32:cb:3d:2d:0b:3e:42:ce:
bb:08:e0:14:d2:da:7c:24:0f:4b:f8:84:e5:3c:d2:
71:c8:05:cd:f7:34:73:94:a4:c9:f3:4c:35:25:5e:
1b:b9:a9:a9:e4:8d:8d:31:77:37:14:58:c8:0e:8c:
0a:1f:13:20:ef:26:52:83:6f:a9:0b:d1:40:f1:ff:
dd:67:77:2e:ef:61:c0:49:83:c8:0d:05:8a:1d:c5:
99:97:23:82:84:ff:18:a1:58:d8:3b:fc:ff:90:ff:
ff:d8:b2:0b:e7:43:ab:18:fa:57:6b:7c:6a:25:2b:
bd:19:90:f8:bd:c3:a8:3c:89:57:04:d4:dd:ca:a9:
87:57:38:75:81:1a:b8:fc:dd:5c:61:63:d8:6c:6f:
17:a4:e1:a0:fe:6d:ca:d8:a3:66:c4:6e:d9:e0:ab:
7d:4d:6e:f5:cb:6d:a5:b8:be:7b:2d:af:21:5e:2d:
2a:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:1C:19:69:1C:C0:82:8F:58:48:1F:6B:4D:96:D4:21:16:36:7A:B7
X509v3 Authority Key Identifier:
keyid:D4:B0:C1:1E:66:66:CF:C1:B7:F1:B6:99:4E:0F:43:73:29:AD:EC:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1LDBHmZmz8G38baZTg9Dcymt7AQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/4db93d-fc87-4e16-9b3b-79453b474e2e/1/1LDBHmZmz8G38baZTg9Dcymt7AQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/4db93d-fc87-4e16-9b3b-79453b474e2e/1/1LDBHmZmz8G38baZTg9Dcymt7AQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:80:23:ee:9e:3a:53:57:10:ef:03:b9:4e:0f:6f:04:1d:0e:
dd:2a:5d:54:f8:46:8d:6f:5e:8c:11:0f:86:2d:1f:ed:47:ea:
c0:a3:00:d1:48:c7:11:34:26:b1:57:1f:11:1a:a6:61:13:98:
97:6b:14:6e:03:12:7c:30:c8:86:15:35:ae:2b:3b:62:6c:67:
5c:da:73:1b:17:6f:32:da:7f:91:df:71:36:b9:69:5d:57:5b:
ce:e8:92:57:11:71:10:50:7c:f9:1a:0d:a5:00:6d:14:d8:bd:
59:2d:4a:3f:74:59:af:9a:f5:72:64:d1:f2:80:17:49:91:d1:
2f:06:80:7d:03:d1:21:8a:42:cd:ae:c6:a0:7a:19:3a:e5:29:
bb:28:cd:ac:31:e9:f8:53:37:25:3c:ad:4a:79:b1:23:b8:42:
3a:14:22:f3:17:fb:2c:24:56:ec:3f:3a:9b:db:44:89:8a:7b:
57:ca:46:c6:e9:23:27:73:0d:18:fa:98:4f:37:eb:1a:b3:58:
4c:08:62:94:2c:00:27:44:4c:75:8d:ef:b5:45:93:4b:56:1b:
27:1a:ec:32:58:b2:f2:6a:44:e8:b8:0e:f5:30:71:b0:83:91:
49:06:4e:45:47:75:b6:fc:de:02:36:d8:04:3d:d0:c3:33:2b:
e7:d5:5d:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:19:36 2026 by rpki-client