Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f5/4db93d-fc87-4e16-9b3b-79453b474e2e/1/1LDBHmZmz8G38baZTg9Dcymt7AQ.mft
File: 1LDBHmZmz8G38baZTg9Dcymt7AQ.mft (raw, json)
Hash identifier: mTf0W55wfBvrOTJnuxC4aUmbZlVwHkpFc3cmkW3Zoq0=
Subject key identifier: 45:28:1B:94:34:5E:DA:3B:4D:87:4C:E6:BE:85:1F:F0:4A:20:B2:C8
Authority key identifier: D4:B0:C1:1E:66:66:CF:C1:B7:F1:B6:99:4E:0F:43:73:29:AD:EC:04
Certificate issuer: /CN=d4b0c11e6666cfc1b7f1b6994e0f437329adec04
Certificate serial: 01A0D4CB4F42B68F886320834B1C5446D42F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1LDBHmZmz8G38baZTg9Dcymt7AQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/4db93d-fc87-4e16-9b3b-79453b474e2e/1/1LDBHmZmz8G38baZTg9Dcymt7AQ.mft
Manifest number: 1A01
Signing time: Thu 24 Sep 2026 19:01:28 +0000
Manifest this update: Thu 24 Sep 2026 19:01:28 +0000
Manifest next update: Fri 25 Sep 2026 19:01:28 +0000
Files and hashes: 1: 1LDBHmZmz8G38baZTg9Dcymt7AQ.crl (hash: 4CYnHoeI3vwYg4VkITmxIXBYytW7SAFnpYhz4X194cU=)
2: jGUPhdM1XZTdzsS3lD-IYIE9S9g.roa (hash: 69/RQWyt8lYUh/QhtvMFFUSfV50PWIikyQS0MBItp/o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/4db93d-fc87-4e16-9b3b-79453b474e2e/1/1LDBHmZmz8G38baZTg9Dcymt7AQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/4db93d-fc87-4e16-9b3b-79453b474e2e/1/1LDBHmZmz8G38baZTg9Dcymt7AQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1LDBHmZmz8G38baZTg9Dcymt7AQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d4:cb:4f:42:b6:8f:88:63:20:83:4b:1c:54:46:d4:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4b0c11e6666cfc1b7f1b6994e0f437329adec04
Validity
Not Before: Sep 24 19:01:28 2026 GMT
Not After : Sep 25 19:01:28 2026 GMT
Subject: CN=45281b94345eda3b4d874ce6be851ff04a20b2c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:b5:fb:b8:07:29:ef:8b:b4:83:75:69:80:5a:
fc:97:77:41:78:ba:6d:6d:7c:93:eb:dc:3e:69:13:
8e:75:bf:5a:b6:33:c7:25:0e:45:f8:6d:c6:b3:7f:
4e:5c:53:4c:af:07:16:4b:f4:48:d3:a3:d8:f2:df:
fb:ff:7f:6d:51:bc:42:38:10:0d:a4:37:78:d1:3b:
a1:1f:f7:9c:45:e6:f9:fe:0c:db:f2:e1:dd:c9:ca:
be:91:3c:8b:79:10:33:ae:14:10:df:da:27:8d:42:
18:b1:b8:97:d5:5c:37:35:68:c2:82:19:c8:9a:f8:
df:f9:c3:cd:c7:e5:f7:65:72:2f:50:1c:fd:42:81:
21:4d:0a:1b:a2:81:5c:6a:6a:b6:83:7f:3c:c0:91:
50:83:19:74:71:43:23:37:c7:b8:e0:3a:f7:48:43:
0f:70:8e:7b:2c:83:26:62:04:23:fb:9b:9c:f4:f6:
83:4c:66:5e:49:dd:2a:22:b4:63:b9:11:3f:77:67:
ce:18:15:c2:a8:fb:d8:ed:37:64:b4:1e:ee:f3:07:
40:c4:dd:71:b9:73:81:13:b2:4e:ac:88:e3:92:e1:
d3:16:e0:44:3f:bf:b7:9f:8e:40:c4:4c:ca:8e:81:
c0:05:58:d1:3c:91:33:37:70:03:f5:29:82:5e:36:
90:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:28:1B:94:34:5E:DA:3B:4D:87:4C:E6:BE:85:1F:F0:4A:20:B2:C8
X509v3 Authority Key Identifier:
keyid:D4:B0:C1:1E:66:66:CF:C1:B7:F1:B6:99:4E:0F:43:73:29:AD:EC:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1LDBHmZmz8G38baZTg9Dcymt7AQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/4db93d-fc87-4e16-9b3b-79453b474e2e/1/1LDBHmZmz8G38baZTg9Dcymt7AQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/4db93d-fc87-4e16-9b3b-79453b474e2e/1/1LDBHmZmz8G38baZTg9Dcymt7AQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:c0:f3:6a:51:3a:ff:73:59:e7:22:00:09:a5:d8:2b:20:67:
7b:c4:93:4f:5e:64:2a:cd:6b:90:fa:ec:b9:01:45:7c:e6:da:
a2:a7:c8:b3:12:10:ba:b9:8d:76:14:bb:1b:89:95:f7:9f:9d:
06:05:87:cb:af:dc:b3:2f:78:71:22:e3:ed:ba:5a:13:10:ac:
66:54:37:57:83:48:63:b5:bc:42:11:b2:39:41:12:ff:b8:3c:
d1:d6:18:c0:b3:73:16:c6:ab:db:b2:0c:92:5d:f2:34:c2:03:
3c:ca:fa:43:e6:d8:3d:d8:d0:56:e2:6e:de:c6:09:fc:5f:b8:
01:b9:20:b9:76:d0:72:c7:e6:91:2d:d6:af:87:f8:33:2e:3e:
13:9a:7a:bb:25:b4:ec:7a:79:76:03:63:58:6a:b5:11:fd:1a:
74:fc:39:e9:99:be:4c:ab:1d:30:90:1e:0c:b9:e3:5e:bd:d0:
52:ef:e8:aa:5c:af:3a:85:c0:8c:0a:c2:3c:f0:93:86:4e:42:
fd:b4:6e:9a:20:b1:f1:3a:9b:e9:d4:54:10:6f:a2:5e:93:9f:
24:70:a6:1f:58:ca:ef:bd:53:55:b0:fc:8f:68:6d:c1:1c:d6:
b8:30:44:ca:20:4c:13:c6:bf:fd:06:ce:97:a5:69:a1:c6:89:
73:18:27:38
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDUy09Cto+IYyCDSxxURtQvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ0YjBjMTFlNjY2NmNmYzFiN2YxYjY5OTRlMGY0MzczMjlh
ZGVjMDQwHhcNMjYwOTI0MTkwMTI4WhcNMjYwOTI1MTkwMTI4WjAzMTEwLwYDVQQD
Eyg0NTI4MWI5NDM0NWVkYTNiNGQ4NzRjZTZiZTg1MWZmMDRhMjBiMmM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq7X7uAcp74u0g3VpgFr8l3dBeLpt
bXyT69w+aROOdb9atjPHJQ5F+G3Gs39OXFNMrwcWS/RI06PY8t/7/39tUbxCOBAN
pDd40TuhH/ecReb5/gzb8uHdycq+kTyLeRAzrhQQ39onjUIYsbiX1Vw3NWjCghnI
mvjf+cPNx+X3ZXIvUBz9QoEhTQobooFcamq2g388wJFQgxl0cUMjN8e44Dr3SEMP
cI57LIMmYgQj+5uc9PaDTGZeSd0qIrRjuRE/d2fOGBXCqPvY7TdktB7u8wdAxN1x
uXOBE7JOrIjjkuHTFuBEP7+3n45AxEzKjoHABVjRPJEzN3AD9SmCXjaQuQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEUoG5Q0Xto7TYdM5r6FH/BKILLIMB8GA1UdIwQY
MBaAFNSwwR5mZs/Bt/G2mU4PQ3MprewEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMUxEQkhtWm16OEczOGJhWlRnOURjeW10N0FRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS80ZGI5M2QtZmM4Ny00ZTE2LTliM2It
Nzk0NTNiNDc0ZTJlLzEvMUxEQkhtWm16OEczOGJhWlRnOURjeW10N0FRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNS80ZGI5M2QtZmM4Ny00ZTE2LTliM2ItNzk0NTNiNDc0ZTJl
LzEvMUxEQkhtWm16OEczOGJhWlRnOURjeW10N0FRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOsDzalE6
/3NZ5yIACaXYKyBne8STT15kKs1rkPrsuQFFfObaoqfIsxIQurmNdhS7G4mV95+d
BgWHy6/csy94cSLj7bpaExCsZlQ3V4NIY7W8QhGyOUES/7g80dYYwLNzFsar27IM
kl3yNMIDPMr6Q+bYPdjQVuJu3sYJ/F+4AbkguXbQcsfmkS3Wr4f4My4+E5p6uyW0
7Hp5dgNjWGq1Ef0adPw56Zm+TKsdMJAeDLnjXr3QUu/oqlyvOoXAjArCPPCThk5C
/bRumiCx8Tqb6dRUEG+iXpOfJHCmH1jK771TVbD8j2htwRzWuDBEyiBME8a//QbO
l6VpocaJcxgnOA==
-----END CERTIFICATE-----
Generated at Thu Sep 24 23:59:17 2026 by rpki-client