Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/b3fece-905f-4cb3-9a9a-e5afe263f0a2/1/1-LdgDngfkwW4jKSTGn2wCfjHKzo.mft
File: 1-LdgDngfkwW4jKSTGn2wCfjHKzo.mft (raw, json)
Hash identifier: uDNbE3Y7wmN2CNFbKBbyBWjbZTgEeET+mlW+ui40FkI=
Subject key identifier: 58:5A:91:2D:72:2C:00:CC:75:24:E4:9D:78:2D:AA:B7:1B:27:BA:CF
Authority key identifier: F8:B7:60:0E:78:1F:93:05:B8:8C:A4:93:1A:7D:B0:09:F8:C7:2B:3A
Certificate issuer: /CN=f8b7600e781f9305b88ca4931a7db009f8c72b3a
Certificate serial: 019E1CB523F3606E19CC18F2232BA171DE58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-LdgDngfkwW4jKSTGn2wCfjHKzo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/b3fece-905f-4cb3-9a9a-e5afe263f0a2/1/1-LdgDngfkwW4jKSTGn2wCfjHKzo.mft
Manifest number: 02F9
Signing time: Tue 12 May 2026 15:01:33 +0000
Manifest this update: Tue 12 May 2026 15:01:33 +0000
Manifest next update: Wed 13 May 2026 15:01:33 +0000
Files and hashes: 1: 1-LdgDngfkwW4jKSTGn2wCfjHKzo.crl (hash: 8hVdHZoMvrkIj+mhL0CrKQQaebqSn5xRfFCrkwQ+CU4=)
2: P77WX7NkoBtYUW9Zj0hOm_NZQsg.roa (hash: ZmxTADBDBcdVSd0ydXvKv1zAmFoyy7NrjZN7xgCiqr8=)
3: RsQ2F1hR8H3i7qc1K-1py98Y2oE.roa (hash: uYjJFeCzfVAYecHpU37zMUj8OmOaI8Jw7yaqtpm+414=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/b3fece-905f-4cb3-9a9a-e5afe263f0a2/1/1-LdgDngfkwW4jKSTGn2wCfjHKzo.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/b3fece-905f-4cb3-9a9a-e5afe263f0a2/1/1-LdgDngfkwW4jKSTGn2wCfjHKzo.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-LdgDngfkwW4jKSTGn2wCfjHKzo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:b5:23:f3:60:6e:19:cc:18:f2:23:2b:a1:71:de:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8b7600e781f9305b88ca4931a7db009f8c72b3a
Validity
Not Before: May 12 15:01:33 2026 GMT
Not After : May 13 15:01:33 2026 GMT
Subject: CN=585a912d722c00cc7524e49d782daab71b27bacf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:41:f0:ba:df:ae:41:b4:a6:72:0d:82:3b:1e:
51:1a:7b:19:67:da:51:89:61:a9:1e:34:07:3d:a4:
a1:9c:e1:97:ae:15:0a:03:98:4e:30:f4:37:7f:c7:
3b:35:43:f5:05:36:3e:26:78:ab:5d:9f:0f:66:3b:
5b:54:17:31:a8:41:65:e8:c0:ce:bb:d5:8e:97:8c:
a6:de:53:8e:eb:51:c5:a9:26:8f:0b:5f:0f:52:9a:
35:e8:45:29:10:5c:88:a3:f6:7d:27:39:1e:ab:ea:
3f:7c:a3:75:5b:82:40:c3:c1:22:38:e4:dc:a9:b3:
a8:4a:b8:5d:eb:ac:87:ec:4f:28:e7:10:9a:b6:7b:
d4:27:cd:0e:c5:a8:bf:a1:2a:34:85:e1:e8:4f:e0:
32:83:30:f5:99:50:a0:4d:c1:1e:c8:f6:61:4c:a0:
68:85:78:40:c6:60:62:ef:d1:96:b1:c7:22:d5:2c:
0f:2b:f1:96:83:5c:d5:22:28:4e:4d:75:6c:63:35:
bd:a8:11:ee:0a:2c:60:cf:32:f6:15:cd:74:ed:aa:
4e:51:1b:fc:15:c1:ea:f8:c3:45:d2:bd:1d:b4:34:
91:98:c6:97:fb:fe:d2:dd:e4:1a:e7:04:d3:0a:4b:
c0:a7:21:f4:0c:c4:51:03:aa:97:cb:0c:8d:e8:3d:
95:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:5A:91:2D:72:2C:00:CC:75:24:E4:9D:78:2D:AA:B7:1B:27:BA:CF
X509v3 Authority Key Identifier:
keyid:F8:B7:60:0E:78:1F:93:05:B8:8C:A4:93:1A:7D:B0:09:F8:C7:2B:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-LdgDngfkwW4jKSTGn2wCfjHKzo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/b3fece-905f-4cb3-9a9a-e5afe263f0a2/1/1-LdgDngfkwW4jKSTGn2wCfjHKzo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/b3fece-905f-4cb3-9a9a-e5afe263f0a2/1/1-LdgDngfkwW4jKSTGn2wCfjHKzo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:fd:33:20:75:b5:62:65:72:de:4b:e7:01:1d:5c:52:64:f2:
47:82:f6:11:8e:f2:e1:63:8f:d2:93:58:c0:ba:cb:0a:2b:37:
9e:33:0f:b4:30:8c:08:dd:b8:58:58:72:65:0f:d1:3f:6a:8f:
85:9b:e2:0c:1c:a6:d8:f4:fa:ab:ca:5e:6b:e2:3d:54:3e:f6:
9a:be:5b:3b:cf:a1:14:4d:d5:22:a6:50:92:41:2b:5f:9d:11:
4e:02:92:a5:38:27:21:af:bc:0d:3e:98:6d:29:d7:be:0e:93:
94:a4:77:3e:92:7b:93:b1:a8:dd:af:9b:59:1d:e8:7c:22:85:
54:b1:97:28:69:fa:72:4d:f3:6a:2e:74:9f:63:26:48:84:be:
aa:37:20:d4:66:4f:7d:f6:bd:d5:1d:de:af:42:85:9b:d2:e6:
c3:52:92:d2:2b:35:ed:f5:dd:95:f6:b2:39:6a:ad:69:06:dc:
02:84:1f:9b:25:7b:24:05:78:6c:42:6d:0e:f3:bb:f8:0f:5f:
c9:ef:d8:a6:11:8d:e9:a6:ef:91:23:ec:31:09:a6:df:60:d2:
e8:d5:54:7a:a0:5f:fc:71:7d:04:67:5c:de:38:e9:48:d1:96:
82:49:73:89:0c:45:0f:af:eb:7c:7e:c8:c4:55:11:d3:c8:29:
f7:07:98:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 00:56:39 2026 by rpki-client