Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/12/b3fece-905f-4cb3-9a9a-e5afe263f0a2/1/1-LdgDngfkwW4jKSTGn2wCfjHKzo.mft
File: 1-LdgDngfkwW4jKSTGn2wCfjHKzo.mft (raw, json)
Hash identifier: BYoEMp2+DCWbL3IcYWKPBxbGBM7Wxi9tkQyIM3gpCKI=
Subject key identifier: 95:BB:62:83:81:69:08:DE:A9:4F:4E:81:72:1A:CE:26:3C:00:40:CE
Authority key identifier: F8:B7:60:0E:78:1F:93:05:B8:8C:A4:93:1A:7D:B0:09:F8:C7:2B:3A
Certificate issuer: /CN=f8b7600e781f9305b88ca4931a7db009f8c72b3a
Certificate serial: 01A0D3F00616111B717BA086DFF0B59F79E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-LdgDngfkwW4jKSTGn2wCfjHKzo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/b3fece-905f-4cb3-9a9a-e5afe263f0a2/1/1-LdgDngfkwW4jKSTGn2wCfjHKzo.mft
Manifest number: 0461
Signing time: Thu 24 Sep 2026 15:01:57 +0000
Manifest this update: Thu 24 Sep 2026 15:01:57 +0000
Manifest next update: Fri 25 Sep 2026 15:01:57 +0000
Files and hashes: 1: 1-LdgDngfkwW4jKSTGn2wCfjHKzo.crl (hash: dd3JOdpZJYNUY5IZV9jxCPqY7oTrgugL2ODJHrXAb1Y=)
2: P77WX7NkoBtYUW9Zj0hOm_NZQsg.roa (hash: ZmxTADBDBcdVSd0ydXvKv1zAmFoyy7NrjZN7xgCiqr8=)
3: RsQ2F1hR8H3i7qc1K-1py98Y2oE.roa (hash: uYjJFeCzfVAYecHpU37zMUj8OmOaI8Jw7yaqtpm+414=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/b3fece-905f-4cb3-9a9a-e5afe263f0a2/1/1-LdgDngfkwW4jKSTGn2wCfjHKzo.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/b3fece-905f-4cb3-9a9a-e5afe263f0a2/1/1-LdgDngfkwW4jKSTGn2wCfjHKzo.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-LdgDngfkwW4jKSTGn2wCfjHKzo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d3:f0:06:16:11:1b:71:7b:a0:86:df:f0:b5:9f:79:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8b7600e781f9305b88ca4931a7db009f8c72b3a
Validity
Not Before: Sep 24 15:01:57 2026 GMT
Not After : Sep 25 15:01:57 2026 GMT
Subject: CN=95bb6283816908dea94f4e81721ace263c0040ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:8b:15:e1:da:a6:bd:70:05:10:d3:89:e0:90:
ea:49:f2:95:df:91:2e:1d:e3:5b:c5:03:73:26:24:
73:c4:ac:db:27:db:bb:f9:18:95:d4:ae:d3:17:68:
05:88:11:0d:a9:7f:cc:89:b2:a3:ef:c4:83:61:93:
b6:86:ac:3a:cf:e0:26:aa:91:85:77:a4:e5:00:51:
37:79:e6:32:75:d5:24:43:bf:0a:48:9e:33:25:66:
c9:89:d7:c9:5b:b2:00:35:65:66:53:60:10:82:9b:
6d:d3:cb:32:bf:bb:3d:df:7d:ba:5d:7a:43:e3:c3:
35:47:e4:c4:68:b9:ae:fb:fa:4b:ff:6c:5f:ad:c4:
82:b5:02:16:c4:be:eb:91:ed:ce:43:31:58:b6:58:
f0:c6:23:be:8e:6c:3f:4a:6d:06:83:92:64:86:f7:
20:d1:25:a5:0d:77:7e:df:20:01:1c:ef:94:36:79:
ef:ba:4c:15:ca:6f:d8:75:b9:b4:39:8c:a9:6f:f8:
37:d7:04:bf:f5:41:ad:ac:48:01:f5:7b:a9:f5:f9:
77:98:8c:7a:8a:30:aa:e8:8e:bb:9a:16:2b:1e:a5:
f2:45:07:bb:17:b4:0f:ff:f7:c8:41:4d:33:9f:11:
05:27:34:db:63:ad:4f:da:70:fd:8d:8b:07:1f:86:
4d:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:BB:62:83:81:69:08:DE:A9:4F:4E:81:72:1A:CE:26:3C:00:40:CE
X509v3 Authority Key Identifier:
keyid:F8:B7:60:0E:78:1F:93:05:B8:8C:A4:93:1A:7D:B0:09:F8:C7:2B:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-LdgDngfkwW4jKSTGn2wCfjHKzo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/b3fece-905f-4cb3-9a9a-e5afe263f0a2/1/1-LdgDngfkwW4jKSTGn2wCfjHKzo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/b3fece-905f-4cb3-9a9a-e5afe263f0a2/1/1-LdgDngfkwW4jKSTGn2wCfjHKzo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:bd:ca:4d:82:f5:92:bc:3a:b3:3f:b9:53:8f:b5:c8:e6:0c:
c6:d9:6e:eb:df:d9:0d:15:0d:c6:54:c1:c2:ed:c7:56:b6:9b:
30:15:7a:3b:01:f0:b8:48:50:83:0e:35:8c:09:79:d5:da:2e:
13:09:fa:d5:5d:af:4c:88:f3:d2:8d:61:9c:8f:c6:2d:3b:49:
92:2c:8e:33:2c:2a:0a:57:09:6d:8c:a0:39:99:e4:24:3c:de:
79:c5:8a:52:14:13:7e:65:d0:9d:1a:13:eb:46:06:1e:44:c5:
a6:96:70:8c:26:8c:bd:3a:ec:02:2c:e4:ff:c4:ad:94:ce:6e:
36:44:af:4e:18:70:93:c9:fe:34:e6:e4:25:ea:0e:ec:9c:55:
35:4f:db:6c:71:cb:dc:b9:56:bf:d6:9b:19:fd:ae:55:f5:e2:
c9:5d:02:f4:68:c5:47:73:d7:04:7e:35:64:3c:29:e9:54:92:
fd:aa:be:c5:8e:9a:2b:e4:74:5f:b3:f7:21:f8:7d:f7:5e:d8:
f2:2b:aa:21:0d:57:eb:79:25:0e:0e:4d:e6:24:12:23:94:0c:
f9:51:52:b3:fe:4c:16:1c:a4:34:39:cb:12:9d:74:fa:05:90:
a8:0f:a5:e7:58:1b:29:91:f7:60:02:6b:22:5a:f6:3c:d1:c9:
e3:cb:f3:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 01:05:47 2026 by rpki-client