Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/7757ed-d020-471f-bbc5-17bf202e5eee/1/1LvtYwkUOYI-05GkclNsD8r-iVc.mft
File: 1LvtYwkUOYI-05GkclNsD8r-iVc.mft (raw, json)
Hash identifier: U2pB+vShOzwyRVbk3Pfsj3sslW/Wa5a14bZfW2Ocou8=
Subject key identifier: 33:1F:C7:EE:22:07:8F:8E:8E:15:DC:52:7D:7F:90:94:8E:F5:AB:73
Authority key identifier: D4:BB:ED:63:09:14:39:82:3E:D3:91:A4:72:53:6C:0F:CA:FE:89:57
Certificate issuer: /CN=d4bbed63091439823ed391a472536c0fcafe8957
Certificate serial: 019E1CEBA71B4357E1C8EE22088F9662A6C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1LvtYwkUOYI-05GkclNsD8r-iVc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/7757ed-d020-471f-bbc5-17bf202e5eee/1/1LvtYwkUOYI-05GkclNsD8r-iVc.mft
Manifest number: 1905
Signing time: Tue 12 May 2026 16:01:06 +0000
Manifest this update: Tue 12 May 2026 16:01:06 +0000
Manifest next update: Wed 13 May 2026 16:01:06 +0000
Files and hashes: 1: 1LvtYwkUOYI-05GkclNsD8r-iVc.crl (hash: mrWO8HXvet57mFl/K6s1PR8Cn5QWhQQt14+UFYK0428=)
2: 3Xes1MHD_a5bIGduyNKw431Rgic.roa (hash: Wc2i+E+YpkqUKLdM48sp0OfQBJ7K/jV9MpkIdBzD9ls=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/7757ed-d020-471f-bbc5-17bf202e5eee/1/1LvtYwkUOYI-05GkclNsD8r-iVc.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/7757ed-d020-471f-bbc5-17bf202e5eee/1/1LvtYwkUOYI-05GkclNsD8r-iVc.mft
rsync://rpki.ripe.net/repository/DEFAULT/1LvtYwkUOYI-05GkclNsD8r-iVc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:eb:a7:1b:43:57:e1:c8:ee:22:08:8f:96:62:a6:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4bbed63091439823ed391a472536c0fcafe8957
Validity
Not Before: May 12 16:01:06 2026 GMT
Not After : May 13 16:01:06 2026 GMT
Subject: CN=331fc7ee22078f8e8e15dc527d7f90948ef5ab73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:31:ff:f4:60:bf:9e:b5:80:4b:74:1c:9e:b7:
d8:7f:fd:31:98:1f:0c:ea:56:98:e0:9c:f5:57:ca:
30:8a:c4:cf:1f:6c:b9:5b:fb:3b:84:f8:d9:f4:3d:
9f:55:84:1f:d2:e1:55:31:2b:19:24:c0:11:37:eb:
f2:c6:64:6c:d1:85:5c:ff:89:15:0b:e0:91:ad:18:
70:9d:32:6d:10:c7:fa:38:4f:d7:db:83:49:f2:6e:
dc:62:6f:bd:b5:42:ee:34:f2:b3:43:b2:5f:31:a2:
e9:76:a4:27:30:01:91:74:1b:02:ea:9d:47:29:b3:
41:16:a3:d7:ea:80:1d:e8:66:d9:64:59:03:44:29:
75:e1:99:f2:f4:67:4d:bc:1c:0d:b2:02:d9:99:1f:
e6:37:95:fd:ae:f4:6f:ec:60:85:15:1e:ed:f7:5d:
4b:53:a4:db:22:27:3f:65:11:a4:ac:2b:15:40:2c:
db:6f:a0:b8:25:88:ea:50:96:8f:51:d0:a3:b0:2f:
f4:53:b6:b6:db:0b:66:7f:98:f3:ad:97:16:f2:4c:
c0:86:27:7a:00:03:b5:4d:b2:1f:b1:03:6b:61:1c:
ae:2f:7a:26:a1:04:15:02:b1:4f:9d:4d:2b:1f:3e:
ed:84:a4:0e:16:21:e7:62:12:36:68:11:33:db:14:
3f:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:1F:C7:EE:22:07:8F:8E:8E:15:DC:52:7D:7F:90:94:8E:F5:AB:73
X509v3 Authority Key Identifier:
keyid:D4:BB:ED:63:09:14:39:82:3E:D3:91:A4:72:53:6C:0F:CA:FE:89:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1LvtYwkUOYI-05GkclNsD8r-iVc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/7757ed-d020-471f-bbc5-17bf202e5eee/1/1LvtYwkUOYI-05GkclNsD8r-iVc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/7757ed-d020-471f-bbc5-17bf202e5eee/1/1LvtYwkUOYI-05GkclNsD8r-iVc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:e4:f6:ec:a8:56:47:c8:38:ab:40:60:d8:c0:8c:f7:1e:a0:
0f:e7:54:1e:23:bd:68:19:7f:72:2e:62:b2:3e:eb:78:f7:9d:
05:fc:0e:fb:ca:93:5e:6c:47:30:15:1c:61:50:97:e1:e2:dd:
b9:af:74:fc:72:1c:81:c9:5a:0f:ef:4f:a1:40:6f:29:69:72:
b3:f4:2e:76:da:9d:49:5d:1b:0f:3b:b1:04:42:02:45:18:d4:
7e:19:15:7f:41:24:19:f1:90:02:78:7e:4c:69:b6:34:7b:8a:
a7:fe:b2:ba:d7:b7:d0:a1:a3:7c:5e:af:2d:d5:70:a2:39:66:
13:e3:02:a0:3e:b4:36:a2:ff:49:c3:38:43:9f:0e:23:e1:ec:
a3:fe:96:45:3b:db:05:0d:9e:62:69:b6:21:9f:09:f8:b7:02:
80:a9:b7:63:dd:e1:7a:5c:72:86:de:b6:2a:b4:df:3b:98:70:
4c:42:87:64:d9:04:f1:67:44:4b:ca:ff:ba:c2:14:6c:bf:02:
30:d3:02:08:78:13:ef:4b:52:71:2d:4c:82:f4:51:d2:d2:8c:
e8:36:52:78:39:4f:2a:cf:b1:91:78:fa:95:95:fb:b9:8e:90:
e1:76:39:0e:b3:99:73:2e:22:79:0e:98:6a:46:8e:ef:b7:6a:
4e:25:ec:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:16:08 2026 by rpki-client