Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1b/7757ed-d020-471f-bbc5-17bf202e5eee/1/1LvtYwkUOYI-05GkclNsD8r-iVc.mft
File: 1LvtYwkUOYI-05GkclNsD8r-iVc.mft (raw, json)
Hash identifier: NQaoMneUzf7BjErqn0mq4QwkOfjlhS+RTN+GipVo1aI=
Subject key identifier: 41:20:A5:68:19:3E:2D:A4:2F:C6:93:10:63:72:2F:B8:D2:AE:3F:8A
Authority key identifier: D4:BB:ED:63:09:14:39:82:3E:D3:91:A4:72:53:6C:0F:CA:FE:89:57
Certificate issuer: /CN=d4bbed63091439823ed391a472536c0fcafe8957
Certificate serial: 01A0D614EABBBA66834BDC46C2623B906AA7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1LvtYwkUOYI-05GkclNsD8r-iVc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/7757ed-d020-471f-bbc5-17bf202e5eee/1/1LvtYwkUOYI-05GkclNsD8r-iVc.mft
Manifest number: 1A6E
Signing time: Fri 25 Sep 2026 01:01:29 +0000
Manifest this update: Fri 25 Sep 2026 01:01:29 +0000
Manifest next update: Sat 26 Sep 2026 01:01:29 +0000
Files and hashes: 1: 1LvtYwkUOYI-05GkclNsD8r-iVc.crl (hash: GOkogiIIHujp06trqM8ZjD7JW74Io0bYeujRgyMzbHI=)
2: 3Xes1MHD_a5bIGduyNKw431Rgic.roa (hash: Wc2i+E+YpkqUKLdM48sp0OfQBJ7K/jV9MpkIdBzD9ls=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/7757ed-d020-471f-bbc5-17bf202e5eee/1/1LvtYwkUOYI-05GkclNsD8r-iVc.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/7757ed-d020-471f-bbc5-17bf202e5eee/1/1LvtYwkUOYI-05GkclNsD8r-iVc.mft
rsync://rpki.ripe.net/repository/DEFAULT/1LvtYwkUOYI-05GkclNsD8r-iVc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 21:08:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d6:14:ea:bb:ba:66:83:4b:dc:46:c2:62:3b:90:6a:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4bbed63091439823ed391a472536c0fcafe8957
Validity
Not Before: Sep 25 01:01:29 2026 GMT
Not After : Sep 26 01:01:29 2026 GMT
Subject: CN=4120a568193e2da42fc6931063722fb8d2ae3f8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:29:0b:ad:be:6e:aa:e5:32:65:58:6b:5f:86:
d6:05:41:dd:4c:49:77:8a:cf:1f:4b:84:91:19:92:
cc:8d:d4:32:14:5d:d9:43:ec:92:2d:a6:c2:49:45:
2f:7f:20:81:42:69:14:c0:89:d8:0f:c9:42:98:5c:
39:69:64:69:8b:03:5b:03:29:97:66:74:4e:de:20:
62:9f:4e:71:3a:df:43:60:8a:e8:d7:a8:f1:a5:10:
41:23:36:cf:7e:34:3e:12:06:b5:8a:8e:f5:02:0e:
4d:a1:51:02:a6:99:9b:74:83:f7:74:72:27:b1:ca:
f1:03:37:3a:2b:af:64:83:5a:56:2e:ba:f8:b6:48:
f3:10:ed:e6:47:6d:ef:ce:d5:ca:f9:c7:da:0d:0b:
ee:6b:a7:fe:ad:74:4c:eb:1a:88:25:1d:3b:a6:44:
db:da:f3:7f:84:47:55:d0:3a:4a:fe:d1:8b:5c:96:
6b:e0:31:7f:8c:a3:a5:01:fa:13:2b:65:da:eb:50:
02:ef:52:1b:6c:d1:3a:2e:f1:8b:09:cb:cd:5c:42:
ad:29:98:e4:00:d9:9a:5d:59:ce:6a:8a:aa:3d:72:
19:34:77:cf:a2:90:34:2a:fb:12:25:ee:82:9e:19:
04:c9:9d:13:74:6c:b2:0d:da:0d:16:83:f1:ec:2a:
01:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:20:A5:68:19:3E:2D:A4:2F:C6:93:10:63:72:2F:B8:D2:AE:3F:8A
X509v3 Authority Key Identifier:
keyid:D4:BB:ED:63:09:14:39:82:3E:D3:91:A4:72:53:6C:0F:CA:FE:89:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1LvtYwkUOYI-05GkclNsD8r-iVc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/7757ed-d020-471f-bbc5-17bf202e5eee/1/1LvtYwkUOYI-05GkclNsD8r-iVc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/7757ed-d020-471f-bbc5-17bf202e5eee/1/1LvtYwkUOYI-05GkclNsD8r-iVc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:43:45:dd:60:35:78:c0:d0:3c:1d:43:03:77:c2:c6:86:ea:
e1:ca:08:cf:81:3c:1d:61:4b:cc:3d:dc:4d:16:51:39:87:0c:
f8:71:7c:82:2a:7c:ef:73:46:23:d1:90:d9:b5:ab:25:90:e9:
e1:1e:fd:24:10:4f:0f:18:9f:61:00:39:a4:69:b8:93:da:3d:
f0:2b:64:7c:75:a8:3c:5c:16:7e:99:ac:f4:2d:80:51:8e:3d:
6b:12:8d:0d:7d:07:2c:ef:84:3c:ac:16:29:32:58:dd:6f:47:
06:9f:18:f9:a6:b9:90:4e:c6:ef:0f:4e:c3:4d:ca:6c:f0:82:
0a:a1:11:a2:27:7e:02:9a:89:ad:34:3d:7a:c2:9d:df:00:77:
ad:9b:28:ee:50:10:83:c2:ed:49:0c:55:21:f8:13:6c:b8:26:
a3:87:ca:92:37:72:bb:21:2d:4e:76:37:88:d1:9b:50:92:0a:
3a:72:e7:bd:c8:8d:5a:ae:d4:2b:f0:8e:54:9f:a1:e0:c2:54:
1e:b7:25:1d:c8:1f:92:f6:79:78:7e:5c:d1:7a:79:f1:b0:fd:
6b:ef:72:8a:ad:a6:35:92:9a:66:f7:3b:82:25:cb:b5:ae:0a:
14:2f:9e:51:7b:8c:f7:95:e0:60:ec:7b:42:4d:b2:95:ba:98:
a0:e8:c0:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 04:20:22 2026 by rpki-client