Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/3253ac-8fa7-425b-8a90-9b9b401459e6/1/1-LdwFgVTdgw1Z99RqEftbFKcB4k.mft
File: 1-LdwFgVTdgw1Z99RqEftbFKcB4k.mft (raw, json)
Hash identifier: 8v0z1FkoDc4iQVrfTxMk3HFFD0qzE7Gml9n7k0t5ffI=
Subject key identifier: 81:0F:31:AA:7D:60:A1:7A:60:B3:91:31:67:E4:E2:81:35:46:C3:F0
Authority key identifier: F8:B7:70:16:05:53:76:0C:35:67:DF:51:A8:47:ED:6C:52:9C:07:89
Certificate issuer: /CN=f8b770160553760c3567df51a847ed6c529c0789
Certificate serial: 019E1D910BA7F349F22EC30BDBCAAD47B8BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-LdwFgVTdgw1Z99RqEftbFKcB4k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/3253ac-8fa7-425b-8a90-9b9b401459e6/1/1-LdwFgVTdgw1Z99RqEftbFKcB4k.mft
Manifest number: 1281
Signing time: Tue 12 May 2026 19:01:45 +0000
Manifest this update: Tue 12 May 2026 19:01:45 +0000
Manifest next update: Wed 13 May 2026 19:01:45 +0000
Files and hashes: 1: 1-LdwFgVTdgw1Z99RqEftbFKcB4k.crl (hash: fZBTgl8TC0yOu0BJ6C1wLwRQrl00uszZeTSyG8wZ91U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/3253ac-8fa7-425b-8a90-9b9b401459e6/1/1-LdwFgVTdgw1Z99RqEftbFKcB4k.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/3253ac-8fa7-425b-8a90-9b9b401459e6/1/1-LdwFgVTdgw1Z99RqEftbFKcB4k.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-LdwFgVTdgw1Z99RqEftbFKcB4k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:91:0b:a7:f3:49:f2:2e:c3:0b:db:ca:ad:47:b8:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8b770160553760c3567df51a847ed6c529c0789
Validity
Not Before: May 12 19:01:45 2026 GMT
Not After : May 13 19:01:45 2026 GMT
Subject: CN=810f31aa7d60a17a60b3913167e4e2813546c3f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:4f:3d:71:90:67:38:e6:98:bc:41:9b:66:e2:
40:01:5e:d0:28:93:4b:35:56:35:17:2a:3d:42:e6:
33:82:8c:8b:4b:db:8a:34:7d:46:87:46:13:ac:1c:
fa:24:34:96:8f:3e:5c:bc:95:54:34:f9:22:98:21:
02:0b:76:6b:8c:00:52:bf:55:90:21:f1:e6:83:00:
bc:a7:20:33:b7:69:fa:ef:88:1c:2d:65:5e:b2:65:
64:f9:82:7f:b1:f2:c3:c4:87:1f:0c:48:7e:42:4c:
44:05:35:34:cc:7e:44:17:d8:50:38:d4:ec:40:c6:
4e:c2:d8:28:f1:5d:81:e8:84:36:ef:7b:0a:8a:a2:
93:49:eb:5f:12:c0:58:74:72:ed:fe:b4:03:88:5a:
50:62:f7:1d:5f:4d:f1:26:17:32:a8:ef:90:6f:b5:
d1:2d:99:a3:c3:96:63:91:bf:69:7c:1e:2b:f4:fa:
10:26:e0:d5:8a:d1:eb:32:7c:0b:48:20:8f:6e:c9:
ae:96:4b:b0:c9:08:e4:57:72:13:92:08:27:43:77:
56:7d:d5:95:67:eb:dd:5c:31:79:e6:66:38:60:3a:
d2:54:98:16:1f:00:69:ff:70:3f:f5:81:81:49:79:
3d:ce:b2:d2:41:cc:f0:6d:f4:3c:1d:60:bc:89:0f:
1f:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:0F:31:AA:7D:60:A1:7A:60:B3:91:31:67:E4:E2:81:35:46:C3:F0
X509v3 Authority Key Identifier:
keyid:F8:B7:70:16:05:53:76:0C:35:67:DF:51:A8:47:ED:6C:52:9C:07:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-LdwFgVTdgw1Z99RqEftbFKcB4k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/3253ac-8fa7-425b-8a90-9b9b401459e6/1/1-LdwFgVTdgw1Z99RqEftbFKcB4k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/3253ac-8fa7-425b-8a90-9b9b401459e6/1/1-LdwFgVTdgw1Z99RqEftbFKcB4k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:ec:dd:89:d1:5c:61:ec:46:c6:27:49:34:f7:94:74:c8:eb:
84:b2:ab:d6:70:5a:ad:1d:db:a8:0e:1f:54:06:8b:47:58:24:
7a:d6:3f:e1:2f:30:2d:b4:00:19:99:a1:25:d0:a3:b3:c9:c5:
b5:b9:63:5e:32:26:6f:0b:18:ba:a7:f0:f6:10:43:66:cf:a9:
65:a2:43:c0:30:64:1b:98:51:15:f3:ae:11:c2:e3:4d:13:0b:
0b:f9:98:06:ca:90:73:6b:32:e4:3e:ed:f7:df:d4:ed:79:66:
eb:c6:aa:0d:3a:a8:3c:27:99:8e:1a:14:a1:d5:f7:75:9c:bb:
54:ec:66:2a:f7:9f:69:e5:07:81:37:d4:c6:ab:ae:b9:2e:77:
c3:b3:49:31:71:ee:75:f7:67:40:9c:dc:67:46:19:37:6a:15:
14:fd:4e:e1:33:8b:4d:b0:c2:8d:a3:fd:ac:30:50:96:dc:99:
f1:ed:5e:ad:52:b5:44:d5:d4:ec:c4:35:c2:ff:93:1b:67:73:
3e:45:c6:4b:20:a2:57:a8:a2:f0:02:2c:0b:d1:fd:65:b8:ad:
0c:5f:db:46:c8:24:e5:f4:8b:1e:ca:a2:31:47:14:da:53:45:
4e:15:cc:d1:ec:c8:a0:9d:b7:09:45:be:ec:0d:bc:23:b9:3a:
44:00:68:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 00:56:56 2026 by rpki-client