Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/3253ac-8fa7-425b-8a90-9b9b401459e6/1/1-LdwFgVTdgw1Z99RqEftbFKcB4k.mft
File: 1-LdwFgVTdgw1Z99RqEftbFKcB4k.mft (raw, json)
Hash identifier: NCOcIMXY2dFrp0Am1UMloWq6r/QLMdrWRfK1KT0qrVk=
Subject key identifier: 5F:B8:D0:D3:3E:26:CA:9F:64:21:32:D9:84:5C:B6:48:EB:15:42:CD
Authority key identifier: F8:B7:70:16:05:53:76:0C:35:67:DF:51:A8:47:ED:6C:52:9C:07:89
Certificate issuer: /CN=f8b770160553760c3567df51a847ed6c529c0789
Certificate serial: 019D284E4717C038AE21AF8E8FFBBF90EFA1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-LdwFgVTdgw1Z99RqEftbFKcB4k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/3253ac-8fa7-425b-8a90-9b9b401459e6/1/1-LdwFgVTdgw1Z99RqEftbFKcB4k.mft
Manifest number: 1202
Signing time: Thu 26 Mar 2026 04:01:51 +0000
Manifest this update: Thu 26 Mar 2026 04:01:51 +0000
Manifest next update: Fri 27 Mar 2026 04:01:51 +0000
Files and hashes: 1: 1-LdwFgVTdgw1Z99RqEftbFKcB4k.crl (hash: af7t4eCCLoVOSr87I+c7aeEUCf/NZenyRJO5ky19KiE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/3253ac-8fa7-425b-8a90-9b9b401459e6/1/1-LdwFgVTdgw1Z99RqEftbFKcB4k.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/3253ac-8fa7-425b-8a90-9b9b401459e6/1/1-LdwFgVTdgw1Z99RqEftbFKcB4k.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-LdwFgVTdgw1Z99RqEftbFKcB4k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 04:01:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4e:47:17:c0:38:ae:21:af:8e:8f:fb:bf:90:ef:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8b770160553760c3567df51a847ed6c529c0789
Validity
Not Before: Mar 26 04:01:51 2026 GMT
Not After : Mar 27 04:01:51 2026 GMT
Subject: CN=5fb8d0d33e26ca9f642132d9845cb648eb1542cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:d9:f7:d0:90:3f:32:9c:48:cf:cf:83:3b:12:
61:7d:22:de:3c:ba:42:19:9a:9f:be:99:5d:60:45:
87:75:af:ff:37:39:a8:0c:c5:3d:ca:24:fc:51:c6:
64:c5:cb:32:ef:61:1a:7b:0a:2c:96:2d:29:a7:2e:
2b:8b:97:9d:49:77:c7:48:1b:13:17:8a:6f:7a:09:
68:c8:fb:42:fa:03:65:6f:1c:3d:80:2e:6a:3f:32:
34:45:c5:22:e5:6d:88:65:27:38:f1:c8:56:c0:de:
fc:ff:dc:d0:5b:b1:15:81:ae:df:45:da:72:ca:33:
75:58:fb:a7:2a:1f:09:da:d1:50:fd:de:8b:c0:18:
43:cc:9a:49:12:40:14:4e:a2:d9:bc:e8:83:0e:f5:
46:cc:ef:c9:a8:b8:77:df:67:98:96:82:48:fd:9b:
6b:70:b6:52:14:60:a1:e5:4d:a1:7e:65:a2:7f:09:
04:0e:86:67:c2:5c:f3:f8:9b:ae:2b:74:b4:5a:71:
5d:7a:ed:c1:e6:b9:80:f8:8a:29:c6:e6:02:f8:e7:
2a:57:22:aa:1e:3b:4c:b8:2d:7e:2a:8c:41:74:dd:
92:d2:29:bf:9b:55:96:18:b9:00:dc:29:f8:f3:ce:
17:d6:ed:c3:bb:c3:76:84:86:1a:5e:0e:87:4b:23:
52:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:B8:D0:D3:3E:26:CA:9F:64:21:32:D9:84:5C:B6:48:EB:15:42:CD
X509v3 Authority Key Identifier:
keyid:F8:B7:70:16:05:53:76:0C:35:67:DF:51:A8:47:ED:6C:52:9C:07:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-LdwFgVTdgw1Z99RqEftbFKcB4k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/3253ac-8fa7-425b-8a90-9b9b401459e6/1/1-LdwFgVTdgw1Z99RqEftbFKcB4k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/3253ac-8fa7-425b-8a90-9b9b401459e6/1/1-LdwFgVTdgw1Z99RqEftbFKcB4k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:52:bf:81:55:4a:2c:49:89:ff:8e:f0:f8:86:a1:fa:cf:14:
fe:17:9c:81:65:9e:b0:e6:5f:11:1e:0c:56:87:c8:8e:f7:6e:
f5:94:f6:f0:dd:19:d7:3c:6e:4f:41:b9:91:89:f5:c9:67:a2:
17:bb:9b:ca:82:08:71:ec:4c:65:d5:69:a6:25:0e:25:5a:0c:
11:70:10:be:06:bf:5e:dc:85:b8:6a:0d:b3:4c:b3:27:2b:56:
45:d8:bb:36:1e:bd:f9:65:c4:ea:d6:58:34:93:1c:b6:d6:cf:
0c:1e:8d:ab:bc:66:99:f0:0e:a7:37:c0:f5:41:7e:e1:98:c0:
f2:17:48:e6:53:2c:34:69:c1:e1:e7:9e:8c:7b:c0:39:7f:4c:
9d:57:15:36:50:2e:05:6f:df:a4:e0:be:ff:33:7e:65:5f:7f:
ca:70:26:f5:71:bf:31:9e:df:b1:95:b2:80:7f:d6:7f:a2:14:
45:e1:80:be:61:f8:89:50:bf:aa:06:43:25:04:1c:82:81:22:
91:e6:c4:2a:79:75:4f:59:83:10:47:79:65:db:2c:e5:fe:1f:
73:57:e2:90:ba:a6:dd:67:d3:ac:4e:62:3b:ad:74:af:6c:d6:
ae:42:d1:6b:95:1e:77:d8:df:e7:2f:2f:ae:b5:e5:c6:47:3a:
e0:4f:56:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:59:07 2026 by rpki-client