Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/d59246-953e-423a-9704-931414101a01/1/1-ldVdi3-THDNg7MKE7eCxP_BX1o.mft
File: 1-ldVdi3-THDNg7MKE7eCxP_BX1o.mft (raw, json)
Hash identifier: GLHxpd3wATIRXz6Ggi6pgpZiNwSrE+pISkhfo2FyT+c=
Subject key identifier: A1:DC:FB:1F:48:11:B6:E7:89:7C:7B:21:4E:46:87:78:FA:0E:95:D9
Authority key identifier: FA:57:55:76:2D:FE:4C:70:CD:83:B3:0A:13:B7:82:C4:FF:C1:5F:5A
Certificate issuer: /CN=fa5755762dfe4c70cd83b30a13b782c4ffc15f5a
Certificate serial: 019D2816567D38DC562B4240A27AD6C4B172
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-ldVdi3-THDNg7MKE7eCxP_BX1o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/d59246-953e-423a-9704-931414101a01/1/1-ldVdi3-THDNg7MKE7eCxP_BX1o.mft
Manifest number: 01EC
Signing time: Thu 26 Mar 2026 03:00:45 +0000
Manifest this update: Thu 26 Mar 2026 03:00:45 +0000
Manifest next update: Fri 27 Mar 2026 03:00:45 +0000
Files and hashes: 1: 1-ldVdi3-THDNg7MKE7eCxP_BX1o.crl (hash: MG/1YuptKAx962AgtLjU5hIigyaBfz8i6iCIUo9qGns=)
2: pDA7nhW3yNSdUeX1KR6FhLMPZZY.roa (hash: ZZ1m4P8j+XlJcdrV7Ome2UFD4l54PQHH5x2pAoymEag=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/d59246-953e-423a-9704-931414101a01/1/1-ldVdi3-THDNg7MKE7eCxP_BX1o.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/d59246-953e-423a-9704-931414101a01/1/1-ldVdi3-THDNg7MKE7eCxP_BX1o.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-ldVdi3-THDNg7MKE7eCxP_BX1o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:16:56:7d:38:dc:56:2b:42:40:a2:7a:d6:c4:b1:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa5755762dfe4c70cd83b30a13b782c4ffc15f5a
Validity
Not Before: Mar 26 03:00:45 2026 GMT
Not After : Mar 27 03:00:45 2026 GMT
Subject: CN=a1dcfb1f4811b6e7897c7b214e468778fa0e95d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:ff:f1:1c:bd:a3:bf:73:dc:c2:84:12:5b:eb:
f7:85:8a:69:b4:35:d6:f4:e5:67:d8:cb:20:b0:8e:
f0:a1:1f:4b:d7:0c:99:a4:fc:f9:0b:df:50:8c:9b:
0a:3a:d3:63:20:f8:a9:d6:7b:6d:d9:88:cd:4c:9f:
eb:87:e5:44:09:cb:d9:97:45:40:a3:15:68:1e:13:
ec:f8:fc:82:eb:8d:a9:c7:04:a7:b5:30:2b:f6:35:
bb:d9:59:e1:ca:d1:66:2d:63:b9:6d:3a:3b:42:81:
ad:18:8c:80:86:ea:f1:ef:4b:7a:c9:1d:fd:48:50:
a8:7a:aa:99:67:56:93:76:7f:d5:06:8d:e9:58:c1:
88:78:c0:24:14:36:04:18:71:b7:df:bc:ad:27:b3:
07:97:75:bf:f8:cf:91:c6:20:a1:53:d1:d8:3a:42:
fa:2d:76:17:5d:da:b0:a9:9f:7a:06:61:02:8e:e4:
7a:19:09:45:ef:fd:d5:f9:e2:9e:90:ff:3a:6f:20:
32:38:37:c3:9b:ff:b5:44:22:ed:13:2d:d0:65:ce:
07:bf:9f:66:04:e5:28:8b:62:28:c1:b7:9f:77:16:
a6:48:36:29:11:c4:ed:9b:73:77:69:22:2b:4a:e0:
34:a9:3f:cd:ea:da:9e:2e:50:1f:23:77:73:95:6d:
e4:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:DC:FB:1F:48:11:B6:E7:89:7C:7B:21:4E:46:87:78:FA:0E:95:D9
X509v3 Authority Key Identifier:
keyid:FA:57:55:76:2D:FE:4C:70:CD:83:B3:0A:13:B7:82:C4:FF:C1:5F:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-ldVdi3-THDNg7MKE7eCxP_BX1o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/d59246-953e-423a-9704-931414101a01/1/1-ldVdi3-THDNg7MKE7eCxP_BX1o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/d59246-953e-423a-9704-931414101a01/1/1-ldVdi3-THDNg7MKE7eCxP_BX1o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:2a:01:48:e6:15:cd:31:e8:8b:08:f2:fb:4a:4b:91:b7:3e:
0e:b2:dd:21:cc:a9:d5:06:46:08:e8:5e:cc:ae:ff:eb:e9:90:
74:b6:9f:01:e1:23:dc:74:bb:fc:ba:37:7b:a2:70:e7:dd:36:
53:64:96:b9:f1:87:43:0a:05:84:3b:77:3d:bd:db:7c:c1:86:
96:4a:da:eb:0d:0f:75:7f:52:48:f9:db:55:14:d7:0d:ed:1c:
82:4d:02:09:e1:c2:79:48:2f:07:6d:dd:60:6e:49:3a:41:f1:
2e:6d:d3:22:a3:50:86:66:29:78:8a:0e:47:28:91:37:9a:1b:
10:88:f6:fa:27:1a:d0:8b:dd:0e:74:88:ed:18:de:7a:d1:2e:
0e:23:d7:97:10:01:a8:5d:16:db:5a:51:32:b3:07:97:5e:05:
7d:ed:4a:73:7e:55:7b:08:d1:7d:49:6c:e7:ff:10:17:15:b4:
7f:f8:8f:3b:17:95:14:9e:e2:9a:9a:6c:b6:07:3b:bd:eb:5b:
c6:86:96:41:3f:7f:c2:3f:29:d5:5f:d4:12:3e:1c:61:6d:96:
f9:ef:bd:7d:df:3c:d3:b5:37:a6:4e:19:8b:03:23:84:8e:e2:
73:a9:13:a6:bd:8b:42:c3:29:a6:80:d6:b9:a9:c1:c5:b9:96:
57:1c:2d:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:14:56 2026 by rpki-client