Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7b/d59246-953e-423a-9704-931414101a01/1/1-ldVdi3-THDNg7MKE7eCxP_BX1o.mft
File: 1-ldVdi3-THDNg7MKE7eCxP_BX1o.mft (raw, json)
Hash identifier: 3PK97Oj4zGZpwt+U3YGEECIG0s0WOy3hvGMf3pmm81M=
Subject key identifier: 2F:04:FF:2B:73:CB:E3:49:51:1B:17:45:CA:39:A3:0A:AB:41:19:0E
Authority key identifier: FA:57:55:76:2D:FE:4C:70:CD:83:B3:0A:13:B7:82:C4:FF:C1:5F:5A
Certificate issuer: /CN=fa5755762dfe4c70cd83b30a13b782c4ffc15f5a
Certificate serial: 01A0D83B7A7649A725C4102A99B05159A391
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-ldVdi3-THDNg7MKE7eCxP_BX1o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/d59246-953e-423a-9704-931414101a01/1/1-ldVdi3-THDNg7MKE7eCxP_BX1o.mft
Manifest number: 03D5
Signing time: Fri 25 Sep 2026 11:02:51 +0000
Manifest this update: Fri 25 Sep 2026 11:02:51 +0000
Manifest next update: Sat 26 Sep 2026 11:02:51 +0000
Files and hashes: 1: 1-ldVdi3-THDNg7MKE7eCxP_BX1o.crl (hash: 0go2+0vmnClI8GIHiXW1j/mnW8Hd7qkEZtGhhX+G86E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/d59246-953e-423a-9704-931414101a01/1/1-ldVdi3-THDNg7MKE7eCxP_BX1o.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/d59246-953e-423a-9704-931414101a01/1/1-ldVdi3-THDNg7MKE7eCxP_BX1o.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-ldVdi3-THDNg7MKE7eCxP_BX1o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 08:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d8:3b:7a:76:49:a7:25:c4:10:2a:99:b0:51:59:a3:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa5755762dfe4c70cd83b30a13b782c4ffc15f5a
Validity
Not Before: Sep 25 11:02:51 2026 GMT
Not After : Sep 26 11:02:51 2026 GMT
Subject: CN=2f04ff2b73cbe349511b1745ca39a30aab41190e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:6c:17:c4:1d:c2:f4:54:4b:5d:2a:5c:98:06:
9d:f7:54:30:38:fb:84:ab:4b:06:83:c0:03:fa:42:
b2:dd:29:25:90:31:ea:5b:60:45:5f:61:37:53:05:
1a:33:59:22:8b:1c:55:8c:08:58:12:41:76:26:1b:
74:22:d0:c5:1c:e5:1e:86:d0:16:38:ca:1d:75:9e:
ad:37:89:eb:72:c6:a8:66:02:0c:d3:a0:6a:71:45:
50:38:a4:dc:d7:93:96:a0:79:55:a0:e9:cb:21:10:
c1:0d:7c:f7:b8:2c:be:61:45:3d:1a:03:e1:1d:5a:
31:a2:2a:d8:23:6d:73:b7:94:d3:00:b5:4e:d2:66:
38:55:28:ad:d2:36:79:df:e6:02:8c:ab:c2:9e:1d:
23:2e:ae:93:0d:64:fc:27:59:d2:7a:85:9c:e1:f9:
bd:bd:28:79:6c:6b:de:d9:5d:93:57:78:74:10:c7:
01:4e:5d:b5:b0:f0:af:e1:0c:16:d2:80:3c:56:5c:
64:71:b9:75:05:ba:2a:6e:42:af:a2:6e:49:79:ba:
8d:79:38:c7:cb:02:8d:80:a5:85:07:df:4e:bc:3e:
b1:d1:85:d7:60:99:1e:2b:5f:f0:11:6b:c4:e8:cf:
48:a3:c6:6b:5a:27:da:d3:47:b0:f6:6c:5a:49:3a:
50:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:04:FF:2B:73:CB:E3:49:51:1B:17:45:CA:39:A3:0A:AB:41:19:0E
X509v3 Authority Key Identifier:
keyid:FA:57:55:76:2D:FE:4C:70:CD:83:B3:0A:13:B7:82:C4:FF:C1:5F:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-ldVdi3-THDNg7MKE7eCxP_BX1o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/d59246-953e-423a-9704-931414101a01/1/1-ldVdi3-THDNg7MKE7eCxP_BX1o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/d59246-953e-423a-9704-931414101a01/1/1-ldVdi3-THDNg7MKE7eCxP_BX1o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:6c:f5:8a:11:a4:d2:9a:db:3a:4f:be:35:d8:a6:eb:85:59:
3b:3e:e9:31:a2:8b:f0:90:90:c3:bb:00:73:f7:73:e2:04:82:
ea:2d:c7:67:97:7d:b1:1e:a4:34:97:5d:cb:6a:90:8d:ff:11:
dc:ad:41:7b:2b:51:17:95:e8:e7:22:97:68:b9:1a:66:f7:49:
e8:b1:a2:87:c3:c6:cd:73:2c:98:c2:37:4c:3d:2f:8a:b2:bc:
7f:0a:89:38:e9:c0:84:bb:c3:60:e7:3a:97:f2:cb:a9:9d:84:
d7:c2:d3:98:b6:18:c5:1b:e7:00:3b:03:c7:35:a4:9e:88:7a:
c7:eb:1d:0a:e2:80:30:c8:96:49:6d:cd:f5:ee:89:74:46:e2:
49:8e:1c:91:3a:80:ed:ed:90:c0:74:4f:04:00:e3:84:5c:0b:
1e:af:be:33:34:09:e3:17:93:c1:9a:e4:aa:33:c5:ca:95:81:
1e:06:1b:6c:2d:09:ef:73:44:76:93:ec:eb:43:d2:9a:7b:e5:
bd:74:b0:a0:fc:a8:47:a9:0e:1a:2d:55:6d:12:48:40:76:9c:
6b:e6:4c:5d:94:09:68:15:ba:8b:f9:17:51:83:ab:51:40:ed:
93:18:d4:59:f6:ae:fb:ac:bf:09:cc:c7:2f:19:6c:35:b5:46:
93:ea:dc:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 17:00:00 2026 by rpki-client