
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/d59246-953e-423a-9704-931414101a01/1/1-ldVdi3-THDNg7MKE7eCxP_BX1o.mft
File: 1-ldVdi3-THDNg7MKE7eCxP_BX1o.mft (raw, json)
Hash identifier: HfdpbxFwC4RY75jSC8Ej5dont8CCvvpgpsuGoH8Oui4=
Subject key identifier: AD:B1:B0:A7:43:E9:07:DD:82:D8:EF:BA:84:1A:13:D1:B6:8B:26:F7
Authority key identifier: FA:57:55:76:2D:FE:4C:70:CD:83:B3:0A:13:B7:82:C4:FF:C1:5F:5A
Certificate issuer: /CN=fa5755762dfe4c70cd83b30a13b782c4ffc15f5a
Certificate serial: 019F92118B3D9322C65CDB9371BEC6A11B67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-ldVdi3-THDNg7MKE7eCxP_BX1o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/d59246-953e-423a-9704-931414101a01/1/1-ldVdi3-THDNg7MKE7eCxP_BX1o.mft
Manifest number: 032C
Signing time: Fri 24 Jul 2026 03:00:50 +0000
Manifest this update: Fri 24 Jul 2026 03:00:50 +0000
Manifest next update: Sat 25 Jul 2026 03:00:50 +0000
Files and hashes: 1: 1-ldVdi3-THDNg7MKE7eCxP_BX1o.crl (hash: nON//nvnoF/1o5XjIktcqiogaso8D/C4Jaz9XPnMXSY=)
2: pDA7nhW3yNSdUeX1KR6FhLMPZZY.roa (hash: ZZ1m4P8j+XlJcdrV7Ome2UFD4l54PQHH5x2pAoymEag=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/d59246-953e-423a-9704-931414101a01/1/1-ldVdi3-THDNg7MKE7eCxP_BX1o.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/d59246-953e-423a-9704-931414101a01/1/1-ldVdi3-THDNg7MKE7eCxP_BX1o.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-ldVdi3-THDNg7MKE7eCxP_BX1o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:11:8b:3d:93:22:c6:5c:db:93:71:be:c6:a1:1b:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa5755762dfe4c70cd83b30a13b782c4ffc15f5a
Validity
Not Before: Jul 24 03:00:50 2026 GMT
Not After : Jul 25 03:00:50 2026 GMT
Subject: CN=adb1b0a743e907dd82d8efba841a13d1b68b26f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:86:8d:47:04:21:5e:b9:5f:e6:03:4f:ec:c9:
16:12:fb:d5:bd:5b:36:43:42:81:cc:06:f5:c5:b6:
36:cf:29:76:57:7e:62:93:c4:03:b8:4e:1f:2d:bb:
9c:b8:b4:f4:d2:19:b2:13:fd:6c:3e:e9:35:ec:b1:
49:69:74:59:14:bb:e8:84:e4:95:cd:30:22:53:f8:
a0:e3:c6:81:eb:64:72:14:3a:ed:e9:06:b7:10:2b:
38:5f:cc:fd:39:12:24:ae:95:65:61:a9:af:70:4e:
6b:e4:3f:99:7e:e2:35:63:2d:8e:7f:50:85:07:5b:
e9:f1:b9:dc:a7:ba:92:81:68:94:06:7a:57:59:db:
f0:e8:c2:3e:c7:a7:da:f7:32:32:56:32:3e:0c:de:
05:9c:b0:02:01:c9:7a:a4:a5:d9:30:25:22:c9:ad:
38:e5:3b:93:61:b7:30:e6:6f:33:50:1d:39:9f:15:
5b:ce:34:34:f0:77:bc:c7:3a:4a:5b:94:f4:4f:04:
2f:5f:b8:fd:ed:b8:d3:bc:49:71:48:98:af:cc:6c:
77:37:8c:06:2c:5a:40:f3:d6:08:2f:8d:5c:09:74:
03:17:b5:4d:63:e3:6d:6e:31:b1:d8:02:40:49:4d:
fc:fb:ef:2b:13:50:e5:36:15:e2:6e:a8:10:88:e3:
71:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:B1:B0:A7:43:E9:07:DD:82:D8:EF:BA:84:1A:13:D1:B6:8B:26:F7
X509v3 Authority Key Identifier:
keyid:FA:57:55:76:2D:FE:4C:70:CD:83:B3:0A:13:B7:82:C4:FF:C1:5F:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-ldVdi3-THDNg7MKE7eCxP_BX1o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/d59246-953e-423a-9704-931414101a01/1/1-ldVdi3-THDNg7MKE7eCxP_BX1o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/d59246-953e-423a-9704-931414101a01/1/1-ldVdi3-THDNg7MKE7eCxP_BX1o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:80:63:f9:d2:bf:99:f1:ad:68:ff:07:a5:fe:67:53:f9:49:
79:10:f0:0c:56:5a:a8:52:5e:d7:86:2a:1f:cd:a6:b9:10:b2:
57:52:49:6a:c1:7f:c3:c1:5b:df:04:cb:64:5c:f5:f1:04:e6:
4e:b9:45:35:54:71:90:b1:95:ed:67:6f:92:06:65:c5:df:9f:
f0:eb:21:ba:a0:5e:03:0c:b0:5f:ee:69:4c:a9:c5:a8:c3:15:
6b:21:dc:64:59:09:93:3f:0f:a3:ef:6a:be:05:87:ec:bb:47:
87:45:30:62:62:0d:fe:06:6c:6e:e5:78:64:09:86:6c:63:d7:
56:58:d6:83:51:f3:ca:45:5e:6c:30:48:04:d1:9b:cf:40:ec:
f1:cb:6c:4e:05:62:f7:8c:4a:0a:44:5c:bf:55:42:f9:e7:76:
38:94:83:d0:38:a3:52:7b:8d:c4:28:b0:67:73:51:cd:6d:42:
f1:bb:76:c2:62:dc:b5:b4:93:56:aa:4c:47:d6:ab:f9:ce:d4:
f2:9c:15:e2:7a:41:d7:b4:8a:a4:5e:2c:ec:f2:ae:fb:44:a4:
53:c9:bb:63:48:84:b6:90:95:cf:8d:f5:b4:4c:e8:91:8f:03:
96:19:c4:3e:b5:20:74:f7:8f:f1:cd:f9:1b:98:8a:51:d6:1f:
99:5e:23:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 09:32:23 2026 by rpki-client