Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/b331cc-6b6d-4693-9267-b422779160bb/1/1-LGChfQu1nwR2Pg99IixD8h_F78.mft
File: 1-LGChfQu1nwR2Pg99IixD8h_F78.mft (raw, json)
Hash identifier: gTQR1qY/AFpM/AJ4pOAma9qfbHVe36AOfT8iAb9Pesk=
Subject key identifier: 0B:F0:2F:7B:C8:D4:B8:1A:EA:84:DB:4F:9E:A2:17:3A:B1:87:2F:14
Authority key identifier: F8:B1:82:85:F4:2E:D6:7C:11:D8:F8:3D:F4:88:B1:0F:C8:7F:17:BF
Certificate issuer: /CN=f8b18285f42ed67c11d8f83df488b10fc87f17bf
Certificate serial: 019D2A72A82195938297B031261297D7D306
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-LGChfQu1nwR2Pg99IixD8h_F78.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/b331cc-6b6d-4693-9267-b422779160bb/1/1-LGChfQu1nwR2Pg99IixD8h_F78.mft
Manifest number: 0F71
Signing time: Thu 26 Mar 2026 14:00:50 +0000
Manifest this update: Thu 26 Mar 2026 14:00:50 +0000
Manifest next update: Fri 27 Mar 2026 14:00:50 +0000
Files and hashes: 1: 1-LGChfQu1nwR2Pg99IixD8h_F78.crl (hash: fBMU5XOwkNPW+Y72AqRy9py041nDdkgU8a6qHgXonRU=)
2: znlH05wUUI_cREyEO6A7B87acRI.roa (hash: MtJpDkpsvsN3UGCwGXX+CpXcpcwlJRAixBEzCR1dqmY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/b331cc-6b6d-4693-9267-b422779160bb/1/1-LGChfQu1nwR2Pg99IixD8h_F78.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/b331cc-6b6d-4693-9267-b422779160bb/1/1-LGChfQu1nwR2Pg99IixD8h_F78.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-LGChfQu1nwR2Pg99IixD8h_F78.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 14:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:72:a8:21:95:93:82:97:b0:31:26:12:97:d7:d3:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8b18285f42ed67c11d8f83df488b10fc87f17bf
Validity
Not Before: Mar 26 14:00:50 2026 GMT
Not After : Mar 27 14:00:50 2026 GMT
Subject: CN=0bf02f7bc8d4b81aea84db4f9ea2173ab1872f14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:ad:1d:1b:83:98:fc:ef:de:5b:ce:f6:6e:b4:
67:42:d0:1d:bf:1f:94:ac:d1:27:a2:96:4e:8f:9c:
03:14:17:89:c5:7f:bb:56:76:a5:2f:bf:11:c2:7f:
0d:fe:9a:37:05:91:3b:00:98:f9:e0:75:1c:83:d1:
d6:4c:c3:c3:77:c5:e0:80:99:b7:b9:cf:df:cb:c2:
36:c5:f5:e4:0b:b3:0c:a6:81:26:b6:95:fe:42:9a:
ad:5f:41:3e:ba:96:e7:94:18:0c:f9:9f:c4:87:80:
a5:4d:99:40:0f:87:f5:94:d4:8d:63:43:91:6e:dc:
bc:ee:59:42:a3:ac:51:25:9f:8a:63:7b:47:c8:5e:
01:86:db:37:06:42:a7:7f:29:75:98:d6:a0:5a:3c:
39:6b:22:4b:e9:36:aa:83:03:23:28:f5:a5:0a:4f:
23:bd:0d:94:16:a2:df:24:d0:3c:50:f1:4a:1d:03:
ea:ea:a7:7b:70:e2:f7:1d:8a:ad:f1:66:28:63:0e:
11:5e:39:6a:21:d4:76:32:6a:70:64:42:b9:c2:bc:
f2:2d:f2:4c:89:13:b7:6b:4b:b9:0a:84:30:22:a4:
00:2d:40:17:1f:93:46:50:62:dd:b3:51:f0:16:00:
95:a8:76:51:7e:75:70:96:cd:a0:01:0f:cd:fd:a3:
cd:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:F0:2F:7B:C8:D4:B8:1A:EA:84:DB:4F:9E:A2:17:3A:B1:87:2F:14
X509v3 Authority Key Identifier:
keyid:F8:B1:82:85:F4:2E:D6:7C:11:D8:F8:3D:F4:88:B1:0F:C8:7F:17:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-LGChfQu1nwR2Pg99IixD8h_F78.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/b331cc-6b6d-4693-9267-b422779160bb/1/1-LGChfQu1nwR2Pg99IixD8h_F78.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/b331cc-6b6d-4693-9267-b422779160bb/1/1-LGChfQu1nwR2Pg99IixD8h_F78.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:fe:ac:de:90:33:57:fa:15:d3:da:51:54:0e:8c:bc:75:d3:
18:e5:f9:8d:94:2f:2c:19:6f:c7:8d:4f:dc:28:27:91:ee:9c:
71:f0:69:fd:9e:c7:2f:36:c2:01:fd:c1:dd:1c:e8:99:d7:19:
5d:d3:56:a6:12:91:2d:eb:68:9d:f5:4e:0a:34:92:50:50:9e:
f5:65:9c:b3:2f:68:51:50:8f:9a:df:8f:7c:e2:58:09:e5:3a:
02:ff:c8:0a:ca:5d:c3:18:2b:93:26:81:2c:a7:79:2a:a7:98:
e8:ed:7d:0a:62:df:1b:2a:14:e3:56:bb:5e:8a:00:e4:27:d8:
31:02:37:6d:4a:df:4f:4e:81:35:18:02:5a:b2:86:b5:d9:c1:
cb:1e:93:f5:ea:24:ac:ff:bc:12:11:34:bf:90:88:90:f5:1c:
a6:18:8e:57:c8:77:6a:db:52:29:16:42:1c:1d:b0:35:51:78:
22:5d:17:29:74:fe:b3:33:29:37:6b:34:a7:6b:7f:fe:7e:11:
38:c3:1e:a0:ea:4c:b1:a8:86:0a:d6:84:1d:d9:d4:9b:96:06:
87:46:cd:cc:3b:d1:cd:6c:c3:15:a0:ef:1d:1e:9c:f8:11:df:
8f:8c:61:65:06:90:19:25:3e:32:60:70:b5:54:10:5f:a0:fa:
b0:4a:98:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 22:38:34 2026 by rpki-client