Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/dcf5ed-a1cb-4963-88af-4d77298b3b3b/1/1-LPhsj40sT9vfvKx5_p32iD-ZBI.mft
File: 1-LPhsj40sT9vfvKx5_p32iD-ZBI.mft (raw, json)
Hash identifier: 7CQYQFRSUsiXQ5jKhppv8MU9ktuakPFzyjnEgEFEFRw=
Subject key identifier: 68:50:78:F7:A3:59:53:C3:49:CF:32:86:D5:F6:43:95:43:64:16:C6
Authority key identifier: F8:B3:E1:B2:3E:34:B1:3F:6F:7E:F2:B1:E7:FA:77:DA:20:FE:64:12
Certificate issuer: /CN=f8b3e1b23e34b13f6f7ef2b1e7fa77da20fe6412
Certificate serial: 019F92ECF7EFBE196EEC449EFA16C6C62A42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-LPhsj40sT9vfvKx5_p32iD-ZBI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/dcf5ed-a1cb-4963-88af-4d77298b3b3b/1/1-LPhsj40sT9vfvKx5_p32iD-ZBI.mft
Manifest number: 19C4
Signing time: Fri 24 Jul 2026 07:00:31 +0000
Manifest this update: Fri 24 Jul 2026 07:00:31 +0000
Manifest next update: Sat 25 Jul 2026 07:00:31 +0000
Files and hashes: 1: 1-LPhsj40sT9vfvKx5_p32iD-ZBI.crl (hash: 8uZ8Ro0yZD66W6SdNbpo/L9RPFQgjuQCt0TQoSN7QjI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/dcf5ed-a1cb-4963-88af-4d77298b3b3b/1/1-LPhsj40sT9vfvKx5_p32iD-ZBI.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/dcf5ed-a1cb-4963-88af-4d77298b3b3b/1/1-LPhsj40sT9vfvKx5_p32iD-ZBI.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-LPhsj40sT9vfvKx5_p32iD-ZBI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 07:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:ec:f7:ef:be:19:6e:ec:44:9e:fa:16:c6:c6:2a:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8b3e1b23e34b13f6f7ef2b1e7fa77da20fe6412
Validity
Not Before: Jul 24 07:00:31 2026 GMT
Not After : Jul 25 07:00:31 2026 GMT
Subject: CN=685078f7a35953c349cf3286d5f64395436416c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:8e:02:fa:7b:0c:aa:e7:e4:e2:b5:22:38:e6:
69:5f:f7:6f:d3:74:fd:69:16:76:72:9e:e4:6f:d8:
8a:c6:19:f0:7c:f2:b4:fd:91:71:b9:64:be:ba:97:
4b:66:21:af:ab:b2:f2:38:ab:ab:fc:44:dd:2c:62:
ab:2a:1b:e9:99:34:6c:bb:c3:79:ce:05:d3:aa:04:
d9:fb:b8:1f:da:3f:60:f2:18:c6:1c:35:a5:05:5c:
e8:74:75:b7:69:8f:ce:42:c0:ad:9d:cb:06:a8:9d:
2b:c2:f9:69:e8:2c:73:bf:08:b7:2b:4c:06:a3:14:
ec:4d:40:b9:56:de:5e:49:e6:dc:b7:8e:65:c8:c9:
a0:b5:cb:98:e1:36:2c:51:4a:0e:2a:4d:98:c6:a7:
17:74:96:ba:f5:ff:46:a2:9b:fc:fc:8f:15:9a:6c:
29:96:90:7f:3b:c7:65:2c:78:04:26:27:48:82:ee:
1e:8e:34:21:35:6c:84:65:ec:f8:ff:1d:99:69:9a:
43:de:1b:b1:54:59:2b:0f:f8:39:a8:ab:19:14:10:
f9:70:82:04:79:f8:c0:77:21:f9:df:a2:c0:c5:a5:
aa:aa:44:a3:a7:12:94:a5:1e:01:8d:67:24:2d:a5:
19:44:db:fc:12:31:de:ec:cf:8d:4d:98:94:5a:66:
4a:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:50:78:F7:A3:59:53:C3:49:CF:32:86:D5:F6:43:95:43:64:16:C6
X509v3 Authority Key Identifier:
keyid:F8:B3:E1:B2:3E:34:B1:3F:6F:7E:F2:B1:E7:FA:77:DA:20:FE:64:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-LPhsj40sT9vfvKx5_p32iD-ZBI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/dcf5ed-a1cb-4963-88af-4d77298b3b3b/1/1-LPhsj40sT9vfvKx5_p32iD-ZBI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/dcf5ed-a1cb-4963-88af-4d77298b3b3b/1/1-LPhsj40sT9vfvKx5_p32iD-ZBI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:fe:9f:83:2f:fa:3f:00:c1:24:47:1f:b3:46:0a:2f:e0:82:
79:1e:a4:55:1c:97:aa:0c:15:07:f4:f6:70:75:69:69:df:7e:
66:f5:8c:8a:d3:3d:7a:c2:78:8c:1a:16:f0:94:a1:5b:70:0a:
14:f0:37:98:03:86:ce:e1:fd:fb:a3:dc:bd:1f:c1:7d:67:4a:
ae:a6:e8:b8:d2:3d:17:bb:85:16:a5:4e:31:87:f6:b7:c5:67:
3e:f9:e7:e3:37:2b:fd:ad:93:0b:bf:30:95:bd:20:0d:9f:8f:
db:99:2c:91:25:48:d7:83:9f:97:b4:9a:e0:d5:fd:7a:c4:35:
7f:10:bc:6d:aa:47:64:cc:6c:3f:13:e5:55:5f:dd:e9:ee:cd:
e0:54:61:ef:17:a3:99:66:29:ce:ac:1e:50:be:0f:56:e3:33:
b4:49:4c:18:98:be:bd:2c:e4:24:bb:d7:15:df:cf:1c:df:47:
4b:d2:f1:85:5a:8a:e6:96:e5:5f:9b:d5:15:5f:cf:5f:51:3b:
ba:b1:22:cd:e4:28:38:5a:6e:c7:41:6a:9d:af:18:e0:e3:48:
4d:c7:7c:24:d3:10:b8:8e:d1:f1:00:0a:44:07:bc:e8:fd:0a:
b6:cd:e3:4b:59:c5:f9:c3:bd:c7:d2:a8:8a:8c:79:b9:86:45:
d8:b7:37:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:24:08 2026 by rpki-client