Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/be/dcf5ed-a1cb-4963-88af-4d77298b3b3b/1/1-LPhsj40sT9vfvKx5_p32iD-ZBI.mft
File: 1-LPhsj40sT9vfvKx5_p32iD-ZBI.mft (raw, json)
Hash identifier: yQQy58hilR3qlv9O15QqRu67ecdnqKf0XaD0xfNU0wg=
Subject key identifier: 88:C1:BC:57:75:4A:8E:88:93:B3:5A:A5:93:DB:F3:AB:80:63:FA:63
Authority key identifier: F8:B3:E1:B2:3E:34:B1:3F:6F:7E:F2:B1:E7:FA:77:DA:20:FE:64:12
Certificate issuer: /CN=f8b3e1b23e34b13f6f7ef2b1e7fa77da20fe6412
Certificate serial: 01A0F079CB4B7414A668F9067BBF07E3E3BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-LPhsj40sT9vfvKx5_p32iD-ZBI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/dcf5ed-a1cb-4963-88af-4d77298b3b3b/1/1-LPhsj40sT9vfvKx5_p32iD-ZBI.mft
Manifest number: 1A79
Signing time: Wed 30 Sep 2026 04:01:48 +0000
Manifest this update: Wed 30 Sep 2026 04:01:48 +0000
Manifest next update: Thu 01 Oct 2026 04:01:48 +0000
Files and hashes: 1: 1-LPhsj40sT9vfvKx5_p32iD-ZBI.crl (hash: TWy5pdTKzwUKr6ef8MLqyZVxkcIVwpslaSFOf9Jye5c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/dcf5ed-a1cb-4963-88af-4d77298b3b3b/1/1-LPhsj40sT9vfvKx5_p32iD-ZBI.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/dcf5ed-a1cb-4963-88af-4d77298b3b3b/1/1-LPhsj40sT9vfvKx5_p32iD-ZBI.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-LPhsj40sT9vfvKx5_p32iD-ZBI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 Oct 2026 04:01:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f0:79:cb:4b:74:14:a6:68:f9:06:7b:bf:07:e3:e3:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8b3e1b23e34b13f6f7ef2b1e7fa77da20fe6412
Validity
Not Before: Sep 30 04:01:48 2026 GMT
Not After : Oct 1 04:01:48 2026 GMT
Subject: CN=88c1bc57754a8e8893b35aa593dbf3ab8063fa63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:71:51:8f:ae:2d:d6:55:27:44:53:28:1a:2e:
90:34:5d:ad:2c:bc:f0:58:d8:03:90:89:87:ab:89:
c9:3f:b2:33:f5:a5:fa:0f:a3:6e:dc:4d:36:96:3e:
d1:6c:8b:84:b8:bb:64:61:11:9c:85:db:64:58:89:
37:f0:a7:1c:ec:e2:04:52:51:fa:27:c7:a3:26:82:
60:8d:e4:2f:dd:82:5e:59:0d:75:d1:db:8e:64:e6:
7e:ef:79:58:60:6b:76:b3:af:2c:8b:56:a2:8e:e3:
35:90:1d:a7:30:a3:38:af:45:ad:f8:90:53:8d:f3:
fe:d9:b8:8f:d1:17:83:14:ca:4d:83:2e:c1:d9:16:
63:6c:98:f9:dd:61:f1:a7:05:e7:b0:74:50:93:ae:
99:02:20:05:6c:33:f8:2a:4e:1c:b4:1e:6b:5d:d0:
7c:bd:9d:6e:28:76:21:b6:70:05:95:87:17:65:a2:
6a:11:c1:7d:49:d9:7f:22:49:67:e3:6d:17:55:92:
a0:a2:a5:06:5d:9e:03:46:08:98:d7:81:0d:e9:6c:
64:8e:f9:c9:21:7e:2e:12:0f:6b:e5:00:3b:32:2f:
5c:72:88:90:ef:96:f7:3b:a5:08:09:5f:07:4f:e5:
69:7b:bd:21:c1:be:82:95:3f:67:87:e4:f8:82:06:
70:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:C1:BC:57:75:4A:8E:88:93:B3:5A:A5:93:DB:F3:AB:80:63:FA:63
X509v3 Authority Key Identifier:
keyid:F8:B3:E1:B2:3E:34:B1:3F:6F:7E:F2:B1:E7:FA:77:DA:20:FE:64:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-LPhsj40sT9vfvKx5_p32iD-ZBI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/dcf5ed-a1cb-4963-88af-4d77298b3b3b/1/1-LPhsj40sT9vfvKx5_p32iD-ZBI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/dcf5ed-a1cb-4963-88af-4d77298b3b3b/1/1-LPhsj40sT9vfvKx5_p32iD-ZBI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:a4:08:a9:ae:90:75:e5:28:3f:d8:8f:ef:b7:65:78:f4:55:
db:2a:03:ef:7c:d8:2f:81:5a:fb:2e:31:a0:56:eb:65:74:9e:
18:02:29:b1:7c:6c:c4:0c:0d:8c:c5:44:25:59:e5:ce:cf:50:
65:bc:20:12:67:36:73:c4:ff:d9:77:ee:47:82:3f:4f:ed:bb:
ab:94:32:a0:7b:cb:71:1e:e5:0f:f3:dd:65:50:7c:0b:48:3e:
c7:76:cb:27:e8:83:17:6f:3a:87:35:5f:a2:3d:f7:37:c4:4e:
a5:68:98:0e:58:4d:bf:75:65:47:97:d6:a3:fb:a7:a7:b2:e2:
b9:81:98:d7:29:81:ff:53:aa:50:57:0d:36:c3:d3:5b:75:b8:
a1:99:7f:d7:4c:77:f5:d3:27:13:d1:1f:ce:26:40:1d:ef:3c:
dc:d9:79:a6:51:62:d6:93:d8:3d:5d:4d:8c:17:38:32:04:93:
8f:09:a6:0f:36:c7:00:b4:a3:96:d2:d3:05:04:0d:33:49:18:
95:23:ba:49:be:d6:8e:2b:79:8c:d6:77:c2:9a:44:de:0d:3d:
d6:d4:3a:4c:ca:9f:d8:21:1a:59:3e:52:18:80:46:ee:98:4a:
5e:99:89:5a:02:67:4b:c8:d2:e3:6c:59:7b:27:35:bd:10:03:
25:e7:51:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 15:26:31 2026 by rpki-client