
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/83ee6f-ee83-444b-bdc6-ae44979f81de/1/1-LpBtq1uY3gOw_EhYOfE7Q90aaw.mft
File: 1-LpBtq1uY3gOw_EhYOfE7Q90aaw.mft (raw, json)
Hash identifier: A7VYqXUb47WkSNEBzNKIONidSt2X8M6ZeVfUOSILe/4=
Subject key identifier: A8:A0:8B:92:6D:7A:4D:05:C9:0A:19:B0:69:46:5A:EC:CA:95:23:0E
Authority key identifier: F8:BA:41:B6:AD:6E:63:78:0E:C3:F1:21:60:E7:C4:ED:0F:74:69:AC
Certificate issuer: /CN=f8ba41b6ad6e63780ec3f12160e7c4ed0f7469ac
Certificate serial: 019D2816988381EEE04B08AD0E1D4D6B2861
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-LpBtq1uY3gOw_EhYOfE7Q90aaw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/83ee6f-ee83-444b-bdc6-ae44979f81de/1/1-LpBtq1uY3gOw_EhYOfE7Q90aaw.mft
Manifest number: 01E7
Signing time: Thu 26 Mar 2026 03:01:02 +0000
Manifest this update: Thu 26 Mar 2026 03:01:02 +0000
Manifest next update: Fri 27 Mar 2026 03:01:02 +0000
Files and hashes: 1: 1-LpBtq1uY3gOw_EhYOfE7Q90aaw.crl (hash: fnKuiIt1UYwuJgED53TFTZ/V11fg0BxTUMDjHVNaZx8=)
2: S91SpqjKHj-9za4dXEoQ07MOmwY.roa (hash: mrZK89V5wHR4TTBGwZBPy+vU+mPnk1QYo7P0So8JmRM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/83ee6f-ee83-444b-bdc6-ae44979f81de/1/1-LpBtq1uY3gOw_EhYOfE7Q90aaw.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/83ee6f-ee83-444b-bdc6-ae44979f81de/1/1-LpBtq1uY3gOw_EhYOfE7Q90aaw.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-LpBtq1uY3gOw_EhYOfE7Q90aaw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 03:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:16:98:83:81:ee:e0:4b:08:ad:0e:1d:4d:6b:28:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8ba41b6ad6e63780ec3f12160e7c4ed0f7469ac
Validity
Not Before: Mar 26 03:01:02 2026 GMT
Not After : Mar 27 03:01:02 2026 GMT
Subject: CN=a8a08b926d7a4d05c90a19b069465aecca95230e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:48:c0:59:34:74:0b:b6:7d:a1:d7:d9:c7:78:
3a:4c:12:94:3d:53:af:cc:f7:1f:b8:9c:8b:dd:2a:
87:c8:4e:85:3c:5d:7d:3d:fe:35:a8:4b:bb:97:e9:
3d:81:cd:2b:88:80:a0:0d:6c:26:b1:a2:3c:83:b7:
5b:08:02:62:73:47:1b:5d:e3:2b:a5:0f:e3:b0:3e:
81:e6:8a:a8:5e:55:74:a0:2c:7d:b0:22:a0:f2:40:
11:77:d1:b8:d0:18:97:b9:d8:67:e8:41:bb:b0:81:
29:9c:80:f8:8c:5b:9f:d8:be:ef:59:c5:74:29:fb:
84:68:ad:68:a3:36:db:1d:57:81:1c:4b:8a:04:38:
1d:ce:a4:b1:ed:06:b7:2f:ab:b5:3c:42:d5:8b:0f:
6f:88:82:7d:a4:c3:8e:c5:06:38:76:0e:40:f0:0f:
3f:a7:7a:16:fa:b1:73:aa:4e:89:4c:fc:26:49:0d:
c1:d8:2c:6b:d0:ba:a3:07:92:0e:70:9c:01:b3:09:
1b:23:e6:61:c8:f8:f3:51:ca:bf:99:0a:0b:3e:21:
53:a3:ce:50:43:e5:64:a2:0c:fb:db:26:df:87:2c:
2a:a4:91:80:da:c8:1d:5e:fa:8d:47:c6:88:d5:aa:
81:13:65:6d:21:25:d8:cb:0d:43:1c:41:1a:10:da:
60:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:A0:8B:92:6D:7A:4D:05:C9:0A:19:B0:69:46:5A:EC:CA:95:23:0E
X509v3 Authority Key Identifier:
keyid:F8:BA:41:B6:AD:6E:63:78:0E:C3:F1:21:60:E7:C4:ED:0F:74:69:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-LpBtq1uY3gOw_EhYOfE7Q90aaw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/83ee6f-ee83-444b-bdc6-ae44979f81de/1/1-LpBtq1uY3gOw_EhYOfE7Q90aaw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/83ee6f-ee83-444b-bdc6-ae44979f81de/1/1-LpBtq1uY3gOw_EhYOfE7Q90aaw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:e4:3a:e0:54:19:d7:af:5f:4c:59:38:aa:06:9b:39:ee:4e:
12:0a:fd:84:ca:5a:26:52:78:5f:bb:02:f0:a6:dc:94:46:07:
ab:9c:ff:e6:18:8e:13:bf:61:89:58:97:7a:2c:b7:8a:50:36:
ea:ba:46:a4:0b:1b:c8:8a:0c:c2:f1:64:95:84:c4:31:b3:d6:
8c:02:8b:9b:6b:ae:35:e4:f6:9d:24:f6:ef:28:d4:1d:8f:c8:
cd:e2:e4:1c:52:20:50:a1:4b:52:0d:63:04:fe:c3:6a:bb:00:
e4:90:81:f9:7e:d2:6c:5b:dd:9e:30:f9:96:55:12:42:34:84:
74:eb:fe:2e:c0:1d:24:a4:74:0f:5d:c1:de:56:61:a8:c2:14:
c3:bd:34:89:aa:f9:f0:80:81:79:9a:f6:b2:bb:37:8b:83:8e:
45:d4:ca:b8:eb:c6:6b:18:cb:e5:35:f7:01:8e:55:c5:8d:9c:
1f:8c:ca:5c:88:5b:86:9c:b0:69:3b:6a:ce:9c:2c:5b:9b:d4:
ad:3f:46:ac:5e:9f:c6:90:28:31:2a:7a:ae:18:a8:6b:e4:30:
aa:19:32:3c:e6:94:08:28:f2:b1:2a:94:fe:e8:a9:1f:1c:6a:
18:44:53:a1:d0:75:25:43:f1:d1:5b:e7:9f:1a:63:87:7c:e2:
e8:31:e1:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:59:09 2026 by rpki-client