Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f5/4db93d-fc87-4e16-9b3b-79453b474e2e/1/1LDBHmZmz8G38baZTg9Dcymt7AQ.mft
File: 1LDBHmZmz8G38baZTg9Dcymt7AQ.mft (raw, json)
Hash identifier: qLgthDOrxsNwwWm4+ou66iNccGdkBVVolaKgpXFDhnM=
Subject key identifier: 26:C4:99:A3:57:08:9E:71:45:6E:D7:94:8C:82:DD:AC:7B:C2:66:FD
Authority key identifier: D4:B0:C1:1E:66:66:CF:C1:B7:F1:B6:99:4E:0F:43:73:29:AD:EC:04
Certificate issuer: /CN=d4b0c11e6666cfc1b7f1b6994e0f437329adec04
Certificate serial: 01A0CEFF4ED9FA589ABCF358378EB1069A36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1LDBHmZmz8G38baZTg9Dcymt7AQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/4db93d-fc87-4e16-9b3b-79453b474e2e/1/1LDBHmZmz8G38baZTg9Dcymt7AQ.mft
Manifest number: 19FE
Signing time: Wed 23 Sep 2026 16:00:33 +0000
Manifest this update: Wed 23 Sep 2026 16:00:33 +0000
Manifest next update: Thu 24 Sep 2026 16:00:33 +0000
Files and hashes: 1: 1LDBHmZmz8G38baZTg9Dcymt7AQ.crl (hash: uKOKUe/AREnnpvlzXkobgXIZwQg1+ByF6wzcJBC+CK8=)
2: jGUPhdM1XZTdzsS3lD-IYIE9S9g.roa (hash: 69/RQWyt8lYUh/QhtvMFFUSfV50PWIikyQS0MBItp/o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/4db93d-fc87-4e16-9b3b-79453b474e2e/1/1LDBHmZmz8G38baZTg9Dcymt7AQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/4db93d-fc87-4e16-9b3b-79453b474e2e/1/1LDBHmZmz8G38baZTg9Dcymt7AQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1LDBHmZmz8G38baZTg9Dcymt7AQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ce:ff:4e:d9:fa:58:9a:bc:f3:58:37:8e:b1:06:9a:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4b0c11e6666cfc1b7f1b6994e0f437329adec04
Validity
Not Before: Sep 23 16:00:33 2026 GMT
Not After : Sep 24 16:00:33 2026 GMT
Subject: CN=26c499a357089e71456ed7948c82ddac7bc266fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:b8:51:c0:f4:56:f2:27:53:3f:69:54:0e:1b:
6f:14:0e:3b:c4:02:34:b4:7d:df:bc:6a:fc:e1:c0:
e9:97:4d:a0:ed:12:98:22:d5:9e:41:1c:47:6e:e5:
59:51:bc:00:ba:ab:ea:e6:ee:ef:d9:8f:d3:c0:ed:
8c:16:38:ea:d3:bb:a0:11:ad:ad:11:16:60:9f:3b:
8a:5f:fd:3d:bb:18:df:42:69:34:b1:32:00:12:ac:
09:3f:45:3b:f5:e5:f6:08:94:ae:cc:cd:55:73:f0:
af:37:aa:36:c9:1c:f0:ab:06:0f:79:29:a7:7d:72:
fa:90:a3:38:ba:14:0c:93:e7:34:15:8b:87:72:02:
2f:45:a4:d8:ae:75:e6:7d:cf:e1:53:36:38:1c:c0:
03:d3:14:1b:83:a1:44:ed:46:c8:77:d5:be:fd:77:
65:b1:e7:65:36:a4:99:0e:31:a4:53:de:e6:76:85:
5c:b4:8c:45:64:b9:6e:32:c7:9d:78:a1:24:0d:b3:
76:7a:69:73:df:3c:67:85:0e:f7:f9:90:d5:fa:1f:
d2:13:07:09:01:04:dd:81:38:1b:bc:3e:a6:8d:28:
7a:df:c4:06:28:b3:81:89:74:8a:6a:f4:a3:a8:76:
16:1a:28:db:10:c2:42:e7:d6:dd:ce:6c:71:3f:e4:
79:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:C4:99:A3:57:08:9E:71:45:6E:D7:94:8C:82:DD:AC:7B:C2:66:FD
X509v3 Authority Key Identifier:
keyid:D4:B0:C1:1E:66:66:CF:C1:B7:F1:B6:99:4E:0F:43:73:29:AD:EC:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1LDBHmZmz8G38baZTg9Dcymt7AQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/4db93d-fc87-4e16-9b3b-79453b474e2e/1/1LDBHmZmz8G38baZTg9Dcymt7AQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/4db93d-fc87-4e16-9b3b-79453b474e2e/1/1LDBHmZmz8G38baZTg9Dcymt7AQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:fe:a4:7c:0d:b3:4f:60:c9:21:b2:07:cc:6d:6b:d9:80:17:
d9:fa:45:05:d9:ba:8a:3e:a3:2f:8c:9e:fa:5c:95:37:d3:22:
77:02:32:18:a8:fe:04:65:96:ed:25:a8:37:02:63:35:06:f4:
92:5f:fb:cf:82:b1:72:e2:c3:98:7c:ad:c6:51:77:f5:62:7a:
2f:5c:5c:d4:81:af:1c:c2:1d:45:2f:1e:dd:fe:68:cd:6c:0f:
4e:83:dc:6a:17:6e:ab:58:89:0e:75:17:04:39:75:ef:8e:e5:
b0:6f:02:5f:18:31:ca:c1:ba:ad:cd:20:f4:ce:39:a9:ba:b2:
2a:34:29:28:4f:cf:b9:96:36:c3:ad:23:9d:d6:5b:da:5f:0d:
14:45:55:1e:2c:b0:c3:01:29:6a:b6:80:5f:36:bd:0c:98:bf:
85:f1:82:80:0e:16:15:9c:a0:39:b4:a6:7b:3f:5d:07:06:a5:
25:e5:cc:20:ca:39:a7:3c:c9:96:91:0a:ef:14:2b:a2:07:23:
42:fe:86:f3:7d:8b:dd:bb:29:44:34:00:81:aa:4e:cb:05:9c:
05:64:ae:58:5c:4e:3c:5c:bb:a0:65:00:ad:3e:75:40:b8:b7:
1e:14:e7:c8:fc:70:1e:6b:7f:7d:f5:54:f0:fe:dc:a4:0c:44:
fa:39:dd:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 19:42:25 2026 by rpki-client