Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/c4982c-b4a5-4cad-891a-8fd103b8cc89/1/_-LSEcNBNyjvBNJUQlgoqLQYHuA.mft
File: _-LSEcNBNyjvBNJUQlgoqLQYHuA.mft (raw, json)
Hash identifier: ERm78MMVb/fZf0mi0Vd7bVFcZDwj5zJp/4ro1bdOacM=
Subject key identifier: 8E:10:50:DB:A8:32:69:6A:3F:88:42:51:BB:3F:7C:AE:10:60:EE:A7
Authority key identifier: FF:E2:D2:11:C3:41:37:28:EF:04:D2:54:42:58:28:A8:B4:18:1E:E0
Certificate issuer: /CN=ffe2d211c3413728ef04d254425828a8b4181ee0
Certificate serial: 019D397779C1A97772BBF9CCFE5FC5FD5DE8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_-LSEcNBNyjvBNJUQlgoqLQYHuA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/c4982c-b4a5-4cad-891a-8fd103b8cc89/1/_-LSEcNBNyjvBNJUQlgoqLQYHuA.mft
Manifest number: 07D9
Signing time: Sun 29 Mar 2026 12:00:24 +0000
Manifest this update: Sun 29 Mar 2026 12:00:24 +0000
Manifest next update: Mon 30 Mar 2026 12:00:24 +0000
Files and hashes: 1: _-LSEcNBNyjvBNJUQlgoqLQYHuA.crl (hash: FqVaQ98WjgwOap5Q8tK07CO487X7/87emliSLw5dMkA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/c4982c-b4a5-4cad-891a-8fd103b8cc89/1/_-LSEcNBNyjvBNJUQlgoqLQYHuA.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/c4982c-b4a5-4cad-891a-8fd103b8cc89/1/_-LSEcNBNyjvBNJUQlgoqLQYHuA.mft
rsync://rpki.ripe.net/repository/DEFAULT/_-LSEcNBNyjvBNJUQlgoqLQYHuA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:77:79:c1:a9:77:72:bb:f9:cc:fe:5f:c5:fd:5d:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffe2d211c3413728ef04d254425828a8b4181ee0
Validity
Not Before: Mar 29 12:00:24 2026 GMT
Not After : Mar 30 12:00:24 2026 GMT
Subject: CN=8e1050dba832696a3f884251bb3f7cae1060eea7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:1e:a2:c4:d9:57:f6:52:ef:35:fe:5b:2d:07:
9b:13:fd:77:bf:6c:f3:e3:98:53:fa:8d:8b:76:37:
86:0b:0a:32:d2:58:cc:c1:95:42:fc:d3:3a:bd:11:
98:9e:69:65:89:36:a6:88:ff:4e:f6:3e:80:e1:06:
20:3a:87:5a:39:b0:73:04:70:8c:ce:e1:e0:ec:02:
1b:6b:84:48:70:3f:3b:b3:db:34:01:75:7f:6c:c2:
42:25:c5:b3:67:aa:d7:19:ab:b7:c0:fc:66:3e:0e:
58:db:f9:ea:ac:f9:ea:5b:07:a0:00:bc:91:d3:80:
86:f7:db:2e:63:6b:b9:14:42:04:17:09:6b:cb:f6:
b9:34:d5:bd:7b:dc:58:52:23:20:97:ea:7a:1c:7c:
cc:59:75:df:ad:1b:6b:67:5c:3d:85:f2:d2:d0:33:
da:f2:4c:26:d2:3b:fb:a2:66:ca:bf:60:ac:36:5d:
5a:4d:67:5b:1e:a8:c4:61:63:70:b3:f0:e7:0e:18:
d2:c7:dc:66:9c:29:c4:80:c6:56:a4:52:85:c7:f4:
76:0e:4d:2f:32:96:cf:db:16:b4:63:5b:05:5c:07:
14:ab:b8:54:17:75:9a:b0:cc:d8:92:18:36:ab:38:
2d:30:d9:19:8d:31:a7:82:66:60:37:9a:65:6f:b4:
d8:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:10:50:DB:A8:32:69:6A:3F:88:42:51:BB:3F:7C:AE:10:60:EE:A7
X509v3 Authority Key Identifier:
keyid:FF:E2:D2:11:C3:41:37:28:EF:04:D2:54:42:58:28:A8:B4:18:1E:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_-LSEcNBNyjvBNJUQlgoqLQYHuA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/c4982c-b4a5-4cad-891a-8fd103b8cc89/1/_-LSEcNBNyjvBNJUQlgoqLQYHuA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/c4982c-b4a5-4cad-891a-8fd103b8cc89/1/_-LSEcNBNyjvBNJUQlgoqLQYHuA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:1c:ef:86:66:ff:72:cd:cd:31:7f:79:b8:17:80:0d:14:d2:
3a:40:73:5b:20:ea:62:d4:e4:e1:3c:b8:57:dc:2e:fd:e3:68:
50:14:3f:e6:36:19:26:83:95:db:0e:ee:0d:20:34:b0:b6:21:
f7:c1:cf:b8:42:36:13:f7:25:cc:41:b7:3d:06:4f:97:7c:e8:
90:2d:f2:13:83:e1:df:5a:fc:bf:09:64:01:70:8e:4d:ac:95:
a5:8b:fe:07:50:24:f3:8f:de:d9:49:b5:94:6d:34:56:ed:1c:
20:96:c9:f6:a0:ea:8e:4a:8e:de:bc:e5:83:ad:03:14:c5:57:
92:78:fc:bc:2c:91:4e:96:53:d8:94:4e:28:d1:a1:05:0a:22:
0c:74:20:90:75:9b:32:91:28:9f:3a:cb:4f:1d:0d:86:0d:55:
4d:7a:d9:77:c9:d8:08:50:e2:38:37:a1:2d:d9:d3:5b:63:d0:
09:5b:7a:98:53:ee:cc:71:f7:31:d5:6a:c4:a0:44:e7:c6:f1:
6d:3c:ee:7e:6a:cf:2e:89:72:7e:ae:9b:28:ef:3e:1d:a1:96:
e7:58:51:03:ee:58:ec:b1:d7:0e:9f:a8:c2:f4:f8:ee:e1:98:
9f:4f:88:ca:42:e0:0a:41:09:bd:4f:96:b9:f1:be:0e:8f:7f:
01:24:df:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:27:41 2026 by rpki-client