Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/267fa3-621f-46b3-aadb-e865fd9a622f/1/laR6hTtVKHanG3Vw0AFOBktDgPs.mft
File: laR6hTtVKHanG3Vw0AFOBktDgPs.mft (raw, json)
Hash identifier: xK7kb2hGFJ4lthwzj1F5Tvs1WpgynKFbGC9ohDH9YJ0=
Subject key identifier: 64:D1:E2:44:BD:58:C6:8C:9B:8E:90:67:FB:FA:70:85:69:4E:1D:77
Authority key identifier: 95:A4:7A:85:3B:55:28:76:A7:1B:75:70:D0:01:4E:06:4B:43:80:FB
Certificate issuer: /CN=95a47a853b552876a71b7570d0014e064b4380fb
Certificate serial: 019D3865BBDE6D20E0D5789CC09AB6D2BC1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/laR6hTtVKHanG3Vw0AFOBktDgPs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/267fa3-621f-46b3-aadb-e865fd9a622f/1/laR6hTtVKHanG3Vw0AFOBktDgPs.mft
Manifest number: 0A37
Signing time: Sun 29 Mar 2026 07:01:24 +0000
Manifest this update: Sun 29 Mar 2026 07:01:24 +0000
Manifest next update: Mon 30 Mar 2026 07:01:24 +0000
Files and hashes: 1: laR6hTtVKHanG3Vw0AFOBktDgPs.crl (hash: uATJqqIegem1Fhj82XEA7LimTO5inwLG8pLt6Mtf+V8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/267fa3-621f-46b3-aadb-e865fd9a622f/1/laR6hTtVKHanG3Vw0AFOBktDgPs.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/267fa3-621f-46b3-aadb-e865fd9a622f/1/laR6hTtVKHanG3Vw0AFOBktDgPs.mft
rsync://rpki.ripe.net/repository/DEFAULT/laR6hTtVKHanG3Vw0AFOBktDgPs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:bb:de:6d:20:e0:d5:78:9c:c0:9a:b6:d2:bc:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95a47a853b552876a71b7570d0014e064b4380fb
Validity
Not Before: Mar 29 07:01:24 2026 GMT
Not After : Mar 30 07:01:24 2026 GMT
Subject: CN=64d1e244bd58c68c9b8e9067fbfa7085694e1d77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:39:df:f5:79:e5:33:53:d8:43:9e:68:d4:14:
48:a7:05:67:49:0f:63:3a:39:21:3d:1b:23:a9:39:
43:2d:76:44:ba:17:b7:a2:62:e1:46:73:ae:9c:76:
73:89:c3:eb:05:a3:a6:00:3e:cd:ba:da:33:c8:d5:
f3:45:27:51:b6:b0:13:3d:91:5a:52:ff:33:5b:b4:
88:89:bc:f8:fa:e0:26:9c:e2:e5:99:0e:c3:47:ba:
17:5c:93:96:60:43:3e:74:da:43:61:d1:d0:b9:70:
81:0d:46:3d:7b:34:6a:62:85:3b:da:73:59:41:5c:
da:4d:db:28:54:84:3e:f8:15:7b:70:a6:9c:9a:1c:
ad:86:59:25:83:28:c2:ed:0b:71:53:e1:d7:de:f4:
c9:e2:78:77:54:55:7c:d6:8d:93:a8:b2:3d:f9:fd:
d0:90:2c:d0:eb:cc:e7:0d:1e:24:46:f8:91:ee:c6:
d6:63:b2:e5:d2:7f:b0:e5:02:de:bf:e1:5f:de:c5:
03:7f:3e:af:ba:32:a7:df:32:cc:d8:99:15:b6:c8:
93:f1:1b:bf:e4:45:99:9d:0d:c4:bd:b4:13:3f:c5:
76:b4:9d:7d:03:d6:10:22:4b:10:48:da:94:64:37:
59:d1:6a:b6:cc:b6:06:0b:22:f0:f3:ba:ae:54:dc:
d1:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:D1:E2:44:BD:58:C6:8C:9B:8E:90:67:FB:FA:70:85:69:4E:1D:77
X509v3 Authority Key Identifier:
keyid:95:A4:7A:85:3B:55:28:76:A7:1B:75:70:D0:01:4E:06:4B:43:80:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/laR6hTtVKHanG3Vw0AFOBktDgPs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/267fa3-621f-46b3-aadb-e865fd9a622f/1/laR6hTtVKHanG3Vw0AFOBktDgPs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/267fa3-621f-46b3-aadb-e865fd9a622f/1/laR6hTtVKHanG3Vw0AFOBktDgPs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:ae:88:b0:f3:da:c4:c2:c8:56:88:83:10:4f:d7:fd:61:c9:
54:ac:75:d4:58:83:43:a0:23:ed:57:da:d3:ff:e9:7f:07:21:
8f:22:75:8a:c8:77:54:77:2f:1f:c3:91:3e:44:32:e4:11:63:
0b:15:d1:70:a2:5e:3a:50:17:d6:ec:bb:df:55:bc:5a:6e:7c:
95:7a:40:bb:f7:87:78:c8:f0:d6:5e:2a:b3:6c:16:35:e2:59:
44:ca:2b:03:56:20:da:1b:ab:ee:5d:c6:4e:93:99:87:9e:3a:
19:ec:00:9b:bf:9a:a4:ec:00:34:7d:1e:a1:20:9d:df:bb:1f:
1b:ea:ce:b5:69:64:ed:ac:5c:69:b6:6f:be:09:01:ef:30:0c:
b1:99:e4:10:22:ec:96:0f:31:99:48:4d:cb:e8:91:28:10:c5:
92:eb:f3:09:e0:37:37:24:bb:22:d3:8c:18:6f:52:98:24:70:
52:e3:2f:5e:55:8f:3f:39:56:99:33:c4:8f:1a:68:e4:ca:89:
85:39:3b:7e:8c:cb:b1:06:aa:49:0a:c2:6e:b0:6a:12:56:c0:
72:86:29:96:5b:27:35:46:b8:28:55:4a:c7:cc:08:f7:2c:fa:
4c:bf:18:49:11:3a:9b:56:45:5c:f9:d2:93:11:bc:17:df:63:
20:04:d4:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:07:25 2026 by rpki-client