Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/dffa1f-cf4a-4c90-b307-db36eea8307f/1/Lc0sLBQRtGsY9w5ncQGtoRzLUZg.mft
File: Lc0sLBQRtGsY9w5ncQGtoRzLUZg.mft (raw, json)
Hash identifier: vSdOgqLnZaCpohY6Et2XwEugffYTwbO9/jKf3k9r170=
Subject key identifier: B0:D2:AA:C9:AE:29:2E:7F:21:25:93:5D:53:0B:8C:BE:06:65:F9:36
Authority key identifier: 2D:CD:2C:2C:14:11:B4:6B:18:F7:0E:67:71:01:AD:A1:1C:CB:51:98
Certificate issuer: /CN=2dcd2c2c1411b46b18f70e677101ada11ccb5198
Certificate serial: 019D375307FBB3462952A62864C1935952C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Lc0sLBQRtGsY9w5ncQGtoRzLUZg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/dffa1f-cf4a-4c90-b307-db36eea8307f/1/Lc0sLBQRtGsY9w5ncQGtoRzLUZg.mft
Manifest number: 0429
Signing time: Sun 29 Mar 2026 02:01:21 +0000
Manifest this update: Sun 29 Mar 2026 02:01:21 +0000
Manifest next update: Mon 30 Mar 2026 02:01:21 +0000
Files and hashes: 1: Lc0sLBQRtGsY9w5ncQGtoRzLUZg.crl (hash: MZ8O2fhCkKP9qkzaEH0a3G0dKetvj79Bxx1jsBJK84s=)
2: ntTY6bNs75yEDx8qQmeYR0RBDCE.roa (hash: iKXOwiDpqDa+XDGha/hoiXx2V9ibK6G6tZTQtPFDEqI=)
3: sFud2BTbJwkG-pVAdyDfG15ADY4.roa (hash: eFUaMvgAqEZ4NQM49KaL16OfknWWnOfs9H02j9J+2Bs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/dffa1f-cf4a-4c90-b307-db36eea8307f/1/Lc0sLBQRtGsY9w5ncQGtoRzLUZg.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/dffa1f-cf4a-4c90-b307-db36eea8307f/1/Lc0sLBQRtGsY9w5ncQGtoRzLUZg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Lc0sLBQRtGsY9w5ncQGtoRzLUZg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:53:07:fb:b3:46:29:52:a6:28:64:c1:93:59:52:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2dcd2c2c1411b46b18f70e677101ada11ccb5198
Validity
Not Before: Mar 29 02:01:21 2026 GMT
Not After : Mar 30 02:01:21 2026 GMT
Subject: CN=b0d2aac9ae292e7f2125935d530b8cbe0665f936
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:2c:2b:5a:68:62:20:84:95:d6:9c:4d:8e:e2:
7a:e4:bd:ac:2c:e1:0f:56:01:bb:e8:d0:2c:35:4c:
bc:c2:4e:2a:64:35:15:b4:63:e3:20:ee:e7:67:a9:
0b:a9:c2:a8:fd:a7:b1:b3:4e:15:ba:f2:8c:5f:a9:
13:81:7b:a8:71:1f:55:72:3e:71:4e:9e:93:a8:9a:
b5:9c:77:b4:48:e8:14:a3:01:04:b2:72:ea:fc:97:
61:21:46:a7:3e:4a:c8:63:f2:78:91:a4:d5:a7:9d:
85:2f:aa:b5:0f:3c:d2:95:49:2d:73:bb:45:3d:12:
4b:17:b4:44:17:0e:c9:6a:c1:ca:29:25:5e:6c:db:
9e:22:0a:15:78:b7:f6:1e:08:3b:32:69:44:9d:41:
55:ed:1b:f7:0d:08:37:05:ac:5c:47:ab:b2:63:a9:
99:86:74:32:aa:f8:f3:66:e8:f2:c9:f5:b4:1c:f5:
0f:73:55:8b:45:d6:7e:77:b1:24:5a:1b:aa:ce:66:
1f:85:20:02:4d:dd:29:54:5a:fe:0f:1a:32:40:1d:
ff:be:68:df:61:45:0d:d0:cb:73:71:a9:f8:1b:22:
e9:51:33:48:38:0b:b4:eb:36:8f:6f:ed:1d:f6:42:
c1:03:e0:15:fb:e7:54:ed:24:82:89:eb:30:16:88:
3e:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:D2:AA:C9:AE:29:2E:7F:21:25:93:5D:53:0B:8C:BE:06:65:F9:36
X509v3 Authority Key Identifier:
keyid:2D:CD:2C:2C:14:11:B4:6B:18:F7:0E:67:71:01:AD:A1:1C:CB:51:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lc0sLBQRtGsY9w5ncQGtoRzLUZg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/dffa1f-cf4a-4c90-b307-db36eea8307f/1/Lc0sLBQRtGsY9w5ncQGtoRzLUZg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/dffa1f-cf4a-4c90-b307-db36eea8307f/1/Lc0sLBQRtGsY9w5ncQGtoRzLUZg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:f5:f6:0a:2e:1d:3b:01:47:85:ef:e0:bb:3a:e0:05:28:35:
91:c7:b3:79:f4:cc:ad:7e:8f:a5:c3:95:2f:38:26:de:f1:85:
7c:3b:69:b2:22:04:8e:b2:59:55:53:4c:cc:86:13:fc:f5:9c:
9b:d2:58:21:7a:8f:25:a0:ed:c7:d0:ba:84:28:62:05:bd:cd:
59:a6:a0:a5:c6:47:f3:93:53:f7:0f:aa:6c:31:d7:53:87:83:
dd:5a:bc:77:10:9e:4b:15:79:6d:6f:0d:91:18:5a:ff:b5:e4:
8b:99:11:ac:0d:da:a2:95:66:e0:7e:4d:d1:65:42:7b:02:1a:
5b:fe:be:f5:0b:37:ca:de:29:39:84:14:30:fc:1b:a7:5f:b8:
70:f7:c5:5a:1d:eb:c5:5c:45:2e:64:6a:03:46:6a:48:c4:13:
e2:ec:56:55:31:61:31:c5:a0:84:c8:84:35:40:07:47:e4:f3:
34:ed:d6:f6:66:d8:b4:0a:f2:7b:b5:17:77:f7:19:00:5d:5f:
b4:58:3b:88:f4:78:11:d6:65:ba:f8:1e:f5:3c:aa:59:d0:72:
18:25:c2:10:92:c9:a2:3f:0e:36:ca:6f:c7:db:29:45:16:4d:
21:d9:dd:16:b4:db:82:ed:3d:da:79:e2:2e:29:ee:80:48:5b:
8c:b7:2c:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:28:27 2026 by rpki-client