Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/fd52f7-0ffa-4f1d-9d02-147d486f4050/1/_LMpnwXCDWOVnOd4G1qOBy9XzLQ.mft
File: _LMpnwXCDWOVnOd4G1qOBy9XzLQ.mft (raw, json)
Hash identifier: ENud8yK4Q9J5Vn1CyCK4NKroTSir8ZuMfyhUmqSDi28=
Subject key identifier: 5D:A7:97:C0:26:6F:A9:77:5B:94:90:AE:69:66:F9:8E:2D:56:A1:3A
Authority key identifier: FC:B3:29:9F:05:C2:0D:63:95:9C:E7:78:1B:5A:8E:07:2F:57:CC:B4
Certificate issuer: /CN=fcb3299f05c20d63959ce7781b5a8e072f57ccb4
Certificate serial: 019D39412B8FFA8FA73BC984BDA8918F35B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_LMpnwXCDWOVnOd4G1qOBy9XzLQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/fd52f7-0ffa-4f1d-9d02-147d486f4050/1/_LMpnwXCDWOVnOd4G1qOBy9XzLQ.mft
Manifest number: 1631
Signing time: Sun 29 Mar 2026 11:01:05 +0000
Manifest this update: Sun 29 Mar 2026 11:01:05 +0000
Manifest next update: Mon 30 Mar 2026 11:01:05 +0000
Files and hashes: 1: _LMpnwXCDWOVnOd4G1qOBy9XzLQ.crl (hash: vbhGxjMCs2XtHC03sVHpSKSgblbwNDNWVQP1JBVBU1k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/fd52f7-0ffa-4f1d-9d02-147d486f4050/1/_LMpnwXCDWOVnOd4G1qOBy9XzLQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/fd52f7-0ffa-4f1d-9d02-147d486f4050/1/_LMpnwXCDWOVnOd4G1qOBy9XzLQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/_LMpnwXCDWOVnOd4G1qOBy9XzLQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:41:2b:8f:fa:8f:a7:3b:c9:84:bd:a8:91:8f:35:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fcb3299f05c20d63959ce7781b5a8e072f57ccb4
Validity
Not Before: Mar 29 11:01:05 2026 GMT
Not After : Mar 30 11:01:05 2026 GMT
Subject: CN=5da797c0266fa9775b9490ae6966f98e2d56a13a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:69:06:c2:d2:48:40:6f:a7:80:dc:25:18:5d:
f2:4b:1b:f9:94:32:c5:6e:df:6f:45:ed:8c:c6:2b:
e1:9c:03:cd:3a:79:41:02:53:46:e3:90:a5:a2:8f:
54:89:a1:cc:e2:b9:2e:7d:df:dd:a8:1e:b9:ed:5f:
33:e4:76:6e:01:b4:c2:79:66:5b:c1:bb:b1:a9:cd:
d6:04:45:ec:8e:71:44:19:d1:19:3a:3a:aa:d0:52:
39:78:26:ae:ea:0d:fc:51:54:13:94:ce:6f:65:1c:
45:7a:73:d5:8e:14:66:1d:73:12:b2:c5:27:ab:f1:
4b:3a:fe:cb:fb:bc:6d:cd:56:63:a4:ed:7d:23:73:
23:a5:da:9c:02:59:88:d8:18:d5:67:f9:7b:38:c9:
9a:fd:0d:40:a2:a5:34:b3:20:51:74:86:50:c3:89:
00:f2:30:ab:74:fd:a9:f9:23:68:8e:de:6d:0e:3f:
79:41:50:09:61:4a:59:eb:2e:65:b9:73:05:bc:6e:
fd:d1:79:27:21:e7:38:71:ff:55:52:f8:89:5c:d9:
7e:15:c0:bf:62:13:a9:6b:95:e8:50:fb:22:b1:68:
82:35:32:32:ee:6e:b1:52:a9:c3:0d:fa:4a:9e:e9:
0e:3c:57:b4:cc:07:08:38:d1:96:7d:5b:9f:57:7d:
60:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:A7:97:C0:26:6F:A9:77:5B:94:90:AE:69:66:F9:8E:2D:56:A1:3A
X509v3 Authority Key Identifier:
keyid:FC:B3:29:9F:05:C2:0D:63:95:9C:E7:78:1B:5A:8E:07:2F:57:CC:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_LMpnwXCDWOVnOd4G1qOBy9XzLQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/fd52f7-0ffa-4f1d-9d02-147d486f4050/1/_LMpnwXCDWOVnOd4G1qOBy9XzLQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/fd52f7-0ffa-4f1d-9d02-147d486f4050/1/_LMpnwXCDWOVnOd4G1qOBy9XzLQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:54:8d:36:41:11:48:0f:68:21:cc:46:83:23:96:44:67:65:
c7:98:00:bc:25:fd:41:a7:41:ba:e0:0e:29:aa:df:f1:f2:aa:
31:c8:8e:54:68:90:4e:12:66:e5:fc:3f:38:14:68:72:1c:04:
58:a6:d6:02:17:d9:30:d8:f8:41:dc:82:35:55:99:42:a5:e7:
70:4a:87:2d:c8:bf:ef:39:b4:7a:90:3d:08:87:6a:f0:5f:76:
8e:2a:5e:a6:96:ed:b4:89:90:5d:2e:f1:c0:fc:15:08:e1:21:
94:86:06:47:87:d7:33:6c:e9:07:52:4e:36:50:64:40:ad:34:
6e:d8:4b:79:21:d6:cc:5b:3c:0e:12:c1:bc:39:6b:3d:8e:fd:
16:19:f5:84:81:42:23:b1:b1:e3:d1:81:62:3d:70:4e:0a:fb:
1a:04:ea:c9:89:b6:e7:dc:85:52:14:0e:24:e4:7c:f3:f7:55:
35:fb:a8:67:7d:db:58:7e:64:6d:62:97:45:22:4c:5f:2b:65:
38:88:47:6a:e7:90:a6:9f:0b:f5:94:ff:17:91:2e:c1:b3:38:
ea:b8:7b:53:5d:7a:fd:de:39:45:ce:c1:33:7b:42:9f:6a:93:
68:85:a2:a9:75:46:8d:11:fe:ff:a6:e7:5f:22:d1:9f:b4:5d:
70:1e:59:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:02:09 2026 by rpki-client