Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/e27d9b-931a-488b-ac35-8ffbd6c73bf5/1/la6L0zJJzx7V8NQ5gUfv0y0lQho.mft
File: la6L0zJJzx7V8NQ5gUfv0y0lQho.mft (raw, json)
Hash identifier: NmYO1y3H3vXEoOzsGdyfSz14PGMyi25KdKs5hOBol1o=
Subject key identifier: 04:E3:66:5E:89:D8:B2:D0:71:B7:A4:B5:7B:AC:47:1A:43:76:03:C2
Authority key identifier: 95:AE:8B:D3:32:49:CF:1E:D5:F0:D4:39:81:47:EF:D3:2D:25:42:1A
Certificate issuer: /CN=95ae8bd33249cf1ed5f0d4398147efd32d25421a
Certificate serial: 019D386661974483E58660892B5FAC376AAF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/la6L0zJJzx7V8NQ5gUfv0y0lQho.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/e27d9b-931a-488b-ac35-8ffbd6c73bf5/1/la6L0zJJzx7V8NQ5gUfv0y0lQho.mft
Manifest number: 0FFE
Signing time: Sun 29 Mar 2026 07:02:06 +0000
Manifest this update: Sun 29 Mar 2026 07:02:06 +0000
Manifest next update: Mon 30 Mar 2026 07:02:06 +0000
Files and hashes: 1: la6L0zJJzx7V8NQ5gUfv0y0lQho.crl (hash: mZ6+0Hl3k+aez9wzlS3vXpnVfnHoevCGSdrcxd09JIw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/e27d9b-931a-488b-ac35-8ffbd6c73bf5/1/la6L0zJJzx7V8NQ5gUfv0y0lQho.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/e27d9b-931a-488b-ac35-8ffbd6c73bf5/1/la6L0zJJzx7V8NQ5gUfv0y0lQho.mft
rsync://rpki.ripe.net/repository/DEFAULT/la6L0zJJzx7V8NQ5gUfv0y0lQho.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:61:97:44:83:e5:86:60:89:2b:5f:ac:37:6a:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95ae8bd33249cf1ed5f0d4398147efd32d25421a
Validity
Not Before: Mar 29 07:02:06 2026 GMT
Not After : Mar 30 07:02:06 2026 GMT
Subject: CN=04e3665e89d8b2d071b7a4b57bac471a437603c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:5c:14:89:da:09:3c:29:48:8d:06:c5:e7:49:
02:bb:2e:af:e1:31:2c:fa:6d:48:52:51:01:a7:ed:
36:71:ee:47:37:3b:df:4b:05:aa:0b:aa:0c:47:64:
31:c6:64:46:7f:a8:49:66:7d:10:6e:b8:6e:67:e6:
10:2e:09:0c:18:00:4f:d5:91:42:b4:12:1e:3e:7b:
6c:63:f0:fe:b6:48:0e:a1:a3:77:8a:57:17:5a:6e:
1b:d6:9c:e0:6e:e5:9c:a6:18:a5:18:4a:7e:ed:92:
c7:41:78:67:42:96:cb:b5:8d:99:54:21:6e:3e:b0:
e1:51:98:d8:d8:61:d5:ef:23:f4:2d:43:1d:4c:d6:
3f:73:3e:f0:0c:10:ef:d7:7b:e7:5f:cd:90:6a:16:
26:f2:a6:3d:54:c2:e3:9b:f6:08:37:9b:e0:b3:4f:
4a:10:04:d2:94:72:4f:b3:23:44:82:ce:75:28:67:
e1:ba:f0:c6:ba:ab:49:4b:5b:ab:44:04:39:3d:3b:
ae:88:33:da:ad:c3:c9:e5:7e:3a:4c:ac:e2:9a:82:
71:13:30:21:73:d7:f6:a9:1e:7a:ce:5d:57:e1:2b:
3e:02:12:30:de:b8:2e:23:78:1b:e7:19:dd:0f:b9:
ea:ff:d8:55:65:f0:f0:04:9b:1d:51:70:55:18:61:
0e:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:E3:66:5E:89:D8:B2:D0:71:B7:A4:B5:7B:AC:47:1A:43:76:03:C2
X509v3 Authority Key Identifier:
keyid:95:AE:8B:D3:32:49:CF:1E:D5:F0:D4:39:81:47:EF:D3:2D:25:42:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/la6L0zJJzx7V8NQ5gUfv0y0lQho.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/e27d9b-931a-488b-ac35-8ffbd6c73bf5/1/la6L0zJJzx7V8NQ5gUfv0y0lQho.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/e27d9b-931a-488b-ac35-8ffbd6c73bf5/1/la6L0zJJzx7V8NQ5gUfv0y0lQho.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:8e:93:e1:c6:9e:4e:0f:73:4a:72:6a:ee:eb:26:ff:87:9b:
c0:1b:3b:25:a7:d6:5d:e1:74:0f:68:e5:12:da:91:56:e3:cd:
9c:c2:1f:10:3f:5f:a1:51:44:f6:e4:32:c4:a1:11:49:22:03:
7c:d9:00:08:59:30:88:f5:7d:32:36:49:f7:8c:07:e5:f6:23:
1a:7c:b7:b4:a3:e1:47:1e:69:68:99:06:f7:4b:8e:b0:79:25:
e8:21:22:94:96:7d:22:51:0e:d6:c2:2c:c3:52:ac:bd:21:b5:
e8:00:20:60:96:81:db:ed:0a:1e:0a:79:82:57:76:de:86:0f:
ff:bb:54:f6:20:dc:e9:30:0c:e9:55:2a:ee:c4:c3:7b:38:e8:
d6:8f:26:fe:35:29:bf:bb:aa:93:bc:82:5a:73:d1:28:c0:9a:
d9:09:a3:b0:8d:23:b6:07:51:26:40:99:40:71:2d:4c:b1:d2:
c0:46:40:e0:36:b3:6d:27:4a:d0:09:24:c2:cc:1b:d8:21:68:
d0:e4:f7:78:8d:ca:fb:32:e7:4d:d7:87:4d:09:da:cc:48:f2:
49:bc:0c:1c:e2:7f:fd:ba:bc:5e:86:f8:13:f9:e8:3c:f7:67:
25:9d:b3:7b:99:6c:69:98:17:4c:01:3c:10:07:45:9e:82:58:
2a:0c:e4:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:56:47 2026 by rpki-client