Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/17e999-e53d-48ca-980a-95ae64bd56ec/1/LKw-jWOxw6_HxsC_2p1ayBe27m0.mft
File: LKw-jWOxw6_HxsC_2p1ayBe27m0.mft (raw, json)
Hash identifier: wGbuTEtLMaCOSskRRjBYDWzsC6jEYLTgkj3tuHK0qHo=
Subject key identifier: E9:99:82:DB:D1:C0:40:79:BE:21:0B:87:F3:46:06:A9:16:B9:91:6A
Authority key identifier: 2C:AC:3E:8D:63:B1:C3:AF:C7:C6:C0:BF:DA:9D:5A:C8:17:B6:EE:6D
Certificate issuer: /CN=2cac3e8d63b1c3afc7c6c0bfda9d5ac817b6ee6d
Certificate serial: 019D39AE9061C017B3FA0482A5223DFEA169
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LKw-jWOxw6_HxsC_2p1ayBe27m0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/17e999-e53d-48ca-980a-95ae64bd56ec/1/LKw-jWOxw6_HxsC_2p1ayBe27m0.mft
Manifest number: 126C
Signing time: Sun 29 Mar 2026 13:00:34 +0000
Manifest this update: Sun 29 Mar 2026 13:00:34 +0000
Manifest next update: Mon 30 Mar 2026 13:00:34 +0000
Files and hashes: 1: LKw-jWOxw6_HxsC_2p1ayBe27m0.crl (hash: q4i+KGh1bVIGM3uM2BhCz2l7DeZqaV46lvZTFARbNmo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/17e999-e53d-48ca-980a-95ae64bd56ec/1/LKw-jWOxw6_HxsC_2p1ayBe27m0.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/17e999-e53d-48ca-980a-95ae64bd56ec/1/LKw-jWOxw6_HxsC_2p1ayBe27m0.mft
rsync://rpki.ripe.net/repository/DEFAULT/LKw-jWOxw6_HxsC_2p1ayBe27m0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:ae:90:61:c0:17:b3:fa:04:82:a5:22:3d:fe:a1:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2cac3e8d63b1c3afc7c6c0bfda9d5ac817b6ee6d
Validity
Not Before: Mar 29 13:00:34 2026 GMT
Not After : Mar 30 13:00:34 2026 GMT
Subject: CN=e99982dbd1c04079be210b87f34606a916b9916a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:16:0d:ee:4e:50:90:84:f3:58:12:87:11:cb:
08:a3:37:28:9a:1b:c2:df:31:de:4a:58:29:88:9d:
1f:23:31:a4:ac:b6:ec:c4:1e:2d:eb:12:ec:9c:26:
4e:01:a1:08:cc:af:aa:69:d0:5d:d0:10:79:a0:7f:
bd:54:51:c4:44:b7:1b:4c:d0:fe:25:d2:73:e2:ac:
3e:3f:9e:5a:0c:20:98:49:8f:94:81:f9:1e:d9:5f:
01:8f:85:53:6f:11:28:34:d2:69:b2:c3:39:cc:26:
95:1c:11:4a:c3:c7:33:0d:9e:1a:bb:38:65:79:ed:
66:1f:72:50:b1:2f:13:c6:b9:82:21:63:fd:db:be:
62:1a:67:f5:08:97:b1:cb:66:07:10:99:84:8c:a7:
84:f7:ef:81:8b:95:b6:fc:ca:1f:c5:21:87:cb:bd:
3f:8c:76:80:20:65:48:a4:d2:2b:bc:28:57:ad:5d:
44:60:f8:d4:09:0c:f9:dc:25:8f:73:80:a9:6f:ff:
de:ba:0d:a6:0d:dd:fb:eb:80:11:43:c6:fe:41:45:
85:64:a6:52:02:6f:6b:8a:c3:3d:5c:81:04:2f:95:
b1:77:75:5c:a2:f5:4a:d0:b7:56:a2:f0:f0:36:1d:
66:62:fc:4a:a5:c3:6f:f8:d7:e2:52:34:ae:cf:93:
d5:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:99:82:DB:D1:C0:40:79:BE:21:0B:87:F3:46:06:A9:16:B9:91:6A
X509v3 Authority Key Identifier:
keyid:2C:AC:3E:8D:63:B1:C3:AF:C7:C6:C0:BF:DA:9D:5A:C8:17:B6:EE:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LKw-jWOxw6_HxsC_2p1ayBe27m0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/17e999-e53d-48ca-980a-95ae64bd56ec/1/LKw-jWOxw6_HxsC_2p1ayBe27m0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/17e999-e53d-48ca-980a-95ae64bd56ec/1/LKw-jWOxw6_HxsC_2p1ayBe27m0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:cd:0b:1b:ec:ca:64:9f:92:c7:e9:50:1a:dd:a4:53:f4:a9:
23:5d:83:ba:f4:d6:a0:54:94:80:19:75:28:5b:c6:ae:5b:dd:
14:44:80:19:b0:9e:d5:e4:93:4a:2e:4a:ee:03:da:1b:ec:5d:
8a:f0:f2:7f:3f:86:3c:65:92:22:49:86:65:fe:27:d6:81:48:
8a:88:26:d5:47:ee:86:47:2d:9d:a5:45:17:d7:0a:f1:fb:53:
48:ea:96:12:5d:07:86:15:03:a7:11:bc:de:48:e8:87:14:80:
b2:d1:29:28:ff:7b:ca:ab:6e:09:91:74:8a:ca:9e:5d:a8:78:
a1:fd:08:34:d3:ae:13:67:17:25:06:3c:8f:ff:45:da:8a:3f:
8b:21:46:2f:0c:3c:00:38:0b:e0:66:84:30:a1:7f:cd:55:77:
78:37:38:38:2a:6a:8c:f9:9c:61:e5:8d:9d:1f:e0:db:83:62:
90:3c:f9:50:e4:b0:3c:52:d7:ff:60:dc:c7:26:6d:f8:53:db:
0c:14:d7:d6:3a:d2:61:b6:2f:97:77:01:41:46:e1:2e:a4:64:
cf:aa:0e:b9:31:50:be:13:53:46:73:55:ac:3f:22:5b:43:66:
2c:a2:f6:29:e2:51:04:c8:dc:b8:5d:17:df:68:9f:cd:38:6b:
e5:8c:6d:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:00:56 2026 by rpki-client