Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/6fff4a-f984-4b1f-9b2b-3d792fb905ee/1/LswQU0wEJcv21GXoQRT_euDwsFI.mft
File: LswQU0wEJcv21GXoQRT_euDwsFI.mft (raw, json)
Hash identifier: 5M5FK76pvZuMudFLGjHcpxlR3MuP2t6ykd6sskI5awg=
Subject key identifier: A9:4B:4A:D7:50:24:5C:37:F5:9A:E6:8C:16:B4:FB:E8:99:55:7E:70
Authority key identifier: 2E:CC:10:53:4C:04:25:CB:F6:D4:65:E8:41:14:FF:7A:E0:F0:B0:52
Certificate issuer: /CN=2ecc10534c0425cbf6d465e84114ff7ae0f0b052
Certificate serial: 019D3865C70DF02352F9471BC27F5719AAB3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LswQU0wEJcv21GXoQRT_euDwsFI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/6fff4a-f984-4b1f-9b2b-3d792fb905ee/1/LswQU0wEJcv21GXoQRT_euDwsFI.mft
Manifest number: 090E
Signing time: Sun 29 Mar 2026 07:01:27 +0000
Manifest this update: Sun 29 Mar 2026 07:01:27 +0000
Manifest next update: Mon 30 Mar 2026 07:01:27 +0000
Files and hashes: 1: LswQU0wEJcv21GXoQRT_euDwsFI.crl (hash: AY4SnhvqLuNkrIQIeQ23G8A4hzzUtSYv/o1BE9sTPak=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/6fff4a-f984-4b1f-9b2b-3d792fb905ee/1/LswQU0wEJcv21GXoQRT_euDwsFI.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/6fff4a-f984-4b1f-9b2b-3d792fb905ee/1/LswQU0wEJcv21GXoQRT_euDwsFI.mft
rsync://rpki.ripe.net/repository/DEFAULT/LswQU0wEJcv21GXoQRT_euDwsFI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:c7:0d:f0:23:52:f9:47:1b:c2:7f:57:19:aa:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ecc10534c0425cbf6d465e84114ff7ae0f0b052
Validity
Not Before: Mar 29 07:01:27 2026 GMT
Not After : Mar 30 07:01:27 2026 GMT
Subject: CN=a94b4ad750245c37f59ae68c16b4fbe899557e70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:a3:92:24:f3:3e:f3:46:08:8f:47:f2:33:32:
e7:98:41:28:8b:9b:33:b3:8a:11:11:21:77:e3:7d:
2b:44:b4:a1:3b:51:3f:bf:37:3a:75:87:3d:80:d3:
40:e6:4c:b8:14:1a:21:c0:5f:41:0a:e8:90:25:25:
93:93:d2:a8:4e:6d:87:4b:a6:2f:fe:06:e1:f9:26:
a0:93:ba:99:93:0e:c9:31:8b:06:6e:50:15:9d:9c:
1c:ac:b8:92:e8:05:c8:a5:1c:9c:10:3d:ca:89:1b:
72:3f:47:0d:d1:3b:76:d6:fb:0a:eb:d1:35:9e:51:
d7:63:1a:ba:45:de:8c:aa:c1:b5:96:a3:4c:84:1d:
58:e6:fe:ba:fc:8a:97:30:d9:09:36:ba:2b:70:bd:
fb:79:bf:d1:2e:56:ec:07:c7:64:14:ad:93:fd:f7:
c7:cb:33:62:5f:e0:ff:b8:c3:0a:b5:7e:3a:10:22:
8f:98:f4:cb:ae:c1:72:f0:71:a2:c0:08:b8:df:10:
97:d5:cb:60:20:55:82:32:72:5d:7f:79:e6:26:d3:
70:b5:72:d5:c5:68:a4:60:29:14:e9:f1:72:b2:02:
f5:8d:d9:0c:f3:87:46:1b:e5:74:bd:91:74:01:09:
24:3b:bb:46:81:97:15:fc:fa:b7:d9:7f:f1:82:95:
05:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:4B:4A:D7:50:24:5C:37:F5:9A:E6:8C:16:B4:FB:E8:99:55:7E:70
X509v3 Authority Key Identifier:
keyid:2E:CC:10:53:4C:04:25:CB:F6:D4:65:E8:41:14:FF:7A:E0:F0:B0:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LswQU0wEJcv21GXoQRT_euDwsFI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/6fff4a-f984-4b1f-9b2b-3d792fb905ee/1/LswQU0wEJcv21GXoQRT_euDwsFI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/6fff4a-f984-4b1f-9b2b-3d792fb905ee/1/LswQU0wEJcv21GXoQRT_euDwsFI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:e2:58:86:3a:ad:16:33:62:67:97:80:13:4e:54:ec:16:9b:
62:91:fd:b1:51:99:fa:55:39:a4:1b:de:f0:11:52:df:44:45:
f2:1c:94:e7:6c:c4:41:43:23:54:e5:49:d7:93:7b:8f:db:41:
2b:34:04:4a:72:b2:c8:a6:a3:de:25:35:43:bd:91:49:9f:ff:
33:fa:91:53:49:16:7a:de:fe:c5:5e:c0:c1:a6:8a:a7:7c:18:
d1:b9:70:c8:74:bd:1c:6d:9e:39:ee:37:4d:3c:69:ad:c5:42:
cf:6a:92:9f:66:c7:1b:8c:90:73:51:92:7b:6c:5c:98:9d:e5:
95:5d:70:d0:2d:a0:6f:0e:2b:1a:94:9c:e7:2c:56:74:7b:e8:
50:eb:9a:0e:96:32:1f:0d:f5:8a:4f:3c:91:84:ff:16:83:dd:
fd:91:c0:93:5b:12:c3:29:ec:d7:e3:9b:05:b7:d1:c8:54:f6:
6b:6f:bb:48:74:0f:98:c8:42:78:34:95:d6:fc:30:f5:47:5b:
36:5b:52:aa:2d:71:02:2e:81:25:23:ba:de:8c:98:83:c6:b4:
ad:b8:d0:da:f2:e6:8b:a1:a7:1a:de:4d:fc:e4:85:52:44:cf:
66:7a:55:e1:8c:db:97:2f:28:6b:7b:a8:c3:ca:29:f7:fe:4c:
e4:96:c8:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:28:24 2026 by rpki-client