Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/3ff7a7-27cb-4072-b33b-0248d6afd63f/1/lKTi_J7qzc9bD1CrkyhM07CUIXE.mft
File: lKTi_J7qzc9bD1CrkyhM07CUIXE.mft (raw, json)
Hash identifier: LMPggxCggWDkmmuad+ZnXOsaHD+h0/EP010YbNYguRA=
Subject key identifier: 35:F0:7F:10:64:21:D6:C1:85:50:8A:AE:D3:E3:9E:72:89:F9:23:E1
Authority key identifier: 94:A4:E2:FC:9E:EA:CD:CF:5B:0F:50:AB:93:28:4C:D3:B0:94:21:71
Certificate issuer: /CN=94a4e2fc9eeacdcf5b0f50ab93284cd3b0942171
Certificate serial: 019D3865F7D112F2BBB178825109E77FCEC8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lKTi_J7qzc9bD1CrkyhM07CUIXE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/3ff7a7-27cb-4072-b33b-0248d6afd63f/1/lKTi_J7qzc9bD1CrkyhM07CUIXE.mft
Manifest number: 104E
Signing time: Sun 29 Mar 2026 07:01:39 +0000
Manifest this update: Sun 29 Mar 2026 07:01:39 +0000
Manifest next update: Mon 30 Mar 2026 07:01:39 +0000
Files and hashes: 1: lKTi_J7qzc9bD1CrkyhM07CUIXE.crl (hash: BtMl36cG31ZxlDsxJmRUAaK3gHQgxNYu0lVUBUj/cQQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/3ff7a7-27cb-4072-b33b-0248d6afd63f/1/lKTi_J7qzc9bD1CrkyhM07CUIXE.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/3ff7a7-27cb-4072-b33b-0248d6afd63f/1/lKTi_J7qzc9bD1CrkyhM07CUIXE.mft
rsync://rpki.ripe.net/repository/DEFAULT/lKTi_J7qzc9bD1CrkyhM07CUIXE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:f7:d1:12:f2:bb:b1:78:82:51:09:e7:7f:ce:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94a4e2fc9eeacdcf5b0f50ab93284cd3b0942171
Validity
Not Before: Mar 29 07:01:39 2026 GMT
Not After : Mar 30 07:01:39 2026 GMT
Subject: CN=35f07f106421d6c185508aaed3e39e7289f923e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:7e:b9:1b:a0:34:0a:83:81:d9:67:1f:4a:f1:
d2:b4:8c:24:21:6e:b3:d4:8e:6e:b0:f5:9b:c8:92:
40:55:bd:a7:fa:da:cc:43:60:81:35:83:dd:fe:6a:
5e:7e:a1:e3:72:c1:b0:17:b8:43:57:d8:d1:4b:67:
82:c4:6a:86:48:4b:ef:b8:c7:10:3f:93:a3:6b:c2:
68:a4:a9:7c:58:22:5d:67:13:bf:4a:ca:18:c2:e0:
9b:96:4f:4e:ac:fc:cc:94:fe:0c:3e:a3:85:fd:38:
24:84:ab:14:83:bd:3c:34:30:3d:95:e5:a4:6d:5d:
0f:b5:79:96:89:01:b7:1e:05:8d:4c:3a:7c:18:13:
20:f5:95:fe:3f:19:8d:d5:0a:3a:74:6c:2e:5f:5e:
7b:86:1f:db:30:c5:66:8c:d9:82:bb:4a:55:04:28:
1f:ea:80:82:61:fe:60:18:94:03:4d:4e:e3:01:97:
c2:2a:50:a5:ba:c2:a2:b1:8e:0a:60:48:86:4e:6a:
a9:e0:4f:79:67:d8:64:c2:d1:5d:27:1f:c7:53:32:
1c:72:4f:74:31:3c:cd:80:a6:fa:02:7d:cb:64:62:
c5:ec:de:df:d5:20:85:1e:3e:cf:dd:d1:25:98:66:
aa:cd:ba:01:cd:75:69:72:c2:77:88:0d:5e:25:e4:
45:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:F0:7F:10:64:21:D6:C1:85:50:8A:AE:D3:E3:9E:72:89:F9:23:E1
X509v3 Authority Key Identifier:
keyid:94:A4:E2:FC:9E:EA:CD:CF:5B:0F:50:AB:93:28:4C:D3:B0:94:21:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lKTi_J7qzc9bD1CrkyhM07CUIXE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/3ff7a7-27cb-4072-b33b-0248d6afd63f/1/lKTi_J7qzc9bD1CrkyhM07CUIXE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/3ff7a7-27cb-4072-b33b-0248d6afd63f/1/lKTi_J7qzc9bD1CrkyhM07CUIXE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:98:31:b9:d8:07:7f:ec:8b:d2:2e:74:86:fe:5e:ff:66:e3:
a6:df:7a:ca:27:f6:f0:61:be:4f:31:6d:40:07:65:36:de:c6:
57:4e:4b:72:d0:90:96:b7:7c:24:28:50:2a:9f:66:93:dd:84:
c2:03:ea:e5:97:29:10:5b:76:5e:e9:9c:f8:50:25:2e:11:0b:
51:2a:ac:1e:4d:a1:b5:e3:85:90:1d:16:fb:45:43:ba:9e:61:
3a:a9:7f:e7:99:80:0d:c5:6a:c8:38:49:33:06:64:70:de:08:
85:ea:e1:65:90:b5:3c:5c:1e:96:cd:c2:4f:b7:b3:c3:a6:ac:
f7:32:37:e7:68:65:8f:14:e2:73:9a:7f:26:cc:10:50:58:d9:
71:68:ff:16:bb:a1:a4:95:bd:fb:40:3b:ce:c5:03:a6:47:a8:
7e:1e:17:4a:93:48:f1:1d:14:96:05:cd:30:07:10:bd:86:50:
12:5b:af:ce:a2:95:9c:33:a8:d8:86:6c:c1:2f:3b:9e:e4:6e:
13:36:d2:05:06:91:82:0d:00:38:6f:a3:dc:a5:a2:b5:16:f9:
03:3e:3b:9b:06:dd:5a:f8:37:bc:54:1b:c7:5d:9e:5c:34:e0:
fe:9d:b2:3c:87:10:a9:47:60:08:81:03:57:f6:d6:db:68:25:
3f:60:26:51
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04ZffREvK7sXiCUQnnf87IMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk0YTRlMmZjOWVlYWNkY2Y1YjBmNTBhYjkzMjg0Y2QzYjA5
NDIxNzEwHhcNMjYwMzI5MDcwMTM5WhcNMjYwMzMwMDcwMTM5WjAzMTEwLwYDVQQD
EygzNWYwN2YxMDY0MjFkNmMxODU1MDhhYWVkM2UzOWU3Mjg5ZjkyM2UxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtX65G6A0CoOB2WcfSvHStIwkIW6z
1I5usPWbyJJAVb2n+trMQ2CBNYPd/mpefqHjcsGwF7hDV9jRS2eCxGqGSEvvuMcQ
P5Oja8JopKl8WCJdZxO/SsoYwuCblk9OrPzMlP4MPqOF/TgkhKsUg708NDA9leWk
bV0PtXmWiQG3HgWNTDp8GBMg9ZX+PxmN1Qo6dGwuX157hh/bMMVmjNmCu0pVBCgf
6oCCYf5gGJQDTU7jAZfCKlClusKisY4KYEiGTmqp4E95Z9hkwtFdJx/HUzIcck90
MTzNgKb6An3LZGLF7N7f1SCFHj7P3dElmGaqzboBzXVpcsJ3iA1eJeRFiQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDXwfxBkIdbBhVCKrtPjnnKJ+SPhMB8GA1UdIwQY
MBaAFJSk4vye6s3PWw9Qq5MoTNOwlCFxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbEtUaV9KN3F6YzliRDFDcmt5aE0wN0NVSVhFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC8zZmY3YTctMjdjYi00MDcyLWIzM2It
MDI0OGQ2YWZkNjNmLzEvbEtUaV9KN3F6YzliRDFDcmt5aE0wN0NVSVhFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZC8zZmY3YTctMjdjYi00MDcyLWIzM2ItMDI0OGQ2YWZkNjNm
LzEvbEtUaV9KN3F6YzliRDFDcmt5aE0wN0NVSVhFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg5gxudgH
f+yL0i50hv5e/2bjpt96yif28GG+TzFtQAdlNt7GV05LctCQlrd8JChQKp9mk92E
wgPq5ZcpEFt2Xumc+FAlLhELUSqsHk2hteOFkB0W+0VDup5hOql/55mADcVqyDhJ
MwZkcN4IherhZZC1PFwels3CT7ezw6as9zI352hljxTic5p/JswQUFjZcWj/Fruh
pJW9+0A7zsUDpkeofh4XSpNI8R0UlgXNMAcQvYZQEluvzqKVnDOo2IZswS87nuRu
EzbSBQaRgg0AOG+j3KWitRb5Az47mwbdWvg3vFQbx12eXDTg/p2yPIcQqUdgCIED
V/bW22glP2AmUQ==
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:39:06 2026 by rpki-client