Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/1b1be4-bcc0-4b21-80df-203dcbf7d3fc/1/lPzeRTBb0MyNJdfG7cpxkTb1YG0.mft
File: lPzeRTBb0MyNJdfG7cpxkTb1YG0.mft (raw, json)
Hash identifier: AQv0VF0MS4J98THBMLUFknydn4THVlyp91y9bQAxJa8=
Subject key identifier: 85:24:06:8C:9A:FA:E8:FC:EF:26:E5:A2:60:38:BE:09:26:DC:FA:1D
Authority key identifier: 94:FC:DE:45:30:5B:D0:CC:8D:25:D7:C6:ED:CA:71:91:36:F5:60:6D
Certificate issuer: /CN=94fcde45305bd0cc8d25d7c6edca719136f5606d
Certificate serial: 019D375280E65DF6D6D38340EBCF48315D07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lPzeRTBb0MyNJdfG7cpxkTb1YG0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/1b1be4-bcc0-4b21-80df-203dcbf7d3fc/1/lPzeRTBb0MyNJdfG7cpxkTb1YG0.mft
Manifest number: 163C
Signing time: Sun 29 Mar 2026 02:00:46 +0000
Manifest this update: Sun 29 Mar 2026 02:00:46 +0000
Manifest next update: Mon 30 Mar 2026 02:00:46 +0000
Files and hashes: 1: lPzeRTBb0MyNJdfG7cpxkTb1YG0.crl (hash: c0rF+zY8INHEl+m+ELOUHAonDH+ChYSffm553v8SiIg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/1b1be4-bcc0-4b21-80df-203dcbf7d3fc/1/lPzeRTBb0MyNJdfG7cpxkTb1YG0.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/1b1be4-bcc0-4b21-80df-203dcbf7d3fc/1/lPzeRTBb0MyNJdfG7cpxkTb1YG0.mft
rsync://rpki.ripe.net/repository/DEFAULT/lPzeRTBb0MyNJdfG7cpxkTb1YG0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:52:80:e6:5d:f6:d6:d3:83:40:eb:cf:48:31:5d:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94fcde45305bd0cc8d25d7c6edca719136f5606d
Validity
Not Before: Mar 29 02:00:46 2026 GMT
Not After : Mar 30 02:00:46 2026 GMT
Subject: CN=8524068c9afae8fcef26e5a26038be0926dcfa1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:87:3f:0f:22:8c:2e:9d:5f:9e:32:b8:6e:b3:
d0:ad:97:3f:3f:fa:4d:7a:d3:f7:7f:d3:dd:6c:73:
8a:e3:24:9e:8d:b4:38:54:32:6a:3d:ca:37:69:38:
5d:c5:89:f4:34:6a:e1:bb:99:5f:d9:67:ad:1b:a7:
dc:9f:f2:ae:ce:15:6a:12:bb:77:01:79:8a:1a:4c:
24:7c:6a:48:86:be:12:e8:57:df:81:2f:8a:6f:70:
6f:f9:8f:fa:84:03:fa:f8:8d:5a:6f:44:30:01:4b:
e0:d4:d2:7c:b7:b7:2b:2c:a0:f6:58:f4:d4:b1:fb:
dd:92:ad:fc:b7:21:8e:f5:0f:2d:f1:0c:32:da:78:
2a:e5:9a:4f:01:61:e2:ff:78:11:39:29:36:be:49:
8f:78:af:09:89:01:cc:e3:aa:db:25:df:51:d4:22:
8a:04:40:83:15:ce:f4:56:c6:33:40:e8:40:d1:e0:
23:e9:72:b9:59:ef:5c:a5:6b:ac:a3:1c:d6:0e:91:
38:cd:d3:00:27:6a:cc:e8:2a:35:00:76:1a:c2:c5:
d4:8f:85:20:64:12:52:8d:4e:c2:dc:96:b7:db:91:
3d:35:6a:e1:2a:75:7f:3a:ea:07:42:42:8c:f6:22:
74:bf:48:77:e1:09:80:ae:bf:13:17:b3:b7:9e:73:
95:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:24:06:8C:9A:FA:E8:FC:EF:26:E5:A2:60:38:BE:09:26:DC:FA:1D
X509v3 Authority Key Identifier:
keyid:94:FC:DE:45:30:5B:D0:CC:8D:25:D7:C6:ED:CA:71:91:36:F5:60:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lPzeRTBb0MyNJdfG7cpxkTb1YG0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/1b1be4-bcc0-4b21-80df-203dcbf7d3fc/1/lPzeRTBb0MyNJdfG7cpxkTb1YG0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/1b1be4-bcc0-4b21-80df-203dcbf7d3fc/1/lPzeRTBb0MyNJdfG7cpxkTb1YG0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e9:6c:60:de:5a:74:1d:ad:ff:e2:07:a5:ea:cf:fd:0c:8d:3e:
71:6e:7b:50:35:e2:c5:c6:51:93:fa:07:3d:e0:f8:bd:aa:56:
f6:72:bf:ed:a0:ce:64:df:27:58:19:e3:f1:c8:ad:67:79:d4:
a9:2f:ac:49:2c:38:7f:21:03:fc:d5:77:79:1d:a3:11:c3:26:
53:f1:a9:83:df:06:2c:4d:03:45:e7:81:b0:17:f5:a3:78:d0:
08:60:5a:c5:eb:19:12:30:4c:74:50:ae:8a:cc:2e:10:7a:85:
b9:b4:3d:43:79:dc:e9:03:8b:c7:d1:72:1c:7a:08:86:cf:99:
fb:86:f7:6f:39:31:f5:56:b2:81:39:b7:60:bd:80:bc:a0:2f:
de:bd:5e:14:f3:fb:98:4b:4d:bc:64:d0:fa:e8:ac:2d:b3:a6:
6f:1f:f6:6c:46:73:3e:2a:c2:30:4a:1a:3b:b5:7a:4e:73:e1:
17:bf:e1:f6:0f:49:97:88:dc:ff:f9:cf:b7:9b:61:c3:c6:6a:
de:7c:f1:85:00:d6:4c:33:68:39:13:c0:4b:2c:1e:92:9f:0a:
51:57:da:c5:16:79:38:72:7a:60:09:0c:94:0d:ee:13:49:4e:
44:d1:b6:84:b7:c6:10:a8:3d:a7:b0:60:5c:4a:4c:32:7e:2b:
c7:a2:cb:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:13:06 2026 by rpki-client