Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/59f376-dfbe-478a-b81e-f4979d50ee22/1/lpblIk_vUX9NzGbBQQNSzIq_si4.mft
File: lpblIk_vUX9NzGbBQQNSzIq_si4.mft (raw, json)
Hash identifier: aE/07fsjQZUfm7yCEgDqk9TH+hMICVy3ysOZBKhGRHI=
Subject key identifier: C6:4C:3A:47:3C:70:A0:95:F4:F9:4F:08:1E:38:B8:51:DD:9A:A0:9F
Authority key identifier: 96:96:E5:22:4F:EF:51:7F:4D:CC:66:C1:41:03:52:CC:8A:BF:B2:2E
Certificate issuer: /CN=9696e5224fef517f4dcc66c1410352cc8abfb22e
Certificate serial: 019D38664895ADCC7F631ECA51078A70898F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lpblIk_vUX9NzGbBQQNSzIq_si4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/59f376-dfbe-478a-b81e-f4979d50ee22/1/lpblIk_vUX9NzGbBQQNSzIq_si4.mft
Manifest number: 181B
Signing time: Sun 29 Mar 2026 07:02:00 +0000
Manifest this update: Sun 29 Mar 2026 07:02:00 +0000
Manifest next update: Mon 30 Mar 2026 07:02:00 +0000
Files and hashes: 1: lpblIk_vUX9NzGbBQQNSzIq_si4.crl (hash: JzZZM7f0bK4w7th+eGCygVeloABGY7Z8KKYjv1ZWsnA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/59f376-dfbe-478a-b81e-f4979d50ee22/1/lpblIk_vUX9NzGbBQQNSzIq_si4.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/59f376-dfbe-478a-b81e-f4979d50ee22/1/lpblIk_vUX9NzGbBQQNSzIq_si4.mft
rsync://rpki.ripe.net/repository/DEFAULT/lpblIk_vUX9NzGbBQQNSzIq_si4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:48:95:ad:cc:7f:63:1e:ca:51:07:8a:70:89:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9696e5224fef517f4dcc66c1410352cc8abfb22e
Validity
Not Before: Mar 29 07:02:00 2026 GMT
Not After : Mar 30 07:02:00 2026 GMT
Subject: CN=c64c3a473c70a095f4f94f081e38b851dd9aa09f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:b4:94:7f:fb:9c:aa:5a:fe:b4:ed:cb:b4:16:
78:0d:82:28:03:5d:db:b8:20:62:d3:18:81:23:ce:
4c:03:53:b3:de:1a:bf:0e:73:f1:be:1a:23:06:bc:
3f:4e:a6:ee:d4:d3:09:a2:a5:97:b4:7c:8b:54:f3:
1d:70:1b:99:bd:dc:d4:a7:9c:f6:bb:ef:34:ab:e4:
4f:af:53:3e:eb:b6:e4:02:98:d1:0e:d0:ca:67:31:
68:cf:a2:4b:e3:60:60:a3:3e:6f:87:d3:38:ec:70:
c0:ec:4b:3c:2d:1e:cf:14:8a:b0:a3:57:1b:08:b5:
a5:4c:43:be:c5:94:11:ce:1c:ce:d7:17:44:80:c6:
8f:ab:ec:02:88:0e:33:c8:18:3a:2d:84:cd:aa:fb:
49:d5:41:ed:53:41:82:39:70:0c:57:88:4f:e2:7f:
a5:2a:18:54:69:d4:ab:47:ad:82:9d:b6:f5:3e:f4:
3f:d2:ef:bb:e0:dd:7f:ae:ad:9a:56:cc:e5:75:b4:
66:39:2f:5b:ae:a3:8e:e6:99:ad:c9:0f:1a:4a:70:
26:cc:69:1c:cd:8b:63:c9:f1:64:16:42:79:d1:4a:
44:52:09:63:97:95:db:c3:59:c4:f1:68:e8:83:2b:
81:c6:53:65:b0:e4:e7:99:03:6c:59:34:ab:85:90:
b4:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:4C:3A:47:3C:70:A0:95:F4:F9:4F:08:1E:38:B8:51:DD:9A:A0:9F
X509v3 Authority Key Identifier:
keyid:96:96:E5:22:4F:EF:51:7F:4D:CC:66:C1:41:03:52:CC:8A:BF:B2:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lpblIk_vUX9NzGbBQQNSzIq_si4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/59f376-dfbe-478a-b81e-f4979d50ee22/1/lpblIk_vUX9NzGbBQQNSzIq_si4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/59f376-dfbe-478a-b81e-f4979d50ee22/1/lpblIk_vUX9NzGbBQQNSzIq_si4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:6a:85:80:48:e9:cf:da:a7:37:01:93:a1:c3:e6:6c:6b:d3:
c5:fb:a2:68:84:b9:0a:1c:ed:c7:de:ba:a7:f6:b3:d5:90:32:
9b:d7:54:6d:92:af:30:bd:2d:0c:9e:3b:e8:74:09:4d:04:c8:
80:01:6c:74:19:37:f0:d6:b4:cb:3b:de:7d:98:ae:be:e3:61:
a2:a9:38:63:6a:cf:37:d7:d7:eb:11:1b:42:86:51:55:a9:1f:
e7:6f:a6:2c:d4:98:cd:2b:44:59:7e:54:9b:a1:56:d2:9e:0a:
1b:a6:4b:55:61:90:f0:f4:f3:4a:ff:29:de:d6:d9:f1:74:45:
97:b6:03:ed:1b:e3:23:ca:ad:07:ee:4e:85:1a:13:51:c2:6d:
04:1d:3b:56:7a:42:8e:b9:d6:52:ab:8b:06:4f:06:3f:7b:69:
37:17:04:2d:12:6c:66:e1:d0:c9:f8:61:d2:00:40:1c:af:64:
e6:b0:9f:fd:09:80:bb:9d:ec:c1:d8:cf:fb:88:2c:e9:fd:ee:
22:9e:65:21:3d:ef:30:44:c6:52:86:8d:e8:5f:10:d3:54:e5:
5e:8d:1b:ee:41:8a:9f:c6:d0:50:74:0b:88:ee:19:3f:ba:87:
76:7c:22:f1:79:72:25:a3:16:1d:cb:e4:83:9a:96:6d:1a:ee:
e6:0d:5e:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:56:48 2026 by rpki-client