Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/c1a14c-a78c-40a7-bf53-d96ce42a113b/1/LUFhUhEtrymCRCUnsPlE5IKFgy4.mft
File: LUFhUhEtrymCRCUnsPlE5IKFgy4.mft (raw, json)
Hash identifier: 86j7+2Y1JVVRWkUCQx257DRXb9tQjlk68HhshdLE30c=
Subject key identifier: 16:C4:50:E5:85:5C:0D:2B:A5:41:DA:D4:7C:38:D7:0A:C4:AE:63:AC
Authority key identifier: 2D:41:61:52:11:2D:AF:29:82:44:25:27:B0:F9:44:E4:82:85:83:2E
Certificate issuer: /CN=2d416152112daf2982442527b0f944e48285832e
Certificate serial: 019D37C0CD2E1747C0BBAC1624C93EB53849
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LUFhUhEtrymCRCUnsPlE5IKFgy4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/c1a14c-a78c-40a7-bf53-d96ce42a113b/1/LUFhUhEtrymCRCUnsPlE5IKFgy4.mft
Manifest number: 0812
Signing time: Sun 29 Mar 2026 04:01:15 +0000
Manifest this update: Sun 29 Mar 2026 04:01:15 +0000
Manifest next update: Mon 30 Mar 2026 04:01:15 +0000
Files and hashes: 1: LUFhUhEtrymCRCUnsPlE5IKFgy4.crl (hash: SYtq4jkDV4HLlHlfZwidZ/OVYBhCMSs4EtS+GdI1RiA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/c1a14c-a78c-40a7-bf53-d96ce42a113b/1/LUFhUhEtrymCRCUnsPlE5IKFgy4.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/c1a14c-a78c-40a7-bf53-d96ce42a113b/1/LUFhUhEtrymCRCUnsPlE5IKFgy4.mft
rsync://rpki.ripe.net/repository/DEFAULT/LUFhUhEtrymCRCUnsPlE5IKFgy4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:cd:2e:17:47:c0:bb:ac:16:24:c9:3e:b5:38:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d416152112daf2982442527b0f944e48285832e
Validity
Not Before: Mar 29 04:01:15 2026 GMT
Not After : Mar 30 04:01:15 2026 GMT
Subject: CN=16c450e5855c0d2ba541dad47c38d70ac4ae63ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:2f:a5:a3:93:84:34:a8:f1:1b:1f:fc:0d:fd:
e2:a0:b1:e4:e3:d2:b2:dd:83:34:b9:73:3e:b8:8f:
d8:c4:39:e2:2e:73:52:10:ca:57:0c:bd:12:83:38:
5a:4d:64:89:a2:ca:c0:15:05:b7:5a:f1:66:bd:63:
53:50:55:e6:8a:1b:4f:0b:6f:de:0f:ac:d4:79:27:
8e:b4:f8:a4:2d:7a:31:2f:2f:7d:39:8c:7a:2b:f4:
ef:11:5d:84:85:4e:df:d8:07:66:31:a0:c7:90:17:
bd:6c:1f:a4:1b:d2:50:98:b4:c3:85:43:7e:85:09:
b9:2c:6c:6a:33:21:15:0a:ca:d0:a1:41:8e:f0:fe:
11:4e:ae:ed:5b:cd:a1:90:c5:e1:d2:6a:90:55:16:
9e:05:1c:6e:02:75:aa:01:c0:19:dd:f5:ce:a8:5c:
03:29:1c:4a:dc:e3:84:22:df:94:cd:77:fb:e4:a3:
b5:62:e8:b9:00:f8:03:0b:2e:96:69:4f:89:37:be:
cd:87:2c:7e:10:08:a9:43:c3:c0:df:e0:a1:50:65:
b5:40:b0:dd:77:dc:2d:82:c4:54:c8:36:d5:7b:ee:
2a:bf:f3:98:da:76:4a:80:98:b4:0c:a4:b2:c4:a1:
9c:bb:ef:2c:93:c6:a0:c2:7e:81:81:0f:f1:4d:41:
cf:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:C4:50:E5:85:5C:0D:2B:A5:41:DA:D4:7C:38:D7:0A:C4:AE:63:AC
X509v3 Authority Key Identifier:
keyid:2D:41:61:52:11:2D:AF:29:82:44:25:27:B0:F9:44:E4:82:85:83:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LUFhUhEtrymCRCUnsPlE5IKFgy4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/c1a14c-a78c-40a7-bf53-d96ce42a113b/1/LUFhUhEtrymCRCUnsPlE5IKFgy4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/c1a14c-a78c-40a7-bf53-d96ce42a113b/1/LUFhUhEtrymCRCUnsPlE5IKFgy4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:93:4c:a6:7b:76:3b:58:97:d2:a6:c5:f5:05:3c:1c:99:19:
95:b8:c0:e5:6a:1f:b4:3a:3c:04:3d:70:df:02:af:b9:15:8b:
4c:c1:f5:88:6e:60:7d:42:e4:be:de:20:6c:87:a7:15:90:76:
ef:23:6a:32:90:71:09:43:ac:9b:bc:2b:99:ff:31:36:e8:b5:
d4:28:31:75:9d:06:ac:fe:44:12:66:7d:2e:23:82:25:59:b3:
42:ad:17:e3:cb:45:d3:4a:1a:51:8b:1a:f0:f0:df:83:69:f1:
96:20:64:f1:7f:b0:84:8d:bc:a7:52:33:49:65:ea:f3:26:03:
21:16:17:8d:49:48:4f:37:e4:35:dc:8f:15:16:de:c4:b8:44:
a5:ec:5f:71:b4:20:ce:e1:74:ec:3b:00:c8:aa:3d:25:e0:e0:
7c:7b:c6:59:3f:f5:22:38:74:66:91:68:d0:3b:28:4b:10:7e:
bd:46:a9:08:b0:d0:59:3c:93:4d:d6:63:7f:7b:33:46:77:17:
49:f0:86:5f:25:7d:10:d9:2a:0d:c3:6f:23:c5:67:9b:e0:f5:
ba:d3:91:ee:8f:25:9c:18:a3:61:cc:29:a1:2f:42:44:f6:d5:
bc:bd:db:b7:d5:ba:3e:2e:37:d9:14:22:50:a9:d2:a9:8c:83:
89:21:55:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:39:06 2026 by rpki-client