Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/072b46-0da1-42d2-899c-a0bda8af756a/1/O_LCDaTWMBgu7jNFrZ0cStkXDVA.mft
File: O_LCDaTWMBgu7jNFrZ0cStkXDVA.mft (raw, json)
Hash identifier: x1+1NoWTLTCHUihxxxoFz4RYMMpcjPhI8yt1jxUqhH8=
Subject key identifier: 6F:56:75:BE:98:BD:8D:49:26:40:C7:3A:64:08:EF:CD:E6:FC:09:58
Authority key identifier: 3B:F2:C2:0D:A4:D6:30:18:2E:EE:33:45:AD:9D:1C:4A:D9:17:0D:50
Certificate issuer: /CN=3bf2c20da4d630182eee3345ad9d1c4ad9170d50
Certificate serial: 019D37C07C8C6909FABE3ACE898C4CEA91B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O_LCDaTWMBgu7jNFrZ0cStkXDVA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/072b46-0da1-42d2-899c-a0bda8af756a/1/O_LCDaTWMBgu7jNFrZ0cStkXDVA.mft
Manifest number: 12CD
Signing time: Sun 29 Mar 2026 04:00:54 +0000
Manifest this update: Sun 29 Mar 2026 04:00:54 +0000
Manifest next update: Mon 30 Mar 2026 04:00:54 +0000
Files and hashes: 1: O_LCDaTWMBgu7jNFrZ0cStkXDVA.crl (hash: W+18KegwE7jwLgFADfteovDmt9/grMf5a07qg0syAIc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/072b46-0da1-42d2-899c-a0bda8af756a/1/O_LCDaTWMBgu7jNFrZ0cStkXDVA.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/072b46-0da1-42d2-899c-a0bda8af756a/1/O_LCDaTWMBgu7jNFrZ0cStkXDVA.mft
rsync://rpki.ripe.net/repository/DEFAULT/O_LCDaTWMBgu7jNFrZ0cStkXDVA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:7c:8c:69:09:fa:be:3a:ce:89:8c:4c:ea:91:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3bf2c20da4d630182eee3345ad9d1c4ad9170d50
Validity
Not Before: Mar 29 04:00:54 2026 GMT
Not After : Mar 30 04:00:54 2026 GMT
Subject: CN=6f5675be98bd8d492640c73a6408efcde6fc0958
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:a3:cb:01:ba:c2:7e:93:47:64:32:ef:64:e7:
4e:ae:ca:d6:f3:52:f0:74:44:fb:0b:5a:c2:c4:f2:
91:cd:92:ff:a2:af:bf:32:97:0d:42:c4:72:13:3d:
64:41:d9:9c:b4:eb:56:08:68:6d:bb:17:e6:b0:1c:
8a:bc:91:93:d1:e4:53:ca:e5:73:48:96:a2:b3:15:
f1:77:9f:f3:2e:aa:c4:46:ba:57:3a:07:ff:eb:b4:
24:23:e0:21:40:ed:38:0e:f1:29:eb:1c:57:1b:93:
49:9a:26:ef:fd:3e:fe:8e:aa:10:c3:2f:87:3e:bf:
e4:39:1d:20:e6:eb:18:37:67:7d:89:d0:22:fa:46:
a6:de:a6:63:a9:dc:ce:22:8d:1f:f7:89:56:d2:3a:
bb:3d:30:b1:1e:e1:49:8a:65:60:e1:4d:80:9d:01:
dc:2d:da:bb:d6:37:f2:a9:c3:22:1e:d8:49:df:75:
16:a7:4b:19:c5:a2:4e:73:2c:64:16:e1:0b:dc:2c:
73:70:b5:fc:25:07:d0:3d:b4:ed:a9:9c:8f:45:26:
b2:84:ea:6f:fb:33:48:ea:63:2c:4f:c6:67:59:04:
4e:86:07:2a:9f:6a:d7:3e:f6:09:cd:0c:aa:3f:0f:
db:2f:d1:b4:5f:c9:9a:dc:63:94:d3:65:e0:26:1e:
ef:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:56:75:BE:98:BD:8D:49:26:40:C7:3A:64:08:EF:CD:E6:FC:09:58
X509v3 Authority Key Identifier:
keyid:3B:F2:C2:0D:A4:D6:30:18:2E:EE:33:45:AD:9D:1C:4A:D9:17:0D:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O_LCDaTWMBgu7jNFrZ0cStkXDVA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/072b46-0da1-42d2-899c-a0bda8af756a/1/O_LCDaTWMBgu7jNFrZ0cStkXDVA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/072b46-0da1-42d2-899c-a0bda8af756a/1/O_LCDaTWMBgu7jNFrZ0cStkXDVA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:f6:f0:c7:4e:51:73:c2:f5:6b:15:34:19:d3:97:c1:c6:61:
2c:79:92:99:77:d7:49:00:04:4e:5d:97:98:04:04:6b:6b:0f:
71:94:ce:5d:7f:c8:d5:e6:0e:98:56:fb:f1:cc:df:d9:68:e5:
74:83:dc:63:a2:ec:3f:79:6b:d4:76:bc:02:4f:9d:b6:fa:bc:
aa:93:80:7c:3e:5a:ae:42:5c:60:24:97:31:3a:62:7c:8f:8f:
be:e6:69:bd:07:62:2b:86:89:09:d6:db:0b:a2:f1:44:ab:3a:
50:28:18:14:2d:bf:40:36:9a:cd:63:85:95:c1:a7:0e:ca:b0:
b2:9c:d9:2b:c9:de:41:90:24:1e:44:fc:4e:b1:8b:fd:44:58:
34:bc:e3:fd:2c:23:3d:24:1d:08:24:93:76:c0:23:ea:19:7c:
39:a6:68:52:54:1d:48:10:81:46:32:f4:6d:44:d8:c0:75:ab:
1a:3d:50:53:e7:b3:22:ec:5a:45:63:5f:38:76:b5:41:ba:f5:
98:8a:70:20:8f:ae:dd:17:80:41:36:c4:a1:7d:49:8d:62:16:
26:ce:6c:1f:03:8c:89:4d:0e:e9:bf:30:e5:d5:c4:3e:04:70:
a8:1d:8d:84:b7:97:cf:ec:d5:99:08:68:9b:f1:b9:b1:e4:d6:
1c:f3:0e:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:31:05 2026 by rpki-client