Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/2823dd-25a1-44a0-bfc1-cbbd08ad3ec2/1/lUz3IcCMjpvFJC1WGWZ3IXNQRVw.mft
File: lUz3IcCMjpvFJC1WGWZ3IXNQRVw.mft (raw, json)
Hash identifier: ledq1B+PhgTzTMYDii3Gsi/hBc/vq0VraqmU/8IxaZk=
Subject key identifier: 37:2F:94:7A:0E:66:A3:2D:AE:8C:29:07:05:57:90:8E:B7:CC:2B:11
Authority key identifier: 95:4C:F7:21:C0:8C:8E:9B:C5:24:2D:56:19:66:77:21:73:50:45:5C
Certificate issuer: /CN=954cf721c08c8e9bc5242d56196677217350455c
Certificate serial: 019D3866419D28895320A3158C26B005D790
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lUz3IcCMjpvFJC1WGWZ3IXNQRVw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/2823dd-25a1-44a0-bfc1-cbbd08ad3ec2/1/lUz3IcCMjpvFJC1WGWZ3IXNQRVw.mft
Manifest number: 08AE
Signing time: Sun 29 Mar 2026 07:01:58 +0000
Manifest this update: Sun 29 Mar 2026 07:01:58 +0000
Manifest next update: Mon 30 Mar 2026 07:01:58 +0000
Files and hashes: 1: lUz3IcCMjpvFJC1WGWZ3IXNQRVw.crl (hash: Y9ueznlHUj/bMw4XKb2qiBEWhfiU8jfC8i5SvmzPSag=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/2823dd-25a1-44a0-bfc1-cbbd08ad3ec2/1/lUz3IcCMjpvFJC1WGWZ3IXNQRVw.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/2823dd-25a1-44a0-bfc1-cbbd08ad3ec2/1/lUz3IcCMjpvFJC1WGWZ3IXNQRVw.mft
rsync://rpki.ripe.net/repository/DEFAULT/lUz3IcCMjpvFJC1WGWZ3IXNQRVw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:41:9d:28:89:53:20:a3:15:8c:26:b0:05:d7:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=954cf721c08c8e9bc5242d56196677217350455c
Validity
Not Before: Mar 29 07:01:58 2026 GMT
Not After : Mar 30 07:01:58 2026 GMT
Subject: CN=372f947a0e66a32dae8c29070557908eb7cc2b11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:a3:99:57:ff:7c:0a:bb:b1:ca:2a:13:8c:0a:
cd:a1:66:7e:27:69:3c:28:73:07:70:f6:fb:e1:21:
09:77:74:9d:fc:61:c2:fb:f6:ad:e0:f8:b9:de:4e:
95:75:57:6d:18:84:92:16:14:2d:b5:d3:04:eb:7f:
16:18:34:40:8d:77:8c:53:97:23:5a:e0:13:c6:1c:
1a:08:3c:cf:8c:9c:fa:c8:5d:b2:34:d3:18:e4:3b:
6e:64:52:c8:d8:76:9e:81:72:44:57:7f:21:dc:a6:
0f:1c:8a:fc:b5:be:d5:31:8e:9b:ad:18:85:b9:5d:
1e:85:65:7c:41:8d:bc:ef:e6:ed:80:a2:37:7e:d1:
74:73:ba:a9:5c:49:ef:ec:20:27:91:84:85:9e:7f:
48:27:2c:90:46:70:77:4b:d2:43:5a:0c:3f:c7:a3:
95:50:8b:73:fa:56:f8:c1:81:3e:5f:5f:29:af:03:
45:a7:c4:d4:e5:98:8e:e3:d9:ad:d5:a4:2c:11:84:
01:74:a9:d8:3a:89:86:c3:d4:02:f8:23:63:df:50:
1a:1e:40:a2:c4:b9:9c:42:28:9e:7f:64:1d:4a:99:
34:b8:65:7d:03:c2:7b:95:90:29:b6:53:32:c4:f3:
a2:c6:82:4e:c8:ac:bb:3c:c3:94:6d:75:cf:be:cb:
93:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:2F:94:7A:0E:66:A3:2D:AE:8C:29:07:05:57:90:8E:B7:CC:2B:11
X509v3 Authority Key Identifier:
keyid:95:4C:F7:21:C0:8C:8E:9B:C5:24:2D:56:19:66:77:21:73:50:45:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lUz3IcCMjpvFJC1WGWZ3IXNQRVw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/2823dd-25a1-44a0-bfc1-cbbd08ad3ec2/1/lUz3IcCMjpvFJC1WGWZ3IXNQRVw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/2823dd-25a1-44a0-bfc1-cbbd08ad3ec2/1/lUz3IcCMjpvFJC1WGWZ3IXNQRVw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:92:dd:e5:b2:2a:f3:00:c6:9f:18:4d:0a:42:40:a2:23:38:
6e:e9:58:34:5d:c6:12:44:11:aa:07:01:b6:af:9c:3a:c9:b3:
c5:15:dc:05:4d:99:2a:93:bb:a0:b3:20:62:83:ef:7e:d5:dc:
fb:af:cf:1f:f9:86:72:18:21:bf:4a:a5:4c:15:54:d8:1e:82:
85:f7:29:1d:6c:36:c2:bf:f8:04:44:35:3b:dc:91:39:62:53:
2e:aa:2e:58:ec:ee:bd:89:c9:01:b4:b5:1c:ea:d3:e6:31:0f:
72:df:25:44:e9:6b:3a:66:bd:48:cf:b9:a4:cf:4e:97:72:dc:
b6:94:40:0f:84:1c:58:ff:a6:ef:71:90:86:9b:25:b8:b0:bb:
bd:87:67:5a:fa:35:96:04:db:1a:17:b1:0d:ea:eb:31:b8:ae:
bd:9e:10:41:67:8e:c2:b9:32:79:66:ca:c8:3d:51:6a:a8:6c:
1c:05:da:7d:e5:ba:33:af:29:2b:35:38:e8:ff:47:8d:e0:b6:
e7:ba:c2:e1:63:9e:60:8e:57:d8:8e:c2:e3:3c:74:01:eb:b6:
79:db:a6:6d:8d:51:97:95:c3:d8:fb:86:11:a6:54:8f:12:d1:
9a:62:05:8f:43:d3:74:3a:c2:4c:5d:9d:dd:fb:67:10:d6:18:
cd:20:e9:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:49:27 2026 by rpki-client