Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/e4741b-f5b5-418f-8e96-154e599fd35f/1/lowsVdyOuZe_WRIdTC_9VESiLi0.mft
File: lowsVdyOuZe_WRIdTC_9VESiLi0.mft (raw, json)
Hash identifier: SzN6GJii9jJCLJ/7ndRZ30/yLUTdpYC8oKWFiDLZP64=
Subject key identifier: E2:C0:DC:D9:42:21:4D:BE:25:BF:A8:E8:63:D9:4A:96:9B:FE:37:39
Authority key identifier: 96:8C:2C:55:DC:8E:B9:97:BF:59:12:1D:4C:2F:FD:54:44:A2:2E:2D
Certificate issuer: /CN=968c2c55dc8eb997bf59121d4c2ffd5444a22e2d
Certificate serial: 019D3AC1AB95B50FC885EEB72878D162DA94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lowsVdyOuZe_WRIdTC_9VESiLi0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/e4741b-f5b5-418f-8e96-154e599fd35f/1/lowsVdyOuZe_WRIdTC_9VESiLi0.mft
Manifest number: 188D
Signing time: Sun 29 Mar 2026 18:01:04 +0000
Manifest this update: Sun 29 Mar 2026 18:01:04 +0000
Manifest next update: Mon 30 Mar 2026 18:01:04 +0000
Files and hashes: 1: lowsVdyOuZe_WRIdTC_9VESiLi0.crl (hash: DT3LmWVA4R0z4KMMVTH37dBJC+gC+Z/NOdDscNrSVsA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/e4741b-f5b5-418f-8e96-154e599fd35f/1/lowsVdyOuZe_WRIdTC_9VESiLi0.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/e4741b-f5b5-418f-8e96-154e599fd35f/1/lowsVdyOuZe_WRIdTC_9VESiLi0.mft
rsync://rpki.ripe.net/repository/DEFAULT/lowsVdyOuZe_WRIdTC_9VESiLi0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 16:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:c1:ab:95:b5:0f:c8:85:ee:b7:28:78:d1:62:da:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=968c2c55dc8eb997bf59121d4c2ffd5444a22e2d
Validity
Not Before: Mar 29 18:01:04 2026 GMT
Not After : Mar 30 18:01:04 2026 GMT
Subject: CN=e2c0dcd942214dbe25bfa8e863d94a969bfe3739
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:6a:33:d4:c3:05:f4:32:32:68:91:ac:9d:7b:
70:85:96:66:f2:08:82:88:5e:cd:e6:db:8d:17:00:
b8:1f:3a:75:01:ec:46:68:14:52:22:3e:79:6c:a8:
e9:c3:f5:71:91:fc:1f:a9:e3:ce:ed:72:45:65:d1:
50:2f:6b:81:15:b3:c5:10:b0:99:c2:9e:76:e4:b9:
52:bf:fa:4d:7d:ae:99:f4:8d:75:35:15:b9:fc:38:
59:8d:fb:d2:f1:d3:3c:4b:ef:da:9a:b1:62:e0:02:
c5:4f:32:f1:8a:e0:da:07:e3:12:84:e1:2f:7a:e4:
dc:95:a5:10:10:35:3b:37:23:21:66:9e:ae:d1:09:
43:bf:96:04:50:33:3d:e3:88:78:5b:65:b0:2c:d9:
96:11:93:7a:39:65:46:0f:9d:3e:7a:fa:71:c8:fa:
10:33:f6:5e:a0:8d:04:b5:7c:a9:92:7d:27:0b:bf:
eb:25:0c:1c:7b:24:8e:f9:9c:3f:0d:ff:cf:8e:70:
16:5b:83:61:33:34:1b:b1:24:1f:e6:1b:95:94:80:
b3:55:4a:42:e4:83:ce:2e:89:7e:c5:d9:63:03:39:
03:ee:b9:ec:30:af:8d:31:fb:9e:d2:a0:3e:b9:ee:
75:7f:bf:55:56:53:35:d4:6d:d4:b1:3f:fa:7d:2f:
6a:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:C0:DC:D9:42:21:4D:BE:25:BF:A8:E8:63:D9:4A:96:9B:FE:37:39
X509v3 Authority Key Identifier:
keyid:96:8C:2C:55:DC:8E:B9:97:BF:59:12:1D:4C:2F:FD:54:44:A2:2E:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lowsVdyOuZe_WRIdTC_9VESiLi0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/e4741b-f5b5-418f-8e96-154e599fd35f/1/lowsVdyOuZe_WRIdTC_9VESiLi0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/e4741b-f5b5-418f-8e96-154e599fd35f/1/lowsVdyOuZe_WRIdTC_9VESiLi0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:13:6e:84:bb:c5:ec:ff:e6:41:46:be:2a:60:f4:d0:4f:af:
54:eb:44:fd:e6:16:66:45:aa:a5:fa:79:17:df:21:cb:6c:fa:
e9:20:b0:a4:e6:32:e1:6a:a0:49:c3:97:87:2f:57:48:d3:24:
96:71:12:c8:7a:a1:17:31:fb:e7:49:bc:a5:aa:72:67:96:44:
50:c2:b5:52:d2:49:9a:e9:77:10:a4:67:ea:8f:b3:13:44:5d:
5f:96:e9:d0:c1:c5:fa:ee:0a:6f:03:6d:62:9f:e3:ba:7a:18:
26:0e:2a:8d:79:d3:b1:ae:44:b6:16:38:df:60:81:29:e7:95:
05:1f:db:44:6b:83:e8:9d:fa:8a:e2:b7:3c:51:d0:ed:14:e2:
59:ca:18:93:2d:4b:dd:01:05:f2:1d:28:99:f7:23:cd:5b:8e:
01:3e:f2:18:c2:01:7a:41:2f:fe:af:b1:98:56:c9:c5:48:b1:
f4:84:80:b7:46:83:8e:e4:3c:a7:8f:2b:81:fa:c8:9e:f3:6e:
14:89:59:ad:a8:ab:0a:7a:0f:09:11:7c:dc:25:2e:28:7e:36:
bc:84:f1:86:e6:5c:2a:36:8d:e8:c3:0d:49:be:42:5a:84:33:
e4:a4:a5:20:34:de:a2:71:8e:d6:b5:65:7f:10:e7:b4:34:22:
1e:e9:a0:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 22:06:07 2026 by rpki-client