Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/c58c8c-5c6e-44e0-82af-e96de3112dea/1/LBMiAg7k5Zy1zT3nFlDGKv1MAic.mft
File: LBMiAg7k5Zy1zT3nFlDGKv1MAic.mft (raw, json)
Hash identifier: ofBiifMxjVODUnIz2q+cZPS3U3c4+NYvqTqo9tD096s=
Subject key identifier: 17:FC:6D:FD:3B:6A:0C:51:F6:D6:04:7E:4C:64:EC:04:0B:AD:F0:4D
Authority key identifier: 2C:13:22:02:0E:E4:E5:9C:B5:CD:3D:E7:16:50:C6:2A:FD:4C:02:27
Certificate issuer: /CN=2c1322020ee4e59cb5cd3de71650c62afd4c0227
Certificate serial: 019D386660136E18A053835CC42A5DA937C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LBMiAg7k5Zy1zT3nFlDGKv1MAic.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/c58c8c-5c6e-44e0-82af-e96de3112dea/1/LBMiAg7k5Zy1zT3nFlDGKv1MAic.mft
Manifest number: 0BA4
Signing time: Sun 29 Mar 2026 07:02:06 +0000
Manifest this update: Sun 29 Mar 2026 07:02:06 +0000
Manifest next update: Mon 30 Mar 2026 07:02:06 +0000
Files and hashes: 1: LBMiAg7k5Zy1zT3nFlDGKv1MAic.crl (hash: gnirzkr+T4Q+tsg1bgOPxtLJqJAzESB1LVLA3/EGCRI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/c58c8c-5c6e-44e0-82af-e96de3112dea/1/LBMiAg7k5Zy1zT3nFlDGKv1MAic.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/c58c8c-5c6e-44e0-82af-e96de3112dea/1/LBMiAg7k5Zy1zT3nFlDGKv1MAic.mft
rsync://rpki.ripe.net/repository/DEFAULT/LBMiAg7k5Zy1zT3nFlDGKv1MAic.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:60:13:6e:18:a0:53:83:5c:c4:2a:5d:a9:37:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c1322020ee4e59cb5cd3de71650c62afd4c0227
Validity
Not Before: Mar 29 07:02:06 2026 GMT
Not After : Mar 30 07:02:06 2026 GMT
Subject: CN=17fc6dfd3b6a0c51f6d6047e4c64ec040badf04d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:81:f8:f7:21:a0:8f:a6:2b:cf:b1:76:58:e0:
ce:fe:02:7b:0b:41:d1:34:e6:f7:9b:c0:02:d8:73:
3f:4b:94:22:c3:fb:be:a0:2a:62:35:80:a5:85:0e:
21:cd:47:7a:52:51:24:0b:4e:8c:5d:7f:da:22:f3:
ec:90:54:cc:1a:cd:03:09:9c:a4:98:7d:44:1a:0b:
b9:b2:c0:0d:7e:7c:a9:33:45:eb:57:8d:10:2f:8e:
9d:ca:d3:9b:fd:53:e2:45:5f:50:24:45:be:5f:74:
06:0e:07:be:3e:57:58:d5:76:2e:94:e5:02:51:21:
24:1a:8a:9d:44:a2:ab:a8:07:11:5e:2f:1c:86:71:
42:02:b9:72:dd:ba:8d:3d:4b:44:23:37:89:28:94:
84:5f:be:54:d6:f3:80:b0:89:9d:aa:62:2d:da:b5:
82:96:73:a7:a0:cd:b4:cc:c5:78:9e:35:9a:71:a8:
84:ea:33:25:1f:90:7f:e7:4f:e3:00:7a:5f:e8:2c:
4d:bf:aa:43:9a:4f:4c:82:c1:4f:d3:c9:e0:79:58:
19:6a:32:56:8f:49:ef:ea:a4:85:3e:0a:aa:a1:11:
44:94:59:5a:8c:73:45:cd:8d:f6:02:f4:b5:2e:c2:
27:4c:d1:49:bd:bb:28:81:88:72:f2:39:69:24:8d:
b2:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:FC:6D:FD:3B:6A:0C:51:F6:D6:04:7E:4C:64:EC:04:0B:AD:F0:4D
X509v3 Authority Key Identifier:
keyid:2C:13:22:02:0E:E4:E5:9C:B5:CD:3D:E7:16:50:C6:2A:FD:4C:02:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LBMiAg7k5Zy1zT3nFlDGKv1MAic.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/c58c8c-5c6e-44e0-82af-e96de3112dea/1/LBMiAg7k5Zy1zT3nFlDGKv1MAic.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/c58c8c-5c6e-44e0-82af-e96de3112dea/1/LBMiAg7k5Zy1zT3nFlDGKv1MAic.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:15:47:be:69:e2:4a:e3:14:04:ab:20:f7:40:2b:52:0c:b3:
cf:7a:43:26:20:f9:c9:2e:97:f6:cf:a9:af:ce:72:b1:41:89:
28:ec:67:0d:75:b3:d6:92:39:e3:db:40:fa:a2:0d:5e:cd:81:
22:65:3b:27:1c:b4:63:08:6a:68:b8:94:4d:97:5a:c9:73:6f:
3f:0d:08:2d:85:bf:97:cc:4b:f1:75:8a:3a:06:42:54:99:b7:
f4:08:7c:f7:94:d2:67:c4:1d:de:72:43:0f:ac:f9:44:7d:8d:
3f:85:85:93:38:97:f4:24:e8:90:62:dd:50:25:a2:6a:08:2c:
68:0d:db:17:25:35:57:72:d0:09:eb:60:3b:2d:61:ec:1a:f8:
0e:ff:45:37:74:c6:31:cc:7b:d1:26:d1:72:be:19:f8:e8:4d:
fb:c2:b2:d4:cb:17:31:47:29:7e:1f:b9:58:cd:d4:ff:87:06:
f2:15:f3:64:89:ac:8d:04:e5:dd:01:08:84:d0:0f:14:ef:b1:
44:b0:30:2b:ad:49:26:38:9a:92:5c:b3:a3:bf:ee:da:22:d4:
4f:e9:54:8c:23:96:88:b4:0c:c7:ce:bb:99:10:a4:40:cb:96:
85:d6:b7:ac:55:6f:e1:8e:59:bb:6e:7c:a7:ef:8b:02:06:aa:
51:0a:5d:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:25:27 2026 by rpki-client