Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/35cf7b-0144-4507-bf39-cc68dc854e88/1/LuUlFj3AHc0wibsdz7CRLnftr5g.mft
File: LuUlFj3AHc0wibsdz7CRLnftr5g.mft (raw, json)
Hash identifier: ZVnYMQuKPoWqYsdQztU9nn+2cU8+lI88stQvBZIFogI=
Subject key identifier: 54:53:BA:43:EB:99:06:56:E9:DE:D1:76:87:6F:4F:4A:45:AB:0E:17
Authority key identifier: 2E:E5:25:16:3D:C0:1D:CD:30:89:BB:1D:CF:B0:91:2E:77:ED:AF:98
Certificate issuer: /CN=2ee525163dc01dcd3089bb1dcfb0912e77edaf98
Certificate serial: 019D3941AB4B617D8CA55F675ADB31C8F918
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LuUlFj3AHc0wibsdz7CRLnftr5g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/35cf7b-0144-4507-bf39-cc68dc854e88/1/LuUlFj3AHc0wibsdz7CRLnftr5g.mft
Manifest number: 188D
Signing time: Sun 29 Mar 2026 11:01:38 +0000
Manifest this update: Sun 29 Mar 2026 11:01:38 +0000
Manifest next update: Mon 30 Mar 2026 11:01:38 +0000
Files and hashes: 1: LuUlFj3AHc0wibsdz7CRLnftr5g.crl (hash: SLRTPSM3/9mB6z9Z36/c4Ki66lR17af19KyWnQtUFK4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/35cf7b-0144-4507-bf39-cc68dc854e88/1/LuUlFj3AHc0wibsdz7CRLnftr5g.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/35cf7b-0144-4507-bf39-cc68dc854e88/1/LuUlFj3AHc0wibsdz7CRLnftr5g.mft
rsync://rpki.ripe.net/repository/DEFAULT/LuUlFj3AHc0wibsdz7CRLnftr5g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:41:ab:4b:61:7d:8c:a5:5f:67:5a:db:31:c8:f9:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ee525163dc01dcd3089bb1dcfb0912e77edaf98
Validity
Not Before: Mar 29 11:01:38 2026 GMT
Not After : Mar 30 11:01:38 2026 GMT
Subject: CN=5453ba43eb990656e9ded176876f4f4a45ab0e17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:e1:92:ac:96:49:56:68:f4:69:ae:99:c2:d1:
4a:f2:54:f5:51:92:0f:b7:4a:cd:4b:5b:e6:11:54:
ef:8a:3f:10:d8:7c:6f:ff:49:28:75:c9:80:2c:74:
5a:ab:17:27:9e:60:d1:e6:53:e2:b8:bc:a8:69:d8:
ac:25:e7:22:13:9e:6e:05:d9:1a:95:3f:10:e8:55:
27:82:0f:3e:25:9f:19:c8:2e:49:58:fc:29:93:47:
d3:ff:64:8d:98:14:e1:71:be:a1:11:cd:60:09:a9:
49:a9:42:68:0c:7a:c4:cd:23:fa:10:a8:97:07:a3:
f2:0d:43:6a:f6:f7:58:92:b1:f2:f5:d8:df:0a:f4:
1d:8b:cd:7e:eb:98:a9:d7:70:73:f8:71:1d:3f:19:
be:eb:ef:7d:d3:3c:d9:6f:a2:22:fd:38:41:5d:e0:
4a:30:cd:4a:bc:48:86:61:cf:d0:99:d9:dc:b4:9d:
bc:e8:3f:32:6e:e1:d0:f8:77:c7:f6:bf:a0:70:c5:
81:cc:1f:f2:6e:f2:db:6d:4a:5a:4a:66:98:67:c6:
61:c2:3a:29:da:5a:50:b4:ab:9d:ad:f6:f2:21:0d:
a3:b8:bd:4b:c3:5e:2d:8e:78:2a:61:62:9e:e4:0f:
e0:df:fc:69:65:1b:27:59:f2:51:71:83:79:f2:b9:
20:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:53:BA:43:EB:99:06:56:E9:DE:D1:76:87:6F:4F:4A:45:AB:0E:17
X509v3 Authority Key Identifier:
keyid:2E:E5:25:16:3D:C0:1D:CD:30:89:BB:1D:CF:B0:91:2E:77:ED:AF:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LuUlFj3AHc0wibsdz7CRLnftr5g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/35cf7b-0144-4507-bf39-cc68dc854e88/1/LuUlFj3AHc0wibsdz7CRLnftr5g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/35cf7b-0144-4507-bf39-cc68dc854e88/1/LuUlFj3AHc0wibsdz7CRLnftr5g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:58:b0:29:cd:97:53:89:74:c7:51:b8:58:26:49:6a:d2:b3:
e8:5f:61:3f:e1:04:9b:1c:b2:c3:07:2e:e6:1e:93:55:a8:5f:
90:c7:de:be:96:f8:e4:91:65:79:24:2c:c6:0d:ea:58:58:f0:
d0:22:14:31:20:0f:36:21:a8:ee:6e:31:6a:05:1c:16:d0:a7:
b7:d6:6a:56:b9:55:99:a0:cb:ed:4b:87:d3:06:09:cf:12:c0:
05:f5:15:ec:a6:db:eb:fb:e1:b0:89:a2:a3:55:2e:e0:64:36:
6c:4d:b8:a0:77:5d:61:64:78:60:e6:10:80:b8:e7:ad:87:62:
b5:01:43:3e:31:36:3f:a1:6e:57:d1:75:4f:e4:f9:04:27:9b:
06:e8:de:f5:b1:78:ea:aa:61:c6:8e:f5:9b:d7:ba:22:60:76:
a5:18:1e:ff:f7:15:45:2c:49:b9:08:a4:75:14:d3:eb:d7:58:
0b:38:bd:8a:83:b3:c9:f1:80:8d:d2:dc:24:88:22:e6:78:79:
9c:4e:62:0b:4b:db:97:6e:aa:56:37:4d:29:8e:77:38:d3:4e:
63:8a:3e:c3:de:d7:e2:0b:b5:6e:12:55:04:5c:b6:c0:d9:35:
b1:f4:71:de:a5:fa:50:24:11:02:49:ce:bb:6a:76:14:81:0b:
e2:fd:6f:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:42:54 2026 by rpki-client