Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/1eb803-278a-46f4-b4be-a2eff3f1acd5/1/lGEMh1DDN98EecWg61t4tJoX_z4.mft
File: lGEMh1DDN98EecWg61t4tJoX_z4.mft (raw, json)
Hash identifier: wYlFhn7sc6FNC6FoSrSgQqOTcVI73iDGM3VxJeC1rSI=
Subject key identifier: 36:B4:69:92:D6:88:5A:DD:21:46:CF:5F:91:1D:EB:78:C5:F6:12:C6
Authority key identifier: 94:61:0C:87:50:C3:37:DF:04:79:C5:A0:EB:5B:78:B4:9A:17:FF:3E
Certificate issuer: /CN=94610c8750c337df0479c5a0eb5b78b49a17ff3e
Certificate serial: 019D3940ADE83466F6E677433BCF61160D52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lGEMh1DDN98EecWg61t4tJoX_z4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/1eb803-278a-46f4-b4be-a2eff3f1acd5/1/lGEMh1DDN98EecWg61t4tJoX_z4.mft
Manifest number: 0711
Signing time: Sun 29 Mar 2026 11:00:33 +0000
Manifest this update: Sun 29 Mar 2026 11:00:33 +0000
Manifest next update: Mon 30 Mar 2026 11:00:33 +0000
Files and hashes: 1: lGEMh1DDN98EecWg61t4tJoX_z4.crl (hash: EeXTrlDu7vz4zjlp26zW/OkmEdZZDv4ua1WM0PzREJw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/1eb803-278a-46f4-b4be-a2eff3f1acd5/1/lGEMh1DDN98EecWg61t4tJoX_z4.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/1eb803-278a-46f4-b4be-a2eff3f1acd5/1/lGEMh1DDN98EecWg61t4tJoX_z4.mft
rsync://rpki.ripe.net/repository/DEFAULT/lGEMh1DDN98EecWg61t4tJoX_z4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:40:ad:e8:34:66:f6:e6:77:43:3b:cf:61:16:0d:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94610c8750c337df0479c5a0eb5b78b49a17ff3e
Validity
Not Before: Mar 29 11:00:33 2026 GMT
Not After : Mar 30 11:00:33 2026 GMT
Subject: CN=36b46992d6885add2146cf5f911deb78c5f612c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:e1:0d:47:77:06:42:9f:0f:b0:a2:8b:e7:b7:
8b:34:08:e5:4b:50:c7:8a:bc:72:98:2a:97:c5:0d:
dc:c0:4f:65:63:92:e3:a8:b5:6d:36:d3:98:d5:ca:
cf:28:e2:5a:c7:51:11:84:d4:4e:39:7f:3d:cc:5f:
65:23:23:21:a0:9e:31:5e:ea:b2:43:bf:49:88:85:
10:42:da:88:e7:21:8d:5f:a8:76:de:d9:66:30:98:
6a:ab:94:cc:19:44:28:fb:80:f3:17:a6:62:f1:45:
94:1e:2b:45:b5:35:da:8b:e1:40:6e:03:57:41:fd:
48:03:b8:42:ba:a6:ac:0b:07:b7:99:db:be:c2:ba:
c8:6e:01:87:11:b7:7c:12:13:b1:64:76:d1:70:da:
98:10:aa:ea:57:bc:68:39:ec:62:87:10:54:b2:b7:
48:34:0a:7a:45:e4:e6:8a:5d:c2:34:b9:34:4a:e0:
b9:b1:bb:4c:4c:f5:06:4e:69:03:f7:f0:5b:79:86:
71:22:75:89:ff:e3:86:31:91:cd:32:f4:0e:e6:51:
84:2e:f2:fe:d1:7f:73:d1:34:9e:bb:d7:90:d5:cc:
c7:19:ac:80:02:16:65:be:cc:b5:fe:52:38:4a:3a:
ea:55:30:ff:2c:43:c7:a0:6c:61:00:f4:3d:7b:0c:
d8:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:B4:69:92:D6:88:5A:DD:21:46:CF:5F:91:1D:EB:78:C5:F6:12:C6
X509v3 Authority Key Identifier:
keyid:94:61:0C:87:50:C3:37:DF:04:79:C5:A0:EB:5B:78:B4:9A:17:FF:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lGEMh1DDN98EecWg61t4tJoX_z4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/1eb803-278a-46f4-b4be-a2eff3f1acd5/1/lGEMh1DDN98EecWg61t4tJoX_z4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/1eb803-278a-46f4-b4be-a2eff3f1acd5/1/lGEMh1DDN98EecWg61t4tJoX_z4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:a4:cb:17:67:29:de:31:34:c7:66:70:1b:3a:ef:3a:df:69:
d3:80:87:98:79:8b:55:f0:da:8f:b2:23:03:ad:ba:7a:a1:c3:
70:f0:46:35:83:eb:af:9a:48:89:3d:c7:3f:2f:5e:7b:e9:01:
cb:4c:93:3f:46:b5:a0:32:96:70:88:ac:f5:0c:6d:bb:29:33:
f9:08:30:95:86:11:ad:34:e9:96:76:06:45:db:3a:0a:73:01:
97:5d:2e:b4:7b:36:cf:8f:df:e0:48:90:8b:fe:b4:77:f5:74:
c0:a1:a7:6d:17:e5:21:f1:e4:5b:0c:58:85:45:dc:78:b0:bb:
5d:c5:f4:5a:f7:72:63:e5:d8:1e:f5:8b:a0:ea:c2:2b:13:8b:
48:e1:75:6b:bb:3a:24:d9:fe:5f:6a:c6:ba:89:de:91:0a:42:
96:5a:0c:4f:d1:ea:a3:3f:40:9a:44:f1:8e:9d:71:c3:e0:ab:
32:c9:8f:f7:70:46:51:21:5b:8f:47:b6:15:56:d8:4f:80:fd:
df:6e:33:85:5a:90:d3:b2:52:53:08:c1:4b:18:79:05:00:08:
18:e6:8e:69:27:e9:3d:5d:03:3b:d3:9a:61:92:87:42:a7:5e:
26:3b:e4:40:47:60:16:1c:39:86:6b:87:ad:b9:5d:1f:3c:97:
20:09:b4:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:05:50 2026 by rpki-client