Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/f61db6-0192-4fff-aa47-f2bbbecc5a6e/1/LUrgdxLkhC-A-oEAnTNbxICeZB0.mft
File: LUrgdxLkhC-A-oEAnTNbxICeZB0.mft (raw, json)
Hash identifier: EPyfWlNkvTy5O0I2oaFzKl1afOPkFIsasnX/d0km8ps=
Subject key identifier: 31:1A:FD:57:ED:6D:34:FE:5F:D9:C1:4F:A9:A7:F9:98:B5:E5:4D:42
Authority key identifier: 2D:4A:E0:77:12:E4:84:2F:80:FA:81:00:9D:33:5B:C4:80:9E:64:1D
Certificate issuer: /CN=2d4ae07712e4842f80fa81009d335bc4809e641d
Certificate serial: 019D39AF5D28990E5DE68D9B110C24CF67C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LUrgdxLkhC-A-oEAnTNbxICeZB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/f61db6-0192-4fff-aa47-f2bbbecc5a6e/1/LUrgdxLkhC-A-oEAnTNbxICeZB0.mft
Manifest number: 08FC
Signing time: Sun 29 Mar 2026 13:01:27 +0000
Manifest this update: Sun 29 Mar 2026 13:01:27 +0000
Manifest next update: Mon 30 Mar 2026 13:01:27 +0000
Files and hashes: 1: LUrgdxLkhC-A-oEAnTNbxICeZB0.crl (hash: /h7aYIAeDrLgh1742EQesEqtobwg3BooZGX26AoYgPI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/f61db6-0192-4fff-aa47-f2bbbecc5a6e/1/LUrgdxLkhC-A-oEAnTNbxICeZB0.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/f61db6-0192-4fff-aa47-f2bbbecc5a6e/1/LUrgdxLkhC-A-oEAnTNbxICeZB0.mft
rsync://rpki.ripe.net/repository/DEFAULT/LUrgdxLkhC-A-oEAnTNbxICeZB0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:af:5d:28:99:0e:5d:e6:8d:9b:11:0c:24:cf:67:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d4ae07712e4842f80fa81009d335bc4809e641d
Validity
Not Before: Mar 29 13:01:27 2026 GMT
Not After : Mar 30 13:01:27 2026 GMT
Subject: CN=311afd57ed6d34fe5fd9c14fa9a7f998b5e54d42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:79:b9:52:9c:59:df:10:25:80:7b:59:2f:02:
d4:83:eb:04:d2:ab:b2:6e:30:f2:50:48:a1:42:e1:
69:9e:6f:70:93:bf:3d:46:8b:62:32:4c:fc:90:c0:
c1:df:8b:2d:72:7e:d5:34:45:1a:40:0b:de:13:ed:
da:f4:65:4a:0c:95:84:ec:a4:bd:41:bb:bc:d3:e9:
f9:07:0a:0a:75:73:2f:ee:83:52:c0:cd:0d:a1:b6:
cb:e4:1b:3a:55:b1:91:d3:a5:90:18:9e:04:a5:1f:
76:11:a1:d6:67:d7:d0:f0:08:e9:58:49:3d:4e:05:
c8:a1:6e:fd:bd:fe:1d:3a:3a:00:f2:cf:c5:ad:9b:
48:ec:1e:b1:a8:4c:b6:d5:b2:03:ca:d3:d4:f5:78:
75:57:6e:e5:56:90:f7:83:1b:41:26:05:66:67:d1:
64:a8:eb:fc:2f:df:2c:62:f2:29:84:89:f9:40:ff:
1e:27:85:9e:59:2f:18:88:6b:3c:17:05:62:10:33:
9e:87:66:9f:42:3f:da:2f:a4:a3:a3:36:cc:fd:55:
93:07:8f:b2:41:e3:44:e2:9e:25:e7:c2:12:b1:2f:
5a:d1:2b:a8:1d:d1:70:81:7a:b6:21:ea:39:9c:80:
db:62:af:c5:8b:79:9d:fb:0e:71:cf:7e:95:50:4d:
64:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:1A:FD:57:ED:6D:34:FE:5F:D9:C1:4F:A9:A7:F9:98:B5:E5:4D:42
X509v3 Authority Key Identifier:
keyid:2D:4A:E0:77:12:E4:84:2F:80:FA:81:00:9D:33:5B:C4:80:9E:64:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LUrgdxLkhC-A-oEAnTNbxICeZB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/f61db6-0192-4fff-aa47-f2bbbecc5a6e/1/LUrgdxLkhC-A-oEAnTNbxICeZB0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/f61db6-0192-4fff-aa47-f2bbbecc5a6e/1/LUrgdxLkhC-A-oEAnTNbxICeZB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:6b:a4:4e:4b:25:d4:d3:1b:d6:2c:30:10:c0:12:4d:de:63:
04:25:27:43:94:fe:2b:d7:7e:1a:09:c9:bc:8f:b4:18:e1:cb:
d0:e7:bb:38:7c:aa:7b:e7:f4:09:e1:62:2d:54:40:52:ec:f3:
65:73:5f:e3:0c:29:5b:ff:19:b2:7c:cf:3c:c0:06:cc:81:77:
73:14:3c:06:b6:78:81:13:96:08:19:8d:e7:3e:38:a1:cd:37:
12:eb:29:fd:54:90:fd:81:75:b2:88:e4:06:8a:d9:0b:c4:a7:
79:9a:7b:b7:4e:27:e0:76:3f:ef:e5:13:49:9e:d2:b3:87:59:
03:13:ae:ae:a4:0c:09:2d:a9:bc:9c:ba:e1:93:fb:81:7c:63:
ca:d0:b1:e8:63:0a:64:61:4b:87:91:bc:08:7a:99:97:68:0d:
ce:9a:28:14:c3:9d:b6:36:1e:ec:e7:2a:a5:98:df:4e:3a:3e:
03:e9:0a:71:72:84:03:d0:2d:5c:0b:e8:e5:bc:f2:cb:84:7b:
2a:ef:bc:88:82:1e:3e:3b:16:9c:37:88:bd:52:35:8d:4d:20:
7e:3f:02:e1:62:dc:27:77:a9:fc:23:97:d7:da:16:f2:cb:72:
80:b2:ff:54:52:4b:92:29:a4:02:1b:4a:38:36:48:ad:bc:3c:
e9:02:f1:51
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ05r10omQ5d5o2bEQwkz2fEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJkNGFlMDc3MTJlNDg0MmY4MGZhODEwMDlkMzM1YmM0ODA5
ZTY0MWQwHhcNMjYwMzI5MTMwMTI3WhcNMjYwMzMwMTMwMTI3WjAzMTEwLwYDVQQD
EygzMTFhZmQ1N2VkNmQzNGZlNWZkOWMxNGZhOWE3Zjk5OGI1ZTU0ZDQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt3m5UpxZ3xAlgHtZLwLUg+sE0quy
bjDyUEihQuFpnm9wk789RotiMkz8kMDB34stcn7VNEUaQAveE+3a9GVKDJWE7KS9
Qbu80+n5BwoKdXMv7oNSwM0NobbL5Bs6VbGR06WQGJ4EpR92EaHWZ9fQ8AjpWEk9
TgXIoW79vf4dOjoA8s/FrZtI7B6xqEy21bIDytPU9Xh1V27lVpD3gxtBJgVmZ9Fk
qOv8L98sYvIphIn5QP8eJ4WeWS8YiGs8FwViEDOeh2afQj/aL6SjozbM/VWTB4+y
QeNE4p4l58ISsS9a0SuoHdFwgXq2Ieo5nIDbYq/Fi3md+w5xz36VUE1kVwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDEa/VftbTT+X9nBT6mn+Zi15U1CMB8GA1UdIwQY
MBaAFC1K4HcS5IQvgPqBAJ0zW8SAnmQdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTFVyZ2R4TGtoQy1BLW9FQW5UTmJ4SUNlWkIwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC9mNjFkYjYtMDE5Mi00ZmZmLWFhNDct
ZjJiYmJlY2M1YTZlLzEvTFVyZ2R4TGtoQy1BLW9FQW5UTmJ4SUNlWkIwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OC9mNjFkYjYtMDE5Mi00ZmZmLWFhNDctZjJiYmJlY2M1YTZl
LzEvTFVyZ2R4TGtoQy1BLW9FQW5UTmJ4SUNlWkIwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO2ukTksl
1NMb1iwwEMASTd5jBCUnQ5T+K9d+GgnJvI+0GOHL0Oe7OHyqe+f0CeFiLVRAUuzz
ZXNf4wwpW/8ZsnzPPMAGzIF3cxQ8BrZ4gROWCBmN5z44oc03Eusp/VSQ/YF1sojk
BorZC8SneZp7t04n4HY/7+UTSZ7Ss4dZAxOurqQMCS2pvJy64ZP7gXxjytCx6GMK
ZGFLh5G8CHqZl2gNzpooFMOdtjYe7OcqpZjfTjo+A+kKcXKEA9AtXAvo5bzyy4R7
Ku+8iIIePjsWnDeIvVI1jU0gfj8C4WLcJ3ep/COX19oW8stygLL/VFJLkimkAhtK
ODZIrbw86QLxUQ==
-----END CERTIFICATE-----
Generated at Sun Mar 29 16:27:40 2026 by rpki-client