Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/41a843-7524-455b-be22-2b170e95c2b7/1/LcKRuNts_d9t0qHVWyJtSUkqJwU.mft
File: LcKRuNts_d9t0qHVWyJtSUkqJwU.mft (raw, json)
Hash identifier: u0id1rVOmVvhJdT287wQJa+/eLT0ZG4mozUqxVgQ7WQ=
Subject key identifier: 5C:91:E7:A7:C0:11:3C:1B:95:F8:0A:67:D3:94:AA:F5:3A:CD:DB:93
Authority key identifier: 2D:C2:91:B8:DB:6C:FD:DF:6D:D2:A1:D5:5B:22:6D:49:49:2A:27:05
Certificate issuer: /CN=2dc291b8db6cfddf6dd2a1d55b226d49492a2705
Certificate serial: 019D389BB17D24F527B78699A6899C051EBE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LcKRuNts_d9t0qHVWyJtSUkqJwU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/41a843-7524-455b-be22-2b170e95c2b7/1/LcKRuNts_d9t0qHVWyJtSUkqJwU.mft
Manifest number: 137F
Signing time: Sun 29 Mar 2026 08:00:20 +0000
Manifest this update: Sun 29 Mar 2026 08:00:20 +0000
Manifest next update: Mon 30 Mar 2026 08:00:20 +0000
Files and hashes: 1: LcKRuNts_d9t0qHVWyJtSUkqJwU.crl (hash: FfUqvG9WiOLmWRqqtjI0PUMpBYvIpLslrbaqjaOycSE=)
2: OSxR7yWXlXGYKz7l57qWN2MkgtY.roa (hash: zf1564nEeAhmFYxKrhpVodFL6WhyuPNWB8KasXTcpQw=)
3: S4RQtuZRJfsn5pCSOhLo3GCLnRs.roa (hash: J969uvOOjMxmLam91mq14STKrrErN1aKZ7dPQDpgBQo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/41a843-7524-455b-be22-2b170e95c2b7/1/LcKRuNts_d9t0qHVWyJtSUkqJwU.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/41a843-7524-455b-be22-2b170e95c2b7/1/LcKRuNts_d9t0qHVWyJtSUkqJwU.mft
rsync://rpki.ripe.net/repository/DEFAULT/LcKRuNts_d9t0qHVWyJtSUkqJwU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9b:b1:7d:24:f5:27:b7:86:99:a6:89:9c:05:1e:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2dc291b8db6cfddf6dd2a1d55b226d49492a2705
Validity
Not Before: Mar 29 08:00:20 2026 GMT
Not After : Mar 30 08:00:20 2026 GMT
Subject: CN=5c91e7a7c0113c1b95f80a67d394aaf53acddb93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:16:b2:40:5a:7c:aa:e3:0a:bf:dd:3d:6a:0f:
88:a2:04:10:5c:72:6c:ab:7b:66:95:0e:e4:ab:bd:
42:2e:e4:4f:b6:08:da:37:c2:69:23:1c:13:73:99:
63:62:b5:69:6e:12:b8:7f:f6:6a:03:96:b3:73:a8:
d2:42:34:c5:e4:b3:7e:93:a9:b2:0f:e2:da:3f:70:
3c:53:a4:09:b3:83:0e:33:1a:ff:91:a2:a9:dd:ac:
f6:d6:f0:6f:b4:56:58:85:a8:7f:27:7c:a3:2b:c1:
d5:e9:c2:18:56:a6:6c:0c:84:6c:db:16:2f:cc:f6:
ca:42:7a:5a:af:02:66:c1:fd:d8:44:02:fb:c5:ba:
93:eb:24:b7:da:14:95:6e:d3:ee:60:95:dc:d6:d0:
29:06:22:63:3f:a0:8a:44:1c:08:91:a3:6d:78:da:
59:59:99:17:db:ad:57:1f:11:1e:9d:5d:37:d9:4e:
6a:32:fd:60:32:ea:c2:6f:e3:e3:2f:e2:09:f7:9e:
b0:03:c9:ff:97:15:20:00:b3:63:1f:fc:3f:af:c7:
a3:4e:87:20:19:20:e1:6e:39:fc:6d:f3:c3:6c:e7:
71:5c:4a:17:d1:86:b3:c3:94:d9:02:b2:c7:47:e4:
d7:98:7e:38:0b:6f:f8:86:be:fe:b9:f6:c0:c5:7d:
52:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:91:E7:A7:C0:11:3C:1B:95:F8:0A:67:D3:94:AA:F5:3A:CD:DB:93
X509v3 Authority Key Identifier:
keyid:2D:C2:91:B8:DB:6C:FD:DF:6D:D2:A1:D5:5B:22:6D:49:49:2A:27:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LcKRuNts_d9t0qHVWyJtSUkqJwU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/41a843-7524-455b-be22-2b170e95c2b7/1/LcKRuNts_d9t0qHVWyJtSUkqJwU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/41a843-7524-455b-be22-2b170e95c2b7/1/LcKRuNts_d9t0qHVWyJtSUkqJwU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:d1:9b:b1:cb:03:2b:d0:4f:b9:ee:24:2c:ae:66:6b:6c:32:
f1:6c:c2:77:4a:78:c9:cf:06:7f:79:91:8e:b2:fe:89:72:1e:
46:bf:1f:ee:f7:95:39:ff:8b:57:b8:ad:8f:96:01:c8:8b:8f:
2f:27:4d:4d:71:5a:47:d2:e6:cd:ff:a8:20:a2:ee:86:1f:4a:
99:ee:f4:56:75:64:79:c2:d6:4b:d9:15:b2:1d:f2:6e:d6:42:
46:28:69:5b:55:2f:5b:6b:03:2c:81:6e:33:4f:da:4a:7b:8b:
87:22:fa:dd:77:79:aa:90:33:0a:91:4e:00:ac:61:e5:4b:63:
9c:c2:06:6c:46:c0:ed:62:2c:e9:d0:ea:3d:18:e0:4a:e7:6a:
c1:50:84:eb:e1:f1:fd:d6:e2:e8:1d:26:cd:01:0d:23:37:56:
8a:0b:25:3c:e2:a9:90:ea:bc:68:f5:f4:67:2a:25:70:79:36:
22:a4:96:c9:07:65:3c:62:76:75:13:ca:5b:15:dc:0b:4c:3c:
f3:fd:99:15:61:06:87:b1:af:db:a4:08:fd:31:cf:48:17:21:
ac:90:9b:ac:cf:03:d6:55:5b:5c:76:32:6c:0e:72:82:5a:12:
a4:7e:69:88:7f:64:da:29:e8:e3:10:fa:1e:80:7c:6b:1a:ab:
7a:f6:7d:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:54:07 2026 by rpki-client