Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/373e4c-d885-44fa-8c4b-a6eedfa9a4fc/1/lZCfz5xup2MAznHQlNMl9X1knL8.mft
File: lZCfz5xup2MAznHQlNMl9X1knL8.mft (raw, json)
Hash identifier: DulBHckCL7ckDSCdTrwF5ew0rkQLbHlvFVP/8JY817o=
Subject key identifier: 42:31:23:29:B5:AB:CD:58:DA:2D:1F:1A:48:AC:63:71:59:6A:11:3C
Authority key identifier: 95:90:9F:CF:9C:6E:A7:63:00:CE:71:D0:94:D3:25:F5:7D:64:9C:BF
Certificate issuer: /CN=95909fcf9c6ea76300ce71d094d325f57d649cbf
Certificate serial: 019D38656EF0C8BAF6BD339DBE27F27CC5F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lZCfz5xup2MAznHQlNMl9X1knL8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/373e4c-d885-44fa-8c4b-a6eedfa9a4fc/1/lZCfz5xup2MAznHQlNMl9X1knL8.mft
Manifest number: 15C6
Signing time: Sun 29 Mar 2026 07:01:04 +0000
Manifest this update: Sun 29 Mar 2026 07:01:04 +0000
Manifest next update: Mon 30 Mar 2026 07:01:04 +0000
Files and hashes: 1: lZCfz5xup2MAznHQlNMl9X1knL8.crl (hash: 15HQncP6jT/xtDnPgtDEOlmpON1uf+S0kslHonToD4k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/373e4c-d885-44fa-8c4b-a6eedfa9a4fc/1/lZCfz5xup2MAznHQlNMl9X1knL8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/373e4c-d885-44fa-8c4b-a6eedfa9a4fc/1/lZCfz5xup2MAznHQlNMl9X1knL8.mft
rsync://rpki.ripe.net/repository/DEFAULT/lZCfz5xup2MAznHQlNMl9X1knL8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:6e:f0:c8:ba:f6:bd:33:9d:be:27:f2:7c:c5:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95909fcf9c6ea76300ce71d094d325f57d649cbf
Validity
Not Before: Mar 29 07:01:04 2026 GMT
Not After : Mar 30 07:01:04 2026 GMT
Subject: CN=42312329b5abcd58da2d1f1a48ac6371596a113c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:6a:e9:58:f5:4a:bb:d9:79:41:99:d9:a0:e5:
c5:b4:01:a2:f2:68:05:f1:1a:aa:89:f9:15:bf:f8:
55:2e:f2:ed:26:1f:5a:18:f7:d0:59:d7:35:84:51:
24:63:5f:bf:0a:df:95:8f:1a:65:e8:b2:31:73:dd:
90:cd:c3:77:cd:6e:3c:ee:99:a9:64:db:65:e0:15:
b1:14:0e:01:d5:48:a1:ab:c1:f6:86:07:51:0e:ec:
8d:5c:ad:6f:3c:c4:ce:e5:6f:e3:0e:ce:96:ec:58:
75:ea:be:f7:99:01:b3:c3:d2:ea:66:76:88:68:87:
8c:ac:b8:ad:c4:f6:fa:a3:6e:5f:88:59:41:c0:db:
1b:ae:68:e3:86:fa:33:27:bd:2c:41:50:b0:45:73:
79:41:df:fd:fc:92:47:e5:2a:27:3f:10:25:c6:47:
35:bb:2c:dd:31:6f:66:69:b6:80:9b:5b:39:67:1b:
b7:16:3e:c9:30:52:6c:6d:5a:76:e5:df:6f:71:ce:
e5:56:c1:51:f0:ff:b0:88:e8:81:6e:4e:24:c3:e5:
aa:ef:04:c7:5c:8e:ce:f3:c6:6a:63:36:6e:f7:e5:
af:e9:e1:26:53:bc:01:09:1d:c2:63:b6:ba:d4:33:
da:46:4e:bc:90:9b:1e:c0:18:8c:75:87:51:98:a3:
61:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:31:23:29:B5:AB:CD:58:DA:2D:1F:1A:48:AC:63:71:59:6A:11:3C
X509v3 Authority Key Identifier:
keyid:95:90:9F:CF:9C:6E:A7:63:00:CE:71:D0:94:D3:25:F5:7D:64:9C:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lZCfz5xup2MAznHQlNMl9X1knL8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/373e4c-d885-44fa-8c4b-a6eedfa9a4fc/1/lZCfz5xup2MAznHQlNMl9X1knL8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/373e4c-d885-44fa-8c4b-a6eedfa9a4fc/1/lZCfz5xup2MAznHQlNMl9X1knL8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:5c:a6:ae:69:0c:a9:65:38:f2:0d:07:06:22:2d:1f:ac:0a:
43:1f:c6:71:31:2f:ad:10:e8:fa:f3:1b:3c:d4:0d:1b:8e:86:
16:6c:f0:cc:7b:51:a4:03:04:1a:d3:f6:2e:10:ea:15:72:24:
58:6a:9e:50:a5:aa:aa:d9:ff:86:da:9b:d8:c5:15:93:31:72:
87:ff:50:47:4a:da:e8:4c:cb:54:a1:04:2d:54:35:9d:d9:49:
ba:0a:52:41:10:5a:64:89:3d:68:29:ff:cf:22:f3:0b:e8:52:
93:7f:ff:12:a7:8c:0d:63:26:74:8b:7b:0b:29:6c:bc:66:c2:
0a:7f:e1:83:1e:97:1b:a5:56:2e:70:df:07:76:ca:c1:e9:5a:
fc:57:99:69:f4:21:fe:44:d3:03:ff:f4:c6:5d:f7:91:2a:7c:
0b:9f:a3:01:36:f4:b4:3c:4d:05:e3:be:5c:53:34:6a:1c:95:
84:9e:71:b7:54:3c:c9:a7:b3:ef:68:3c:89:17:dc:02:2c:fd:
35:c6:45:b1:41:76:73:ce:06:d6:3c:b6:96:59:7b:67:d0:9b:
a1:99:eb:08:93:c9:fc:17:a9:82:c0:b8:b2:bc:c4:04:78:cd:
4a:8c:3c:5b:76:0a:7a:e2:d9:d2:f7:28:92:e6:25:c1:77:7b:
dc:69:ba:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:03:22 2026 by rpki-client