Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/918f04-954e-47ac-898c-e53e0e7a44de/1/LSGszsOQTPHq7FeZedyLqWWtGS4.mft
File: LSGszsOQTPHq7FeZedyLqWWtGS4.mft (raw, json)
Hash identifier: MYOHImyoI6a/DVY7ZbH/YyMdEBR2KxvWWu3WC4oTfVY=
Subject key identifier: 04:2B:18:1E:D4:D1:7F:85:E5:D2:2D:8E:AF:C8:37:51:B2:7A:04:64
Authority key identifier: 2D:21:AC:CE:C3:90:4C:F1:EA:EC:57:99:79:DC:8B:A9:65:AD:19:2E
Certificate issuer: /CN=2d21accec3904cf1eaec579979dc8ba965ad192e
Certificate serial: 019D3977D8860C9056B9589385EACAC1CBF1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LSGszsOQTPHq7FeZedyLqWWtGS4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/918f04-954e-47ac-898c-e53e0e7a44de/1/LSGszsOQTPHq7FeZedyLqWWtGS4.mft
Manifest number: 06
Signing time: Sun 29 Mar 2026 12:00:48 +0000
Manifest this update: Sun 29 Mar 2026 12:00:48 +0000
Manifest next update: Mon 30 Mar 2026 12:00:48 +0000
Files and hashes: 1: LSGszsOQTPHq7FeZedyLqWWtGS4.crl (hash: vEoKif72zZh0HevFlQxdDD1WsJ1s2LRJdhPHqFFFxJ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/918f04-954e-47ac-898c-e53e0e7a44de/1/LSGszsOQTPHq7FeZedyLqWWtGS4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/918f04-954e-47ac-898c-e53e0e7a44de/1/LSGszsOQTPHq7FeZedyLqWWtGS4.mft
rsync://rpki.ripe.net/repository/DEFAULT/LSGszsOQTPHq7FeZedyLqWWtGS4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 12:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:77:d8:86:0c:90:56:b9:58:93:85:ea:ca:c1:cb:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d21accec3904cf1eaec579979dc8ba965ad192e
Validity
Not Before: Mar 29 12:00:48 2026 GMT
Not After : Mar 30 12:00:48 2026 GMT
Subject: CN=042b181ed4d17f85e5d22d8eafc83751b27a0464
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:d2:30:b4:7e:f4:56:b3:c2:0d:a1:b6:1c:7a:
ad:9e:2d:dc:a8:01:cf:d9:3d:39:8b:84:36:0e:a5:
cb:ae:c3:75:2e:a8:7a:67:ff:ac:60:67:40:ba:17:
e4:dd:38:c1:72:2f:e9:2b:18:3d:c5:3e:ef:a9:b8:
72:df:ce:4d:61:94:7c:92:a8:8c:6c:f7:c2:3b:56:
25:57:5c:7a:04:ed:26:3f:79:7c:79:5b:af:63:b9:
80:19:56:84:4c:22:dd:4d:f2:a9:f9:07:a8:13:27:
98:c1:3d:09:0c:ea:70:49:50:2f:83:7d:36:31:a7:
fe:ae:73:1c:fc:9d:37:51:09:ef:9e:0b:9f:b9:49:
ea:29:17:64:49:3d:aa:9e:3f:0a:e3:41:0c:6d:72:
e9:8c:8c:09:aa:08:52:b9:fa:90:fe:a2:8e:c5:e8:
cc:f6:85:21:75:6d:03:42:ac:3e:c1:5c:0e:75:48:
cb:8a:e7:d5:f6:38:71:45:4a:57:12:b9:fd:f2:fd:
1b:e8:76:65:95:bf:fd:d7:d6:d1:b3:db:54:f3:36:
2e:04:31:ff:fc:e8:8c:08:03:5a:82:1d:50:ac:68:
e0:b7:a0:60:37:d9:04:17:fa:be:68:e5:45:55:26:
b3:22:67:af:d0:7d:8c:c6:a0:56:53:fd:c7:78:52:
9e:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:2B:18:1E:D4:D1:7F:85:E5:D2:2D:8E:AF:C8:37:51:B2:7A:04:64
X509v3 Authority Key Identifier:
keyid:2D:21:AC:CE:C3:90:4C:F1:EA:EC:57:99:79:DC:8B:A9:65:AD:19:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LSGszsOQTPHq7FeZedyLqWWtGS4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/918f04-954e-47ac-898c-e53e0e7a44de/1/LSGszsOQTPHq7FeZedyLqWWtGS4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/918f04-954e-47ac-898c-e53e0e7a44de/1/LSGszsOQTPHq7FeZedyLqWWtGS4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:e2:79:ba:ca:b5:dc:9d:44:76:29:d4:07:ec:8f:c6:9a:9a:
40:92:81:78:ff:a0:d6:ae:48:f8:85:b0:d4:81:42:00:02:e2:
2c:93:2f:c9:8b:a5:73:37:44:71:8b:ef:9d:38:f5:15:51:66:
43:1d:6d:65:4a:28:0e:c3:93:5b:72:24:2f:52:46:6f:17:25:
b1:47:78:80:2b:43:d7:fa:bd:96:33:82:67:df:b2:e9:3f:6f:
19:d9:07:9a:69:42:af:54:ee:e3:25:17:70:2d:3e:b8:29:0f:
14:e6:48:59:e8:7e:48:8f:22:fd:4d:fd:6f:6c:b2:64:c4:d1:
7b:4a:ee:00:0f:5f:e9:44:16:dd:7c:9c:c1:1c:00:57:64:5b:
e8:29:6b:50:39:36:a8:7c:83:a1:b4:07:cf:6f:b1:fe:64:a2:
8c:06:b3:ef:08:6c:7f:d8:21:e3:a6:19:63:37:ee:6d:8f:89:
61:a2:07:f4:fb:45:44:23:25:b2:cd:0e:12:db:08:a6:91:53:
7d:d7:f5:c9:7e:93:ef:d6:e4:4b:bc:26:89:0f:c4:30:7f:b2:
93:12:71:e0:7c:be:e0:70:d9:1d:8b:9a:01:26:25:59:7e:a8:
44:5e:6e:69:b0:7f:d1:1c:77:ce:2c:08:5b:26:0e:92:55:51:
37:f0:75:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:11:44 2026 by rpki-client