Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/d6c18a-55ef-4118-970c-60d1ed80c7cf/1/lEcuhZlXNV2l3dE0ltcNcHc0kfk.mft
File: lEcuhZlXNV2l3dE0ltcNcHc0kfk.mft (raw, json)
Hash identifier: GMRokE8hCOe4p7ejDfg0uWhCUtXz+kREsvM54558SvY=
Subject key identifier: C2:0D:D4:E2:BC:FC:95:D3:C4:6C:F8:22:05:4A:F3:0F:21:1D:BD:1F
Authority key identifier: 94:47:2E:85:99:57:35:5D:A5:DD:D1:34:96:D7:0D:70:77:34:91:F9
Certificate issuer: /CN=94472e859957355da5ddd13496d70d70773491f9
Certificate serial: 019D38D3D551B1C8B509C41025E2CDBE3046
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lEcuhZlXNV2l3dE0ltcNcHc0kfk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/d6c18a-55ef-4118-970c-60d1ed80c7cf/1/lEcuhZlXNV2l3dE0ltcNcHc0kfk.mft
Manifest number: 11B2
Signing time: Sun 29 Mar 2026 09:01:39 +0000
Manifest this update: Sun 29 Mar 2026 09:01:39 +0000
Manifest next update: Mon 30 Mar 2026 09:01:39 +0000
Files and hashes: 1: lEcuhZlXNV2l3dE0ltcNcHc0kfk.crl (hash: He0xgDu057Qp1OJDjlnsTMgGeszXdd9t/AheZD8NKQc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/d6c18a-55ef-4118-970c-60d1ed80c7cf/1/lEcuhZlXNV2l3dE0ltcNcHc0kfk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/d6c18a-55ef-4118-970c-60d1ed80c7cf/1/lEcuhZlXNV2l3dE0ltcNcHc0kfk.mft
rsync://rpki.ripe.net/repository/DEFAULT/lEcuhZlXNV2l3dE0ltcNcHc0kfk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:d5:51:b1:c8:b5:09:c4:10:25:e2:cd:be:30:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94472e859957355da5ddd13496d70d70773491f9
Validity
Not Before: Mar 29 09:01:39 2026 GMT
Not After : Mar 30 09:01:39 2026 GMT
Subject: CN=c20dd4e2bcfc95d3c46cf822054af30f211dbd1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:13:b0:d3:26:6c:dd:41:6d:0d:8b:e1:8f:c1:
ff:a2:9f:0c:98:05:28:52:f5:d1:fc:dc:f1:bb:82:
e5:1c:cf:6a:c4:9f:94:d6:b3:1e:56:11:64:18:79:
d0:17:80:aa:a5:6f:35:df:38:fd:69:d3:42:86:b0:
34:fb:44:c7:e3:c9:64:1b:8e:5f:2d:14:a7:be:6c:
31:0d:fb:18:6d:1d:7d:38:a3:50:64:cc:c8:ee:bf:
39:a3:bb:69:fa:c4:40:0a:45:08:9d:0f:5e:74:0f:
14:f7:c1:e9:c5:4a:67:c3:9b:8a:33:de:3a:b8:01:
90:56:1f:4b:89:01:c2:19:0b:ec:5a:3e:12:f9:e9:
27:cd:59:89:83:39:98:5a:b2:1c:0e:14:94:07:38:
a2:47:fc:dd:72:ea:93:9e:4b:b6:0b:f3:24:db:7c:
78:06:3c:30:f6:49:d2:c7:6b:3e:db:a3:8d:48:d6:
b0:e0:e7:c3:d2:6e:bb:42:24:1f:1a:2d:b9:c8:c7:
66:c1:65:53:bb:d3:f4:10:0b:c8:aa:1a:84:7c:ee:
95:81:80:90:28:65:59:5f:1e:4a:9f:96:7f:92:9e:
13:64:d6:57:31:c3:18:34:20:69:f8:33:c0:0b:b4:
20:ee:ca:1f:00:f2:94:a0:b7:58:cc:91:0b:e3:d3:
9e:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:0D:D4:E2:BC:FC:95:D3:C4:6C:F8:22:05:4A:F3:0F:21:1D:BD:1F
X509v3 Authority Key Identifier:
keyid:94:47:2E:85:99:57:35:5D:A5:DD:D1:34:96:D7:0D:70:77:34:91:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lEcuhZlXNV2l3dE0ltcNcHc0kfk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/d6c18a-55ef-4118-970c-60d1ed80c7cf/1/lEcuhZlXNV2l3dE0ltcNcHc0kfk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/d6c18a-55ef-4118-970c-60d1ed80c7cf/1/lEcuhZlXNV2l3dE0ltcNcHc0kfk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:1b:5e:d9:4f:49:07:a4:c8:52:8a:7a:ec:41:ae:91:ff:f6:
10:d8:03:24:7a:21:8a:57:f2:c3:79:e4:b1:2f:56:83:71:5b:
fd:7e:44:d8:31:87:ea:40:a5:f9:9e:34:77:91:49:5a:10:97:
ef:a9:ac:93:6f:18:95:fa:22:d4:2e:9c:6e:fc:d4:96:9d:33:
45:3b:28:ec:9d:07:67:98:9f:53:a0:80:1a:5f:cb:cd:af:13:
f1:a2:82:7d:1e:b9:2b:df:65:39:c4:c2:d9:1a:e2:ac:55:85:
9b:af:aa:87:73:d3:45:f3:2c:1b:ac:05:69:5f:14:67:68:51:
3b:fe:b9:e2:c2:00:1e:05:7a:9a:51:2c:d8:41:73:fb:ef:23:
03:04:33:8e:32:89:3f:b0:ba:3e:8f:31:ac:13:84:10:a2:f3:
31:a2:7f:1e:ef:0b:86:3c:eb:fb:a1:19:20:90:77:17:4b:22:
8e:f7:ff:c6:73:87:f7:f8:80:0a:0f:66:df:91:b6:b6:b2:ad:
2a:6c:72:96:29:5b:23:83:92:57:eb:08:c2:97:bb:e4:eb:78:
74:4e:bb:ae:aa:7c:d3:05:33:56:fb:d6:6d:6e:5e:06:26:40:
6a:ad:71:a4:50:60:8f:3b:15:e3:e3:d5:87:76:4b:a9:5b:1a:
76:06:a6:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:42:30 2026 by rpki-client