Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/2a67af-893d-4a16-9b5d-d369de30123d/1/lRA3CHxvfGzzPIDGzNS_RdjpPDg.mft
File: lRA3CHxvfGzzPIDGzNS_RdjpPDg.mft (raw, json)
Hash identifier: nqkmJ3DzcPSUhRRStzlvwVbDrK/OmYotMUDgjjIQJGc=
Subject key identifier: CB:EA:43:37:C1:89:51:60:0E:A5:8C:F3:1D:D1:67:CA:67:8B:86:FA
Authority key identifier: 95:10:37:08:7C:6F:7C:6C:F3:3C:80:C6:CC:D4:BF:45:D8:E9:3C:38
Certificate issuer: /CN=951037087c6f7c6cf33c80c6ccd4bf45d8e93c38
Certificate serial: 019D39E58E66E5CB945A033CCAE01917373E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lRA3CHxvfGzzPIDGzNS_RdjpPDg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/2a67af-893d-4a16-9b5d-d369de30123d/1/lRA3CHxvfGzzPIDGzNS_RdjpPDg.mft
Manifest number: 8A
Signing time: Sun 29 Mar 2026 14:00:38 +0000
Manifest this update: Sun 29 Mar 2026 14:00:38 +0000
Manifest next update: Mon 30 Mar 2026 14:00:38 +0000
Files and hashes: 1: lRA3CHxvfGzzPIDGzNS_RdjpPDg.crl (hash: pHuQ3e8V4rHdPNyGX7TUFa/tC/ua9aEzl6gMtaZfCdE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/2a67af-893d-4a16-9b5d-d369de30123d/1/lRA3CHxvfGzzPIDGzNS_RdjpPDg.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/2a67af-893d-4a16-9b5d-d369de30123d/1/lRA3CHxvfGzzPIDGzNS_RdjpPDg.mft
rsync://rpki.ripe.net/repository/DEFAULT/lRA3CHxvfGzzPIDGzNS_RdjpPDg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 14:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:e5:8e:66:e5:cb:94:5a:03:3c:ca:e0:19:17:37:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=951037087c6f7c6cf33c80c6ccd4bf45d8e93c38
Validity
Not Before: Mar 29 14:00:38 2026 GMT
Not After : Mar 30 14:00:38 2026 GMT
Subject: CN=cbea4337c18951600ea58cf31dd167ca678b86fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:c2:76:46:f0:69:6e:09:00:1a:0d:ba:c6:ab:
d4:06:79:90:2c:99:5f:c7:c0:0a:b1:aa:38:f0:2e:
0f:b1:7d:4e:68:fe:d5:ef:bc:33:2e:90:68:b8:e8:
42:f3:8e:5d:ce:15:bf:da:24:ca:6e:c5:65:ba:11:
f4:53:ce:fa:f3:c9:da:71:e7:65:66:c3:54:27:5b:
3c:23:4f:d7:2f:d6:ba:c0:fc:0e:41:2b:c7:70:81:
86:ef:96:94:66:ff:1a:de:ca:a2:31:a9:96:c1:b7:
07:ff:53:97:ef:d5:76:23:22:66:09:bd:ab:d2:6c:
3d:9e:3c:a4:7e:11:b9:7d:87:20:44:e8:c0:fe:d6:
3c:d6:5f:65:e3:6a:47:26:80:40:2e:11:e1:d9:75:
64:b4:70:21:58:79:ac:14:f2:9e:af:f1:90:e2:27:
3d:20:34:fc:36:8d:e0:5c:da:a0:32:4d:84:9a:51:
59:63:2a:96:a0:04:ab:14:6c:0b:97:54:86:fb:33:
1c:39:3e:51:a9:66:9d:dc:3e:30:10:3d:a8:96:79:
75:ab:4d:29:a4:e4:67:af:74:10:f8:56:e1:a5:3a:
3b:dd:23:2c:49:b1:dd:d5:db:46:24:61:77:2b:e7:
54:90:5f:fb:e9:67:5b:73:1a:8a:33:3f:52:38:d3:
2c:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:EA:43:37:C1:89:51:60:0E:A5:8C:F3:1D:D1:67:CA:67:8B:86:FA
X509v3 Authority Key Identifier:
keyid:95:10:37:08:7C:6F:7C:6C:F3:3C:80:C6:CC:D4:BF:45:D8:E9:3C:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lRA3CHxvfGzzPIDGzNS_RdjpPDg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/2a67af-893d-4a16-9b5d-d369de30123d/1/lRA3CHxvfGzzPIDGzNS_RdjpPDg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/2a67af-893d-4a16-9b5d-d369de30123d/1/lRA3CHxvfGzzPIDGzNS_RdjpPDg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:d2:b8:f9:08:6b:88:46:8e:da:39:72:d8:a3:76:a2:cb:53:
0e:3f:52:d3:ee:3c:de:be:bb:d3:02:e7:33:bc:c5:28:b4:64:
6c:c7:ec:f2:d2:33:8a:87:40:2f:25:b7:b0:bc:d4:4a:7a:9d:
01:f5:36:f0:48:e1:27:24:e9:23:21:70:04:40:56:c2:36:d3:
eb:f4:5c:c6:2b:4c:9c:ee:15:fc:1c:ef:dc:c9:e6:19:07:17:
28:e4:33:9b:b4:e3:f6:f4:db:e3:25:e5:82:e4:89:14:cf:d1:
30:dd:6d:80:8f:09:85:e9:35:ac:c0:2a:f6:36:34:00:87:70:
8b:92:43:00:c4:46:b5:6a:62:b1:a6:ee:e8:0a:d8:a8:28:e9:
b8:2a:a7:f2:37:81:af:35:5d:df:06:94:28:f9:02:6e:23:2b:
d9:f6:76:32:15:3e:1e:7d:b3:29:00:62:a2:3a:d2:6f:64:54:
0a:5e:27:61:e5:c2:c2:23:f5:70:be:21:6e:23:26:51:3c:76:
2b:b5:63:1e:8f:b3:e9:12:b3:5a:2c:53:d0:96:4a:53:f4:6f:
2e:11:9f:59:11:7f:8e:0f:5c:12:94:af:df:30:b3:6a:3a:6a:
d1:88:1f:af:45:aa:94:ba:13:0f:cb:8d:bc:a8:6e:9a:e0:11:
06:e9:0b:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:49:18 2026 by rpki-client