Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/5f9ed3-fae0-4bde-9e94-7af63d72dd8d/1/lYM0pMEu57_TbL84WQfAQhA0NsY.mft
File: lYM0pMEu57_TbL84WQfAQhA0NsY.mft (raw, json)
Hash identifier: ZjLmvrsPF0Ompy8spx3QMsomZQbpiKCg3wFyvnzcRsU=
Subject key identifier: 7D:1C:1E:CC:64:1A:AD:26:69:CB:E7:D9:9E:F1:69:66:91:D7:3E:75
Authority key identifier: 95:83:34:A4:C1:2E:E7:BF:D3:6C:BF:38:59:07:C0:42:10:34:36:C6
Certificate issuer: /CN=958334a4c12ee7bfd36cbf385907c042103436c6
Certificate serial: 019D39413A4634394DE876F3BC841470C316
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lYM0pMEu57_TbL84WQfAQhA0NsY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/5f9ed3-fae0-4bde-9e94-7af63d72dd8d/1/lYM0pMEu57_TbL84WQfAQhA0NsY.mft
Manifest number: 36
Signing time: Sun 29 Mar 2026 11:01:09 +0000
Manifest this update: Sun 29 Mar 2026 11:01:09 +0000
Manifest next update: Mon 30 Mar 2026 11:01:09 +0000
Files and hashes: 1: lYM0pMEu57_TbL84WQfAQhA0NsY.crl (hash: mo33zBlg4sf10tc+WwNTZL8DsVc+eWJDsMDMoR7tK1E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/5f9ed3-fae0-4bde-9e94-7af63d72dd8d/1/lYM0pMEu57_TbL84WQfAQhA0NsY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/5f9ed3-fae0-4bde-9e94-7af63d72dd8d/1/lYM0pMEu57_TbL84WQfAQhA0NsY.mft
rsync://rpki.ripe.net/repository/DEFAULT/lYM0pMEu57_TbL84WQfAQhA0NsY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:41:3a:46:34:39:4d:e8:76:f3:bc:84:14:70:c3:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=958334a4c12ee7bfd36cbf385907c042103436c6
Validity
Not Before: Mar 29 11:01:09 2026 GMT
Not After : Mar 30 11:01:09 2026 GMT
Subject: CN=7d1c1ecc641aad2669cbe7d99ef1696691d73e75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:82:fe:0f:f8:8d:09:b7:5b:81:78:2d:0f:41:
c1:0c:d9:ca:13:03:fc:a1:87:7f:a7:a9:62:0a:12:
8e:68:0a:f0:93:50:8d:e1:ac:2c:fa:07:bd:1c:f0:
ee:16:f1:24:44:51:0d:df:20:38:15:e2:99:4e:89:
3e:13:4f:c3:88:36:21:ce:d2:72:d0:0c:13:be:a2:
bf:41:21:4a:fc:87:47:18:22:6b:a2:39:e6:94:1a:
b2:17:cf:61:4c:e9:bc:38:8f:3f:5c:56:6e:c7:5b:
25:ce:5e:2e:10:38:0a:a6:17:ab:07:98:7d:40:52:
c4:11:23:f7:90:31:2d:ae:95:c0:3b:c3:d3:ef:2b:
6d:02:e5:d3:2b:e0:6c:de:25:42:89:5f:fc:86:bd:
c0:9f:d5:57:0c:fe:f1:4e:55:00:53:4d:58:a3:38:
f1:c1:e4:0b:8e:89:2b:34:25:23:9d:bc:55:2b:02:
bf:00:35:ef:aa:b4:41:3c:c6:03:16:86:e6:c9:41:
49:2c:c7:5b:69:eb:87:ae:c0:1d:75:3f:3b:4a:38:
e5:1c:36:bf:64:f7:cc:8a:8e:ea:cf:bf:1d:0d:af:
b4:e7:db:4b:b3:24:7d:6f:d2:cd:69:20:ad:6b:1c:
c8:dd:0e:f3:e0:f2:39:d8:f9:4e:f2:b5:a5:35:c3:
21:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:1C:1E:CC:64:1A:AD:26:69:CB:E7:D9:9E:F1:69:66:91:D7:3E:75
X509v3 Authority Key Identifier:
keyid:95:83:34:A4:C1:2E:E7:BF:D3:6C:BF:38:59:07:C0:42:10:34:36:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lYM0pMEu57_TbL84WQfAQhA0NsY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/5f9ed3-fae0-4bde-9e94-7af63d72dd8d/1/lYM0pMEu57_TbL84WQfAQhA0NsY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/5f9ed3-fae0-4bde-9e94-7af63d72dd8d/1/lYM0pMEu57_TbL84WQfAQhA0NsY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
db:65:89:6a:05:55:5e:87:53:de:db:a6:a8:c9:d4:53:b1:8d:
9f:d6:4a:07:85:a2:f5:5f:ba:e1:b9:b2:62:9f:1b:21:03:24:
2d:87:a3:4c:fb:12:9a:ee:53:c9:22:d3:9f:e1:31:cf:02:bc:
81:8d:33:81:ea:27:e4:0b:15:ef:e2:23:cd:ff:09:b0:71:7a:
d2:ad:e7:fe:b0:f9:97:69:b1:cd:f2:5e:d9:46:21:9d:32:52:
0c:79:6e:1b:46:7e:7a:2a:07:51:1c:a2:6a:73:16:50:b6:59:
de:a7:23:e6:9d:2c:71:9c:4c:84:00:fb:20:81:58:75:49:e6:
fe:4b:1b:d0:8c:55:38:b8:e4:fd:22:08:07:89:21:cd:41:a7:
48:32:65:11:23:71:2a:a7:dc:de:e0:d6:bd:39:69:c6:c8:35:
a2:5e:ee:a7:0d:3f:17:62:fe:ea:6e:38:57:a0:ef:79:a5:b3:
53:f2:7a:b9:a2:38:63:e2:04:04:6f:a5:00:cb:e1:54:55:00:
1a:f4:27:5e:f2:55:43:ac:d7:90:2c:ca:aa:3d:a3:4b:d1:03:
df:20:e9:58:d3:0f:0c:c2:07:c3:6a:40:b2:14:a0:7c:72:26:
cc:b6:7e:99:77:3d:68:ab:64:a5:58:01:82:1a:c9:28:37:da:
47:2b:4e:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:38:53 2026 by rpki-client