Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/66ab8b-bb38-41be-9a8b-e359c9d7b907/1/LR08AN6C--6zs4rsMv19LHyamOs.mft
File: LR08AN6C--6zs4rsMv19LHyamOs.mft (raw, json)
Hash identifier: 7d7w2Rqwk+YwETIcvmW32HR0xsf/NleUK2hBD4uJmHs=
Subject key identifier: 0F:08:5D:C2:AD:06:FB:6F:0C:06:DF:CF:DD:E8:81:42:D1:60:C4:16
Authority key identifier: 2D:1D:3C:00:DE:82:FB:EE:B3:B3:8A:EC:32:FD:7D:2C:7C:9A:98:EB
Certificate issuer: /CN=2d1d3c00de82fbeeb3b38aec32fd7d2c7c9a98eb
Certificate serial: 019D3A53DFBD5C4D744790FB8693C808FE86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LR08AN6C--6zs4rsMv19LHyamOs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/66ab8b-bb38-41be-9a8b-e359c9d7b907/1/LR08AN6C--6zs4rsMv19LHyamOs.mft
Manifest number: 05B7
Signing time: Sun 29 Mar 2026 16:01:08 +0000
Manifest this update: Sun 29 Mar 2026 16:01:08 +0000
Manifest next update: Mon 30 Mar 2026 16:01:08 +0000
Files and hashes: 1: LR08AN6C--6zs4rsMv19LHyamOs.crl (hash: 2urQHAt0u0BulzrgNQ/fiWwnjSU4+xvu7OCBxl1WhOs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/66ab8b-bb38-41be-9a8b-e359c9d7b907/1/LR08AN6C--6zs4rsMv19LHyamOs.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/66ab8b-bb38-41be-9a8b-e359c9d7b907/1/LR08AN6C--6zs4rsMv19LHyamOs.mft
rsync://rpki.ripe.net/repository/DEFAULT/LR08AN6C--6zs4rsMv19LHyamOs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 16:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:53:df:bd:5c:4d:74:47:90:fb:86:93:c8:08:fe:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d1d3c00de82fbeeb3b38aec32fd7d2c7c9a98eb
Validity
Not Before: Mar 29 16:01:08 2026 GMT
Not After : Mar 30 16:01:08 2026 GMT
Subject: CN=0f085dc2ad06fb6f0c06dfcfdde88142d160c416
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:f9:34:07:07:c9:1a:f2:3c:cf:dd:95:e5:86:
fe:35:1b:5f:ba:4c:71:9e:69:c4:da:2e:23:58:d8:
5f:a4:b2:91:0c:e1:17:5d:e0:67:4f:16:3d:c9:88:
c6:b1:3a:68:86:3e:2a:e6:1e:2c:ed:86:a3:07:87:
7d:ba:b7:cd:92:6c:99:c9:d4:53:86:32:2c:70:3f:
a5:fd:d8:87:be:f0:ab:69:92:d1:e0:e2:ba:6f:df:
91:65:0c:21:0b:9f:6f:99:19:70:27:61:be:c3:76:
5d:05:9c:2c:b7:26:a4:7c:ed:89:dc:a3:06:a9:b3:
e0:55:03:e7:dd:2e:26:c8:4c:46:7e:14:6f:e4:23:
99:f4:0c:b4:8e:ad:8b:e0:8e:d3:f0:28:cd:f7:d2:
fe:c3:a1:14:19:97:c4:56:ce:cd:6b:c8:5a:4d:0f:
fa:cb:38:fc:81:d5:21:71:80:d5:c6:b7:4b:b9:c7:
d1:27:1c:3b:83:ae:6c:58:a1:76:44:82:69:c0:77:
c2:40:9b:6b:04:5b:06:09:70:63:2f:4c:bc:99:43:
59:62:4f:0f:af:80:35:75:34:4d:2f:25:ef:01:44:
02:1f:4f:86:b1:4f:c8:19:a8:84:db:53:46:a3:12:
2c:66:ab:19:3a:3a:b2:b9:92:58:b1:c7:dd:29:94:
63:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:08:5D:C2:AD:06:FB:6F:0C:06:DF:CF:DD:E8:81:42:D1:60:C4:16
X509v3 Authority Key Identifier:
keyid:2D:1D:3C:00:DE:82:FB:EE:B3:B3:8A:EC:32:FD:7D:2C:7C:9A:98:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LR08AN6C--6zs4rsMv19LHyamOs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/66ab8b-bb38-41be-9a8b-e359c9d7b907/1/LR08AN6C--6zs4rsMv19LHyamOs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/66ab8b-bb38-41be-9a8b-e359c9d7b907/1/LR08AN6C--6zs4rsMv19LHyamOs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:28:11:20:0b:70:21:6d:9f:69:15:65:92:df:74:5c:a6:eb:
2f:0f:46:91:cc:ba:a7:ca:db:7b:8e:ff:bd:19:7f:d7:3e:79:
50:bd:6d:f9:53:9f:b5:4d:1b:51:2f:1a:5d:ac:ce:98:ea:c5:
85:19:4c:c8:7c:51:97:93:0a:66:2c:3a:c0:aa:da:e2:82:c6:
d9:fa:50:49:b0:61:9e:d0:fa:5d:1b:f1:67:18:58:56:97:ab:
00:cd:6e:c7:fc:61:74:33:a5:5a:aa:c3:4f:61:7c:f8:0c:dc:
8f:d6:08:06:3b:00:73:17:7c:a7:17:91:07:0d:fa:96:de:96:
2b:5a:a1:4c:4b:82:7d:a8:d8:d9:6b:57:6b:26:61:a6:cf:04:
2f:26:00:e7:85:17:1f:d9:bd:18:be:9b:30:f4:8d:d1:c0:a9:
06:84:58:40:96:4e:e7:0c:3b:35:e2:ec:98:b9:7f:c8:34:b2:
bf:70:e4:85:72:1e:16:3f:cd:2c:fc:f9:b0:48:76:0d:a3:f4:
b6:73:52:d7:5f:33:19:37:9a:78:65:d7:8f:54:e0:ef:1e:e0:
eb:3d:dd:89:ff:cf:cd:85:86:ef:9b:db:60:93:2b:bf:4f:57:
77:61:33:e8:9d:0f:d8:0b:68:7d:1d:7f:89:8c:8f:b5:08:47:
fd:21:70:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:23:18 2026 by rpki-client