Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/08e404-f426-42e2-9594-da99e34cc30b/1/lB47mlO74C4stDl6bRoB2Aym5Bg.mft
File: lB47mlO74C4stDl6bRoB2Aym5Bg.mft (raw, json)
Hash identifier: sqyw+Ly7rofbjHYUSokprMgoJK86IRYo6HxAd8Cn2uk=
Subject key identifier: EC:EB:D8:8F:37:4D:1D:80:E9:0A:2B:46:EC:8F:BA:0C:12:3A:76:63
Authority key identifier: 94:1E:3B:9A:53:BB:E0:2E:2C:B4:39:7A:6D:1A:01:D8:0C:A6:E4:18
Certificate issuer: /CN=941e3b9a53bbe02e2cb4397a6d1a01d80ca6e418
Certificate serial: 019D36E480DA689302EC95B16D06E835018C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lB47mlO74C4stDl6bRoB2Aym5Bg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/08e404-f426-42e2-9594-da99e34cc30b/1/lB47mlO74C4stDl6bRoB2Aym5Bg.mft
Manifest number: 188C
Signing time: Sun 29 Mar 2026 00:00:37 +0000
Manifest this update: Sun 29 Mar 2026 00:00:37 +0000
Manifest next update: Mon 30 Mar 2026 00:00:37 +0000
Files and hashes: 1: lB47mlO74C4stDl6bRoB2Aym5Bg.crl (hash: IqgxoLmMB4m/NmVSptKDn9JvSHu5fRYdW0KhyTdOs/Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/08e404-f426-42e2-9594-da99e34cc30b/1/lB47mlO74C4stDl6bRoB2Aym5Bg.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/08e404-f426-42e2-9594-da99e34cc30b/1/lB47mlO74C4stDl6bRoB2Aym5Bg.mft
rsync://rpki.ripe.net/repository/DEFAULT/lB47mlO74C4stDl6bRoB2Aym5Bg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 00:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:36:e4:80:da:68:93:02:ec:95:b1:6d:06:e8:35:01:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=941e3b9a53bbe02e2cb4397a6d1a01d80ca6e418
Validity
Not Before: Mar 29 00:00:37 2026 GMT
Not After : Mar 30 00:00:37 2026 GMT
Subject: CN=ecebd88f374d1d80e90a2b46ec8fba0c123a7663
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:09:c7:0f:71:39:c0:6a:63:b1:f4:22:1f:9b:
eb:32:50:7b:f5:1f:45:44:8a:a2:d6:cd:3d:dc:51:
e0:d2:8f:55:5b:2e:f0:61:5a:ac:1f:01:f0:c5:8c:
da:d4:97:fd:2c:13:ab:81:df:73:89:61:5d:c2:28:
c4:8e:60:25:fe:6b:9e:6c:48:41:b9:94:6c:7e:69:
76:c1:92:4e:10:fc:9a:f9:25:cb:14:3b:14:95:bb:
89:33:81:c0:0f:a5:66:ca:20:2f:aa:7c:0b:0f:f9:
c3:d0:11:37:a5:04:5b:41:43:c2:7b:81:78:19:db:
68:e9:19:6b:4d:2e:e3:16:2d:99:f7:8c:d7:a2:52:
08:8c:bf:17:d8:e7:ab:19:9c:2f:d0:c7:40:38:df:
e0:46:fe:4b:17:60:0c:50:ff:40:f6:57:b3:b5:98:
10:a0:e7:c9:f9:3a:66:f1:5c:f7:a2:ae:24:9c:4d:
0b:7e:e2:ff:a7:6a:32:e2:72:79:58:1d:3c:c1:5e:
60:3f:97:c4:5b:1d:25:36:3b:ab:cb:71:97:72:9f:
11:34:4f:ad:e0:bb:af:bd:f4:e1:16:e0:9f:42:89:
3c:8b:0d:64:65:63:b8:86:19:86:f3:5a:9c:70:fa:
d4:e5:28:3d:d1:09:e2:44:8c:48:78:3b:ba:ac:09:
ad:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:EB:D8:8F:37:4D:1D:80:E9:0A:2B:46:EC:8F:BA:0C:12:3A:76:63
X509v3 Authority Key Identifier:
keyid:94:1E:3B:9A:53:BB:E0:2E:2C:B4:39:7A:6D:1A:01:D8:0C:A6:E4:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lB47mlO74C4stDl6bRoB2Aym5Bg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/08e404-f426-42e2-9594-da99e34cc30b/1/lB47mlO74C4stDl6bRoB2Aym5Bg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/08e404-f426-42e2-9594-da99e34cc30b/1/lB47mlO74C4stDl6bRoB2Aym5Bg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:ca:68:57:5a:42:8d:a7:37:b0:31:52:f8:3c:7a:f5:73:e6:
da:38:67:c1:96:14:b9:78:e4:ec:8b:1a:ef:b1:05:c4:1f:d2:
05:65:d8:88:1a:36:14:9f:d2:5e:bf:22:00:0b:e9:17:bc:5a:
86:13:61:79:33:96:b1:c8:26:70:27:dc:4b:9e:e3:73:15:a8:
09:35:df:ca:a4:85:33:10:3e:dd:39:22:54:4a:b2:cf:c7:da:
37:fb:17:1b:13:01:a7:6f:a6:29:72:5a:1a:6b:e3:44:7d:fc:
b6:cd:f1:6b:19:2e:d0:9b:f8:9a:dd:78:04:7c:ca:65:97:6d:
b5:5c:bf:e6:27:24:2d:d2:21:0b:c2:9f:b1:3d:a0:35:a0:ce:
90:4c:a6:71:1e:e7:1e:b7:5c:66:43:2a:6e:4c:42:8b:eb:5c:
04:99:9e:fa:dd:5b:49:a1:52:b7:61:6b:1c:ec:a0:1b:24:df:
50:98:3e:55:e0:59:e0:c2:3e:73:f0:86:4c:6b:1b:b6:23:22:
a7:7a:70:ab:51:a2:a0:d6:44:b3:ed:a2:ae:03:a0:74:e0:c9:
cd:52:4f:de:b2:54:85:75:31:83:d7:1b:f7:3f:68:35:06:ad:
4c:d6:fb:cc:f4:5c:9d:9b:e1:9d:26:f0:86:99:12:3c:72:cf:
0d:a2:5e:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:16:33 2026 by rpki-client