Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/cab198-3e84-4b01-bfba-82b9e5fe9b06/1/lPNHF_8y_ix2RK610O6iMBYX8SQ.mft
File: lPNHF_8y_ix2RK610O6iMBYX8SQ.mft (raw, json)
Hash identifier: jTecqsLhXh/4yye5fWzCzp+fGvQG8gqkWv6xFLrZ1mA=
Subject key identifier: 98:F4:64:A6:42:4D:00:BC:02:E9:3C:34:18:47:DD:31:DB:58:5B:11
Authority key identifier: 94:F3:47:17:FF:32:FE:2C:76:44:AE:B5:D0:EE:A2:30:16:17:F1:24
Certificate issuer: /CN=94f34717ff32fe2c7644aeb5d0eea2301617f124
Certificate serial: 019D37899E9BC0C45C6C9398FA64AAF53018
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lPNHF_8y_ix2RK610O6iMBYX8SQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/cab198-3e84-4b01-bfba-82b9e5fe9b06/1/lPNHF_8y_ix2RK610O6iMBYX8SQ.mft
Manifest number: 0810
Signing time: Sun 29 Mar 2026 03:00:59 +0000
Manifest this update: Sun 29 Mar 2026 03:00:59 +0000
Manifest next update: Mon 30 Mar 2026 03:00:59 +0000
Files and hashes: 1: lPNHF_8y_ix2RK610O6iMBYX8SQ.crl (hash: Jc9zNEM6mzrpXfy6UUwjDnTreG3+QHZzzt//MgSB2UM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/cab198-3e84-4b01-bfba-82b9e5fe9b06/1/lPNHF_8y_ix2RK610O6iMBYX8SQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/cab198-3e84-4b01-bfba-82b9e5fe9b06/1/lPNHF_8y_ix2RK610O6iMBYX8SQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/lPNHF_8y_ix2RK610O6iMBYX8SQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 03:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:89:9e:9b:c0:c4:5c:6c:93:98:fa:64:aa:f5:30:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94f34717ff32fe2c7644aeb5d0eea2301617f124
Validity
Not Before: Mar 29 03:00:59 2026 GMT
Not After : Mar 30 03:00:59 2026 GMT
Subject: CN=98f464a6424d00bc02e93c341847dd31db585b11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:5c:7a:1a:5f:0d:67:2f:c8:85:64:b9:e0:73:
35:32:80:c9:51:ed:9c:99:c5:bf:54:3b:1a:20:bb:
a3:4e:ef:5d:c9:28:03:07:58:2a:5a:ce:71:60:b2:
58:fb:29:0c:6f:0d:f9:2c:7f:59:83:66:89:48:fd:
ec:5d:bd:ba:a5:39:66:c4:2b:c0:9e:3d:39:85:c0:
f5:01:4e:d6:1a:b4:d8:78:0c:11:9c:38:d8:3b:e3:
92:7d:9d:5a:9e:06:6a:9b:a4:a3:c8:bd:bd:f2:e0:
3c:e3:2d:70:f4:4a:59:72:ec:03:fc:9a:c0:99:63:
6f:3a:48:26:8d:53:7c:63:cf:0b:26:c2:7e:60:a9:
0a:96:a3:95:4c:de:ab:83:13:4c:1e:a6:10:17:19:
92:3c:af:6c:4f:db:aa:08:c6:24:06:d7:ce:9e:76:
01:ad:1b:28:b1:f9:c8:45:16:98:66:5e:cc:6b:25:
84:a9:16:79:34:79:b0:eb:25:15:ec:4c:b1:a5:f0:
b2:06:0e:1d:6c:90:39:f4:87:82:e4:85:ea:b2:97:
8e:59:e2:51:9c:9a:b2:69:f0:52:1e:26:02:2a:b3:
7c:21:24:99:4f:00:d0:42:1f:12:3c:9d:21:0d:4a:
07:b5:f5:4b:c5:db:52:ae:5e:30:b3:43:bf:d6:71:
4b:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:F4:64:A6:42:4D:00:BC:02:E9:3C:34:18:47:DD:31:DB:58:5B:11
X509v3 Authority Key Identifier:
keyid:94:F3:47:17:FF:32:FE:2C:76:44:AE:B5:D0:EE:A2:30:16:17:F1:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lPNHF_8y_ix2RK610O6iMBYX8SQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/cab198-3e84-4b01-bfba-82b9e5fe9b06/1/lPNHF_8y_ix2RK610O6iMBYX8SQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/cab198-3e84-4b01-bfba-82b9e5fe9b06/1/lPNHF_8y_ix2RK610O6iMBYX8SQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:c6:b8:a8:fa:90:67:b4:a5:aa:fb:9b:9c:51:d6:6c:e3:4d:
5d:81:bb:15:bb:a9:08:4b:25:82:dc:b7:11:bd:15:7a:af:cb:
7a:bf:80:60:5e:22:0b:0b:56:cb:32:71:40:e0:33:ec:89:33:
f2:2e:91:01:d8:75:dc:33:22:d3:40:4d:d9:8c:2a:22:0e:42:
7c:07:8e:29:0e:40:64:db:6d:d1:7f:32:51:a6:07:af:6f:12:
0f:23:f2:1f:66:ed:d7:f9:45:b2:5a:19:72:b3:b2:6c:05:54:
11:2c:d0:c6:20:ea:89:d3:d5:d9:d3:05:80:b3:ee:bd:bc:7e:
89:03:2a:42:7d:ac:0d:33:8f:91:b8:58:f2:a9:15:f5:66:b3:
b0:07:c9:75:5a:60:da:a7:66:82:e4:d0:24:41:d7:67:cb:ed:
b9:f8:5f:7a:5e:6e:4d:ee:b0:79:94:1b:15:6b:1d:a0:b3:da:
36:37:df:7b:de:39:e0:9f:7b:67:45:17:5b:fc:67:02:27:39:
9c:9e:55:e0:36:12:dd:e2:e5:63:ed:e6:87:0a:74:ca:8c:60:
f8:a4:6e:a1:6b:1b:92:5a:72:17:64:ab:ca:b7:40:cf:66:a0:
93:9d:a0:07:f9:a2:98:d8:f8:01:b4:0c:f6:33:aa:4a:50:9e:
31:77:a7:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:29:46 2026 by rpki-client