Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/9c036c-56c5-41e1-87f8-b7780396faf4/1/lOvBA1TTG_33wdg1EN8N1mzoNaw.mft
File: lOvBA1TTG_33wdg1EN8N1mzoNaw.mft (raw, json)
Hash identifier: bcQf9D4FwhitvT/XuztQKqotj/oGZdbVjLo1JfXMOy0=
Subject key identifier: 34:7E:79:3A:21:DC:1A:CA:7F:84:A9:2D:04:8D:AF:84:22:68:56:27
Authority key identifier: 94:EB:C1:03:54:D3:1B:FD:F7:C1:D8:35:10:DF:0D:D6:6C:E8:35:AC
Certificate issuer: /CN=94ebc10354d31bfdf7c1d83510df0dd66ce835ac
Certificate serial: 019D38669D9E6184D7DC6AF8C119A2298575
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lOvBA1TTG_33wdg1EN8N1mzoNaw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/9c036c-56c5-41e1-87f8-b7780396faf4/1/lOvBA1TTG_33wdg1EN8N1mzoNaw.mft
Manifest number: 188B
Signing time: Sun 29 Mar 2026 07:02:22 +0000
Manifest this update: Sun 29 Mar 2026 07:02:22 +0000
Manifest next update: Mon 30 Mar 2026 07:02:22 +0000
Files and hashes: 1: lOvBA1TTG_33wdg1EN8N1mzoNaw.crl (hash: QUPceEP33y92o3msBDzOR2ICiJnJCmEP3TaBXRfS5RY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/9c036c-56c5-41e1-87f8-b7780396faf4/1/lOvBA1TTG_33wdg1EN8N1mzoNaw.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/9c036c-56c5-41e1-87f8-b7780396faf4/1/lOvBA1TTG_33wdg1EN8N1mzoNaw.mft
rsync://rpki.ripe.net/repository/DEFAULT/lOvBA1TTG_33wdg1EN8N1mzoNaw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:9d:9e:61:84:d7:dc:6a:f8:c1:19:a2:29:85:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94ebc10354d31bfdf7c1d83510df0dd66ce835ac
Validity
Not Before: Mar 29 07:02:22 2026 GMT
Not After : Mar 30 07:02:22 2026 GMT
Subject: CN=347e793a21dc1aca7f84a92d048daf8422685627
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:dc:65:df:26:3a:ab:a3:78:ec:79:07:86:ab:
c7:15:e3:b9:25:35:5a:88:ae:d8:60:7d:a4:54:80:
0e:52:a0:9d:c6:1b:fa:27:77:f0:3a:90:49:b8:22:
eb:5b:d2:4d:10:60:de:0f:8a:71:c4:2f:ed:f7:04:
63:9e:f9:23:fb:1b:b5:cf:28:08:4e:3f:ce:1c:e9:
f2:7f:42:22:f7:93:86:c0:5f:eb:a4:48:9d:b1:ec:
1c:df:71:00:0f:9c:ef:86:d2:fe:9b:f8:16:7a:7e:
af:95:e7:9f:b0:51:38:df:92:c5:85:9b:66:78:c6:
cc:66:37:e3:ca:4c:a3:f2:ec:60:f1:48:5e:0b:b8:
8e:2b:1a:d4:25:a5:60:84:52:ef:ef:85:c1:4f:4f:
0d:41:de:13:16:77:74:68:ab:0b:73:7f:cd:01:06:
73:10:da:38:49:b8:ef:cc:b9:5d:45:ac:e8:f4:dc:
82:f3:28:43:a0:02:dc:5e:63:ad:0b:79:5a:ad:ca:
3e:b9:5b:81:d6:8d:3f:60:24:c6:07:61:08:f4:1d:
a9:1a:c5:20:16:c8:f3:5e:fc:fa:ea:03:e1:d4:2f:
55:39:78:00:99:e9:76:89:1c:69:a5:9d:1e:72:78:
28:b2:98:5c:80:50:a4:b0:fb:9f:7a:ce:b5:0f:71:
e4:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:7E:79:3A:21:DC:1A:CA:7F:84:A9:2D:04:8D:AF:84:22:68:56:27
X509v3 Authority Key Identifier:
keyid:94:EB:C1:03:54:D3:1B:FD:F7:C1:D8:35:10:DF:0D:D6:6C:E8:35:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lOvBA1TTG_33wdg1EN8N1mzoNaw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/9c036c-56c5-41e1-87f8-b7780396faf4/1/lOvBA1TTG_33wdg1EN8N1mzoNaw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/9c036c-56c5-41e1-87f8-b7780396faf4/1/lOvBA1TTG_33wdg1EN8N1mzoNaw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:0f:6b:85:2a:52:51:78:11:19:ee:c2:31:b0:b2:d2:c6:6d:
14:17:32:f5:ab:c8:fb:21:a0:37:59:bc:c5:19:17:cc:ed:5d:
00:9f:6b:af:df:68:60:84:a0:9e:96:16:be:c6:2e:c6:75:76:
27:57:64:1f:78:13:96:95:03:08:bf:58:d8:d4:ea:18:ae:78:
34:fa:ad:c4:7d:ea:e6:52:d0:67:e9:d8:5f:2e:8f:bb:33:5f:
7a:0c:74:e9:45:af:81:92:e5:24:b4:ba:24:d8:44:b0:de:f0:
73:48:e3:ec:01:f9:3d:34:b8:40:ba:f6:1b:a8:b1:0a:9f:e3:
5a:e5:49:90:a8:05:44:73:8f:ed:58:32:fb:40:63:38:96:2a:
9b:9a:87:21:ef:bb:ee:94:7d:45:1e:05:47:e6:40:e9:00:2d:
ea:a9:67:a3:5c:7a:0e:f1:b1:e9:07:d7:58:71:ef:00:ce:78:
1b:63:25:5d:3a:7f:fe:46:41:49:93:91:a3:a2:0e:9b:fd:99:
38:c3:fa:a7:71:c4:f5:de:7e:85:26:08:50:dc:00:c6:81:70:
78:a1:14:a4:69:5f:e1:f5:e5:a5:6c:70:21:77:f2:86:10:8b:
df:df:c5:61:f4:90:62:d5:f5:c3:5d:d3:ef:6c:51:d4:40:bc:
f5:f1:09:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:08:23 2026 by rpki-client