Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/dffa1f-cf4a-4c90-b307-db36eea8307f/1/Lc0sLBQRtGsY9w5ncQGtoRzLUZg.mft
File: Lc0sLBQRtGsY9w5ncQGtoRzLUZg.mft (raw, json)
Hash identifier: vIKQc2M68HACgZBS0v1IOhDSlGA7q0oj/JmQgz771oE=
Subject key identifier: 12:E6:B7:CE:1A:E8:83:C6:91:74:03:2F:17:41:E9:19:00:DB:14:08
Authority key identifier: 2D:CD:2C:2C:14:11:B4:6B:18:F7:0E:67:71:01:AD:A1:1C:CB:51:98
Certificate issuer: /CN=2dcd2c2c1411b46b18f70e677101ada11ccb5198
Certificate serial: 019D27DFA63D7DFA4661E853829B8CC39604
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Lc0sLBQRtGsY9w5ncQGtoRzLUZg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/dffa1f-cf4a-4c90-b307-db36eea8307f/1/Lc0sLBQRtGsY9w5ncQGtoRzLUZg.mft
Manifest number: 0421
Signing time: Thu 26 Mar 2026 02:01:01 +0000
Manifest this update: Thu 26 Mar 2026 02:01:01 +0000
Manifest next update: Fri 27 Mar 2026 02:01:01 +0000
Files and hashes: 1: Lc0sLBQRtGsY9w5ncQGtoRzLUZg.crl (hash: w+PZIikKbxd2EGD7vgI1BvM/6wh0UzjlydRSlWuL6+w=)
2: ntTY6bNs75yEDx8qQmeYR0RBDCE.roa (hash: iKXOwiDpqDa+XDGha/hoiXx2V9ibK6G6tZTQtPFDEqI=)
3: sFud2BTbJwkG-pVAdyDfG15ADY4.roa (hash: eFUaMvgAqEZ4NQM49KaL16OfknWWnOfs9H02j9J+2Bs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/dffa1f-cf4a-4c90-b307-db36eea8307f/1/Lc0sLBQRtGsY9w5ncQGtoRzLUZg.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/dffa1f-cf4a-4c90-b307-db36eea8307f/1/Lc0sLBQRtGsY9w5ncQGtoRzLUZg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Lc0sLBQRtGsY9w5ncQGtoRzLUZg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:df:a6:3d:7d:fa:46:61:e8:53:82:9b:8c:c3:96:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2dcd2c2c1411b46b18f70e677101ada11ccb5198
Validity
Not Before: Mar 26 02:01:01 2026 GMT
Not After : Mar 27 02:01:01 2026 GMT
Subject: CN=12e6b7ce1ae883c69174032f1741e91900db1408
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:19:0b:a7:b3:26:22:e8:60:9c:28:58:5d:1c:
f9:8a:6c:2b:81:89:e5:90:2f:f4:a5:4c:82:dd:d9:
66:88:9e:0c:76:5c:72:02:53:53:2e:c2:72:94:a9:
38:ea:b1:67:6a:92:8a:17:f3:b1:9c:8c:f9:ee:a9:
1b:44:86:45:69:ec:3f:77:31:b5:46:46:cf:94:86:
81:38:c8:16:19:5f:ee:d3:db:57:68:85:d1:e1:28:
91:bd:bd:2c:6d:4c:9a:a2:83:dd:e6:b0:12:ff:e1:
38:bc:41:cf:d5:d4:5d:9a:ed:d0:8f:82:1a:a7:5e:
fa:c0:7f:f5:5b:c6:2b:85:14:06:0d:14:ad:54:13:
b7:fc:71:00:7d:60:92:ea:48:cb:a6:f8:e3:12:f8:
ce:07:3f:f6:b3:b8:9c:e9:74:bb:55:3a:a5:00:fc:
28:3f:ef:96:d9:3c:26:d0:6d:19:53:71:3d:78:4f:
0a:a1:c9:a1:c0:ef:89:bc:55:d2:d8:95:d8:6b:14:
ec:78:18:5f:21:fd:24:0c:91:56:ba:65:b2:87:c4:
0c:a9:a1:b9:ae:0e:d2:c6:ef:d2:14:de:ec:ef:e5:
e7:53:5f:50:98:73:d9:d9:51:74:da:27:e4:b1:27:
9a:97:d2:9c:a3:9b:19:f7:cc:0a:3d:f8:43:c0:f2:
88:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:E6:B7:CE:1A:E8:83:C6:91:74:03:2F:17:41:E9:19:00:DB:14:08
X509v3 Authority Key Identifier:
keyid:2D:CD:2C:2C:14:11:B4:6B:18:F7:0E:67:71:01:AD:A1:1C:CB:51:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lc0sLBQRtGsY9w5ncQGtoRzLUZg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/dffa1f-cf4a-4c90-b307-db36eea8307f/1/Lc0sLBQRtGsY9w5ncQGtoRzLUZg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/dffa1f-cf4a-4c90-b307-db36eea8307f/1/Lc0sLBQRtGsY9w5ncQGtoRzLUZg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:03:dd:d6:70:41:58:4d:10:ca:82:44:02:8d:1b:4a:5e:b9:
7c:fb:c5:0e:b5:a3:95:04:62:e4:22:eb:ee:17:0c:c1:48:df:
30:a1:03:04:f9:83:51:b5:88:a5:4f:c8:c8:7c:4b:a6:55:9e:
79:20:37:45:6b:d1:f5:99:27:01:f0:d4:73:cc:68:d8:ae:ab:
84:d6:16:bb:f4:6e:70:1d:dd:b5:6a:59:64:58:0f:33:8a:80:
c7:a9:65:7b:de:e0:7a:2b:c2:28:8d:54:be:ea:0c:e7:2b:e4:
99:55:89:60:cb:48:fe:98:8a:d3:f9:09:f0:85:1f:e7:1f:75:
d2:60:af:77:26:32:0a:68:3a:c2:a1:7d:1c:f5:6d:bb:63:6b:
65:3f:fe:19:ca:28:65:13:9a:1d:16:ee:9c:fa:84:4c:04:42:
44:49:c0:cb:5c:14:2c:72:ae:49:16:66:07:f6:df:04:ad:2e:
34:27:d1:0c:e1:51:67:2d:59:f8:5e:90:8f:dc:ff:de:0f:e1:
23:d5:e0:34:ab:4d:fa:34:a1:69:84:b3:96:aa:98:7e:b6:50:
94:ef:17:a1:c4:06:32:2f:71:84:75:10:80:f1:23:9a:fc:c0:
7d:bf:9c:17:c8:b5:ec:fa:66:92:fc:1d:98:50:d7:87:a8:1e:
0d:c4:b1:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:57:12 2026 by rpki-client