Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/92c29e-1187-409d-a8fc-97ebedbd1de8/1/LaHChooOsX9ndcGKMu_0pgn4g3Q.mft
File: LaHChooOsX9ndcGKMu_0pgn4g3Q.mft (raw, json)
Hash identifier: PNMRWExkI0zOEV4PW03TAsbxlKQiUn8KkpXOwTM3ojM=
Subject key identifier: 23:6B:22:82:4A:D6:D1:F8:0D:93:6D:E6:EF:85:84:E1:1C:FD:38:6C
Authority key identifier: 2D:A1:C2:86:8A:0E:B1:7F:67:75:C1:8A:32:EF:F4:A6:09:F8:83:74
Certificate issuer: /CN=2da1c2868a0eb17f6775c18a32eff4a609f88374
Certificate serial: 019D322BB266AF046F6D365854C21BE2BB49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LaHChooOsX9ndcGKMu_0pgn4g3Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/92c29e-1187-409d-a8fc-97ebedbd1de8/1/LaHChooOsX9ndcGKMu_0pgn4g3Q.mft
Manifest number: E7
Signing time: Sat 28 Mar 2026 02:00:17 +0000
Manifest this update: Sat 28 Mar 2026 02:00:17 +0000
Manifest next update: Sun 29 Mar 2026 02:00:17 +0000
Files and hashes: 1: LaHChooOsX9ndcGKMu_0pgn4g3Q.crl (hash: bKpHtMtRUoizEMjEUBdrqAcEzbUlewPFCs6TNyi9yi0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/92c29e-1187-409d-a8fc-97ebedbd1de8/1/LaHChooOsX9ndcGKMu_0pgn4g3Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/92c29e-1187-409d-a8fc-97ebedbd1de8/1/LaHChooOsX9ndcGKMu_0pgn4g3Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/LaHChooOsX9ndcGKMu_0pgn4g3Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 02:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:32:2b:b2:66:af:04:6f:6d:36:58:54:c2:1b:e2:bb:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2da1c2868a0eb17f6775c18a32eff4a609f88374
Validity
Not Before: Mar 28 02:00:17 2026 GMT
Not After : Mar 29 02:00:17 2026 GMT
Subject: CN=236b22824ad6d1f80d936de6ef8584e11cfd386c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:3e:1c:f9:7f:4f:99:f7:26:53:55:7a:8f:8a:
15:f3:bb:84:fd:ee:3f:5b:31:ed:49:03:ce:2f:ec:
31:75:fe:31:84:fd:e6:ed:65:0e:2d:27:6d:40:f0:
98:19:f8:9a:2c:42:3b:c6:a8:2c:38:d0:d0:59:a7:
48:4c:7c:f8:bf:d7:a6:a3:d0:c6:6a:3c:9c:b9:60:
94:aa:f8:db:12:4b:e7:36:2d:17:27:50:96:88:89:
ba:d1:ef:02:5b:32:ec:9d:96:6d:67:45:66:06:ff:
3d:76:69:03:85:cb:eb:84:7c:1e:ab:81:85:b6:7b:
93:4a:bb:cd:01:47:b3:c5:12:60:78:28:3f:0b:d9:
85:7b:46:76:98:d7:31:1d:39:74:61:09:47:a8:42:
92:61:bf:e8:4b:17:1a:ae:d8:f6:c5:fb:58:46:d6:
69:c1:d1:3e:21:0b:e1:db:81:24:b0:87:aa:d8:f4:
15:46:f6:77:26:2c:4a:8e:63:ef:c4:4b:21:53:b9:
77:36:50:bd:c0:8a:d7:32:c9:aa:85:ef:77:6d:f6:
a2:57:5e:8c:1b:28:10:73:a8:75:7f:46:aa:cc:f4:
60:94:4e:b7:f3:df:c1:d7:5b:0e:82:88:64:a0:1e:
3d:0c:28:d0:02:84:1e:83:c4:b0:2f:6d:73:f6:a1:
1c:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:6B:22:82:4A:D6:D1:F8:0D:93:6D:E6:EF:85:84:E1:1C:FD:38:6C
X509v3 Authority Key Identifier:
keyid:2D:A1:C2:86:8A:0E:B1:7F:67:75:C1:8A:32:EF:F4:A6:09:F8:83:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LaHChooOsX9ndcGKMu_0pgn4g3Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/92c29e-1187-409d-a8fc-97ebedbd1de8/1/LaHChooOsX9ndcGKMu_0pgn4g3Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/92c29e-1187-409d-a8fc-97ebedbd1de8/1/LaHChooOsX9ndcGKMu_0pgn4g3Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:bd:28:27:d7:b9:3f:55:3c:93:ef:65:09:e0:27:2f:be:a8:
44:04:16:0a:76:5d:46:37:7e:ce:24:8d:0b:7a:e0:43:52:04:
73:a4:9e:f2:f3:c7:a9:b5:49:2b:5c:56:09:f1:10:d3:9d:4c:
25:c2:34:78:dd:79:be:f5:fb:4d:2d:95:71:1f:92:ff:d6:7b:
1e:50:3c:bf:2b:ff:21:bf:0c:77:bf:20:6d:f6:f0:7f:99:25:
a9:d3:40:f2:53:be:07:e1:09:74:c6:1c:9b:81:4a:91:32:9a:
8c:ef:86:7e:3c:0e:46:9c:d2:db:01:14:b2:d0:24:f1:4a:1d:
3e:22:e0:8f:19:7f:80:93:3e:b2:e3:81:48:8e:8a:96:16:7b:
b5:eb:a2:e3:4d:bd:3b:5c:e7:e7:3c:67:48:07:e5:b7:63:ff:
d3:3f:23:fe:2d:7c:7a:f7:e7:78:f3:fd:5b:f1:7a:b1:71:d9:
2b:de:f4:49:3f:72:49:78:71:b1:5d:2f:fb:be:f1:c2:3a:c6:
92:00:0c:ad:c5:e1:85:a7:c2:68:8e:19:98:5b:39:c2:f0:11:
bf:15:46:95:4d:57:44:62:36:52:4c:c1:74:6e:dd:87:3f:f5:
10:17:12:81:9c:23:4f:78:c8:7e:0d:e9:18:34:c0:b4:d2:e0:
2f:4d:e3:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 11:39:34 2026 by rpki-client