Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/8c70c4-9060-4ffc-8ad3-6f017e1f1eed/1/PtWjaKny40iTSpFIiEVZQ2I_lus.mft
File: PtWjaKny40iTSpFIiEVZQ2I_lus.mft (raw, json)
Hash identifier: Ri3nN38lTMRhjMeXyT3YLlxRzPdEJ91OpffxwnYZpG0=
Subject key identifier: 4C:1C:CE:84:44:F8:08:A9:30:54:EF:3D:20:0E:06:6D:32:07:A1:41
Authority key identifier: 3E:D5:A3:68:A9:F2:E3:48:93:4A:91:48:88:45:59:43:62:3F:96:EB
Certificate issuer: /CN=3ed5a368a9f2e348934a914888455943623f96eb
Certificate serial: 019D28F3358023EFEF11AFF7CEC9ED98D816
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PtWjaKny40iTSpFIiEVZQ2I_lus.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/8c70c4-9060-4ffc-8ad3-6f017e1f1eed/1/PtWjaKny40iTSpFIiEVZQ2I_lus.mft
Manifest number: 146A
Signing time: Thu 26 Mar 2026 07:02:00 +0000
Manifest this update: Thu 26 Mar 2026 07:02:00 +0000
Manifest next update: Fri 27 Mar 2026 07:02:00 +0000
Files and hashes: 1: PtWjaKny40iTSpFIiEVZQ2I_lus.crl (hash: kFnRi2Fy+hZp/8VVqJziQtCbjdPuTD1ZqOHCfHM2PS4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/8c70c4-9060-4ffc-8ad3-6f017e1f1eed/1/PtWjaKny40iTSpFIiEVZQ2I_lus.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/8c70c4-9060-4ffc-8ad3-6f017e1f1eed/1/PtWjaKny40iTSpFIiEVZQ2I_lus.mft
rsync://rpki.ripe.net/repository/DEFAULT/PtWjaKny40iTSpFIiEVZQ2I_lus.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 07:02:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:f3:35:80:23:ef:ef:11:af:f7:ce:c9:ed:98:d8:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ed5a368a9f2e348934a914888455943623f96eb
Validity
Not Before: Mar 26 07:02:00 2026 GMT
Not After : Mar 27 07:02:00 2026 GMT
Subject: CN=4c1cce8444f808a93054ef3d200e066d3207a141
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:93:e4:55:b7:c8:f2:ef:ae:83:07:e6:91:60:
92:e8:48:62:93:41:90:39:98:5e:6a:27:8d:6b:65:
0b:d4:a8:f8:ae:4c:4b:22:ca:7b:7a:e1:5d:d7:98:
01:77:30:27:0c:81:31:77:3c:60:89:d7:92:b9:8d:
12:48:c8:dc:bc:0d:e6:6e:08:f4:7a:e3:2b:55:43:
44:d1:79:3f:50:51:61:aa:e4:ac:cf:f5:25:b4:e6:
1a:2d:1b:9a:3a:d1:c0:60:1d:29:73:09:86:08:f9:
6d:d5:43:d4:7f:84:3f:5e:f5:ec:06:f0:2c:d1:70:
f5:ce:86:d9:1a:f6:b4:d8:95:5f:07:32:40:92:be:
64:b5:6a:98:47:14:49:cd:36:a9:b1:cb:2b:65:20:
df:55:e7:c0:0e:6b:6c:da:84:87:f2:a4:fa:79:db:
6a:e8:ab:e3:e4:85:86:cc:3b:4a:43:db:6f:6d:e0:
3e:f7:2d:03:37:49:62:18:ee:d8:01:20:c3:ad:86:
2f:27:eb:f9:8f:1f:2a:14:48:84:81:38:5d:d3:ea:
32:45:a5:f6:57:2f:65:b2:c2:9d:c0:60:f9:e6:c2:
b6:03:24:b3:77:40:5f:09:c3:f9:1c:43:c8:19:99:
4e:5b:a8:a6:46:0d:be:74:ae:f3:44:5b:54:1b:c9:
e4:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:1C:CE:84:44:F8:08:A9:30:54:EF:3D:20:0E:06:6D:32:07:A1:41
X509v3 Authority Key Identifier:
keyid:3E:D5:A3:68:A9:F2:E3:48:93:4A:91:48:88:45:59:43:62:3F:96:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PtWjaKny40iTSpFIiEVZQ2I_lus.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/8c70c4-9060-4ffc-8ad3-6f017e1f1eed/1/PtWjaKny40iTSpFIiEVZQ2I_lus.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/8c70c4-9060-4ffc-8ad3-6f017e1f1eed/1/PtWjaKny40iTSpFIiEVZQ2I_lus.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:3a:9c:27:c2:3a:1c:24:25:16:41:4b:bb:da:49:63:47:ad:
54:bf:ef:a6:67:d1:cd:54:46:ad:f6:87:eb:5a:a1:f4:55:f2:
a8:cc:84:7c:75:bf:07:80:cc:58:c0:33:ad:0a:60:8a:19:45:
58:3b:a8:8f:d8:1c:b1:48:ef:36:f6:81:b5:80:b6:c4:b5:cb:
1a:4c:fd:0d:4a:e1:b6:9d:4f:9d:5b:26:8b:c0:ed:78:94:fd:
ac:ce:64:f9:0f:6f:23:92:83:c4:a5:4e:01:18:3d:16:1e:df:
1f:48:4c:8e:78:50:2d:e4:a4:86:00:c5:a5:43:8c:71:d1:cf:
bf:1e:77:8e:9c:35:c2:7b:01:6c:f3:04:ac:18:cc:d5:20:f6:
ac:fe:ec:b7:1c:ec:32:54:4d:65:bd:e4:86:fd:a9:9c:b2:06:
6d:5a:e4:06:e9:c0:9d:fd:3a:2f:75:e0:f7:b6:39:94:29:10:
85:7e:7a:a9:ed:a8:29:14:05:09:26:03:ab:87:d0:22:2e:e0:
9f:cc:d7:3c:90:65:a0:06:8e:5f:d8:84:46:55:85:bb:20:3e:
1a:de:44:1f:e4:92:dd:78:db:42:85:23:32:a6:68:21:f1:56:
17:81:b5:ee:03:f6:77:78:cb:a8:bc:db:e8:f1:ab:f1:10:6a:
61:24:4f:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:52:21 2026 by rpki-client