Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/fd52f7-0ffa-4f1d-9d02-147d486f4050/1/_LMpnwXCDWOVnOd4G1qOBy9XzLQ.mft
File: _LMpnwXCDWOVnOd4G1qOBy9XzLQ.mft (raw, json)
Hash identifier: srXlSijsRWnb5xQ6GwemBlTa/SslUKhh2JrM1roK9dM=
Subject key identifier: FD:83:E0:99:46:A6:A7:D3:2D:B8:58:65:A1:B5:B5:96:E2:3A:3C:6C
Authority key identifier: FC:B3:29:9F:05:C2:0D:63:95:9C:E7:78:1B:5A:8E:07:2F:57:CC:B4
Certificate issuer: /CN=fcb3299f05c20d63959ce7781b5a8e072f57ccb4
Certificate serial: 019D29CDFC1A640EE8C4DD896E1635E5AF6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_LMpnwXCDWOVnOd4G1qOBy9XzLQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/fd52f7-0ffa-4f1d-9d02-147d486f4050/1/_LMpnwXCDWOVnOd4G1qOBy9XzLQ.mft
Manifest number: 1629
Signing time: Thu 26 Mar 2026 11:00:58 +0000
Manifest this update: Thu 26 Mar 2026 11:00:58 +0000
Manifest next update: Fri 27 Mar 2026 11:00:58 +0000
Files and hashes: 1: _LMpnwXCDWOVnOd4G1qOBy9XzLQ.crl (hash: d8XgHlSx6Skw4rHCwptEdOr8rY5P4rnzn+uFT865GVI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/fd52f7-0ffa-4f1d-9d02-147d486f4050/1/_LMpnwXCDWOVnOd4G1qOBy9XzLQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/fd52f7-0ffa-4f1d-9d02-147d486f4050/1/_LMpnwXCDWOVnOd4G1qOBy9XzLQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/_LMpnwXCDWOVnOd4G1qOBy9XzLQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 11:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:cd:fc:1a:64:0e:e8:c4:dd:89:6e:16:35:e5:af:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fcb3299f05c20d63959ce7781b5a8e072f57ccb4
Validity
Not Before: Mar 26 11:00:58 2026 GMT
Not After : Mar 27 11:00:58 2026 GMT
Subject: CN=fd83e09946a6a7d32db85865a1b5b596e23a3c6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:91:a9:f5:db:cd:dc:89:df:28:3d:8b:6f:32:
1e:8a:a8:0f:76:e9:5e:23:f1:02:23:4b:a9:40:f3:
71:d6:93:83:67:13:ae:6a:79:1d:54:95:26:6c:89:
28:f4:2b:06:a0:2e:45:ef:fa:af:0f:13:0e:34:41:
ef:ae:67:e0:7a:b3:68:8e:39:7a:5f:dc:60:c2:9e:
9f:9a:b6:2d:c1:b1:ed:e6:0c:31:fe:93:b5:ff:3a:
c3:7e:04:2d:c4:e5:cc:b1:a6:c4:21:ee:45:2d:b0:
50:ea:9d:cd:70:44:64:de:2b:c6:50:5b:ca:85:94:
18:cd:33:16:3f:c1:aa:52:ee:23:ec:fc:e1:6e:1c:
36:bb:de:70:53:34:8b:5c:6a:3d:c5:b0:dd:f3:71:
f1:16:a6:04:91:12:da:c0:10:94:63:3c:21:70:0d:
78:c5:54:fe:eb:1e:e4:0d:52:29:32:2c:ee:4f:ef:
f9:8e:a4:37:c0:e6:38:22:bb:16:8f:46:5e:c7:49:
50:87:79:a1:64:8b:83:32:ed:df:bd:17:e6:2b:a5:
88:a8:ac:ac:31:8e:cf:36:99:36:99:ab:8d:96:bb:
87:60:4b:5c:fc:19:d0:8f:2a:dd:81:a4:3f:2b:1c:
53:27:82:29:78:79:46:aa:eb:9f:14:61:d9:de:6c:
64:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:83:E0:99:46:A6:A7:D3:2D:B8:58:65:A1:B5:B5:96:E2:3A:3C:6C
X509v3 Authority Key Identifier:
keyid:FC:B3:29:9F:05:C2:0D:63:95:9C:E7:78:1B:5A:8E:07:2F:57:CC:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_LMpnwXCDWOVnOd4G1qOBy9XzLQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/fd52f7-0ffa-4f1d-9d02-147d486f4050/1/_LMpnwXCDWOVnOd4G1qOBy9XzLQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/fd52f7-0ffa-4f1d-9d02-147d486f4050/1/_LMpnwXCDWOVnOd4G1qOBy9XzLQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:9f:42:a2:ec:e7:8f:1b:28:7f:93:84:eb:b7:02:2a:86:3c:
ad:ef:66:f6:cf:df:d8:0d:60:14:75:75:fa:5f:9a:68:4c:a6:
47:60:cc:5d:03:c4:71:31:6c:90:eb:31:ed:39:2c:ef:43:a6:
af:9c:b4:b3:6c:d6:4e:bf:8d:15:34:45:e4:fb:13:6d:34:ec:
5d:85:40:09:6f:81:b1:39:2c:98:42:23:77:3f:15:06:51:7e:
f5:39:3b:ee:77:0c:97:67:81:b2:1e:61:e3:49:17:3c:e7:4c:
29:c4:d6:7a:18:f1:ad:85:95:35:56:29:d5:85:72:96:e0:1d:
06:55:2e:30:8b:f6:da:2e:1b:7e:1f:ab:6f:b5:52:f5:ad:4e:
b5:28:de:df:9b:1a:4b:9d:b3:f5:4e:2b:4c:c0:c5:44:bd:49:
2a:8b:6c:62:97:ad:80:71:1d:0d:31:59:84:b2:4b:1c:25:15:
73:d4:6f:12:2a:cd:0e:27:77:80:22:c6:e8:b1:f6:1b:f1:95:
66:68:b5:e3:f0:51:76:62:50:54:8d:fc:a4:89:03:32:c1:4f:
da:69:83:15:20:2a:4e:86:1d:6e:3b:15:92:64:b6:de:93:e3:
27:ca:cc:2f:2d:58:5e:db:c6:73:f7:52:0d:2f:29:f6:b4:7b:
a0:32:87:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 22:49:46 2026 by rpki-client