Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/415748-323e-4fff-a527-62315644b3ce/1/LmvtcNteZzyB8S5zZaNsTz2ie3E.mft
File: LmvtcNteZzyB8S5zZaNsTz2ie3E.mft (raw, json)
Hash identifier: rIvystmazmESVnVYzwBIomsWBS50GvAdIeOMb+zJVuM=
Subject key identifier: 49:A7:9C:14:46:DE:5D:D8:A1:89:3F:5A:F6:67:63:33:75:E7:BB:8A
Authority key identifier: 2E:6B:ED:70:DB:5E:67:3C:81:F1:2E:73:65:A3:6C:4F:3D:A2:7B:71
Certificate issuer: /CN=2e6bed70db5e673c81f12e7365a36c4f3da27b71
Certificate serial: 019D29CE543CF81765236EB308DB25E60F54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LmvtcNteZzyB8S5zZaNsTz2ie3E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/415748-323e-4fff-a527-62315644b3ce/1/LmvtcNteZzyB8S5zZaNsTz2ie3E.mft
Manifest number: 139B
Signing time: Thu 26 Mar 2026 11:01:20 +0000
Manifest this update: Thu 26 Mar 2026 11:01:20 +0000
Manifest next update: Fri 27 Mar 2026 11:01:20 +0000
Files and hashes: 1: LmvtcNteZzyB8S5zZaNsTz2ie3E.crl (hash: PZ9js9uG+Za0sMY6WgVj2M/jNHm//bMSmNvc4HwSRTQ=)
2: QIDwH1Apv1IdS1zr47e95gfDzAw.roa (hash: KfrzWi1fwrRO4OS81VuEDcM52w79Q7KbGOwSe0GzMXs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/415748-323e-4fff-a527-62315644b3ce/1/LmvtcNteZzyB8S5zZaNsTz2ie3E.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/415748-323e-4fff-a527-62315644b3ce/1/LmvtcNteZzyB8S5zZaNsTz2ie3E.mft
rsync://rpki.ripe.net/repository/DEFAULT/LmvtcNteZzyB8S5zZaNsTz2ie3E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:ce:54:3c:f8:17:65:23:6e:b3:08:db:25:e6:0f:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e6bed70db5e673c81f12e7365a36c4f3da27b71
Validity
Not Before: Mar 26 11:01:20 2026 GMT
Not After : Mar 27 11:01:20 2026 GMT
Subject: CN=49a79c1446de5dd8a1893f5af667633375e7bb8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:47:3c:66:45:dd:79:c4:f9:7e:27:04:1c:70:
53:9f:d7:f9:eb:ed:8b:74:c4:e5:4f:db:fa:c9:ae:
3c:e1:f4:08:de:ea:c9:0b:68:9e:b4:2c:a0:ac:7d:
84:24:c2:fc:b3:9d:52:4d:e0:65:ab:a2:d3:9b:cc:
61:38:02:23:14:46:e7:8f:08:c1:94:d9:06:71:34:
55:a9:b9:16:e3:a2:ca:22:57:e2:3c:52:04:01:1a:
fd:43:1f:44:c4:7b:54:af:e2:a3:3a:77:50:7f:ad:
56:00:04:46:00:bf:49:3e:6e:2b:07:59:c0:15:13:
40:42:5f:c9:28:9e:bc:9d:83:61:36:7d:2f:68:ac:
6b:d4:fc:fe:36:46:ec:9f:4e:eb:48:fd:3b:74:4a:
ce:2b:4e:20:40:d2:5d:92:ff:ac:f3:5d:d7:56:16:
f9:a2:43:e7:8f:25:71:5a:89:de:87:6f:33:82:77:
bd:99:e1:b0:5c:b1:ba:0f:74:25:f4:01:cf:7f:6e:
ed:a2:60:22:75:54:fd:ae:83:70:0b:d0:05:07:87:
cc:b5:cb:e5:f6:7a:cc:b1:7d:8d:df:1a:e8:4b:11:
3f:13:5a:5b:c0:bb:9a:a5:cb:f1:32:12:53:e1:a2:
b8:9e:04:c6:55:8e:ea:a7:ac:53:54:65:49:48:83:
3c:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:A7:9C:14:46:DE:5D:D8:A1:89:3F:5A:F6:67:63:33:75:E7:BB:8A
X509v3 Authority Key Identifier:
keyid:2E:6B:ED:70:DB:5E:67:3C:81:F1:2E:73:65:A3:6C:4F:3D:A2:7B:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LmvtcNteZzyB8S5zZaNsTz2ie3E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/415748-323e-4fff-a527-62315644b3ce/1/LmvtcNteZzyB8S5zZaNsTz2ie3E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/415748-323e-4fff-a527-62315644b3ce/1/LmvtcNteZzyB8S5zZaNsTz2ie3E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:2e:b6:42:e6:3a:8c:34:33:81:68:8a:37:10:0b:fc:3a:34:
29:08:b8:c4:32:3c:1d:fc:c2:3d:bc:8e:3f:f4:52:59:21:7f:
b1:1a:63:17:25:41:ec:c3:48:1e:1e:d7:60:d4:57:be:0a:3b:
04:f9:2e:ff:75:92:e5:73:19:c6:1f:aa:0e:31:68:6f:1f:f6:
d4:6c:da:8c:e4:80:9d:c0:d3:99:83:a0:21:77:07:1a:5a:fc:
39:ac:fc:4f:dc:7c:b5:09:9f:40:b8:2e:18:38:66:a9:65:79:
38:1f:e6:61:d8:41:b0:f6:44:10:95:2f:70:0f:0d:a2:11:98:
9d:52:92:3d:20:0c:e1:cd:a2:03:98:8a:cf:ac:6f:41:95:ee:
9d:d3:cd:ae:82:69:b1:c6:13:2e:44:fb:7d:2b:50:20:2c:a5:
8c:24:17:75:42:e7:25:03:f1:5d:c7:44:43:71:f0:cf:6b:19:
dc:17:d4:36:27:66:fd:78:8c:6f:d1:b7:0c:f7:79:0f:c3:37:
c8:8e:3b:20:65:6b:2a:20:68:42:73:d9:0f:80:d1:37:72:84:
05:87:8c:f8:3d:fa:6d:ce:0a:6b:83:7e:44:94:84:d4:67:bc:
7c:96:00:6f:3b:04:3a:14:4d:e7:8b:fc:99:ce:40:a5:40:1c:
bb:59:c0:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:34:56 2026 by rpki-client