Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/7bd8f3-4753-42cd-8ff3-6333186589a9/1/lg5oyDibCdw0VGSkAK8nZWjn-Wo.mft
File: lg5oyDibCdw0VGSkAK8nZWjn-Wo.mft (raw, json)
Hash identifier: NHZAZxTtJscdSMEQ75fOVJ5M+VbTnZFdYbdxUo9ZIKQ=
Subject key identifier: 81:66:4F:F6:6B:F9:ED:AB:A2:7A:7B:DD:4D:C6:46:BD:21:2B:B5:2B
Authority key identifier: 96:0E:68:C8:38:9B:09:DC:34:54:64:A4:00:AF:27:65:68:E7:F9:6A
Certificate issuer: /CN=960e68c8389b09dc345464a400af276568e7f96a
Certificate serial: 019D25BA0A494FD66B4F93A34F89DDC057A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lg5oyDibCdw0VGSkAK8nZWjn-Wo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/7bd8f3-4753-42cd-8ff3-6333186589a9/1/lg5oyDibCdw0VGSkAK8nZWjn-Wo.mft
Manifest number: 1107
Signing time: Wed 25 Mar 2026 16:00:42 +0000
Manifest this update: Wed 25 Mar 2026 16:00:42 +0000
Manifest next update: Thu 26 Mar 2026 16:00:42 +0000
Files and hashes: 1: lg5oyDibCdw0VGSkAK8nZWjn-Wo.crl (hash: 2ELNQ8xY4u+9nc9Kt9/V2Bcr0Xzd2wtBNKMryNP8uHU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/7bd8f3-4753-42cd-8ff3-6333186589a9/1/lg5oyDibCdw0VGSkAK8nZWjn-Wo.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/7bd8f3-4753-42cd-8ff3-6333186589a9/1/lg5oyDibCdw0VGSkAK8nZWjn-Wo.mft
rsync://rpki.ripe.net/repository/DEFAULT/lg5oyDibCdw0VGSkAK8nZWjn-Wo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:ba:0a:49:4f:d6:6b:4f:93:a3:4f:89:dd:c0:57:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=960e68c8389b09dc345464a400af276568e7f96a
Validity
Not Before: Mar 25 16:00:42 2026 GMT
Not After : Mar 26 16:00:42 2026 GMT
Subject: CN=81664ff66bf9edaba27a7bdd4dc646bd212bb52b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:f3:e2:80:03:a6:cb:2e:78:f3:1e:6e:e2:1c:
d5:7b:09:75:7b:87:3d:8e:81:10:05:39:ca:e4:9b:
80:8e:fa:eb:25:52:4f:59:08:38:4c:01:d5:b2:7e:
93:5a:59:e5:94:1f:92:f0:f5:07:2a:87:94:42:d5:
78:77:19:2e:c8:d1:ea:95:f5:99:17:a0:10:5a:e5:
50:83:39:1b:ba:53:f6:b9:62:03:02:bc:d8:fe:21:
99:8e:f1:6b:71:07:23:88:75:a4:54:20:51:d2:ad:
a9:86:3a:11:6d:1b:49:61:6d:62:0f:ef:e8:ca:3e:
ba:22:9d:da:23:63:6d:4b:55:0a:7b:b6:b4:61:ba:
e5:3a:04:9d:85:c5:50:e5:f7:ac:8c:bc:e6:f5:7a:
3a:f0:d4:0e:bf:19:49:cc:a1:91:bc:29:4f:4b:80:
26:56:97:d9:42:76:d6:0b:55:98:97:b7:ab:ae:c0:
2b:72:3a:51:7f:71:bc:66:b2:78:29:0c:ac:c0:f0:
25:3e:bb:14:0a:b9:b0:1e:3c:2f:fc:2f:f2:a2:28:
1e:53:22:9c:81:8b:4a:db:4d:5e:bc:c4:8a:61:f0:
cb:67:73:cd:38:94:fc:72:3b:e4:34:de:3d:60:fa:
84:31:1c:a7:5b:81:c8:fe:62:dd:b9:c8:d7:f4:e0:
88:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:66:4F:F6:6B:F9:ED:AB:A2:7A:7B:DD:4D:C6:46:BD:21:2B:B5:2B
X509v3 Authority Key Identifier:
keyid:96:0E:68:C8:38:9B:09:DC:34:54:64:A4:00:AF:27:65:68:E7:F9:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lg5oyDibCdw0VGSkAK8nZWjn-Wo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/7bd8f3-4753-42cd-8ff3-6333186589a9/1/lg5oyDibCdw0VGSkAK8nZWjn-Wo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/7bd8f3-4753-42cd-8ff3-6333186589a9/1/lg5oyDibCdw0VGSkAK8nZWjn-Wo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:36:80:ac:f1:d4:e8:ba:fb:c6:12:4f:40:ee:38:02:92:1c:
92:53:25:5d:b2:eb:ef:d3:4b:d1:6b:59:7f:22:5c:06:7b:f7:
96:d2:19:6e:48:db:d6:1a:23:4e:eb:04:e5:7b:d2:56:8c:68:
cc:ac:1e:23:d5:eb:a4:01:14:e2:50:e8:46:2d:06:e6:db:e9:
1d:63:65:fc:fd:3b:49:a4:66:ae:b3:37:14:29:fa:a3:6e:52:
d2:6b:f0:92:bb:37:6b:af:8d:6d:1d:a9:8c:4f:a4:4d:48:cd:
22:21:6e:ae:6e:08:fe:e5:a6:c8:10:1e:0f:8e:41:d4:03:58:
c5:23:c2:0d:bd:dd:08:51:77:98:1f:50:bb:c2:cd:a6:41:52:
5b:7e:97:16:f9:d2:b1:2a:cd:eb:bd:c3:60:a8:b6:4e:99:32:
d9:a3:80:15:9d:bb:07:79:08:c4:27:39:5e:ed:51:1d:b1:e5:
04:9f:06:a9:77:1b:a1:ff:df:64:e2:45:7c:63:05:2b:2c:09:
b4:f1:28:f5:03:c5:69:eb:f3:6a:90:54:2e:05:d5:af:62:a6:
27:7b:d7:5b:36:c9:36:71:a0:7c:2a:17:09:40:ac:bd:c4:fa:
61:3b:7e:1d:09:bf:75:0f:ba:44:d9:50:a4:94:09:3e:72:4d:
9d:f0:7b:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:50:17 2026 by rpki-client