Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/8d9aa5-d52a-486f-b64c-7c605d32165d/1/lGIh95q-ptPAw0gGQlkN0K4Mqjs.mft
File: lGIh95q-ptPAw0gGQlkN0K4Mqjs.mft (raw, json)
Hash identifier: OihZ6CZurwVgQMCqJmspDAjO59ry7tcHDqmFRvZXqnw=
Subject key identifier: 04:F7:6B:12:BF:64:83:04:7C:58:50:D2:E9:97:DB:30:7B:1C:F6:ED
Authority key identifier: 94:62:21:F7:9A:BE:A6:D3:C0:C3:48:06:42:59:0D:D0:AE:0C:AA:3B
Certificate issuer: /CN=946221f79abea6d3c0c3480642590dd0ae0caa3b
Certificate serial: 019D27045E1F5914B0922AF3057507204932
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lGIh95q-ptPAw0gGQlkN0K4Mqjs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/8d9aa5-d52a-486f-b64c-7c605d32165d/1/lGIh95q-ptPAw0gGQlkN0K4Mqjs.mft
Manifest number: 1586
Signing time: Wed 25 Mar 2026 22:01:30 +0000
Manifest this update: Wed 25 Mar 2026 22:01:30 +0000
Manifest next update: Thu 26 Mar 2026 22:01:30 +0000
Files and hashes: 1: lGIh95q-ptPAw0gGQlkN0K4Mqjs.crl (hash: mNH7GFalWzHqga6f3VQba2iJlzvSYuCp5htBAQewP5Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/8d9aa5-d52a-486f-b64c-7c605d32165d/1/lGIh95q-ptPAw0gGQlkN0K4Mqjs.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/8d9aa5-d52a-486f-b64c-7c605d32165d/1/lGIh95q-ptPAw0gGQlkN0K4Mqjs.mft
rsync://rpki.ripe.net/repository/DEFAULT/lGIh95q-ptPAw0gGQlkN0K4Mqjs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:5e:1f:59:14:b0:92:2a:f3:05:75:07:20:49:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=946221f79abea6d3c0c3480642590dd0ae0caa3b
Validity
Not Before: Mar 25 22:01:30 2026 GMT
Not After : Mar 26 22:01:30 2026 GMT
Subject: CN=04f76b12bf6483047c5850d2e997db307b1cf6ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:02:0c:70:8a:c6:f7:de:c2:79:f9:e0:62:a5:
43:a7:92:0f:4b:c4:b2:08:06:f8:bc:e6:2f:81:63:
fe:31:78:af:67:b6:90:ab:ea:75:73:46:ef:90:2b:
d4:94:96:f3:53:4c:fa:17:f2:58:03:05:5b:5d:ad:
f2:6e:18:28:a2:a1:2b:47:7d:8c:c0:3f:fc:c2:8e:
16:84:8a:88:28:c1:e5:16:64:d5:4f:89:25:1b:1f:
73:aa:d5:f0:ec:9a:50:3a:5b:66:f7:43:e1:5f:1d:
92:fa:9b:a5:18:3e:50:a0:70:57:c4:5e:6e:2d:ee:
b0:76:04:8d:82:9b:e5:f7:ba:db:3b:dc:13:74:3c:
73:ab:a7:76:f1:15:29:fc:24:4c:0a:36:f3:c2:a7:
08:25:6d:9c:be:92:35:35:f5:34:df:1b:a2:fc:c3:
18:94:2d:51:2d:5b:16:d7:8c:b3:1a:b7:16:e2:c9:
27:fd:fa:71:e6:ee:c8:2b:a1:c4:2c:94:f0:f6:bf:
69:ad:84:cf:ec:e8:42:fb:d5:50:43:c3:c6:f7:1b:
2d:4c:63:d4:46:6a:61:07:78:26:72:f2:f9:3e:e6:
1f:9f:82:8a:c5:ff:1c:ac:e9:ff:bd:67:42:68:75:
d6:31:db:d0:6a:35:ca:dd:68:03:ff:19:08:f5:b5:
0f:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:F7:6B:12:BF:64:83:04:7C:58:50:D2:E9:97:DB:30:7B:1C:F6:ED
X509v3 Authority Key Identifier:
keyid:94:62:21:F7:9A:BE:A6:D3:C0:C3:48:06:42:59:0D:D0:AE:0C:AA:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lGIh95q-ptPAw0gGQlkN0K4Mqjs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/8d9aa5-d52a-486f-b64c-7c605d32165d/1/lGIh95q-ptPAw0gGQlkN0K4Mqjs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/8d9aa5-d52a-486f-b64c-7c605d32165d/1/lGIh95q-ptPAw0gGQlkN0K4Mqjs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:36:f1:31:50:aa:af:42:f1:6b:62:d7:f2:61:3b:07:f6:11:
45:fa:de:8b:09:7d:76:b6:75:2f:9e:58:c3:78:9f:94:0c:31:
fd:11:13:c4:26:c3:79:af:df:06:3a:55:ed:f5:ea:4a:b8:e8:
37:cf:01:95:b5:4a:5e:e7:0c:97:20:c8:f1:63:ec:08:ff:d1:
fb:90:29:48:a0:9f:e5:b9:09:c0:10:80:25:f0:70:67:e6:e3:
98:7f:09:78:08:76:54:75:1e:b8:46:a2:67:44:d7:5b:ef:55:
04:25:b5:06:53:3d:d4:04:c9:d5:7f:cc:7a:0d:9f:7e:6b:34:
18:d1:5b:42:37:ff:af:09:5b:e3:e3:08:44:a3:20:95:81:43:
9a:aa:af:b9:e9:be:a3:5d:6d:0d:2b:28:db:74:f8:f8:7b:ad:
be:b5:fd:3c:f5:d6:14:34:a2:54:cf:76:cb:ef:82:5d:27:d3:
2a:23:bc:30:32:d4:db:88:c2:38:f1:82:c1:3e:17:22:ff:9b:
eb:fc:44:67:ee:f6:9c:27:40:4e:d1:57:e3:c7:93:82:c7:b6:
ab:af:b6:4f:9a:ac:d7:4c:ac:b3:52:1d:cc:ac:17:2c:94:21:
e8:c8:ad:71:be:ab:fb:42:85:dd:27:56:ee:32:7e:50:4f:30:
c3:9c:0c:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:11:21 2026 by rpki-client