Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/59f376-dfbe-478a-b81e-f4979d50ee22/1/lpblIk_vUX9NzGbBQQNSzIq_si4.mft
File: lpblIk_vUX9NzGbBQQNSzIq_si4.mft (raw, json)
Hash identifier: eIZ6W4gCrydSRFz8o70JMfXwZ6bEOTlH9HlA8LJ1iYc=
Subject key identifier: DD:31:52:BC:C4:9D:3B:93:66:42:1D:CE:33:DD:80:BF:4A:B4:98:54
Authority key identifier: 96:96:E5:22:4F:EF:51:7F:4D:CC:66:C1:41:03:52:CC:8A:BF:B2:2E
Certificate issuer: /CN=9696e5224fef517f4dcc66c1410352cc8abfb22e
Certificate serial: 019D2AE0DEC0311A0BA3ABAF37516090D38E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lpblIk_vUX9NzGbBQQNSzIq_si4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/59f376-dfbe-478a-b81e-f4979d50ee22/1/lpblIk_vUX9NzGbBQQNSzIq_si4.mft
Manifest number: 1814
Signing time: Thu 26 Mar 2026 16:01:13 +0000
Manifest this update: Thu 26 Mar 2026 16:01:13 +0000
Manifest next update: Fri 27 Mar 2026 16:01:13 +0000
Files and hashes: 1: lpblIk_vUX9NzGbBQQNSzIq_si4.crl (hash: LsqeyDDBUlH1PV46/r6AOO5eGZTSfMpPl11qJv22JGg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/59f376-dfbe-478a-b81e-f4979d50ee22/1/lpblIk_vUX9NzGbBQQNSzIq_si4.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/59f376-dfbe-478a-b81e-f4979d50ee22/1/lpblIk_vUX9NzGbBQQNSzIq_si4.mft
rsync://rpki.ripe.net/repository/DEFAULT/lpblIk_vUX9NzGbBQQNSzIq_si4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 16:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:e0:de:c0:31:1a:0b:a3:ab:af:37:51:60:90:d3:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9696e5224fef517f4dcc66c1410352cc8abfb22e
Validity
Not Before: Mar 26 16:01:13 2026 GMT
Not After : Mar 27 16:01:13 2026 GMT
Subject: CN=dd3152bcc49d3b9366421dce33dd80bf4ab49854
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:7d:f1:16:bc:ef:0b:2c:49:71:74:3d:11:db:
77:e0:44:b6:b2:3e:89:e1:e5:e1:32:fd:b5:35:ef:
4f:4a:1a:a4:75:9c:5a:9f:9e:62:93:c0:6b:30:60:
a2:6b:1c:81:16:e7:95:0a:45:05:b2:09:ef:1e:99:
d3:4f:3a:04:bb:50:29:f5:f6:26:8e:0f:8e:49:79:
6e:0c:df:ca:fb:2a:51:8d:f5:fe:17:03:8a:30:c4:
7f:0a:84:8a:7b:26:4d:ad:52:f8:63:30:8d:e2:d7:
0b:1f:b7:3c:9a:48:4b:1a:7a:ce:d7:8a:28:43:25:
01:14:5c:5c:1e:ec:74:8d:61:0f:3a:44:e5:57:e6:
8e:21:85:86:66:26:00:93:f1:0d:d4:c5:2b:8a:75:
e0:6e:64:f1:be:05:a5:aa:15:ff:65:0b:fc:65:d9:
c4:26:fb:4d:a6:6f:fb:db:3c:7e:3c:97:eb:ae:cf:
80:f9:00:c9:50:3c:af:55:1e:51:24:20:5a:f6:63:
7d:a7:98:b8:18:a4:46:e5:50:6b:55:81:3c:b3:6c:
7c:3d:d3:ce:6a:e8:85:aa:ad:21:9f:f1:a4:ce:ad:
6a:29:63:e6:8e:3b:0c:e8:3d:79:d1:32:4d:eb:8f:
65:43:c7:9b:84:a2:9d:f1:27:fe:85:16:37:d6:ca:
a8:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:31:52:BC:C4:9D:3B:93:66:42:1D:CE:33:DD:80:BF:4A:B4:98:54
X509v3 Authority Key Identifier:
keyid:96:96:E5:22:4F:EF:51:7F:4D:CC:66:C1:41:03:52:CC:8A:BF:B2:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lpblIk_vUX9NzGbBQQNSzIq_si4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/59f376-dfbe-478a-b81e-f4979d50ee22/1/lpblIk_vUX9NzGbBQQNSzIq_si4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/59f376-dfbe-478a-b81e-f4979d50ee22/1/lpblIk_vUX9NzGbBQQNSzIq_si4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:78:20:c5:d5:fa:94:9e:96:55:e7:33:83:62:2e:75:86:d0:
b6:f6:b4:2b:77:48:dc:e9:d3:83:2e:e4:39:01:01:42:f1:d7:
01:a4:c7:ba:60:a8:10:84:ba:2b:bb:f3:b0:93:da:39:75:06:
2d:fb:8d:df:2e:bb:cb:03:58:45:0c:1d:93:61:34:b0:54:5e:
25:6d:c6:7a:6f:be:ca:3c:b8:83:f7:b4:33:db:02:9a:8a:a9:
be:88:3f:89:92:a2:f1:28:ec:23:48:37:ce:92:77:d0:ad:4d:
c7:25:01:de:14:d7:cc:e8:56:f8:87:0c:f7:ac:89:75:e9:29:
56:a8:1a:d2:9e:78:70:bf:b9:fd:e7:8e:8d:87:99:7b:c5:09:
84:1a:2d:d1:2c:ad:44:25:98:67:ee:ca:48:1d:a3:8b:a2:2c:
2d:3f:c1:71:f0:80:fe:8f:81:8d:32:e5:6d:49:7d:37:4c:91:
13:51:96:66:31:41:fd:67:9e:90:12:70:a6:81:2a:7e:c3:78:
58:9f:8f:1e:2d:f1:9e:61:a9:3b:c0:e2:7a:94:32:5e:e8:c6:
62:bd:a6:9e:2a:3d:08:8b:39:54:cc:2a:28:eb:10:b3:a3:b3:
e5:d7:86:65:ba:95:9e:b4:09:51:bd:67:cf:c9:af:68:ad:c6:
b5:03:57:76
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0q4N7AMRoLo6uvN1FgkNOOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk2OTZlNTIyNGZlZjUxN2Y0ZGNjNjZjMTQxMDM1MmNjOGFi
ZmIyMmUwHhcNMjYwMzI2MTYwMTEzWhcNMjYwMzI3MTYwMTEzWjAzMTEwLwYDVQQD
EyhkZDMxNTJiY2M0OWQzYjkzNjY0MjFkY2UzM2RkODBiZjRhYjQ5ODU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnn3xFrzvCyxJcXQ9Edt34ES2sj6J
4eXhMv21Ne9PShqkdZxan55ik8BrMGCiaxyBFueVCkUFsgnvHpnTTzoEu1Ap9fYm
jg+OSXluDN/K+ypRjfX+FwOKMMR/CoSKeyZNrVL4YzCN4tcLH7c8mkhLGnrO14oo
QyUBFFxcHux0jWEPOkTlV+aOIYWGZiYAk/EN1MUrinXgbmTxvgWlqhX/ZQv8ZdnE
JvtNpm/72zx+PJfrrs+A+QDJUDyvVR5RJCBa9mN9p5i4GKRG5VBrVYE8s2x8PdPO
auiFqq0hn/Gkzq1qKWPmjjsM6D150TJN649lQ8ebhKKd8Sf+hRY31sqo6QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN0xUrzEnTuTZkIdzjPdgL9KtJhUMB8GA1UdIwQY
MBaAFJaW5SJP71F/TcxmwUEDUsyKv7IuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbHBibElrX3ZVWDlOekdiQlFRTlN6SXFfc2k0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC81OWYzNzYtZGZiZS00NzhhLWI4MWUt
ZjQ5NzlkNTBlZTIyLzEvbHBibElrX3ZVWDlOekdiQlFRTlN6SXFfc2k0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OC81OWYzNzYtZGZiZS00NzhhLWI4MWUtZjQ5NzlkNTBlZTIy
LzEvbHBibElrX3ZVWDlOekdiQlFRTlN6SXFfc2k0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACnggxdX6
lJ6WVeczg2IudYbQtva0K3dI3OnTgy7kOQEBQvHXAaTHumCoEIS6K7vzsJPaOXUG
LfuN3y67ywNYRQwdk2E0sFReJW3Gem++yjy4g/e0M9sCmoqpvog/iZKi8SjsI0g3
zpJ30K1NxyUB3hTXzOhW+IcM96yJdekpVqga0p54cL+5/eeOjYeZe8UJhBot0Syt
RCWYZ+7KSB2ji6IsLT/BcfCA/o+BjTLlbUl9N0yRE1GWZjFB/WeekBJwpoEqfsN4
WJ+PHi3xnmGpO8DiepQyXujGYr2mnio9CIs5VMwqKOsQs6Oz5deGZbqVnrQJUb1n
z8mvaK3GtQNXdg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 20:43:19 2026 by rpki-client