Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/84c6f2-c7b1-4328-89eb-be69ab3ffcc0/1/rLSxpS4serd9FaY8t5ADBKS-gn4.mft
File: rLSxpS4serd9FaY8t5ADBKS-gn4.mft (raw, json)
Hash identifier: zR2gyQvRKAZpvSlMcl0cR/kf5ffIsbnS5xcIpqG2tbc=
Subject key identifier: A3:2B:6E:EF:D2:15:85:28:B7:1D:43:A4:09:CF:C2:34:1D:A5:10:43
Authority key identifier: AC:B4:B1:A5:2E:2C:7A:B7:7D:15:A6:3C:B7:90:03:04:A4:BE:82:7E
Certificate issuer: /CN=acb4b1a52e2c7ab77d15a63cb7900304a4be827e
Certificate serial: 019D3D8BEBEFE6A3A732EDED5FE7D6840F43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rLSxpS4serd9FaY8t5ADBKS-gn4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/84c6f2-c7b1-4328-89eb-be69ab3ffcc0/1/rLSxpS4serd9FaY8t5ADBKS-gn4.mft
Manifest number: 76
Signing time: Mon 30 Mar 2026 07:01:13 +0000
Manifest this update: Mon 30 Mar 2026 07:01:13 +0000
Manifest next update: Tue 31 Mar 2026 07:01:13 +0000
Files and hashes: 1: rLSxpS4serd9FaY8t5ADBKS-gn4.crl (hash: SX6U14GsvvHHY77JlVAJv8kR+dSCr8jrHPv1zLCS9cA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/84c6f2-c7b1-4328-89eb-be69ab3ffcc0/1/rLSxpS4serd9FaY8t5ADBKS-gn4.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/84c6f2-c7b1-4328-89eb-be69ab3ffcc0/1/rLSxpS4serd9FaY8t5ADBKS-gn4.mft
rsync://rpki.ripe.net/repository/DEFAULT/rLSxpS4serd9FaY8t5ADBKS-gn4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 31 Mar 2026 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3d:8b:eb:ef:e6:a3:a7:32:ed:ed:5f:e7:d6:84:0f:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=acb4b1a52e2c7ab77d15a63cb7900304a4be827e
Validity
Not Before: Mar 30 07:01:13 2026 GMT
Not After : Mar 31 07:01:13 2026 GMT
Subject: CN=a32b6eefd2158528b71d43a409cfc2341da51043
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:35:01:38:c9:8e:3c:21:fb:5b:63:c7:90:69:
26:b9:cb:60:04:49:83:f0:3a:10:db:3b:d7:2c:e5:
7f:cc:83:08:54:81:f0:a6:c7:55:79:88:08:3a:8f:
b0:05:bd:9a:50:8b:58:74:c5:fc:fd:45:0b:2d:ac:
2a:ba:71:5f:84:72:a3:cd:dc:f4:01:fc:3e:b6:a7:
3b:7d:e7:b6:6b:fb:66:6e:6b:b3:1a:82:11:c5:55:
b0:70:eb:50:dd:73:2d:89:79:d2:5a:00:7e:52:6e:
e0:0b:08:8d:22:0f:36:58:c5:ce:99:71:72:cb:b2:
62:67:ee:89:7b:24:c3:99:4a:ff:e5:dc:9e:7a:73:
9a:7c:4d:1a:d6:d8:3a:af:61:e3:6a:04:b3:c8:53:
40:cd:9b:83:5a:04:fc:e4:9b:2f:7f:2a:34:70:dd:
ab:8c:19:02:f5:a9:54:2f:5f:ac:30:46:bb:a1:d9:
2f:2a:36:a1:d4:23:ad:e0:b4:23:b8:00:52:b0:4e:
2b:d9:3c:cb:cc:22:f6:d9:0c:71:5c:2c:7d:e1:67:
14:6b:86:ad:96:bd:60:8c:de:63:20:bd:26:dc:0b:
ee:ab:37:c7:4e:d2:2f:c9:60:39:45:e2:11:f0:40:
45:8e:23:d4:06:3a:5e:60:a7:25:1c:74:ea:21:f1:
27:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:2B:6E:EF:D2:15:85:28:B7:1D:43:A4:09:CF:C2:34:1D:A5:10:43
X509v3 Authority Key Identifier:
keyid:AC:B4:B1:A5:2E:2C:7A:B7:7D:15:A6:3C:B7:90:03:04:A4:BE:82:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rLSxpS4serd9FaY8t5ADBKS-gn4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/84c6f2-c7b1-4328-89eb-be69ab3ffcc0/1/rLSxpS4serd9FaY8t5ADBKS-gn4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/84c6f2-c7b1-4328-89eb-be69ab3ffcc0/1/rLSxpS4serd9FaY8t5ADBKS-gn4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:ae:80:96:cb:2e:f7:da:9f:0c:66:ba:6a:39:c6:50:59:9a:
8d:39:43:92:c9:18:4c:80:19:2d:28:9b:be:2a:21:77:29:c8:
27:1a:20:b3:f8:7a:2a:e4:76:67:6c:f2:92:df:31:46:9b:5a:
4a:de:cc:ed:4f:56:de:cf:de:7d:d5:c6:b5:82:b5:16:20:ca:
e5:dd:27:c4:6c:f0:11:04:6b:05:e9:a8:68:85:82:e9:a1:fe:
d2:fe:ce:2f:08:14:52:d9:6c:62:d1:7c:8b:45:13:6e:09:2d:
cb:c4:9d:2b:ff:f6:fe:d4:da:7e:aa:8b:8c:cd:07:98:e2:92:
80:ed:62:e6:cf:bd:70:91:ba:15:f1:b7:1a:6b:d8:70:00:b1:
b1:6c:d6:48:8f:24:25:00:d1:fc:e4:77:cd:41:24:90:8f:89:
28:c1:64:69:e0:66:d7:40:bb:8b:3b:fb:af:48:6b:22:2e:12:
ab:2f:81:dc:a6:35:e3:38:f2:7f:0d:8c:fb:ef:ba:dd:4a:da:
da:78:3c:8a:b5:61:d3:10:ce:8d:e2:47:2e:ff:d4:22:59:c6:
0c:b5:15:b5:48:78:e1:ad:39:07:ce:b1:27:a8:5d:2c:51:3f:
be:26:3a:e0:4a:f8:cd:47:a6:3a:68:30:08:1c:85:6e:03:4f:
0e:b5:54:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 30 10:35:30 2026 by rpki-client