Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/c58c8c-5c6e-44e0-82af-e96de3112dea/1/LBMiAg7k5Zy1zT3nFlDGKv1MAic.mft
File: LBMiAg7k5Zy1zT3nFlDGKv1MAic.mft (raw, json)
Hash identifier: ydh/48ecujBp0JylMbhkcxdZ+RBEoj6OXzFTd6SytD4=
Subject key identifier: D4:E0:13:B0:50:4C:BD:86:37:04:EC:32:1C:CA:C4:0E:36:78:55:75
Authority key identifier: 2C:13:22:02:0E:E4:E5:9C:B5:CD:3D:E7:16:50:C6:2A:FD:4C:02:27
Certificate issuer: /CN=2c1322020ee4e59cb5cd3de71650c62afd4c0227
Certificate serial: 019D28F30E16D2C4D0E29E9872F3D047D2F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LBMiAg7k5Zy1zT3nFlDGKv1MAic.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/c58c8c-5c6e-44e0-82af-e96de3112dea/1/LBMiAg7k5Zy1zT3nFlDGKv1MAic.mft
Manifest number: 0B9C
Signing time: Thu 26 Mar 2026 07:01:50 +0000
Manifest this update: Thu 26 Mar 2026 07:01:50 +0000
Manifest next update: Fri 27 Mar 2026 07:01:50 +0000
Files and hashes: 1: LBMiAg7k5Zy1zT3nFlDGKv1MAic.crl (hash: 9sTBBWql1sPSQVpf99xjO40EBFe8Ww9SkTX1FK4O5Ng=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/c58c8c-5c6e-44e0-82af-e96de3112dea/1/LBMiAg7k5Zy1zT3nFlDGKv1MAic.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/c58c8c-5c6e-44e0-82af-e96de3112dea/1/LBMiAg7k5Zy1zT3nFlDGKv1MAic.mft
rsync://rpki.ripe.net/repository/DEFAULT/LBMiAg7k5Zy1zT3nFlDGKv1MAic.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 07:01:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:f3:0e:16:d2:c4:d0:e2:9e:98:72:f3:d0:47:d2:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c1322020ee4e59cb5cd3de71650c62afd4c0227
Validity
Not Before: Mar 26 07:01:50 2026 GMT
Not After : Mar 27 07:01:50 2026 GMT
Subject: CN=d4e013b0504cbd863704ec321ccac40e36785575
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:a8:e6:ab:13:4e:dd:0b:a7:8e:76:77:9e:7f:
d9:ea:43:83:80:b6:c6:54:01:f8:2b:0a:2d:af:c4:
89:71:31:d8:b8:fe:fd:c6:bf:6e:fd:b8:ec:ac:b0:
58:fd:76:8f:4a:c0:c3:2d:41:0d:14:d1:d7:96:04:
b4:c7:7d:ac:83:9c:43:08:90:90:5b:48:39:12:13:
d0:5f:3f:f1:a7:23:98:5c:f7:2b:33:93:cd:b4:42:
ea:33:94:55:ef:89:44:e4:10:d7:f4:d5:12:2a:0f:
ea:e4:ef:24:60:28:46:62:7d:08:db:5e:7a:00:64:
ab:0a:0e:41:d3:d7:74:60:5c:6c:22:eb:80:a1:3d:
73:8a:45:df:f7:14:9c:54:8d:46:de:9b:d1:4f:87:
77:69:df:dc:d0:d1:2b:82:5c:ec:b7:a8:79:f6:0d:
6b:26:48:27:7c:14:d6:86:d1:d4:09:fe:80:96:57:
60:df:92:36:e6:3a:1b:08:f8:7c:9e:24:0d:fc:85:
d5:6e:a4:37:2c:8b:b3:54:5f:05:b1:7f:41:8a:62:
a4:26:28:51:5f:23:c7:90:0a:2b:a2:d3:db:e9:fb:
3f:5d:f0:d3:dc:88:cf:b7:c6:0f:28:e2:12:ba:13:
16:9c:28:3f:47:4f:b9:97:58:98:6e:ef:2e:7c:3f:
dc:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:E0:13:B0:50:4C:BD:86:37:04:EC:32:1C:CA:C4:0E:36:78:55:75
X509v3 Authority Key Identifier:
keyid:2C:13:22:02:0E:E4:E5:9C:B5:CD:3D:E7:16:50:C6:2A:FD:4C:02:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LBMiAg7k5Zy1zT3nFlDGKv1MAic.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/c58c8c-5c6e-44e0-82af-e96de3112dea/1/LBMiAg7k5Zy1zT3nFlDGKv1MAic.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/c58c8c-5c6e-44e0-82af-e96de3112dea/1/LBMiAg7k5Zy1zT3nFlDGKv1MAic.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
db:f4:24:00:4b:3e:4a:a9:3e:f8:7f:42:69:e5:e3:5f:0c:b8:
27:a5:60:ce:59:53:f3:24:87:52:43:13:d1:ec:19:8b:5e:74:
c5:a5:70:9e:4b:31:a4:c9:fa:25:7a:01:20:15:68:64:03:52:
48:f1:b4:ce:ae:c1:a7:79:46:20:3e:a0:7b:c1:d8:bc:76:fe:
c6:bc:b4:4e:9f:9f:9f:44:f9:cf:71:a3:24:2e:9c:1d:49:de:
a7:7c:17:21:11:9b:42:3d:f6:c3:f9:ab:ba:a1:91:4b:10:4f:
77:d0:1a:34:94:06:5a:01:db:ae:72:0e:69:9e:a5:33:d1:fb:
b7:58:92:92:c2:1a:9b:2f:a9:84:85:f8:93:21:36:35:f7:70:
44:ec:90:65:b1:0e:f2:96:6f:12:7b:5c:24:c3:2d:26:b6:33:
a3:8f:f5:8e:e2:40:22:73:ad:2c:78:89:c5:95:d1:32:04:9f:
b3:95:7b:a1:7d:98:12:5e:f8:a9:14:f8:51:74:f7:1c:56:ae:
f9:09:df:f8:ee:d6:16:60:7c:07:fa:ff:04:76:b4:58:3a:4f:
97:73:81:96:db:bb:e7:c1:27:8a:7c:cb:7e:0e:ac:54:34:f7:
92:1f:b6:ce:35:ba:a3:07:45:0c:3f:09:f6:4e:8f:02:04:d1:
fb:be:52:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:00:16 2026 by rpki-client