Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/1eb803-278a-46f4-b4be-a2eff3f1acd5/1/lGEMh1DDN98EecWg61t4tJoX_z4.mft
File: lGEMh1DDN98EecWg61t4tJoX_z4.mft (raw, json)
Hash identifier: 6D5UQs4Nst57nXyUFrwGSeqZmkaMTmhv3LRDAKJzQks=
Subject key identifier: 81:F5:5C:0F:B9:B5:7E:1F:6E:69:A9:43:72:FB:B9:37:EF:EC:49:F9
Authority key identifier: 94:61:0C:87:50:C3:37:DF:04:79:C5:A0:EB:5B:78:B4:9A:17:FF:3E
Certificate issuer: /CN=94610c8750c337df0479c5a0eb5b78b49a17ff3e
Certificate serial: 019D27DFB8BC2759565F54EDC8FA4F4B2B6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lGEMh1DDN98EecWg61t4tJoX_z4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/1eb803-278a-46f4-b4be-a2eff3f1acd5/1/lGEMh1DDN98EecWg61t4tJoX_z4.mft
Manifest number: 0708
Signing time: Thu 26 Mar 2026 02:01:06 +0000
Manifest this update: Thu 26 Mar 2026 02:01:06 +0000
Manifest next update: Fri 27 Mar 2026 02:01:06 +0000
Files and hashes: 1: lGEMh1DDN98EecWg61t4tJoX_z4.crl (hash: 2xRHz9MZF1V/ae3HmU3eH1dKUZgYN49yvIkpU8XWEG8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/1eb803-278a-46f4-b4be-a2eff3f1acd5/1/lGEMh1DDN98EecWg61t4tJoX_z4.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/1eb803-278a-46f4-b4be-a2eff3f1acd5/1/lGEMh1DDN98EecWg61t4tJoX_z4.mft
rsync://rpki.ripe.net/repository/DEFAULT/lGEMh1DDN98EecWg61t4tJoX_z4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:df:b8:bc:27:59:56:5f:54:ed:c8:fa:4f:4b:2b:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94610c8750c337df0479c5a0eb5b78b49a17ff3e
Validity
Not Before: Mar 26 02:01:06 2026 GMT
Not After : Mar 27 02:01:06 2026 GMT
Subject: CN=81f55c0fb9b57e1f6e69a94372fbb937efec49f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:cb:34:48:50:02:67:bf:ae:56:07:07:bb:5d:
0e:ec:79:08:be:6a:a3:6d:da:43:2e:ca:41:b7:d5:
8c:a2:b5:f5:78:a0:68:12:83:38:40:20:1c:d9:27:
5c:14:a0:75:fc:5d:87:18:bd:26:ec:59:40:bb:48:
99:b5:f6:89:9a:f6:b1:99:d0:39:ca:c2:30:bc:b9:
ee:73:19:34:25:77:50:66:bb:f3:eb:25:7d:7a:cf:
f8:89:60:9e:89:b3:77:60:99:85:d5:1c:7a:7a:fd:
01:5f:e5:b7:46:9a:5a:19:ec:34:4b:61:e6:1e:87:
73:b8:9e:09:2b:b1:42:12:75:5e:4c:f9:d3:76:ca:
c3:a5:e8:8f:dc:9f:6f:83:4e:51:f6:02:48:7d:bb:
3c:35:92:32:9e:33:5c:9e:b3:e1:56:93:15:86:3b:
eb:5e:39:fe:d9:8b:31:1a:82:14:76:2b:bd:0f:a8:
af:c1:1a:06:87:47:f2:b4:1d:b6:5c:d2:75:83:2c:
39:36:2e:ef:03:58:00:8c:d7:dd:ce:2c:17:ce:90:
54:ca:8b:11:50:25:01:0a:5d:31:88:ee:75:d9:5c:
c3:5b:a3:6b:b8:00:eb:31:55:c2:08:ad:a7:09:1a:
24:9b:a7:f8:be:99:91:80:96:a1:78:07:63:d3:ce:
de:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:F5:5C:0F:B9:B5:7E:1F:6E:69:A9:43:72:FB:B9:37:EF:EC:49:F9
X509v3 Authority Key Identifier:
keyid:94:61:0C:87:50:C3:37:DF:04:79:C5:A0:EB:5B:78:B4:9A:17:FF:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lGEMh1DDN98EecWg61t4tJoX_z4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/1eb803-278a-46f4-b4be-a2eff3f1acd5/1/lGEMh1DDN98EecWg61t4tJoX_z4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/1eb803-278a-46f4-b4be-a2eff3f1acd5/1/lGEMh1DDN98EecWg61t4tJoX_z4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:fb:2a:7a:9c:52:90:77:fe:68:db:be:06:58:f1:d4:ae:7a:
45:37:c8:13:a2:47:f7:77:f9:bb:14:79:56:1e:5f:a2:4a:17:
69:ed:b3:85:e2:dd:6e:34:66:03:e6:da:f9:da:0a:aa:e3:dd:
84:a4:d3:4e:a5:6e:01:0a:c6:33:f9:1f:50:57:b2:26:6e:e3:
dc:27:ee:28:a4:9f:33:5d:a5:ae:70:44:d6:ac:20:03:7c:2f:
e8:5c:52:2a:52:dc:77:5e:70:7b:29:07:4f:53:c6:0f:d0:6f:
67:91:f7:84:dd:81:b9:7d:55:6c:b9:b9:58:00:78:ab:a4:d0:
14:51:46:45:b9:31:76:47:d2:2d:99:bf:fb:42:2e:03:1b:33:
6c:2a:85:fa:a4:8b:e3:f2:24:42:23:52:e9:c6:62:c4:13:4b:
c6:3a:da:d6:17:9f:1e:43:5c:f7:e2:68:f0:d6:3c:1f:01:bb:
84:ff:2c:a2:24:94:7f:91:97:eb:17:00:5b:a6:f4:4f:12:c3:
3d:6e:1e:1d:35:5b:af:e8:45:00:24:4a:e6:87:42:c4:05:23:
dd:3a:00:0b:32:a9:30:b8:92:63:8e:cf:ae:69:51:03:5b:54:
b0:82:19:b2:b1:fd:dd:ea:f3:48:91:f5:44:91:84:43:44:35:
a3:c6:47:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:21:20 2026 by rpki-client