Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/f61db6-0192-4fff-aa47-f2bbbecc5a6e/1/LUrgdxLkhC-A-oEAnTNbxICeZB0.mft
File: LUrgdxLkhC-A-oEAnTNbxICeZB0.mft (raw, json)
Hash identifier: bBIf54Y62f2VZxAlz5+Z4GklHBWIw+s5LU/obqxE2mw=
Subject key identifier: 46:A6:24:D5:6A:A5:8B:B7:82:E3:FD:66:6D:FC:E2:23:4F:8E:66:80
Authority key identifier: 2D:4A:E0:77:12:E4:84:2F:80:FA:81:00:9D:33:5B:C4:80:9E:64:1D
Certificate issuer: /CN=2d4ae07712e4842f80fa81009d335bc4809e641d
Certificate serial: 019D2A3C2D677DB3F7657DC70712FBE31DE5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LUrgdxLkhC-A-oEAnTNbxICeZB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/f61db6-0192-4fff-aa47-f2bbbecc5a6e/1/LUrgdxLkhC-A-oEAnTNbxICeZB0.mft
Manifest number: 08F4
Signing time: Thu 26 Mar 2026 13:01:19 +0000
Manifest this update: Thu 26 Mar 2026 13:01:19 +0000
Manifest next update: Fri 27 Mar 2026 13:01:19 +0000
Files and hashes: 1: LUrgdxLkhC-A-oEAnTNbxICeZB0.crl (hash: TdQcO7Uz+1LlNs8E1XP/mghfnT8abRL2RxXhizd6TAg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/f61db6-0192-4fff-aa47-f2bbbecc5a6e/1/LUrgdxLkhC-A-oEAnTNbxICeZB0.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/f61db6-0192-4fff-aa47-f2bbbecc5a6e/1/LUrgdxLkhC-A-oEAnTNbxICeZB0.mft
rsync://rpki.ripe.net/repository/DEFAULT/LUrgdxLkhC-A-oEAnTNbxICeZB0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:3c:2d:67:7d:b3:f7:65:7d:c7:07:12:fb:e3:1d:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d4ae07712e4842f80fa81009d335bc4809e641d
Validity
Not Before: Mar 26 13:01:19 2026 GMT
Not After : Mar 27 13:01:19 2026 GMT
Subject: CN=46a624d56aa58bb782e3fd666dfce2234f8e6680
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:c6:3a:d6:98:3d:83:7e:d7:d1:32:1d:ec:ad:
c4:5f:bf:db:65:5a:0a:c8:5d:cc:4a:a9:b5:63:04:
3b:af:5e:51:51:92:3c:e6:ca:11:4f:c3:d0:12:df:
69:45:5d:b7:02:86:f8:66:eb:ed:51:2e:de:f2:6a:
2a:8f:a8:9b:82:6f:3a:9b:94:0f:76:fb:b3:83:89:
3e:96:af:62:9f:45:34:a1:fd:63:b7:d8:e6:1c:1a:
95:f6:a2:7c:8b:e0:ad:13:6c:f3:9f:af:e4:2d:ab:
a6:65:09:d1:4e:91:bd:00:3b:6d:90:91:ad:a6:fc:
23:a7:13:1d:ab:d1:a0:24:17:e8:73:23:bf:f1:a6:
9b:96:d8:23:38:4a:7b:d5:33:29:39:6e:ab:51:9a:
87:52:33:33:17:09:50:37:97:66:05:0d:24:2e:ac:
4f:c8:46:b0:3d:a0:09:37:9f:de:67:fe:e8:fc:e5:
0e:be:6b:aa:ad:ac:86:f9:d3:1a:ed:19:60:75:50:
ab:e5:33:6f:07:4e:53:5c:02:fb:f5:23:f4:83:b9:
15:01:e1:69:e0:7c:1c:d7:01:38:88:45:5d:c4:a9:
7b:fd:5d:be:96:c5:54:61:0d:bc:10:eb:b9:fe:d5:
bd:03:4b:27:76:14:49:29:f3:19:c1:95:ca:70:8d:
09:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:A6:24:D5:6A:A5:8B:B7:82:E3:FD:66:6D:FC:E2:23:4F:8E:66:80
X509v3 Authority Key Identifier:
keyid:2D:4A:E0:77:12:E4:84:2F:80:FA:81:00:9D:33:5B:C4:80:9E:64:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LUrgdxLkhC-A-oEAnTNbxICeZB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/f61db6-0192-4fff-aa47-f2bbbecc5a6e/1/LUrgdxLkhC-A-oEAnTNbxICeZB0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/f61db6-0192-4fff-aa47-f2bbbecc5a6e/1/LUrgdxLkhC-A-oEAnTNbxICeZB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:ba:45:ef:34:d6:de:9e:0b:71:9e:8d:db:49:e2:22:3a:3e:
9c:7a:db:6a:50:47:32:f2:5a:6b:4f:cd:b2:07:fe:e9:a0:89:
79:c1:1a:c6:5e:25:d3:f2:7c:72:c9:0c:1c:4a:8f:27:a2:92:
f3:9a:75:a2:57:9e:5f:80:34:18:a7:93:58:e8:ec:6a:81:d2:
4a:f6:d1:12:e8:e9:be:ef:81:24:05:ea:3e:17:af:26:ce:c0:
2b:13:a8:e5:84:fd:03:5d:17:77:c6:b4:af:98:2b:25:8b:d3:
00:b3:ad:f2:b3:81:4f:a3:6b:7e:3e:2f:cf:9b:df:14:95:77:
fa:86:f6:b3:1d:6c:29:b5:58:1e:02:b4:ae:a4:49:fe:62:bc:
3e:ea:34:36:95:b0:50:b6:5e:e6:bc:5f:d0:d0:d4:2a:37:1e:
62:ff:83:4d:af:ce:be:fa:b4:89:d0:be:92:48:88:bb:7c:4a:
ef:20:3e:62:66:96:d0:57:c6:7c:d6:9f:a4:50:b5:c4:d5:64:
0e:70:fe:aa:72:55:ea:fb:b8:df:0c:93:8d:b6:19:1a:fc:99:
17:dc:75:1d:81:50:d1:23:f9:f7:ec:60:07:af:d2:f0:da:49:
07:90:69:62:00:8d:5a:d0:51:a5:a1:b9:95:5d:38:11:2e:99:
7a:02:07:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:53:44 2026 by rpki-client