Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/c07b78-daed-4991-9db7-bec1a92a2f9f/1/Lamd3TmQcoABaWYXi_aOXEY8LrY.mft
File: Lamd3TmQcoABaWYXi_aOXEY8LrY.mft (raw, json)
Hash identifier: 3+Smh6qZq7GaoANwL71rujXqd4bFQIYLFp/VR2CFMjY=
Subject key identifier: D2:CA:23:FD:E3:E3:0E:9A:6D:09:96:A4:8A:8D:66:22:29:B0:5D:AF
Authority key identifier: 2D:A9:9D:DD:39:90:72:80:01:69:66:17:8B:F6:8E:5C:46:3C:2E:B6
Certificate issuer: /CN=2da99ddd39907280016966178bf68e5c463c2eb6
Certificate serial: 019D2703B8A2471979F6F7D684742B93EF45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Lamd3TmQcoABaWYXi_aOXEY8LrY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/c07b78-daed-4991-9db7-bec1a92a2f9f/1/Lamd3TmQcoABaWYXi_aOXEY8LrY.mft
Manifest number: 033A
Signing time: Wed 25 Mar 2026 22:00:48 +0000
Manifest this update: Wed 25 Mar 2026 22:00:48 +0000
Manifest next update: Thu 26 Mar 2026 22:00:48 +0000
Files and hashes: 1: Lamd3TmQcoABaWYXi_aOXEY8LrY.crl (hash: fGIai7w3Awz8E2wTtJKiNn9hOVl8xX5t7ic2tbcgFdE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/c07b78-daed-4991-9db7-bec1a92a2f9f/1/Lamd3TmQcoABaWYXi_aOXEY8LrY.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/c07b78-daed-4991-9db7-bec1a92a2f9f/1/Lamd3TmQcoABaWYXi_aOXEY8LrY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Lamd3TmQcoABaWYXi_aOXEY8LrY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:03:b8:a2:47:19:79:f6:f7:d6:84:74:2b:93:ef:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2da99ddd39907280016966178bf68e5c463c2eb6
Validity
Not Before: Mar 25 22:00:48 2026 GMT
Not After : Mar 26 22:00:48 2026 GMT
Subject: CN=d2ca23fde3e30e9a6d0996a48a8d662229b05daf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:ff:a0:24:ae:8a:5d:0b:13:6d:d5:63:ea:d5:
61:5b:cd:8c:e8:71:41:93:d8:01:f2:0b:d3:4a:63:
e0:fc:54:85:a4:71:8b:27:8c:f0:d1:40:31:7f:24:
6c:59:70:b4:39:a5:b5:2a:29:0d:53:c0:52:7f:a0:
cb:2a:12:e0:bf:d5:46:97:1c:5c:64:2d:17:87:3a:
ec:b0:a3:b4:30:88:38:ae:d2:94:a4:a5:ee:a1:64:
37:d8:17:97:83:7d:51:16:c1:b3:95:0b:b6:cd:ab:
e6:05:c9:b9:67:22:55:a6:ee:85:66:77:c9:e2:84:
51:f8:c8:64:f3:86:80:8f:86:ae:60:84:67:a2:45:
08:62:db:1c:58:c7:aa:d3:fb:12:10:d8:af:9d:85:
e0:ba:b8:b0:bb:54:e7:71:80:4b:d7:0a:5d:c6:aa:
09:d7:7a:da:a5:f8:15:0f:ca:6d:c8:15:05:95:fd:
a9:42:d9:54:d7:f1:9e:bf:c3:e3:37:30:52:a8:54:
c1:64:ea:04:04:92:96:cd:32:22:06:4d:96:dc:34:
5a:24:d8:1d:d1:c2:0d:c1:f0:59:a4:bc:9c:66:49:
dd:0f:c5:60:24:56:30:28:a3:ab:3a:3e:ed:c2:14:
08:34:34:d4:34:52:61:0a:8e:3b:3e:1c:21:20:ce:
2c:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:CA:23:FD:E3:E3:0E:9A:6D:09:96:A4:8A:8D:66:22:29:B0:5D:AF
X509v3 Authority Key Identifier:
keyid:2D:A9:9D:DD:39:90:72:80:01:69:66:17:8B:F6:8E:5C:46:3C:2E:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lamd3TmQcoABaWYXi_aOXEY8LrY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/c07b78-daed-4991-9db7-bec1a92a2f9f/1/Lamd3TmQcoABaWYXi_aOXEY8LrY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/c07b78-daed-4991-9db7-bec1a92a2f9f/1/Lamd3TmQcoABaWYXi_aOXEY8LrY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:93:39:8c:e0:de:f4:ff:23:b7:d3:0e:18:6c:1f:03:73:65:
e3:dd:57:e3:3e:8f:68:f6:e7:04:02:05:dc:86:7f:2b:6f:4e:
96:69:f3:49:06:eb:22:01:a9:bb:9b:65:35:e6:4b:94:9b:f9:
41:90:28:ae:ff:61:53:0b:a2:7c:dc:1c:35:b4:f0:43:88:7d:
9e:09:09:ab:1e:92:a2:bc:73:88:4e:fe:49:d0:5d:c8:da:15:
bf:dc:1c:4d:8f:f2:ac:00:06:5c:54:1d:67:68:8a:00:0e:c2:
cc:38:54:0b:68:7f:a2:3b:cf:26:ea:b9:7f:87:ab:fd:0c:6a:
d8:eb:27:a1:b9:4a:65:1f:33:49:93:62:ef:06:35:0d:d5:8c:
96:eb:e0:10:9b:97:46:3f:bf:ff:ce:0a:6f:90:c7:28:ce:f7:
33:6b:0c:79:97:17:05:37:5c:f5:61:b3:83:7c:4a:2f:44:a5:
af:e8:14:79:9a:f3:48:57:a1:31:62:b3:ad:bd:13:11:d5:7e:
c0:53:5e:5c:5a:90:c0:6e:b1:43:e4:9f:8a:f5:0f:9e:b1:ae:
52:50:76:b1:d8:d2:b5:81:5d:bb:56:1d:f3:88:2f:b9:22:54:
b0:2e:56:e1:14:93:10:56:be:1f:d3:6b:9d:68:1d:a0:2e:0d:
71:1f:86:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:29:51 2026 by rpki-client