Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/41a843-7524-455b-be22-2b170e95c2b7/1/LcKRuNts_d9t0qHVWyJtSUkqJwU.mft
File: LcKRuNts_d9t0qHVWyJtSUkqJwU.mft (raw, json)
Hash identifier: WlTQjSicCBUFEqYHVNKqLg7ZBeLsoVlj32RPOiaIFjs=
Subject key identifier: 05:4B:A2:A9:4A:8A:2D:9B:38:11:41:E6:A9:82:10:76:42:E8:68:16
Authority key identifier: 2D:C2:91:B8:DB:6C:FD:DF:6D:D2:A1:D5:5B:22:6D:49:49:2A:27:05
Certificate issuer: /CN=2dc291b8db6cfddf6dd2a1d55b226d49492a2705
Certificate serial: 019D273AE34525A570B1FAF01ADC3F8A8C4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LcKRuNts_d9t0qHVWyJtSUkqJwU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/41a843-7524-455b-be22-2b170e95c2b7/1/LcKRuNts_d9t0qHVWyJtSUkqJwU.mft
Manifest number: 1376
Signing time: Wed 25 Mar 2026 23:01:03 +0000
Manifest this update: Wed 25 Mar 2026 23:01:03 +0000
Manifest next update: Thu 26 Mar 2026 23:01:03 +0000
Files and hashes: 1: LcKRuNts_d9t0qHVWyJtSUkqJwU.crl (hash: oXH0ew7qthcpvl/INyPBK+yDypXua9Cb4shvpXLY+bI=)
2: OSxR7yWXlXGYKz7l57qWN2MkgtY.roa (hash: zf1564nEeAhmFYxKrhpVodFL6WhyuPNWB8KasXTcpQw=)
3: S4RQtuZRJfsn5pCSOhLo3GCLnRs.roa (hash: J969uvOOjMxmLam91mq14STKrrErN1aKZ7dPQDpgBQo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/41a843-7524-455b-be22-2b170e95c2b7/1/LcKRuNts_d9t0qHVWyJtSUkqJwU.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/41a843-7524-455b-be22-2b170e95c2b7/1/LcKRuNts_d9t0qHVWyJtSUkqJwU.mft
rsync://rpki.ripe.net/repository/DEFAULT/LcKRuNts_d9t0qHVWyJtSUkqJwU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3a:e3:45:25:a5:70:b1:fa:f0:1a:dc:3f:8a:8c:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2dc291b8db6cfddf6dd2a1d55b226d49492a2705
Validity
Not Before: Mar 25 23:01:03 2026 GMT
Not After : Mar 26 23:01:03 2026 GMT
Subject: CN=054ba2a94a8a2d9b381141e6a982107642e86816
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:ab:52:86:09:23:8f:4e:31:87:f6:de:7b:b4:
5e:38:e4:43:96:62:fd:5d:1e:f5:0f:a6:0a:91:ad:
28:d0:9b:21:d7:10:0e:1c:69:f7:3d:7d:62:a1:d0:
81:91:ea:e6:0d:32:fe:27:a5:b2:f0:94:86:f5:f5:
01:0c:4b:20:b4:76:71:03:6c:c6:41:70:41:97:b6:
8b:77:88:e5:ba:f1:8e:08:7e:24:47:db:e4:af:c3:
b9:a9:64:b9:26:67:6b:74:bc:b6:b1:9c:3e:83:0d:
a2:bd:72:ba:8f:68:96:d0:cc:2b:52:f0:11:6d:56:
9e:8c:3d:25:d6:b5:af:d6:cd:a0:d1:28:89:ad:6f:
9f:25:b3:cc:5a:6d:48:44:ea:f5:08:73:2e:2b:fb:
2a:57:54:97:f6:cc:08:d5:c6:d9:19:ba:06:d8:0b:
5d:b5:ce:a5:f7:8c:4b:c6:cb:44:6d:78:d8:89:cb:
11:a5:20:ea:06:9b:74:b6:80:5a:42:41:75:23:e1:
fd:60:16:9e:24:0a:c5:37:e5:49:3c:40:53:91:64:
54:b6:86:b1:10:74:ea:0c:c7:57:fd:d8:16:90:9f:
37:83:83:32:86:1a:dc:67:51:85:50:c7:7d:5d:fa:
30:d3:14:20:8d:d2:7a:51:8d:d8:ac:77:c5:7b:dc:
7e:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:4B:A2:A9:4A:8A:2D:9B:38:11:41:E6:A9:82:10:76:42:E8:68:16
X509v3 Authority Key Identifier:
keyid:2D:C2:91:B8:DB:6C:FD:DF:6D:D2:A1:D5:5B:22:6D:49:49:2A:27:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LcKRuNts_d9t0qHVWyJtSUkqJwU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/41a843-7524-455b-be22-2b170e95c2b7/1/LcKRuNts_d9t0qHVWyJtSUkqJwU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/41a843-7524-455b-be22-2b170e95c2b7/1/LcKRuNts_d9t0qHVWyJtSUkqJwU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:33:df:86:33:5c:3d:b9:4b:90:40:c3:f0:17:ba:5c:47:c3:
2f:43:a3:ef:37:93:ff:56:bf:63:84:0c:9d:f5:76:ce:b0:3a:
d5:0d:e8:2e:36:b1:15:7b:30:66:22:28:5d:48:61:1e:46:b3:
c4:35:fa:ef:92:71:e4:c0:df:4b:b9:b7:5f:b3:b7:69:a4:39:
e2:ae:5f:de:c2:bc:45:f2:c0:d0:df:bb:6a:af:d0:f7:80:8f:
b1:41:b3:5c:7d:f0:43:86:8d:2b:01:42:1e:9a:d1:e5:71:89:
e5:d6:d8:7b:80:51:a4:a2:de:b1:56:ae:76:4c:27:09:c0:16:
14:3c:59:a6:0d:58:a5:55:8b:2b:ca:13:a0:19:9b:70:fa:64:
25:3b:e0:07:85:42:1f:61:fd:c2:12:a4:bb:ec:2d:98:c1:3e:
e1:33:15:a2:3d:c8:5d:be:f8:9f:9a:f6:0e:62:67:c9:62:e2:
34:36:59:37:e4:b1:a6:c8:53:ec:06:7c:ff:99:87:d9:0c:79:
d5:c2:5c:e4:9b:0d:ee:3d:8e:0f:75:17:b0:7f:b0:c9:17:8b:
a4:7e:02:17:06:61:9a:62:19:79:1a:87:76:40:36:9f:8c:ac:
ad:bd:9c:a3:59:88:aa:5f:50:f0:09:34:11:b9:3d:9a:1b:ee:
d2:b8:af:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:46:58 2026 by rpki-client