Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/db48a4-942b-44d1-b1ba-7116a30da945/1/lGnTUGt3wa71sTcNqiu0vOOAbJQ.mft
File: lGnTUGt3wa71sTcNqiu0vOOAbJQ.mft (raw, json)
Hash identifier: +qZLFUTwo/XtdhnjL7xeatP7WG2p7k/MnaEQI6c+fHs=
Subject key identifier: CF:23:F2:20:B8:C9:08:4A:34:D6:67:A9:3F:47:9A:13:CA:6C:5D:23
Authority key identifier: 94:69:D3:50:6B:77:C1:AE:F5:B1:37:0D:AA:2B:B4:BC:E3:80:6C:94
Certificate issuer: /CN=9469d3506b77c1aef5b1370daa2bb4bce3806c94
Certificate serial: 019D284E3751F989CD3B34E640731985AB02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lGnTUGt3wa71sTcNqiu0vOOAbJQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/db48a4-942b-44d1-b1ba-7116a30da945/1/lGnTUGt3wa71sTcNqiu0vOOAbJQ.mft
Manifest number: 0B46
Signing time: Thu 26 Mar 2026 04:01:47 +0000
Manifest this update: Thu 26 Mar 2026 04:01:47 +0000
Manifest next update: Fri 27 Mar 2026 04:01:47 +0000
Files and hashes: 1: lGnTUGt3wa71sTcNqiu0vOOAbJQ.crl (hash: m91jobGOJ0gq2InaYP875wVJe0AxScCg3LjyOvk+pzQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/db48a4-942b-44d1-b1ba-7116a30da945/1/lGnTUGt3wa71sTcNqiu0vOOAbJQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/db48a4-942b-44d1-b1ba-7116a30da945/1/lGnTUGt3wa71sTcNqiu0vOOAbJQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/lGnTUGt3wa71sTcNqiu0vOOAbJQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4e:37:51:f9:89:cd:3b:34:e6:40:73:19:85:ab:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9469d3506b77c1aef5b1370daa2bb4bce3806c94
Validity
Not Before: Mar 26 04:01:47 2026 GMT
Not After : Mar 27 04:01:47 2026 GMT
Subject: CN=cf23f220b8c9084a34d667a93f479a13ca6c5d23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:49:e1:2c:cd:cb:6a:3c:4c:23:30:96:c7:d1:
60:f0:f7:8f:25:e4:df:61:4b:99:5a:1a:d0:74:7f:
e4:bb:72:65:02:0a:64:b8:65:91:a8:06:4b:61:d6:
d6:a1:89:6e:a6:63:d6:2c:c2:ba:df:21:40:22:17:
0a:f5:3d:75:5b:ec:6a:fe:41:97:54:91:da:97:0a:
49:cd:f6:5b:f7:de:e3:98:e4:d7:be:e8:d1:14:fe:
fd:5b:39:a1:b9:30:5d:e8:81:96:f7:ab:83:91:cd:
54:a5:c9:bc:ce:c9:99:8d:a2:a5:df:c3:1b:cc:e4:
be:e1:20:e6:3d:98:13:fe:d8:91:5d:ae:4d:57:2e:
fe:54:4f:1b:f7:36:98:21:17:5d:d5:2d:8c:df:7b:
2c:51:f8:64:00:c8:10:01:2d:44:39:f3:b3:b1:e8:
b9:1e:8a:27:a4:29:ba:08:c9:eb:66:84:29:a5:ea:
70:49:65:3a:26:31:a5:39:9b:c2:45:6e:3b:46:e1:
c7:75:b8:e9:22:1d:9d:90:96:a6:89:08:00:ef:56:
a0:59:9d:ea:d4:28:d4:26:e8:16:4c:1b:32:24:93:
ca:80:31:92:2f:30:ac:18:9c:75:72:72:d9:e3:f5:
c2:d2:ef:fa:d4:84:74:4f:60:bf:d3:1a:ad:d6:31:
e3:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:23:F2:20:B8:C9:08:4A:34:D6:67:A9:3F:47:9A:13:CA:6C:5D:23
X509v3 Authority Key Identifier:
keyid:94:69:D3:50:6B:77:C1:AE:F5:B1:37:0D:AA:2B:B4:BC:E3:80:6C:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lGnTUGt3wa71sTcNqiu0vOOAbJQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/db48a4-942b-44d1-b1ba-7116a30da945/1/lGnTUGt3wa71sTcNqiu0vOOAbJQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/db48a4-942b-44d1-b1ba-7116a30da945/1/lGnTUGt3wa71sTcNqiu0vOOAbJQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:f4:7c:66:8d:b8:41:cd:34:60:90:41:4a:d1:08:2a:ad:9f:
01:e1:56:6c:72:0a:fe:51:12:83:59:1d:a5:43:0a:dd:0b:9a:
d8:39:f9:ca:5c:ec:e5:19:41:d6:30:16:fc:91:e7:03:a2:13:
7c:70:ae:b5:49:ec:3d:46:c1:0a:c0:40:56:0e:ba:6e:24:8e:
1a:75:28:58:ed:c5:c1:6d:24:41:c0:b2:3a:be:de:70:31:ea:
c1:1d:e7:e5:85:71:9c:3d:70:05:a9:a4:73:a6:7e:75:69:de:
07:23:8c:c2:06:7f:9a:38:96:ae:3d:6f:5b:64:48:fb:34:a5:
93:cb:45:ce:8e:6c:94:27:52:b8:4a:2a:60:a2:de:5e:50:31:
7c:88:88:0a:c6:c5:3a:be:2e:fd:18:ae:65:46:e3:2a:74:be:
a2:b0:4f:ed:27:e2:5a:f1:c2:b0:bb:92:41:82:be:d4:79:a0:
4d:53:18:ca:2a:76:cd:7b:5d:c2:d0:1a:2e:43:fc:32:de:66:
17:0b:2a:07:bf:1e:40:53:ed:e2:48:bc:b0:e5:23:4f:00:6c:
a7:c4:5f:eb:9c:ba:e5:83:24:e5:4f:0e:3d:e5:6a:c8:3e:5d:
b3:84:2d:d8:8a:87:d2:b2:79:cf:f2:03:89:dc:b9:01:ab:1d:
ea:41:fb:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:42:44 2026 by rpki-client