Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/b6b9c4-82df-4ea6-aefc-70644e8f3641/1/LfxU1VQ-EkhLa6sv3Dmaj1KVeHw.mft
File: LfxU1VQ-EkhLa6sv3Dmaj1KVeHw.mft (raw, json)
Hash identifier: 2C7i8kakM9nYRq6E3IqkmzJeG3+hbiquxuG0bHEaQNw=
Subject key identifier: 5D:EF:E1:CE:20:59:D2:FC:F8:BF:E8:73:BA:37:BD:4B:B5:20:68:B1
Authority key identifier: 2D:FC:54:D5:54:3E:12:48:4B:6B:AB:2F:DC:39:9A:8F:52:95:78:7C
Certificate issuer: /CN=2dfc54d5543e12484b6bab2fdc399a8f5295787c
Certificate serial: 019D284E0EE263C6FCB6675344E88E77C3EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LfxU1VQ-EkhLa6sv3Dmaj1KVeHw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/b6b9c4-82df-4ea6-aefc-70644e8f3641/1/LfxU1VQ-EkhLa6sv3Dmaj1KVeHw.mft
Manifest number: 05FE
Signing time: Thu 26 Mar 2026 04:01:37 +0000
Manifest this update: Thu 26 Mar 2026 04:01:37 +0000
Manifest next update: Fri 27 Mar 2026 04:01:37 +0000
Files and hashes: 1: LfxU1VQ-EkhLa6sv3Dmaj1KVeHw.crl (hash: 5l9dYXwArJ+1XAjesJC86sGt6lhSej1hrnKGNW61998=)
2: wP9XN0HPbdT573dUgsRBAV7PRS8.roa (hash: VLOJ7JilOK/x5azJO/3ok7WSh0+p3vmnpnzfLTSHGnQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/b6b9c4-82df-4ea6-aefc-70644e8f3641/1/LfxU1VQ-EkhLa6sv3Dmaj1KVeHw.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/b6b9c4-82df-4ea6-aefc-70644e8f3641/1/LfxU1VQ-EkhLa6sv3Dmaj1KVeHw.mft
rsync://rpki.ripe.net/repository/DEFAULT/LfxU1VQ-EkhLa6sv3Dmaj1KVeHw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4e:0e:e2:63:c6:fc:b6:67:53:44:e8:8e:77:c3:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2dfc54d5543e12484b6bab2fdc399a8f5295787c
Validity
Not Before: Mar 26 04:01:37 2026 GMT
Not After : Mar 27 04:01:37 2026 GMT
Subject: CN=5defe1ce2059d2fcf8bfe873ba37bd4bb52068b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:15:b7:a2:da:61:e4:94:91:7f:95:df:05:dd:
b6:77:b1:5f:4c:a6:d1:bc:72:56:14:2b:3c:91:a5:
da:ac:fe:84:1f:b2:32:b5:23:e1:fa:e5:ee:bb:4c:
e8:09:12:ac:40:d6:f6:5f:4f:b0:e5:c6:df:00:e4:
37:e9:d0:35:66:f3:49:8f:0b:0a:83:27:69:af:24:
a6:09:ef:fe:c3:44:58:fb:09:53:41:53:2c:20:dc:
24:54:b4:39:6f:91:6e:f5:0b:0c:fc:05:cd:67:e3:
76:43:fe:3e:c9:9d:b1:c8:4b:db:80:b9:c3:d3:d7:
96:e9:87:4a:07:89:b1:3f:53:8c:f4:12:e6:41:0a:
91:fe:27:3d:1c:5c:ca:fc:fc:63:08:3e:41:ed:a5:
0d:b0:f0:2b:bc:58:49:ba:10:72:56:5a:01:e7:d3:
14:d1:64:ea:0b:c2:c0:36:23:59:5f:98:72:88:f2:
5f:49:64:6d:6b:e7:3d:d8:f1:68:b1:d1:e0:da:83:
45:4c:ba:96:2c:40:2b:9f:e4:d7:4c:66:c8:5b:7d:
e5:df:7b:ca:92:bf:1d:61:01:b6:94:e1:86:d0:a9:
1f:68:97:96:63:d1:8f:9c:6b:2f:66:5a:48:16:97:
5a:4f:f5:bb:57:8e:1d:bd:01:6d:bd:db:4d:a6:9c:
42:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:EF:E1:CE:20:59:D2:FC:F8:BF:E8:73:BA:37:BD:4B:B5:20:68:B1
X509v3 Authority Key Identifier:
keyid:2D:FC:54:D5:54:3E:12:48:4B:6B:AB:2F:DC:39:9A:8F:52:95:78:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LfxU1VQ-EkhLa6sv3Dmaj1KVeHw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/b6b9c4-82df-4ea6-aefc-70644e8f3641/1/LfxU1VQ-EkhLa6sv3Dmaj1KVeHw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/b6b9c4-82df-4ea6-aefc-70644e8f3641/1/LfxU1VQ-EkhLa6sv3Dmaj1KVeHw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:97:b7:c7:cc:d6:18:a5:18:fc:f4:26:61:3c:ec:c6:eb:47:
aa:53:fe:59:b9:5e:23:77:12:6a:28:09:c0:9d:d1:54:5c:41:
43:9f:74:7d:71:c9:44:3f:76:99:64:6f:a2:4b:10:04:cb:93:
ac:b5:fc:1b:ac:1a:0d:48:c1:c2:22:2f:77:cd:3e:ce:c9:23:
57:ab:3e:d9:cd:94:8c:d3:6c:05:19:e0:c3:91:9b:5c:32:99:
fd:53:90:85:fc:23:e6:0f:14:e7:e2:36:7e:5c:70:5e:89:ae:
27:ca:4b:60:43:8b:3e:07:5f:5b:f0:35:a6:3b:e6:7b:0c:dd:
3e:52:82:99:13:a6:70:21:db:86:6f:bb:cb:c0:98:87:35:ee:
5f:c5:a4:a2:21:83:48:fa:2b:63:cd:80:4b:10:f2:b4:5d:5e:
60:a6:0c:b2:d3:e7:14:70:eb:8a:b8:84:13:06:cf:13:2f:c9:
d0:54:13:0e:a9:cf:a1:4a:f4:c2:44:7b:3e:48:36:fe:4f:9d:
ff:0b:39:ee:45:b5:dc:22:71:7e:52:47:4e:7a:81:b2:a6:8c:
25:5e:6e:be:49:06:d7:43:2d:b3:f9:cf:eb:c3:d1:2f:6c:27:
0f:d1:0a:4d:74:d1:b5:34:f8:ff:20:f2:ff:f6:af:cc:b1:a7:
81:b5:2b:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:09:13 2026 by rpki-client