Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/76a471-08e0-49e6-9537-53b55fae023d/1/LSdW5QjQEzSbJE4wfX8jliafJwg.mft
File: LSdW5QjQEzSbJE4wfX8jliafJwg.mft (raw, json)
Hash identifier: eWtyFK5H7oqAuXzkotWhHW+A2HRm+AFI3N2u/C/0Q48=
Subject key identifier: 40:19:F9:7E:D2:6E:D3:B4:8F:A1:F1:14:AB:A9:07:96:E7:E4:3B:3E
Authority key identifier: 2D:27:56:E5:08:D0:13:34:9B:24:4E:30:7D:7F:23:96:26:9F:27:08
Certificate issuer: /CN=2d2756e508d013349b244e307d7f2396269f2708
Certificate serial: 019D2A04957380798A9BA243C74ABA3EBADE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LSdW5QjQEzSbJE4wfX8jliafJwg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/76a471-08e0-49e6-9537-53b55fae023d/1/LSdW5QjQEzSbJE4wfX8jliafJwg.mft
Manifest number: 1518
Signing time: Thu 26 Mar 2026 12:00:36 +0000
Manifest this update: Thu 26 Mar 2026 12:00:36 +0000
Manifest next update: Fri 27 Mar 2026 12:00:36 +0000
Files and hashes: 1: LSdW5QjQEzSbJE4wfX8jliafJwg.crl (hash: hhkooC5wkdAY8axUV7RDxYlLU084TZilCyKsuowlE/8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/76a471-08e0-49e6-9537-53b55fae023d/1/LSdW5QjQEzSbJE4wfX8jliafJwg.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/76a471-08e0-49e6-9537-53b55fae023d/1/LSdW5QjQEzSbJE4wfX8jliafJwg.mft
rsync://rpki.ripe.net/repository/DEFAULT/LSdW5QjQEzSbJE4wfX8jliafJwg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:04:95:73:80:79:8a:9b:a2:43:c7:4a:ba:3e:ba:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d2756e508d013349b244e307d7f2396269f2708
Validity
Not Before: Mar 26 12:00:36 2026 GMT
Not After : Mar 27 12:00:36 2026 GMT
Subject: CN=4019f97ed26ed3b48fa1f114aba90796e7e43b3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:26:ef:7b:e2:cf:97:70:9e:3f:4a:b1:28:61:
62:dc:dc:fe:c3:b2:c0:52:b3:5c:7b:51:dd:fc:6b:
92:61:34:80:db:b0:6d:a7:58:27:24:9f:67:43:57:
d4:50:44:d8:a1:54:4e:af:9c:5e:13:79:32:84:1b:
c5:e4:a1:e0:2c:ea:2c:d7:23:2b:c1:ca:65:5e:37:
fb:a9:f9:1b:30:ea:29:38:3f:e7:5d:c7:96:09:bd:
f7:24:11:65:c6:40:2f:dc:34:e9:9c:d4:0f:e2:e1:
01:a5:60:4d:5b:07:89:33:29:48:d0:5a:6d:ca:be:
16:32:f2:c7:aa:dd:98:7d:b0:a4:ef:ac:8e:3e:2c:
88:7f:69:3c:ef:f9:dd:50:2a:cf:fa:8a:07:db:d5:
e0:04:6f:ef:7e:b2:0a:36:8c:eb:c4:5e:a5:6d:e0:
29:82:9b:b8:09:0c:cf:d7:d9:04:3b:b3:1b:da:2a:
ae:ac:97:6e:35:68:ac:0e:73:61:c7:cf:f5:9e:1c:
2a:f1:83:2f:50:75:46:81:76:d4:7d:99:af:80:9b:
03:a8:1a:63:a2:35:40:5a:81:31:bc:c4:2b:52:d1:
03:85:33:02:c3:04:91:5a:44:a3:f1:c4:e2:e7:e1:
51:ff:5c:55:72:0a:da:f3:29:1b:77:45:d2:3d:8f:
31:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:19:F9:7E:D2:6E:D3:B4:8F:A1:F1:14:AB:A9:07:96:E7:E4:3B:3E
X509v3 Authority Key Identifier:
keyid:2D:27:56:E5:08:D0:13:34:9B:24:4E:30:7D:7F:23:96:26:9F:27:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LSdW5QjQEzSbJE4wfX8jliafJwg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/76a471-08e0-49e6-9537-53b55fae023d/1/LSdW5QjQEzSbJE4wfX8jliafJwg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/76a471-08e0-49e6-9537-53b55fae023d/1/LSdW5QjQEzSbJE4wfX8jliafJwg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:68:97:12:37:f5:e2:40:e1:36:00:53:34:a1:9f:1a:e8:3c:
93:1d:fe:fb:6a:dc:0b:10:6b:99:2b:87:54:f8:38:bf:a0:a0:
89:67:8f:39:74:ba:0e:20:e3:5e:80:67:fd:2f:bb:9c:f7:d1:
e4:0b:74:6b:18:19:8c:c5:d0:71:43:5d:9e:c9:b4:c7:12:2f:
b5:ec:3e:b5:76:23:1a:bc:9c:27:4b:25:c6:32:a8:74:35:98:
26:4a:33:53:c8:ec:41:dc:1a:f4:eb:4c:d2:17:89:75:d1:a8:
2b:0d:f9:e5:5b:b7:a9:98:8d:58:8c:b1:fa:34:5c:1e:a5:c1:
84:c6:e6:0d:bf:74:d6:1b:c7:c2:77:56:f0:4a:5d:23:96:d5:
bf:f0:60:9d:03:69:80:2b:f3:f6:36:47:ca:69:3f:c7:6e:02:
0c:be:c3:bd:21:d0:f7:8e:5e:f1:c5:24:51:cc:0b:63:d0:81:
e4:0c:7d:2f:99:de:8c:25:e4:f9:e6:be:8a:17:ce:23:10:b5:
b4:b4:b7:c0:6e:f7:83:c5:65:cf:d8:0c:8c:72:b3:30:65:43:
42:e0:24:ae:79:df:28:5a:ca:ae:75:e6:b4:9a:4a:72:5b:f9:
66:04:53:25:e3:dd:7f:5d:8b:ee:81:f7:77:20:9a:b5:77:00:
d0:9f:85:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:57:33 2026 by rpki-client