Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/373e4c-d885-44fa-8c4b-a6eedfa9a4fc/1/lZCfz5xup2MAznHQlNMl9X1knL8.mft
File: lZCfz5xup2MAznHQlNMl9X1knL8.mft (raw, json)
Hash identifier: nSa1FYXXXV3oW32VjsxEqx+tx6XHieZg4Uo96nkKE7A=
Subject key identifier: 9E:60:E9:62:57:96:22:C8:6D:A6:4C:16:84:4F:21:AE:AC:01:41:A1
Authority key identifier: 95:90:9F:CF:9C:6E:A7:63:00:CE:71:D0:94:D3:25:F5:7D:64:9C:BF
Certificate issuer: /CN=95909fcf9c6ea76300ce71d094d325f57d649cbf
Certificate serial: 019D2704CB5CE11622B84174135E740B8982
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lZCfz5xup2MAznHQlNMl9X1knL8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/373e4c-d885-44fa-8c4b-a6eedfa9a4fc/1/lZCfz5xup2MAznHQlNMl9X1knL8.mft
Manifest number: 15BD
Signing time: Wed 25 Mar 2026 22:01:58 +0000
Manifest this update: Wed 25 Mar 2026 22:01:58 +0000
Manifest next update: Thu 26 Mar 2026 22:01:58 +0000
Files and hashes: 1: lZCfz5xup2MAznHQlNMl9X1knL8.crl (hash: Coc9PzOx4UYOrEp7zw/0O1/TK983OWKN3mNJ2yYH080=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/373e4c-d885-44fa-8c4b-a6eedfa9a4fc/1/lZCfz5xup2MAznHQlNMl9X1knL8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/373e4c-d885-44fa-8c4b-a6eedfa9a4fc/1/lZCfz5xup2MAznHQlNMl9X1knL8.mft
rsync://rpki.ripe.net/repository/DEFAULT/lZCfz5xup2MAznHQlNMl9X1knL8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:01:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:cb:5c:e1:16:22:b8:41:74:13:5e:74:0b:89:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95909fcf9c6ea76300ce71d094d325f57d649cbf
Validity
Not Before: Mar 25 22:01:58 2026 GMT
Not After : Mar 26 22:01:58 2026 GMT
Subject: CN=9e60e962579622c86da64c16844f21aeac0141a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:60:1d:6d:33:38:fc:ad:ec:21:83:73:03:77:
4d:e6:ba:fd:e2:c9:f9:58:d4:65:44:4f:34:b4:2f:
cb:f1:11:d7:5a:9c:d0:27:82:92:e4:d2:68:27:9c:
14:13:ec:47:64:67:9c:f6:ed:4c:42:a6:22:43:7d:
ef:66:4f:55:13:5d:be:f7:1f:95:1a:66:96:9d:86:
f6:fa:40:14:74:88:a0:cb:b9:e4:7f:f9:86:3a:42:
4a:8e:d6:bf:96:b9:8b:bc:f5:a2:a1:06:68:93:13:
40:5b:a1:90:05:82:5a:3e:98:37:06:7e:6b:df:05:
bc:6c:7c:b0:14:e7:43:1b:cf:39:49:b2:24:46:7e:
a0:b8:74:7f:52:1e:f3:ad:d3:f0:9e:59:a4:5f:17:
29:fa:18:83:73:f5:5c:d2:24:32:b3:ae:34:e3:bf:
71:4c:8d:89:0f:8e:ff:bc:c2:98:4f:c7:78:49:b9:
3e:e9:c0:90:9f:8b:10:8e:96:ed:1b:a2:29:bc:94:
b0:26:3e:e9:51:d3:38:d3:17:c7:45:a7:a8:ff:38:
32:ef:62:70:1f:ee:7f:21:a3:f4:ca:57:86:ae:2c:
c1:cf:ea:b8:bc:ff:b3:48:55:4c:75:cb:9b:d2:14:
c6:9b:00:de:b6:9c:6e:cf:89:94:5c:8a:e8:e0:e5:
c0:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:60:E9:62:57:96:22:C8:6D:A6:4C:16:84:4F:21:AE:AC:01:41:A1
X509v3 Authority Key Identifier:
keyid:95:90:9F:CF:9C:6E:A7:63:00:CE:71:D0:94:D3:25:F5:7D:64:9C:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lZCfz5xup2MAznHQlNMl9X1knL8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/373e4c-d885-44fa-8c4b-a6eedfa9a4fc/1/lZCfz5xup2MAznHQlNMl9X1knL8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/373e4c-d885-44fa-8c4b-a6eedfa9a4fc/1/lZCfz5xup2MAznHQlNMl9X1knL8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:2c:2a:1d:9a:81:f7:59:77:1f:7d:c1:9b:db:12:71:85:54:
8d:6f:14:89:54:70:a5:20:a1:95:78:e0:9e:cd:b0:f7:95:99:
c0:7f:91:5d:04:ae:ab:5d:f6:d2:9a:61:8c:e2:56:41:c5:4d:
38:49:6f:74:63:5a:93:d8:60:00:0e:82:e6:57:83:8a:a6:b1:
fa:59:33:40:54:de:bf:78:d7:9e:65:20:fe:9d:e5:72:08:b8:
fa:1e:2d:97:ea:48:3d:ed:7c:a4:1f:6b:54:64:7a:17:ab:aa:
13:2e:cb:6c:e8:72:8f:29:dd:cb:0c:59:03:40:50:15:91:8b:
ff:da:3c:d0:d0:c7:1e:27:1e:19:86:2f:d5:db:02:ae:b1:5c:
5b:aa:67:e9:41:91:43:c5:77:89:c6:9b:bb:a8:02:7e:4f:62:
e8:44:c2:2e:71:35:d9:74:f1:e7:1d:0a:00:6d:ca:22:1d:3a:
76:5c:67:45:4a:07:cf:da:db:59:aa:c5:1d:d3:b5:2c:e9:53:
e7:cf:83:5e:e7:db:23:13:ba:4a:60:95:89:b7:0c:c3:8b:1b:
f6:82:a4:92:83:a4:aa:d0:c2:45:6a:21:d3:24:5a:34:c3:fc:
91:40:8b:92:2e:55:60:5c:ae:42:15:af:44:16:40:b0:64:cd:
a5:b2:74:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:54:07 2026 by rpki-client