Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/7929f4-ec35-4d9c-92a8-0eb45ef62d8d/1/LxW3OnwtEx7BTr2QcXGLVMP7ppI.mft
File: LxW3OnwtEx7BTr2QcXGLVMP7ppI.mft (raw, json)
Hash identifier: xarLp5BQ7sN/W8eOw8O0smfxPG1yTN9OL0WGEJP3FpQ=
Subject key identifier: 31:E1:55:43:85:BD:C8:5F:08:8D:26:D1:C0:80:33:61:25:8F:DC:D7
Authority key identifier: 2F:15:B7:3A:7C:2D:13:1E:C1:4E:BD:90:71:71:8B:54:C3:FB:A6:92
Certificate issuer: /CN=2f15b73a7c2d131ec14ebd9071718b54c3fba692
Certificate serial: 019D26CD57E52C844ACB99FAF788AD5CC9CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LxW3OnwtEx7BTr2QcXGLVMP7ppI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/7929f4-ec35-4d9c-92a8-0eb45ef62d8d/1/LxW3OnwtEx7BTr2QcXGLVMP7ppI.mft
Manifest number: 059A
Signing time: Wed 25 Mar 2026 21:01:24 +0000
Manifest this update: Wed 25 Mar 2026 21:01:24 +0000
Manifest next update: Thu 26 Mar 2026 21:01:24 +0000
Files and hashes: 1: LxW3OnwtEx7BTr2QcXGLVMP7ppI.crl (hash: 4KNt+F01T7Wqup4nNmamEaAystvgGfDXp3x+aUYbRqQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/7929f4-ec35-4d9c-92a8-0eb45ef62d8d/1/LxW3OnwtEx7BTr2QcXGLVMP7ppI.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/7929f4-ec35-4d9c-92a8-0eb45ef62d8d/1/LxW3OnwtEx7BTr2QcXGLVMP7ppI.mft
rsync://rpki.ripe.net/repository/DEFAULT/LxW3OnwtEx7BTr2QcXGLVMP7ppI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 21:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cd:57:e5:2c:84:4a:cb:99:fa:f7:88:ad:5c:c9:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f15b73a7c2d131ec14ebd9071718b54c3fba692
Validity
Not Before: Mar 25 21:01:24 2026 GMT
Not After : Mar 26 21:01:24 2026 GMT
Subject: CN=31e1554385bdc85f088d26d1c0803361258fdcd7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:7c:6a:f3:55:a4:1c:51:48:54:f8:3b:ea:fc:
ef:58:d0:c0:12:cb:56:e5:f8:40:00:59:77:25:e6:
ce:14:d3:5e:81:ef:b9:4f:88:25:40:fd:98:22:7d:
fe:f3:3f:2f:94:60:cd:78:6a:bd:60:d6:7e:48:be:
45:55:be:ee:e4:bb:16:69:5c:48:16:92:3c:6a:2c:
b9:3c:7a:2c:31:10:64:f4:9d:48:dc:fe:e7:05:bd:
0e:e6:d3:c1:a3:af:b7:9e:8e:ac:24:46:1c:f7:d4:
e4:79:5c:95:a7:10:6d:c9:09:13:47:c1:d9:d7:ae:
71:6e:f7:ff:e0:e8:e9:a3:19:8a:f1:47:8a:53:d7:
cb:cc:ad:30:7c:04:14:3e:85:e0:fc:6a:a6:c8:b9:
ce:65:44:82:a3:8e:a9:21:c0:38:75:72:57:40:08:
4b:8d:ff:74:4f:a1:4c:26:c6:6b:79:0e:d4:ae:46:
d7:d6:7d:bd:9d:e2:84:d8:20:a3:10:78:a2:fd:2c:
42:d8:6d:3c:85:f6:ff:16:fa:db:77:4f:a0:71:77:
6a:54:40:13:98:80:67:12:02:dd:13:89:81:67:61:
0a:26:7d:0a:04:bf:58:cc:b4:db:68:97:d7:77:c8:
b9:d4:fa:a5:ed:82:60:d1:3c:16:2d:79:06:6f:87:
77:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:E1:55:43:85:BD:C8:5F:08:8D:26:D1:C0:80:33:61:25:8F:DC:D7
X509v3 Authority Key Identifier:
keyid:2F:15:B7:3A:7C:2D:13:1E:C1:4E:BD:90:71:71:8B:54:C3:FB:A6:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LxW3OnwtEx7BTr2QcXGLVMP7ppI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/7929f4-ec35-4d9c-92a8-0eb45ef62d8d/1/LxW3OnwtEx7BTr2QcXGLVMP7ppI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/7929f4-ec35-4d9c-92a8-0eb45ef62d8d/1/LxW3OnwtEx7BTr2QcXGLVMP7ppI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:d1:ec:e1:65:0a:1a:d2:af:ef:86:bc:45:c3:2c:a1:0c:d4:
cc:90:f3:7c:4e:9a:aa:66:5c:48:90:39:ff:c3:cd:52:96:5d:
40:c6:56:5a:f0:1c:f9:be:a4:60:a1:b2:43:03:92:02:97:34:
06:8c:1b:a9:8b:59:eb:34:5e:38:83:31:71:b0:21:b8:7b:94:
96:8d:1c:41:27:81:fb:bf:a1:60:a6:2b:23:3d:8b:83:8e:de:
6b:14:59:9d:47:c6:bf:a5:44:93:94:9f:96:79:09:2e:5e:6f:
7a:ad:52:e3:8c:4e:59:52:8e:3d:9a:29:33:4a:44:8c:11:6c:
2d:2f:6d:b7:72:0e:0a:cb:bc:6d:1c:df:4b:4c:7b:69:81:05:
59:b7:82:b8:84:f1:47:b8:c1:e5:9e:2a:7a:f9:a3:15:df:ac:
6b:67:4c:a2:6e:56:19:bd:fd:60:f0:5b:8b:52:6a:cb:ce:d2:
57:94:91:e6:ad:2c:dc:d1:71:65:4b:ef:fb:84:a2:27:89:25:
1a:14:f1:a3:a9:b5:cf:1a:ac:53:8c:c6:3e:14:0b:91:29:34:
a1:db:0a:cd:a6:78:89:ea:1d:b9:74:d0:55:c8:d7:69:1d:a9:
c2:b3:e7:3b:97:2b:90:41:fe:05:89:ab:a6:e0:25:18:7a:da:
ec:5a:bf:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:38:13 2026 by rpki-client