Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/3feed9-ce5f-4a22-99b9-a4a9cc471599/1/lcGSBnFsXHnTW_FZJNszI6TsGMg.mft
File: lcGSBnFsXHnTW_FZJNszI6TsGMg.mft (raw, json)
Hash identifier: Kj13vAbLcFeRy3jsr/8jT5atyJv72ekfaUp+oo9nems=
Subject key identifier: 48:37:DB:12:1B:E1:AB:C9:34:A4:31:50:4F:A8:63:A6:E1:FB:10:82
Authority key identifier: 95:C1:92:06:71:6C:5C:79:D3:5B:F1:59:24:DB:33:23:A4:EC:18:C8
Certificate issuer: /CN=95c19206716c5c79d35bf15924db3323a4ec18c8
Certificate serial: 019D2996F30F5AF6BCA2B2423E1B2EB2F046
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lcGSBnFsXHnTW_FZJNszI6TsGMg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/3feed9-ce5f-4a22-99b9-a4a9cc471599/1/lcGSBnFsXHnTW_FZJNszI6TsGMg.mft
Manifest number: 1457
Signing time: Thu 26 Mar 2026 10:00:51 +0000
Manifest this update: Thu 26 Mar 2026 10:00:51 +0000
Manifest next update: Fri 27 Mar 2026 10:00:51 +0000
Files and hashes: 1: lcGSBnFsXHnTW_FZJNszI6TsGMg.crl (hash: 7PxwnDfDtYm7IwasF4c6Zo8y1KGOwAftAdCx6GDk29g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/3feed9-ce5f-4a22-99b9-a4a9cc471599/1/lcGSBnFsXHnTW_FZJNszI6TsGMg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/3feed9-ce5f-4a22-99b9-a4a9cc471599/1/lcGSBnFsXHnTW_FZJNszI6TsGMg.mft
rsync://rpki.ripe.net/repository/DEFAULT/lcGSBnFsXHnTW_FZJNszI6TsGMg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:96:f3:0f:5a:f6:bc:a2:b2:42:3e:1b:2e:b2:f0:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95c19206716c5c79d35bf15924db3323a4ec18c8
Validity
Not Before: Mar 26 10:00:51 2026 GMT
Not After : Mar 27 10:00:51 2026 GMT
Subject: CN=4837db121be1abc934a431504fa863a6e1fb1082
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:d7:d4:79:fe:9e:51:ab:bd:cd:d6:89:06:9d:
b6:9f:ee:31:e4:61:d0:d4:05:ac:2b:6d:a4:82:5e:
a9:1a:3c:8e:2a:39:3e:dc:0a:d6:c9:99:31:a5:bd:
02:37:07:d6:3f:02:bf:f7:c0:e1:92:2c:3b:92:00:
94:1a:b9:3b:06:24:7d:65:44:af:0a:ab:6a:ab:f3:
cd:b4:68:d3:a7:07:77:0c:c1:06:b9:c4:f9:bd:ff:
53:64:b0:5b:7c:02:45:7b:a7:cf:e0:a8:5a:c0:d9:
db:dc:1d:5d:96:6c:9c:80:4e:2d:38:4a:81:f9:c4:
d0:98:78:51:aa:0c:c6:06:a2:78:11:a1:b9:17:72:
7f:17:70:77:6d:31:db:5a:2b:14:f9:f8:9b:64:85:
a9:44:b7:82:a3:ee:8f:97:95:74:ed:03:08:de:30:
e0:c3:df:51:0c:52:71:cb:ad:59:5d:bb:0f:df:22:
a1:0d:84:7d:95:fb:a0:14:97:ac:59:f7:c2:16:c6:
bd:ad:e7:48:59:d3:b5:c9:60:66:e1:2f:89:c9:11:
08:b4:6f:ee:b4:d9:39:82:74:2d:52:98:fc:ff:4a:
52:c8:20:10:eb:ac:5d:52:ad:58:d7:bb:7e:a8:92:
3a:8a:c1:74:72:35:f9:0e:b9:ae:ac:94:45:fe:5b:
5e:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:37:DB:12:1B:E1:AB:C9:34:A4:31:50:4F:A8:63:A6:E1:FB:10:82
X509v3 Authority Key Identifier:
keyid:95:C1:92:06:71:6C:5C:79:D3:5B:F1:59:24:DB:33:23:A4:EC:18:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lcGSBnFsXHnTW_FZJNszI6TsGMg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/3feed9-ce5f-4a22-99b9-a4a9cc471599/1/lcGSBnFsXHnTW_FZJNszI6TsGMg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/3feed9-ce5f-4a22-99b9-a4a9cc471599/1/lcGSBnFsXHnTW_FZJNszI6TsGMg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:c5:2e:77:b9:50:2b:a5:0b:4c:40:10:ef:ef:f4:55:81:89:
35:8c:30:eb:7c:a7:f1:f6:b9:74:3a:f4:b0:e0:4d:d8:b7:be:
1b:ba:f1:67:b4:b7:6b:c5:9b:d8:0e:59:58:48:ab:73:e0:89:
20:79:7a:ce:5f:a1:d9:22:d8:a2:ba:1d:fe:1d:f2:da:95:e6:
f1:e9:38:95:79:e6:7f:2d:c6:df:43:f0:53:30:55:52:fd:9a:
cd:0e:a1:e7:60:67:0d:35:7f:ad:9f:40:37:cc:8e:13:47:8b:
31:ad:2a:80:e4:f6:c4:f8:5b:c7:17:48:2d:1e:65:33:ae:c2:
42:42:9d:bc:f9:85:12:8a:77:36:cf:9c:aa:ea:27:4b:0e:08:
c7:10:b2:4e:5f:25:b0:66:07:8e:14:40:79:37:22:30:f8:c0:
84:5f:17:db:55:70:19:ac:96:47:f9:c3:8d:d5:70:db:c1:6f:
7c:cb:f2:d8:0f:d4:1d:aa:f4:a0:47:1e:88:e5:c2:00:80:3b:
36:50:07:2e:dd:25:65:5b:51:21:0a:8b:d8:1b:7c:3c:d2:c6:
1c:9b:82:24:3b:f5:02:57:0d:6c:73:b7:44:76:80:76:f1:0c:
60:c6:40:c6:d3:e5:39:b8:0f:27:c8:eb:cf:6a:f7:e3:21:d8:
4c:d7:52:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:48:05 2026 by rpki-client