Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/40cde9-90c2-4b32-b87c-7235577b6d56/1/LC6uaapwrwN7XSx-gSO-pAwpXn4.mft
File: LC6uaapwrwN7XSx-gSO-pAwpXn4.mft (raw, json)
Hash identifier: 9wMxYaCGMm2EYp0GIl8cEZYC7gaeemxHQ9i0hqcbq5A=
Subject key identifier: 60:66:CE:1B:39:41:D8:83:64:F6:03:30:BB:F2:BB:A6:DF:E1:B3:88
Authority key identifier: 2C:2E:AE:69:AA:70:AF:03:7B:5D:2C:7E:81:23:BE:A4:0C:29:5E:7E
Certificate issuer: /CN=2c2eae69aa70af037b5d2c7e8123bea40c295e7e
Certificate serial: 019D28F23E054545E672EDA43FCFE5F6DA68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LC6uaapwrwN7XSx-gSO-pAwpXn4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/40cde9-90c2-4b32-b87c-7235577b6d56/1/LC6uaapwrwN7XSx-gSO-pAwpXn4.mft
Manifest number: 0CD4
Signing time: Thu 26 Mar 2026 07:00:57 +0000
Manifest this update: Thu 26 Mar 2026 07:00:57 +0000
Manifest next update: Fri 27 Mar 2026 07:00:57 +0000
Files and hashes: 1: LC6uaapwrwN7XSx-gSO-pAwpXn4.crl (hash: o7030R0BRIAGrpTKPmeCS+q6tb/qiqMx0wS44lV5ieE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/40cde9-90c2-4b32-b87c-7235577b6d56/1/LC6uaapwrwN7XSx-gSO-pAwpXn4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/40cde9-90c2-4b32-b87c-7235577b6d56/1/LC6uaapwrwN7XSx-gSO-pAwpXn4.mft
rsync://rpki.ripe.net/repository/DEFAULT/LC6uaapwrwN7XSx-gSO-pAwpXn4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:f2:3e:05:45:45:e6:72:ed:a4:3f:cf:e5:f6:da:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c2eae69aa70af037b5d2c7e8123bea40c295e7e
Validity
Not Before: Mar 26 07:00:57 2026 GMT
Not After : Mar 27 07:00:57 2026 GMT
Subject: CN=6066ce1b3941d88364f60330bbf2bba6dfe1b388
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:e0:47:f3:cc:7d:79:3f:0a:a9:f5:98:0b:59:
1e:08:11:50:5c:e8:6b:c8:e5:8b:25:b6:99:11:5d:
2e:72:aa:8e:ee:9c:d0:6f:4c:eb:80:4c:0e:73:a8:
81:85:cb:3c:12:8d:c3:fc:23:8f:18:e6:b5:c1:9b:
10:15:10:ad:4a:7d:f4:8f:a2:24:6b:6c:d2:56:64:
b2:04:b4:45:26:a4:ee:da:73:10:09:be:8d:5f:f5:
40:10:43:56:80:2c:f1:1b:0c:40:34:aa:87:50:d7:
73:31:31:c7:78:24:46:8b:e0:b6:fd:44:96:59:3a:
34:3c:e9:ca:5e:aa:15:22:d6:44:1d:65:e2:f3:2f:
f7:f1:69:85:23:2b:f3:ce:47:70:a1:e5:32:03:ef:
52:b0:05:9a:40:da:74:32:16:43:f5:9b:71:cf:27:
c2:df:59:6f:74:2a:cf:5d:aa:66:50:aa:91:59:cf:
03:ed:bf:33:c4:22:0c:6e:70:a9:ba:c4:50:a1:35:
3d:57:57:fb:5b:a1:e9:57:2a:09:17:39:e1:43:a6:
e7:c0:27:5a:09:40:36:75:e6:e3:10:76:b4:67:c8:
c3:88:41:d7:3b:d2:90:d6:54:6e:7b:af:c1:05:be:
b1:46:8f:30:fb:71:fb:0e:b1:cf:18:aa:93:b6:ab:
87:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:66:CE:1B:39:41:D8:83:64:F6:03:30:BB:F2:BB:A6:DF:E1:B3:88
X509v3 Authority Key Identifier:
keyid:2C:2E:AE:69:AA:70:AF:03:7B:5D:2C:7E:81:23:BE:A4:0C:29:5E:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LC6uaapwrwN7XSx-gSO-pAwpXn4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/40cde9-90c2-4b32-b87c-7235577b6d56/1/LC6uaapwrwN7XSx-gSO-pAwpXn4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/40cde9-90c2-4b32-b87c-7235577b6d56/1/LC6uaapwrwN7XSx-gSO-pAwpXn4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:c8:3c:d3:44:03:d5:df:39:02:de:83:4c:33:9f:12:de:1c:
b6:b6:9a:84:2e:bd:43:f8:5c:d5:d1:4c:57:09:72:be:0e:c1:
b2:3e:31:38:b6:b7:4d:c2:f1:34:8b:6b:b1:06:f0:46:d4:37:
7d:94:d5:31:be:3a:d5:be:af:0f:90:7d:bd:96:10:05:d5:a7:
91:7e:17:ce:71:10:02:95:63:b0:48:95:ce:2d:60:00:a2:32:
66:87:21:74:60:57:c9:13:1c:be:5c:12:e5:af:c5:76:8a:ea:
dd:aa:a6:60:d3:f5:6a:9f:30:dc:1d:8b:57:da:0a:17:0e:ec:
25:41:00:d1:b5:e4:2a:65:2c:b5:e7:4e:72:7e:bf:d0:5b:cd:
42:4e:a2:70:a9:f7:dd:40:0f:ed:54:cc:ec:0b:3b:88:a8:96:
34:2d:0d:e3:f5:15:2e:37:88:50:d9:11:33:08:63:c9:18:70:
57:23:73:48:77:69:48:ce:8a:29:89:43:16:0c:81:9e:d2:ec:
6f:9f:9e:88:f3:8d:02:78:31:0e:2d:77:07:51:1c:68:54:1a:
fa:a2:dd:4a:73:e8:53:14:b2:cd:3d:4a:83:2c:08:3a:1b:a1:
b7:2d:ef:5e:81:49:42:e2:3b:11:3e:a2:6d:a8:75:fb:6b:0e:
ab:f8:3d:24
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0o8j4FRUXmcu2kP8/l9tpoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJjMmVhZTY5YWE3MGFmMDM3YjVkMmM3ZTgxMjNiZWE0MGMy
OTVlN2UwHhcNMjYwMzI2MDcwMDU3WhcNMjYwMzI3MDcwMDU3WjAzMTEwLwYDVQQD
Eyg2MDY2Y2UxYjM5NDFkODgzNjRmNjAzMzBiYmYyYmJhNmRmZTFiMzg4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0eBH88x9eT8KqfWYC1keCBFQXOhr
yOWLJbaZEV0ucqqO7pzQb0zrgEwOc6iBhcs8Eo3D/COPGOa1wZsQFRCtSn30j6Ik
a2zSVmSyBLRFJqTu2nMQCb6NX/VAEENWgCzxGwxANKqHUNdzMTHHeCRGi+C2/USW
WTo0POnKXqoVItZEHWXi8y/38WmFIyvzzkdwoeUyA+9SsAWaQNp0MhZD9ZtxzyfC
31lvdCrPXapmUKqRWc8D7b8zxCIMbnCpusRQoTU9V1f7W6HpVyoJFznhQ6bnwCda
CUA2debjEHa0Z8jDiEHXO9KQ1lRue6/BBb6xRo8w+3H7DrHPGKqTtquHlQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGBmzhs5QdiDZPYDMLvyu6bf4bOIMB8GA1UdIwQY
MBaAFCwurmmqcK8De10sfoEjvqQMKV5+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTEM2dWFhcHdyd043WFN4LWdTTy1wQXdwWG40LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC80MGNkZTktOTBjMi00YjMyLWI4N2Mt
NzIzNTU3N2I2ZDU2LzEvTEM2dWFhcHdyd043WFN4LWdTTy1wQXdwWG40Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNC80MGNkZTktOTBjMi00YjMyLWI4N2MtNzIzNTU3N2I2ZDU2
LzEvTEM2dWFhcHdyd043WFN4LWdTTy1wQXdwWG40LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAecg800QD
1d85At6DTDOfEt4ctraahC69Q/hc1dFMVwlyvg7Bsj4xOLa3TcLxNItrsQbwRtQ3
fZTVMb461b6vD5B9vZYQBdWnkX4XznEQApVjsEiVzi1gAKIyZochdGBXyRMcvlwS
5a/Fdorq3aqmYNP1ap8w3B2LV9oKFw7sJUEA0bXkKmUstedOcn6/0FvNQk6icKn3
3UAP7VTM7As7iKiWNC0N4/UVLjeIUNkRMwhjyRhwVyNzSHdpSM6KKYlDFgyBntLs
b5+eiPONAngxDi13B1EcaFQa+qLdSnPoUxSyzT1KgywIOhuhty3vXoFJQuI7ET6i
bah1+2sOq/g9JA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 11:31:12 2026 by rpki-client