Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/68ce51-bd3e-4cd1-bcc2-dd2a584a62bb/1/LhgQ1ckRtKgQc_rmOJcbV33XpkI.mft
File: LhgQ1ckRtKgQc_rmOJcbV33XpkI.mft (raw, json)
Hash identifier: 76rpmnS2VULc5Xu1zjvlxGBL/xlNVAgBHrKti1hHEoc=
Subject key identifier: C0:F4:98:E9:98:D0:5C:B2:57:07:D0:77:36:68:05:1D:1E:DF:C5:A7
Authority key identifier: 2E:18:10:D5:C9:11:B4:A8:10:73:FA:E6:38:97:1B:57:7D:D7:A6:42
Certificate issuer: /CN=2e1810d5c911b4a81073fae638971b577dd7a642
Certificate serial: 019D28F311D82631708C7C20705E262E6629
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LhgQ1ckRtKgQc_rmOJcbV33XpkI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/68ce51-bd3e-4cd1-bcc2-dd2a584a62bb/1/LhgQ1ckRtKgQc_rmOJcbV33XpkI.mft
Manifest number: 1353
Signing time: Thu 26 Mar 2026 07:01:51 +0000
Manifest this update: Thu 26 Mar 2026 07:01:51 +0000
Manifest next update: Fri 27 Mar 2026 07:01:51 +0000
Files and hashes: 1: LhgQ1ckRtKgQc_rmOJcbV33XpkI.crl (hash: FnBu6rOAjP1DXroeZH5ZOF1WhfPYNzbIY3ph44dfQdY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/68ce51-bd3e-4cd1-bcc2-dd2a584a62bb/1/LhgQ1ckRtKgQc_rmOJcbV33XpkI.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/68ce51-bd3e-4cd1-bcc2-dd2a584a62bb/1/LhgQ1ckRtKgQc_rmOJcbV33XpkI.mft
rsync://rpki.ripe.net/repository/DEFAULT/LhgQ1ckRtKgQc_rmOJcbV33XpkI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 07:01:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:f3:11:d8:26:31:70:8c:7c:20:70:5e:26:2e:66:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e1810d5c911b4a81073fae638971b577dd7a642
Validity
Not Before: Mar 26 07:01:51 2026 GMT
Not After : Mar 27 07:01:51 2026 GMT
Subject: CN=c0f498e998d05cb25707d0773668051d1edfc5a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:06:2a:e7:69:48:20:a2:91:80:d5:2c:92:10:
1b:73:d1:18:d7:d6:8f:a3:6b:0b:16:33:e9:27:3d:
d1:8a:c7:e9:9a:2a:f5:2d:21:da:d4:38:f2:b7:96:
4b:f3:70:de:70:62:53:84:3d:54:57:7d:40:57:03:
5e:f0:e4:32:d3:e6:d8:e3:fd:fc:65:aa:f9:48:ce:
e4:90:3c:66:61:86:e0:3f:79:50:db:0e:e9:38:b5:
d7:7f:2a:ac:4f:ee:d1:a2:d1:6e:11:87:67:d7:42:
d8:84:20:b9:0d:d7:45:bf:f1:6f:e7:9c:9b:dc:4e:
a8:5a:09:2c:f2:59:dc:5f:d6:0c:d7:78:5a:cc:9f:
5d:0e:7e:4e:90:fb:4d:af:53:66:d5:54:dc:a9:7a:
07:0c:51:f2:dd:a4:40:db:1a:c8:bf:98:ad:ea:9f:
41:6e:86:1e:63:60:46:cb:53:9f:28:69:5c:1d:f3:
ed:81:db:46:58:d6:af:53:5d:1c:8c:7d:b3:0f:e1:
3b:ee:9c:8e:37:aa:97:be:18:10:d2:66:e7:2d:63:
35:7d:36:ed:56:51:11:99:06:49:6e:e0:c9:d8:38:
4d:36:c9:6a:d5:24:67:a9:af:20:ff:21:0d:24:9d:
29:a3:9b:59:62:83:84:de:38:35:00:ea:57:ef:71:
6a:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:F4:98:E9:98:D0:5C:B2:57:07:D0:77:36:68:05:1D:1E:DF:C5:A7
X509v3 Authority Key Identifier:
keyid:2E:18:10:D5:C9:11:B4:A8:10:73:FA:E6:38:97:1B:57:7D:D7:A6:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LhgQ1ckRtKgQc_rmOJcbV33XpkI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/68ce51-bd3e-4cd1-bcc2-dd2a584a62bb/1/LhgQ1ckRtKgQc_rmOJcbV33XpkI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/68ce51-bd3e-4cd1-bcc2-dd2a584a62bb/1/LhgQ1ckRtKgQc_rmOJcbV33XpkI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:d2:95:66:d8:e3:0b:7e:05:fb:86:58:5f:80:5b:7c:84:46:
69:b4:10:74:4c:2b:4f:3c:b0:1e:4b:78:a4:c1:b2:a0:76:f8:
5b:45:bc:a1:d1:96:5d:12:d8:d4:ab:5f:8c:fc:4b:fa:31:74:
2f:bd:bb:95:bb:24:f4:dc:80:57:e5:63:de:31:75:56:38:d3:
0b:be:40:45:f2:1d:e6:f5:ae:4c:7a:74:83:67:24:08:0f:bd:
f7:ab:0d:d3:af:cc:33:93:72:a4:15:21:f9:56:6e:da:c6:39:
1f:6e:a1:9d:6a:c8:c4:ef:5b:92:1e:ea:01:41:a3:50:1f:09:
89:a2:a9:96:e2:39:e9:92:32:09:c2:f8:ec:ce:46:23:3e:35:
87:7b:1d:d9:37:29:9f:1c:32:44:d5:06:b0:f6:1e:a7:46:d4:
f5:71:d5:a0:aa:cb:2a:08:95:28:cf:06:b7:40:e4:a2:43:77:
0f:d4:f7:ed:bf:e2:25:98:73:f1:a5:85:eb:cf:ed:87:e3:b5:
4b:aa:bd:c0:a8:cb:a3:59:89:07:20:d1:40:bd:00:39:39:bb:
5b:a4:e0:86:b1:4d:aa:bc:ab:c7:d5:d3:23:94:14:c8:9c:68:
5e:a8:8c:e5:9a:b8:86:f7:eb:ef:d5:8e:df:1a:a3:62:ca:00:
94:53:6b:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:09:08 2026 by rpki-client