Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/0add7c-a28c-4ae8-8885-01ce06d315cd/1/LKzIXJmo4dt9HFImfC3b08OeGLI.mft
File: LKzIXJmo4dt9HFImfC3b08OeGLI.mft (raw, json)
Hash identifier: H2yNOUF2AgYAg9n3rEbR0TGRqyUheBbc7lNLYXpzbC8=
Subject key identifier: FC:37:A1:66:4B:B3:05:03:EC:74:18:89:7D:FB:22:FD:5E:7F:80:27
Authority key identifier: 2C:AC:C8:5C:99:A8:E1:DB:7D:1C:52:26:7C:2D:DB:D3:C3:9E:18:B2
Certificate issuer: /CN=2cacc85c99a8e1db7d1c52267c2ddbd3c39e18b2
Certificate serial: 019D2AE084FF1CA39F433B384209CDA1847C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LKzIXJmo4dt9HFImfC3b08OeGLI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/0add7c-a28c-4ae8-8885-01ce06d315cd/1/LKzIXJmo4dt9HFImfC3b08OeGLI.mft
Manifest number: 0F9F
Signing time: Thu 26 Mar 2026 16:00:50 +0000
Manifest this update: Thu 26 Mar 2026 16:00:50 +0000
Manifest next update: Fri 27 Mar 2026 16:00:50 +0000
Files and hashes: 1: LKzIXJmo4dt9HFImfC3b08OeGLI.crl (hash: 0VTsNM2Y/4Y9Gw7czjtsk9TTMuU+IPnSMMQUe4Vnr8w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/0add7c-a28c-4ae8-8885-01ce06d315cd/1/LKzIXJmo4dt9HFImfC3b08OeGLI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/0add7c-a28c-4ae8-8885-01ce06d315cd/1/LKzIXJmo4dt9HFImfC3b08OeGLI.mft
rsync://rpki.ripe.net/repository/DEFAULT/LKzIXJmo4dt9HFImfC3b08OeGLI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 16:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:e0:84:ff:1c:a3:9f:43:3b:38:42:09:cd:a1:84:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2cacc85c99a8e1db7d1c52267c2ddbd3c39e18b2
Validity
Not Before: Mar 26 16:00:50 2026 GMT
Not After : Mar 27 16:00:50 2026 GMT
Subject: CN=fc37a1664bb30503ec7418897dfb22fd5e7f8027
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:f3:6b:6c:89:c5:cc:8e:e6:3f:c9:70:c7:54:
15:f0:73:19:a1:fa:36:80:bc:8e:55:ab:8d:a9:9c:
f7:de:d7:b1:00:9b:aa:2c:14:d4:93:b9:7a:fd:1d:
3d:b4:dd:52:05:2a:fd:70:4a:ab:fa:c9:d9:f4:a7:
3f:54:13:06:18:85:64:d3:70:be:b8:86:d0:75:05:
94:45:5b:b3:c6:d6:3b:a0:bc:d2:30:db:37:d0:70:
02:ea:34:70:6b:a9:b8:29:dc:24:87:77:e5:a9:61:
ac:47:f8:fc:26:7b:88:82:29:58:d2:b9:4e:61:31:
be:cd:e9:b5:06:f5:c9:24:00:50:86:a3:a0:db:c4:
6d:61:bd:44:62:80:61:a3:6b:95:ff:1b:9d:db:b6:
33:12:20:ff:1e:ba:61:99:c4:86:df:9f:78:80:58:
d9:e0:f0:df:ea:48:b2:9c:86:c4:c7:17:16:08:1a:
22:c1:ab:ad:14:cd:12:f7:df:3f:4d:ec:57:98:49:
b5:16:e8:d8:03:9d:8b:a8:23:5a:41:28:77:08:72:
93:f1:94:70:b8:9a:fd:f8:7c:6d:bb:4b:2a:ce:d4:
a9:17:60:36:f2:25:de:a1:21:7a:47:0e:5b:2e:2d:
16:b6:b3:fb:a4:5a:84:f8:0f:9b:c4:50:37:66:36:
36:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:37:A1:66:4B:B3:05:03:EC:74:18:89:7D:FB:22:FD:5E:7F:80:27
X509v3 Authority Key Identifier:
keyid:2C:AC:C8:5C:99:A8:E1:DB:7D:1C:52:26:7C:2D:DB:D3:C3:9E:18:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LKzIXJmo4dt9HFImfC3b08OeGLI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/0add7c-a28c-4ae8-8885-01ce06d315cd/1/LKzIXJmo4dt9HFImfC3b08OeGLI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/0add7c-a28c-4ae8-8885-01ce06d315cd/1/LKzIXJmo4dt9HFImfC3b08OeGLI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:8a:05:0a:b6:c3:23:1b:2c:32:35:3e:e8:f1:d1:c7:7f:03:
be:d1:76:ba:43:62:87:82:9c:bc:7d:32:b4:d8:9e:35:2f:43:
70:0f:6b:02:5b:0c:90:69:57:3f:a6:db:87:0b:a3:94:6d:e1:
79:9f:69:92:40:ce:0e:a8:5b:9f:5e:c0:29:da:b7:15:29:02:
c3:69:e8:4d:da:24:d2:6e:c3:28:08:75:7b:52:27:f9:12:2c:
eb:24:c2:56:cf:87:59:ec:e4:9a:0a:0a:72:76:dd:d2:42:1f:
c3:bd:b5:6a:e9:c3:75:c0:92:54:7a:11:c7:1e:4b:cb:31:88:
cb:43:46:0a:82:25:55:64:34:c9:e7:81:61:8c:66:16:6f:65:
0d:67:21:d8:b6:b5:c0:5e:9f:58:cd:2a:17:b0:ec:d1:5f:43:
84:99:2b:a4:d2:98:8b:21:fb:43:0d:74:04:e6:8e:82:57:f6:
02:0d:62:ad:08:e7:d6:8c:f2:31:ea:e9:b4:89:5a:00:e7:0c:
0c:93:e2:07:5a:b5:af:68:32:83:d5:b4:ce:02:66:5e:8b:5d:
71:8c:54:d7:6b:9c:57:c8:6b:0b:66:1f:68:01:5d:28:13:aa:
7e:0c:3f:30:fe:83:92:bf:f7:d8:8b:25:f8:da:73:eb:0a:c3:
4f:e3:df:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 21:15:23 2026 by rpki-client