Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/d6c18a-55ef-4118-970c-60d1ed80c7cf/1/lEcuhZlXNV2l3dE0ltcNcHc0kfk.mft
File: lEcuhZlXNV2l3dE0ltcNcHc0kfk.mft (raw, json)
Hash identifier: u0j4gQVB+AWKT4PXmnjxbPEyYJDbmdA6uuADSewtCE0=
Subject key identifier: 96:CA:0C:09:5D:C2:05:92:9F:0C:60:7A:1C:EA:DC:F8:03:13:64:C5
Authority key identifier: 94:47:2E:85:99:57:35:5D:A5:DD:D1:34:96:D7:0D:70:77:34:91:F9
Certificate issuer: /CN=94472e859957355da5ddd13496d70d70773491f9
Certificate serial: 019D2960FA6F9D7639B2DA1788E9F28AE883
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lEcuhZlXNV2l3dE0ltcNcHc0kfk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/d6c18a-55ef-4118-970c-60d1ed80c7cf/1/lEcuhZlXNV2l3dE0ltcNcHc0kfk.mft
Manifest number: 11AA
Signing time: Thu 26 Mar 2026 09:01:54 +0000
Manifest this update: Thu 26 Mar 2026 09:01:54 +0000
Manifest next update: Fri 27 Mar 2026 09:01:54 +0000
Files and hashes: 1: lEcuhZlXNV2l3dE0ltcNcHc0kfk.crl (hash: xjqO+fgDpZzR79Dn5iBaEd57vBxxw1FCtuVfkpU5Dv4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/d6c18a-55ef-4118-970c-60d1ed80c7cf/1/lEcuhZlXNV2l3dE0ltcNcHc0kfk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/d6c18a-55ef-4118-970c-60d1ed80c7cf/1/lEcuhZlXNV2l3dE0ltcNcHc0kfk.mft
rsync://rpki.ripe.net/repository/DEFAULT/lEcuhZlXNV2l3dE0ltcNcHc0kfk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:60:fa:6f:9d:76:39:b2:da:17:88:e9:f2:8a:e8:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94472e859957355da5ddd13496d70d70773491f9
Validity
Not Before: Mar 26 09:01:54 2026 GMT
Not After : Mar 27 09:01:54 2026 GMT
Subject: CN=96ca0c095dc205929f0c607a1ceadcf8031364c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:a7:09:f8:5a:c0:e1:d9:d9:10:a5:86:cf:65:
e2:a6:be:07:a9:5b:94:70:b8:9f:87:58:7c:7a:10:
9a:5a:d1:d2:cb:6c:d2:96:bf:ce:c3:da:a8:dc:0d:
05:3e:d7:ba:7f:55:a8:6c:f9:90:d4:53:98:5e:3c:
de:62:b2:50:25:bf:b6:ef:b7:5c:3d:c9:2b:b3:ba:
51:9f:71:cb:9c:7e:d7:2b:59:91:6b:ea:63:34:e8:
cb:0e:3e:c6:0b:02:0d:44:64:02:3b:89:8e:12:bd:
d1:71:26:e7:df:ce:b6:1b:0c:a3:73:69:e9:7c:c6:
59:cc:90:77:ea:09:a0:ec:8f:3e:d7:dd:29:26:8b:
76:1d:c0:da:96:ca:d8:be:c0:47:78:41:14:e0:11:
65:33:c8:e8:c8:8c:14:3a:9f:de:24:07:0b:b2:2c:
0b:86:23:52:c6:5f:4c:76:59:91:e3:8b:74:09:a5:
87:d0:41:f2:2c:43:70:a3:db:64:fb:17:0c:0a:15:
d3:ce:76:c6:2c:89:f0:e0:20:42:73:66:5f:ac:4f:
e0:cd:9f:b2:e0:b1:f7:92:d5:b1:e6:38:87:16:bd:
2c:ea:07:f9:c4:e2:38:3b:2d:0f:41:2f:06:56:41:
48:42:f2:22:7a:85:4f:dc:0c:ea:89:f1:e5:3c:08:
b7:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:CA:0C:09:5D:C2:05:92:9F:0C:60:7A:1C:EA:DC:F8:03:13:64:C5
X509v3 Authority Key Identifier:
keyid:94:47:2E:85:99:57:35:5D:A5:DD:D1:34:96:D7:0D:70:77:34:91:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lEcuhZlXNV2l3dE0ltcNcHc0kfk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/d6c18a-55ef-4118-970c-60d1ed80c7cf/1/lEcuhZlXNV2l3dE0ltcNcHc0kfk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/d6c18a-55ef-4118-970c-60d1ed80c7cf/1/lEcuhZlXNV2l3dE0ltcNcHc0kfk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:a5:1e:d5:9c:d2:da:7a:6b:73:7e:bb:c1:b3:0d:72:81:7a:
fa:70:45:cd:7d:9d:fe:dc:cc:33:ba:1e:52:0a:52:19:52:fb:
e0:9d:5e:3f:86:74:c7:57:31:9f:30:f9:ff:8b:2d:0e:db:4b:
4e:c8:41:e4:96:f1:d4:3b:63:02:40:db:52:d2:fd:01:67:3c:
3b:af:db:68:28:03:52:00:62:b5:70:c5:1b:a5:4a:0f:4f:78:
7a:85:f8:b3:46:b9:be:b2:26:be:4a:6b:ae:97:8b:b0:67:67:
0d:ca:5c:c1:a0:35:27:31:9f:5e:be:bd:58:f3:d8:29:c5:7e:
79:78:9a:ef:d6:c7:b5:be:c4:51:1e:f5:e5:f6:28:79:fc:19:
c2:bf:b1:c6:ee:79:93:8c:30:9f:b4:2a:81:e6:f8:4b:62:d7:
95:b0:6b:6e:4d:69:00:73:09:a8:44:91:61:35:4a:f9:be:3b:
df:6b:b3:82:ba:7a:52:84:c9:67:fd:11:b7:09:4b:0f:11:15:
59:1b:e3:55:36:dd:21:93:84:30:17:77:97:2d:1b:a3:03:08:
b8:ce:1e:6a:70:35:79:e3:0f:26:02:de:a4:7e:09:ce:a0:cf:
62:01:e1:2c:34:e6:70:2b:2e:3b:c6:8b:b4:98:06:cc:71:c8:
95:5b:8f:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:57:29 2026 by rpki-client