Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/66ab8b-bb38-41be-9a8b-e359c9d7b907/1/LR08AN6C--6zs4rsMv19LHyamOs.mft
File: LR08AN6C--6zs4rsMv19LHyamOs.mft (raw, json)
Hash identifier: ya6xVO1wb7Hde8079KFXvMmzMHBcLBDQ+UmLzr3ucSo=
Subject key identifier: D5:8B:C0:14:DD:10:9D:EA:AF:B0:0C:73:44:64:56:2E:83:3C:32:2F
Authority key identifier: 2D:1D:3C:00:DE:82:FB:EE:B3:B3:8A:EC:32:FD:7D:2C:7C:9A:98:EB
Certificate issuer: /CN=2d1d3c00de82fbeeb3b38aec32fd7d2c7c9a98eb
Certificate serial: 019D2703DE55888583B725F7218A1F49AE04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LR08AN6C--6zs4rsMv19LHyamOs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/66ab8b-bb38-41be-9a8b-e359c9d7b907/1/LR08AN6C--6zs4rsMv19LHyamOs.mft
Manifest number: 05AD
Signing time: Wed 25 Mar 2026 22:00:57 +0000
Manifest this update: Wed 25 Mar 2026 22:00:57 +0000
Manifest next update: Thu 26 Mar 2026 22:00:57 +0000
Files and hashes: 1: LR08AN6C--6zs4rsMv19LHyamOs.crl (hash: CXn76ye0IEmKOm7en5awFEbB9xKODXDTVpBRosw0EF0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/66ab8b-bb38-41be-9a8b-e359c9d7b907/1/LR08AN6C--6zs4rsMv19LHyamOs.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/66ab8b-bb38-41be-9a8b-e359c9d7b907/1/LR08AN6C--6zs4rsMv19LHyamOs.mft
rsync://rpki.ripe.net/repository/DEFAULT/LR08AN6C--6zs4rsMv19LHyamOs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:03:de:55:88:85:83:b7:25:f7:21:8a:1f:49:ae:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d1d3c00de82fbeeb3b38aec32fd7d2c7c9a98eb
Validity
Not Before: Mar 25 22:00:57 2026 GMT
Not After : Mar 26 22:00:57 2026 GMT
Subject: CN=d58bc014dd109deaafb00c734464562e833c322f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:b6:2d:da:4d:f8:3d:12:e0:89:b3:a6:d6:64:
a3:67:e6:44:45:7e:6f:90:b0:5b:27:9c:fb:0e:aa:
1a:23:a6:62:38:0b:6e:39:bd:cf:9d:43:60:17:ef:
64:c8:b4:2a:a6:6e:21:60:f6:22:3b:63:ea:43:90:
21:9b:29:4f:0c:95:84:6b:ed:e3:d1:d4:7b:ea:fc:
14:1e:b2:35:af:b5:c6:d4:b3:8f:3b:fa:43:a7:77:
c8:e8:76:57:9b:af:9c:85:a7:d7:60:ab:4b:fa:4d:
1e:d0:78:fd:f0:bc:58:8a:03:3f:c8:c0:84:fa:6e:
73:76:1e:ea:ea:a3:75:85:c6:d4:ea:a3:3a:53:9e:
62:0e:36:85:fa:3d:f9:9e:42:e9:4d:c0:db:c8:db:
e1:07:70:7e:da:07:2f:14:30:24:73:18:8f:8f:81:
f8:e0:c0:bd:af:c2:68:b0:8d:3b:40:dc:7c:cd:22:
ab:b7:ac:ed:88:b9:d7:c9:4f:17:7a:c2:6f:4f:d3:
54:95:85:ed:42:e8:a9:d0:29:a1:d0:66:d5:23:43:
7f:ca:55:6c:d9:d2:30:fd:d8:46:89:c5:96:08:dc:
e7:62:fe:81:0b:95:11:b3:ae:4e:b0:93:18:41:f5:
41:04:17:09:c5:45:bf:fb:45:0f:b6:4f:84:9a:80:
98:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:8B:C0:14:DD:10:9D:EA:AF:B0:0C:73:44:64:56:2E:83:3C:32:2F
X509v3 Authority Key Identifier:
keyid:2D:1D:3C:00:DE:82:FB:EE:B3:B3:8A:EC:32:FD:7D:2C:7C:9A:98:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LR08AN6C--6zs4rsMv19LHyamOs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/66ab8b-bb38-41be-9a8b-e359c9d7b907/1/LR08AN6C--6zs4rsMv19LHyamOs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/66ab8b-bb38-41be-9a8b-e359c9d7b907/1/LR08AN6C--6zs4rsMv19LHyamOs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:5f:2c:df:05:34:8f:a7:8a:65:58:9c:fb:f0:13:3a:32:7d:
70:c4:df:e0:71:82:1f:71:3b:5c:0b:4d:db:ce:5b:07:89:b3:
82:a9:d2:75:25:92:66:5c:3e:a9:32:1c:02:d4:02:72:dc:82:
3a:1c:68:7d:8c:a7:61:69:16:a4:3f:3a:f1:5b:b4:d0:eb:3f:
a8:34:83:78:67:b5:24:86:b3:56:df:c4:f7:d8:ad:51:ce:99:
b5:a6:35:7b:21:46:24:02:b6:eb:ff:04:53:9c:36:67:a7:ee:
04:a0:84:94:c1:7e:a5:97:15:3c:b3:bb:c7:27:f2:c5:e2:0b:
cc:f1:41:68:6b:1e:2c:4e:43:93:8f:06:c6:2c:13:9a:2a:b3:
a4:95:bd:82:63:dd:9e:ed:2d:a9:21:a6:9d:bd:2e:3a:d1:d8:
a6:a6:dd:f9:08:4c:38:73:7e:96:31:11:f7:e2:ad:e9:f3:55:
b0:9a:91:48:36:30:7c:a8:08:5f:09:ce:97:ec:cf:04:0f:e2:
97:5a:db:53:63:0b:13:4b:fd:ac:93:b9:c6:90:82:43:bf:06:
a4:45:89:b9:ca:82:45:95:52:d1:9c:70:9f:2d:b1:81:88:93:
c9:56:82:bb:ac:67:f9:e1:27:8b:59:2f:78:0e:2a:45:f3:65:
77:c2:33:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:11:06 2026 by rpki-client