Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/08e404-f426-42e2-9594-da99e34cc30b/1/lB47mlO74C4stDl6bRoB2Aym5Bg.mft
File: lB47mlO74C4stDl6bRoB2Aym5Bg.mft (raw, json)
Hash identifier: 4S4V8gUeIV6evvbR6hrWiRo37CPStdY4GM/JdcJoyFU=
Subject key identifier: 0C:0E:6D:9A:65:BC:2C:AE:B9:10:61:4F:67:FD:E0:DA:D1:31:46:D2
Authority key identifier: 94:1E:3B:9A:53:BB:E0:2E:2C:B4:39:7A:6D:1A:01:D8:0C:A6:E4:18
Certificate issuer: /CN=941e3b9a53bbe02e2cb4397a6d1a01d80ca6e418
Certificate serial: 019D29614223D077FDAD9C253A3EFE20DEE0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lB47mlO74C4stDl6bRoB2Aym5Bg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/08e404-f426-42e2-9594-da99e34cc30b/1/lB47mlO74C4stDl6bRoB2Aym5Bg.mft
Manifest number: 1885
Signing time: Thu 26 Mar 2026 09:02:12 +0000
Manifest this update: Thu 26 Mar 2026 09:02:12 +0000
Manifest next update: Fri 27 Mar 2026 09:02:12 +0000
Files and hashes: 1: lB47mlO74C4stDl6bRoB2Aym5Bg.crl (hash: WMhgi2nGO0yBFfparuZVcu6XBtbdtoBozrcq4f2sBSA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/08e404-f426-42e2-9594-da99e34cc30b/1/lB47mlO74C4stDl6bRoB2Aym5Bg.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/08e404-f426-42e2-9594-da99e34cc30b/1/lB47mlO74C4stDl6bRoB2Aym5Bg.mft
rsync://rpki.ripe.net/repository/DEFAULT/lB47mlO74C4stDl6bRoB2Aym5Bg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:61:42:23:d0:77:fd:ad:9c:25:3a:3e:fe:20:de:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=941e3b9a53bbe02e2cb4397a6d1a01d80ca6e418
Validity
Not Before: Mar 26 09:02:12 2026 GMT
Not After : Mar 27 09:02:12 2026 GMT
Subject: CN=0c0e6d9a65bc2caeb910614f67fde0dad13146d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:09:de:ab:16:3e:ee:c7:1a:b5:c4:ae:c6:30:
5f:7c:0c:65:6c:62:5e:fe:fe:f1:60:16:e4:01:a6:
d7:af:c2:27:10:b4:e3:b1:aa:89:3e:2a:60:50:ac:
71:be:e9:0c:6e:5d:a4:b4:cb:02:ad:d0:04:ce:72:
ac:4f:bb:f1:af:8c:d8:c6:fd:f9:96:aa:d8:19:1f:
1d:23:0c:b6:ab:48:20:34:6a:46:94:5d:11:f7:13:
e3:3c:32:b9:1f:36:ca:06:ab:aa:38:e3:c3:10:c4:
41:00:52:22:31:92:45:94:85:e5:15:9e:f7:1f:aa:
6b:d6:98:6e:ef:1a:e8:59:03:f4:4c:0c:fa:a5:3c:
7b:5a:1b:34:21:ed:b3:7a:82:67:4d:1a:95:92:a0:
5d:a0:2d:d5:8f:4f:15:c4:d7:17:fe:1d:e0:c9:1d:
a0:94:cf:7d:cf:2d:75:42:10:cf:f5:29:49:e1:e5:
73:8e:72:65:52:a6:29:13:fa:ec:ff:39:b2:93:9c:
dd:ec:46:3b:43:e3:74:64:19:2c:c7:74:61:68:20:
d8:03:a1:95:82:af:7f:86:5f:25:b7:c5:cd:c3:06:
9b:c6:c7:d5:b8:97:af:80:47:df:53:ee:e3:70:bb:
6d:db:01:1f:ce:00:35:34:8d:41:06:f4:ed:d5:5f:
39:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:0E:6D:9A:65:BC:2C:AE:B9:10:61:4F:67:FD:E0:DA:D1:31:46:D2
X509v3 Authority Key Identifier:
keyid:94:1E:3B:9A:53:BB:E0:2E:2C:B4:39:7A:6D:1A:01:D8:0C:A6:E4:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lB47mlO74C4stDl6bRoB2Aym5Bg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/08e404-f426-42e2-9594-da99e34cc30b/1/lB47mlO74C4stDl6bRoB2Aym5Bg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/08e404-f426-42e2-9594-da99e34cc30b/1/lB47mlO74C4stDl6bRoB2Aym5Bg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:1f:77:05:2e:8b:0c:8c:d5:4d:21:9e:06:44:76:32:d9:3c:
1f:f6:a3:81:f3:2a:a5:fa:d1:6c:a8:61:5b:e3:9d:f3:a5:71:
38:bb:4f:bb:40:e1:8c:62:19:0f:24:cf:ce:72:5f:c7:64:0c:
7c:c5:1a:01:78:02:3e:f5:2a:84:4f:7a:ef:c4:9a:c9:17:60:
db:30:09:08:86:3f:5a:b2:6a:b2:2a:2d:be:38:ef:3c:70:c3:
70:ce:ce:c6:6f:a7:46:66:72:03:12:18:b2:0c:e7:41:97:8c:
b9:bd:da:d2:e3:e0:e3:8e:56:74:e2:3c:41:9b:99:a5:84:b9:
e8:a6:89:49:81:7f:5b:c4:d2:7b:5e:94:19:33:ea:e7:e1:94:
24:49:c8:ba:13:33:9f:5f:74:81:34:f1:49:e6:fb:4b:92:f3:
ee:87:ae:18:b5:25:35:8c:14:c6:a3:53:44:58:45:22:3e:b6:
c2:01:7e:38:17:65:9a:89:d6:db:ef:95:d6:83:b4:f4:d5:a5:
f1:ce:e4:19:7d:3e:51:e9:9d:4d:59:4d:ce:fe:e0:a1:c2:fa:
02:aa:3c:64:7b:cb:fb:6b:7e:82:b4:f0:96:92:64:3d:b0:e3:
d5:0f:2c:40:33:0d:02:10:19:7c:f2:ae:49:e3:dd:26:2e:39:
15:0c:8c:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:38:14 2026 by rpki-client