Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/cab198-3e84-4b01-bfba-82b9e5fe9b06/1/lPNHF_8y_ix2RK610O6iMBYX8SQ.mft
File: lPNHF_8y_ix2RK610O6iMBYX8SQ.mft (raw, json)
Hash identifier: k/ORtUCsLPTRbQUREgQ1VJdadbAbBinQHT3oGhIG51U=
Subject key identifier: 12:13:09:AA:2C:07:15:03:F4:AB:BA:8C:04:4A:95:14:21:68:80:C6
Authority key identifier: 94:F3:47:17:FF:32:FE:2C:76:44:AE:B5:D0:EE:A2:30:16:17:F1:24
Certificate issuer: /CN=94f34717ff32fe2c7644aeb5d0eea2301617f124
Certificate serial: 019D26283D7C90EE1B6C41951BB1B7F046F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lPNHF_8y_ix2RK610O6iMBYX8SQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/cab198-3e84-4b01-bfba-82b9e5fe9b06/1/lPNHF_8y_ix2RK610O6iMBYX8SQ.mft
Manifest number: 0807
Signing time: Wed 25 Mar 2026 18:01:04 +0000
Manifest this update: Wed 25 Mar 2026 18:01:04 +0000
Manifest next update: Thu 26 Mar 2026 18:01:04 +0000
Files and hashes: 1: lPNHF_8y_ix2RK610O6iMBYX8SQ.crl (hash: QWVlxPMxvS7K1HIHLssaThJSnOKxSqUlW1j86cAslz4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/cab198-3e84-4b01-bfba-82b9e5fe9b06/1/lPNHF_8y_ix2RK610O6iMBYX8SQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/cab198-3e84-4b01-bfba-82b9e5fe9b06/1/lPNHF_8y_ix2RK610O6iMBYX8SQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/lPNHF_8y_ix2RK610O6iMBYX8SQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:28:3d:7c:90:ee:1b:6c:41:95:1b:b1:b7:f0:46:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94f34717ff32fe2c7644aeb5d0eea2301617f124
Validity
Not Before: Mar 25 18:01:04 2026 GMT
Not After : Mar 26 18:01:04 2026 GMT
Subject: CN=121309aa2c071503f4abba8c044a9514216880c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:47:37:13:8f:85:32:ad:86:08:ae:26:a9:73:
0e:2e:c3:2d:b1:ac:b1:da:50:fa:f3:64:8e:8c:2a:
44:d2:f0:96:b2:5c:43:c3:94:fd:4f:a1:d6:1c:b4:
51:76:99:c2:17:24:83:d9:be:28:8d:57:31:19:de:
f3:8b:f0:5e:f0:d7:26:8e:17:7e:63:ff:48:6b:e3:
10:fc:05:ec:08:9f:a4:4d:ec:1e:3c:30:2e:69:52:
29:5b:e8:13:6e:32:78:4f:a7:80:27:66:f1:6d:c4:
a4:7b:0f:77:ec:55:21:c0:dc:a1:66:17:c4:03:e7:
b2:d2:c2:ce:17:e3:11:e5:e9:a4:59:5b:bc:24:dc:
1c:8b:7c:c5:6c:99:61:c9:98:0c:93:d8:f4:71:aa:
ca:d0:58:a5:37:0a:0c:6a:c3:0f:77:79:53:61:1c:
c8:db:99:51:7f:69:ce:c8:36:b5:2f:a6:57:7e:09:
31:1a:e8:40:5d:50:df:95:49:62:c3:97:fe:cb:ce:
96:33:9b:c9:bb:6b:e8:05:d7:72:02:41:d9:a2:38:
04:4a:88:93:03:e0:ef:62:9c:ac:7b:a9:d5:57:e7:
6f:03:9a:b5:87:b3:f1:8f:d3:46:e3:43:5b:db:88:
8b:b1:3a:94:25:0a:30:15:1e:80:28:1a:e3:44:ee:
54:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:13:09:AA:2C:07:15:03:F4:AB:BA:8C:04:4A:95:14:21:68:80:C6
X509v3 Authority Key Identifier:
keyid:94:F3:47:17:FF:32:FE:2C:76:44:AE:B5:D0:EE:A2:30:16:17:F1:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lPNHF_8y_ix2RK610O6iMBYX8SQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/cab198-3e84-4b01-bfba-82b9e5fe9b06/1/lPNHF_8y_ix2RK610O6iMBYX8SQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/cab198-3e84-4b01-bfba-82b9e5fe9b06/1/lPNHF_8y_ix2RK610O6iMBYX8SQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:ad:f1:6e:76:67:b3:12:39:91:2b:26:02:70:e4:f2:f6:49:
21:2a:5f:94:54:59:da:5e:f6:24:83:20:c4:91:6a:9a:52:c0:
37:80:56:bb:ef:e6:d1:d1:4f:09:0c:82:2d:ac:4a:55:82:f0:
9a:c0:59:2b:3b:f7:0a:ea:65:06:9c:08:5b:ce:f8:b6:31:c7:
36:ab:6c:a9:89:96:cc:e3:6e:e4:ca:40:24:03:da:0e:91:cb:
4e:50:48:dd:ab:c0:37:5b:39:78:e5:93:1c:7c:a4:b0:27:de:
0d:51:e2:7f:07:70:d6:39:39:c0:4e:c6:d1:04:1b:ff:f1:96:
b8:0a:3d:2c:ab:e9:14:ad:54:c5:65:ba:65:03:1b:7a:88:53:
ad:94:cb:14:48:ac:0b:df:45:c9:ef:f4:ed:4d:a6:8c:a2:dd:
96:33:81:3c:fa:ae:03:49:08:d3:f1:f0:12:a2:6d:6f:49:ee:
8d:f7:a6:1f:ca:91:29:a6:f2:ae:7c:37:17:39:39:c8:2e:22:
a5:8b:1f:95:8a:a3:70:bb:3c:2f:a4:9b:b3:f4:48:50:76:9e:
27:01:3c:47:a1:57:2d:9e:ae:a2:50:8a:57:53:5e:c6:2a:ea:
2f:3f:f3:06:05:da:7a:cf:dc:af:f3:84:55:48:00:22:a0:60:
ae:a2:a4:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:17:17 2026 by rpki-client