Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/9c036c-56c5-41e1-87f8-b7780396faf4/1/lOvBA1TTG_33wdg1EN8N1mzoNaw.mft
File: lOvBA1TTG_33wdg1EN8N1mzoNaw.mft (raw, json)
Hash identifier: ZVKpz92hA/fcGNW7swrImukee2NMefDNylIOm9fJiXs=
Subject key identifier: 3C:C5:AA:CF:7D:88:85:25:F8:8D:56:F7:A9:11:60:E7:70:2B:E4:F1
Authority key identifier: 94:EB:C1:03:54:D3:1B:FD:F7:C1:D8:35:10:DF:0D:D6:6C:E8:35:AC
Certificate issuer: /CN=94ebc10354d31bfdf7c1d83510df0dd66ce835ac
Certificate serial: 019D27045A173F978382EC60D772C909F795
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lOvBA1TTG_33wdg1EN8N1mzoNaw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/9c036c-56c5-41e1-87f8-b7780396faf4/1/lOvBA1TTG_33wdg1EN8N1mzoNaw.mft
Manifest number: 1882
Signing time: Wed 25 Mar 2026 22:01:29 +0000
Manifest this update: Wed 25 Mar 2026 22:01:29 +0000
Manifest next update: Thu 26 Mar 2026 22:01:29 +0000
Files and hashes: 1: lOvBA1TTG_33wdg1EN8N1mzoNaw.crl (hash: Wu7eGztBUtR1ySDl0vgmBBF2V4fHqaXYTJibP1kTgNE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/9c036c-56c5-41e1-87f8-b7780396faf4/1/lOvBA1TTG_33wdg1EN8N1mzoNaw.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/9c036c-56c5-41e1-87f8-b7780396faf4/1/lOvBA1TTG_33wdg1EN8N1mzoNaw.mft
rsync://rpki.ripe.net/repository/DEFAULT/lOvBA1TTG_33wdg1EN8N1mzoNaw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:5a:17:3f:97:83:82:ec:60:d7:72:c9:09:f7:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94ebc10354d31bfdf7c1d83510df0dd66ce835ac
Validity
Not Before: Mar 25 22:01:29 2026 GMT
Not After : Mar 26 22:01:29 2026 GMT
Subject: CN=3cc5aacf7d888525f88d56f7a91160e7702be4f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:4c:ea:5c:3c:89:80:a8:75:39:ea:7c:92:13:
28:87:77:74:4c:fa:64:33:b6:b4:1f:c4:2b:01:c9:
2f:d5:51:7f:0d:a7:ca:62:1e:5c:83:00:cf:ba:8b:
8a:db:75:f0:52:bc:a6:e3:63:e5:c5:73:8d:e5:b2:
b9:b0:07:8c:67:f5:91:a5:86:48:a4:b5:fb:4d:cb:
07:76:31:45:ba:0a:f8:54:27:7d:7b:d1:ab:40:da:
35:18:91:f2:d4:10:00:4b:7b:e2:b8:88:3a:c2:04:
99:54:2e:0f:fe:f1:36:ab:c1:d1:13:f5:92:e7:93:
43:65:b3:04:4a:97:f1:76:ef:92:92:8f:75:8b:23:
d1:c5:3f:69:af:bd:3a:d3:06:91:9b:6a:29:96:b4:
fd:7f:79:b4:5f:28:16:3e:ae:e0:98:18:16:3e:aa:
05:8c:65:9e:b2:af:c6:e2:ac:86:34:5c:78:38:c8:
c5:34:a2:d6:34:18:45:72:b9:4e:c6:25:cb:7f:99:
38:01:29:32:0a:af:36:fc:5f:29:af:1b:87:a2:de:
37:07:36:f3:07:28:56:91:2d:7f:e4:b9:75:84:91:
3f:d3:99:a0:ef:32:c5:5b:68:9a:f5:9e:fd:56:85:
3b:93:ef:05:57:af:cd:15:03:f0:60:5d:31:5e:ad:
da:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:C5:AA:CF:7D:88:85:25:F8:8D:56:F7:A9:11:60:E7:70:2B:E4:F1
X509v3 Authority Key Identifier:
keyid:94:EB:C1:03:54:D3:1B:FD:F7:C1:D8:35:10:DF:0D:D6:6C:E8:35:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lOvBA1TTG_33wdg1EN8N1mzoNaw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/9c036c-56c5-41e1-87f8-b7780396faf4/1/lOvBA1TTG_33wdg1EN8N1mzoNaw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/9c036c-56c5-41e1-87f8-b7780396faf4/1/lOvBA1TTG_33wdg1EN8N1mzoNaw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:2f:d9:63:5e:d9:e6:af:45:84:9c:50:53:92:12:8a:f3:79:
55:6c:62:a1:93:20:ab:47:88:40:7c:05:dd:d4:be:60:ff:a1:
e5:74:48:2c:b3:4f:0d:f5:76:86:a7:a8:d7:39:8a:b4:b5:a1:
7a:62:27:f6:10:d0:6b:76:bb:ed:7c:16:f7:69:35:4b:73:23:
49:90:28:77:36:0d:6c:35:72:9d:7a:b6:7d:2b:eb:10:56:09:
9e:ad:d2:97:8a:51:06:bf:93:63:60:af:57:8b:9e:04:f3:e2:
fa:5b:37:af:9c:15:cf:82:06:57:d4:28:1b:60:ec:eb:41:65:
17:08:d9:2e:95:23:c4:0e:49:bc:9b:64:81:3a:35:9b:e4:e6:
a2:0c:74:34:7b:bb:0e:4b:90:fb:62:13:ef:de:10:00:0f:97:
5d:af:6c:68:0f:5b:f1:f5:e4:2d:68:f0:2d:a4:59:40:dd:b6:
88:01:cc:d5:a7:0e:b2:58:72:5a:6a:f8:d4:fb:e0:db:a1:46:
c5:63:f2:83:14:de:5f:27:0a:0d:a8:ef:82:03:2c:c9:05:c4:
e6:0f:2a:c4:c8:e8:37:a4:cc:2d:91:c0:c1:77:11:54:13:f8:
41:84:ac:85:f3:85:e5:7d:8d:2c:34:45:61:5c:8f:8d:c8:ad:
60:ea:7b:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:47:20 2026 by rpki-client