Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/9d9112-f57e-49c7-a93b-d8549edf7cef/1/dLMSaPL_fozq3x3pX5fwsdKxX5Y.mft
File: dLMSaPL_fozq3x3pX5fwsdKxX5Y.mft (raw, json)
Hash identifier: fFx0JWfftOE2xbVqZxMb4gh+cl1NVjSUnGnevtkJ2xI=
Subject key identifier: 52:06:FA:E5:EA:20:E4:B4:A0:A9:2E:3F:30:9A:C8:AE:7D:37:29:9F
Authority key identifier: 74:B3:12:68:F2:FF:7E:8C:EA:DF:1D:E9:5F:97:F0:B1:D2:B1:5F:96
Certificate issuer: /CN=74b31268f2ff7e8ceadf1de95f97f0b1d2b15f96
Certificate serial: 019CAC1063065751C63A3938DA7EEC11E8E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dLMSaPL_fozq3x3pX5fwsdKxX5Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/9d9112-f57e-49c7-a93b-d8549edf7cef/1/dLMSaPL_fozq3x3pX5fwsdKxX5Y.mft
Manifest number: 1318
Signing time: Mon 02 Mar 2026 01:01:20 +0000
Manifest this update: Mon 02 Mar 2026 01:01:20 +0000
Manifest next update: Tue 03 Mar 2026 01:01:20 +0000
Files and hashes: 1: dLMSaPL_fozq3x3pX5fwsdKxX5Y.crl (hash: HJRBeWAFXPS1rPIu4l2tiz+1B3mnEzB6ks3iHl9aS5Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/9d9112-f57e-49c7-a93b-d8549edf7cef/1/dLMSaPL_fozq3x3pX5fwsdKxX5Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/9d9112-f57e-49c7-a93b-d8549edf7cef/1/dLMSaPL_fozq3x3pX5fwsdKxX5Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/dLMSaPL_fozq3x3pX5fwsdKxX5Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:10:63:06:57:51:c6:3a:39:38:da:7e:ec:11:e8:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74b31268f2ff7e8ceadf1de95f97f0b1d2b15f96
Validity
Not Before: Mar 2 01:01:20 2026 GMT
Not After : Mar 3 01:01:20 2026 GMT
Subject: CN=5206fae5ea20e4b4a0a92e3f309ac8ae7d37299f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:c1:11:2e:5c:48:be:c9:50:0c:fb:a1:9b:ea:
51:17:a0:4a:bc:35:46:78:05:9a:8c:f7:20:50:2e:
c4:ac:a4:15:9e:4d:0c:82:c2:2c:db:31:05:58:ac:
23:5f:43:ec:de:a0:0b:2d:1e:b5:2b:d2:9d:fb:d8:
04:7a:52:33:b9:52:b6:85:43:ba:c7:4f:25:08:0b:
93:36:9f:f5:66:47:ce:ce:0a:e9:75:12:57:a0:1f:
64:b9:88:b5:c7:30:41:55:c6:0f:49:a7:4c:fe:a5:
09:a6:27:32:60:bb:df:8b:44:0e:58:f3:9f:1a:0c:
df:99:27:3d:a1:38:f8:79:50:bd:a7:bb:56:82:cf:
9a:c5:00:05:29:d1:95:95:35:d7:2f:59:a6:76:68:
f8:b2:d1:0f:c8:cb:de:b1:e2:cb:ae:cd:d9:55:c6:
f8:f0:ac:37:8a:63:06:bd:72:5f:a0:04:67:1a:11:
9f:c0:27:a3:46:37:51:4c:c8:0f:7e:f9:f7:15:2d:
d6:fd:af:0f:30:aa:18:37:4c:06:94:2f:63:3a:bf:
0d:71:86:be:a7:f5:b4:a1:8d:78:ef:92:2c:4b:da:
8c:91:3d:bb:ac:90:0f:5b:36:2e:35:c0:3e:8d:33:
1d:8c:c9:c8:19:32:87:85:42:ea:ca:32:4a:fc:ff:
34:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:06:FA:E5:EA:20:E4:B4:A0:A9:2E:3F:30:9A:C8:AE:7D:37:29:9F
X509v3 Authority Key Identifier:
keyid:74:B3:12:68:F2:FF:7E:8C:EA:DF:1D:E9:5F:97:F0:B1:D2:B1:5F:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dLMSaPL_fozq3x3pX5fwsdKxX5Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/9d9112-f57e-49c7-a93b-d8549edf7cef/1/dLMSaPL_fozq3x3pX5fwsdKxX5Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/9d9112-f57e-49c7-a93b-d8549edf7cef/1/dLMSaPL_fozq3x3pX5fwsdKxX5Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:2f:7d:ff:8a:aa:c0:6b:d3:9f:c9:6d:39:ba:ab:62:ed:f1:
d4:93:2e:5f:7e:59:4f:78:d5:9b:14:4e:1b:47:ad:16:0f:47:
2c:ae:b4:7c:ad:e4:9a:9e:8a:dc:f4:d0:0c:d8:88:a4:1d:4a:
c9:1b:ab:46:b6:43:43:b3:85:9e:4e:c2:11:f5:30:fc:18:90:
e2:d4:c8:49:6f:38:14:0b:81:03:5e:18:6c:9e:b4:f3:92:59:
4b:2a:89:12:8e:4c:e8:4a:97:34:a7:07:b2:f7:54:bd:c4:f7:
cc:e4:59:bc:6e:70:6d:e5:1f:89:e8:86:a1:63:7e:94:e6:80:
7e:ad:18:a9:ee:9f:37:0c:2f:c8:d7:af:6f:ea:cf:29:a9:4e:
d7:d8:68:d5:5c:63:d1:bc:d8:19:bd:4d:f8:c3:b9:02:fa:92:
cb:38:70:21:df:42:2e:8f:b5:46:90:e8:82:05:26:42:33:80:
ad:f4:60:1c:8f:38:03:fa:f8:ba:4f:14:85:5c:38:c4:3f:f4:
90:7e:a8:97:d3:c8:8a:26:3e:78:49:bc:2d:16:0e:a9:67:4b:
5e:0e:22:80:12:04:9d:48:23:bd:35:46:1e:2f:68:4b:a3:0f:
f6:10:c4:b1:40:3f:a9:15:ad:f2:03:ef:00:69:72:1b:e6:d5:
ef:02:a7:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:17:10 2026 by rpki-client