Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/9d9112-f57e-49c7-a93b-d8549edf7cef/1/dLMSaPL_fozq3x3pX5fwsdKxX5Y.mft
File: dLMSaPL_fozq3x3pX5fwsdKxX5Y.mft (raw, json)
Hash identifier: Z+e+4PfmDZTee/0Wxk/dtIiCrAApINgdJIj0gr1AvM8=
Subject key identifier: 8D:50:FC:61:B7:49:43:A9:D4:BF:46:95:50:84:78:04:D8:D9:6C:3D
Authority key identifier: 74:B3:12:68:F2:FF:7E:8C:EA:DF:1D:E9:5F:97:F0:B1:D2:B1:5F:96
Certificate issuer: /CN=74b31268f2ff7e8ceadf1de95f97f0b1d2b15f96
Certificate serial: 019D97AAA4EAD94116D9FF0CC733C175C9AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dLMSaPL_fozq3x3pX5fwsdKxX5Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/9d9112-f57e-49c7-a93b-d8549edf7cef/1/dLMSaPL_fozq3x3pX5fwsdKxX5Y.mft
Manifest number: 1392
Signing time: Thu 16 Apr 2026 19:00:35 +0000
Manifest this update: Thu 16 Apr 2026 19:00:35 +0000
Manifest next update: Fri 17 Apr 2026 19:00:35 +0000
Files and hashes: 1: dLMSaPL_fozq3x3pX5fwsdKxX5Y.crl (hash: D9qjyo08bn9zYeJuTC4NN/gOgkvlRaRbwpwGcA9586g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/9d9112-f57e-49c7-a93b-d8549edf7cef/1/dLMSaPL_fozq3x3pX5fwsdKxX5Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/9d9112-f57e-49c7-a93b-d8549edf7cef/1/dLMSaPL_fozq3x3pX5fwsdKxX5Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/dLMSaPL_fozq3x3pX5fwsdKxX5Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 19:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:97:aa:a4:ea:d9:41:16:d9:ff:0c:c7:33:c1:75:c9:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74b31268f2ff7e8ceadf1de95f97f0b1d2b15f96
Validity
Not Before: Apr 16 19:00:35 2026 GMT
Not After : Apr 17 19:00:35 2026 GMT
Subject: CN=8d50fc61b74943a9d4bf469550847804d8d96c3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:6f:4b:71:75:e3:96:6e:a4:eb:90:d3:e8:72:
51:cf:99:5f:9c:6e:29:cd:77:cc:f4:d2:65:43:a7:
7b:b2:43:1f:2b:d5:76:4f:b3:3b:69:c5:8d:9c:53:
e6:4a:e7:6f:2c:da:3a:13:34:fc:6e:02:c5:42:80:
65:1b:d5:d8:8a:f4:9b:e9:60:23:9d:40:93:64:24:
cc:1b:ed:d5:40:40:85:90:c4:e3:f8:c2:4b:dc:b7:
39:b0:6f:2d:61:e2:14:b3:9e:6e:c9:fa:b1:8d:15:
c9:b3:33:ff:86:c6:63:fa:e8:65:57:24:d9:2c:04:
80:37:94:cb:c0:4d:35:37:e3:74:96:f2:99:37:37:
37:18:f4:66:3f:ea:3a:d8:63:77:a7:21:80:3d:d0:
a5:5d:66:3f:7a:6d:56:31:24:b0:f1:cd:7a:a1:2c:
e5:bf:41:55:40:d1:16:eb:07:fa:5c:f8:ba:3c:59:
0c:1c:57:43:41:c5:00:1f:d1:c0:55:11:37:28:46:
3c:3e:59:38:25:7f:f2:be:1f:bc:39:44:2c:24:22:
4f:a2:59:3d:6b:8f:be:1c:e2:f5:b9:7e:4b:a2:c8:
53:95:79:e2:e8:08:3b:a5:3f:27:f6:4b:ef:b8:8c:
7a:1e:98:08:0d:d2:81:94:b5:5b:6e:25:e8:23:e5:
0f:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:50:FC:61:B7:49:43:A9:D4:BF:46:95:50:84:78:04:D8:D9:6C:3D
X509v3 Authority Key Identifier:
keyid:74:B3:12:68:F2:FF:7E:8C:EA:DF:1D:E9:5F:97:F0:B1:D2:B1:5F:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dLMSaPL_fozq3x3pX5fwsdKxX5Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/9d9112-f57e-49c7-a93b-d8549edf7cef/1/dLMSaPL_fozq3x3pX5fwsdKxX5Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/9d9112-f57e-49c7-a93b-d8549edf7cef/1/dLMSaPL_fozq3x3pX5fwsdKxX5Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:35:90:2f:4b:16:8a:8b:50:1a:36:23:cf:76:5c:48:55:df:
95:68:6b:5e:78:16:b3:dc:59:8e:d8:d1:58:15:8c:32:2a:3e:
b7:10:6b:a3:ef:f6:c8:96:10:2f:b2:60:dc:45:81:15:9a:b7:
97:f3:72:1b:1f:f7:0a:26:97:35:f3:27:fa:53:9e:1d:99:89:
c2:1d:62:cf:0d:13:66:a0:80:4a:65:99:91:1e:b7:a7:db:e8:
f1:63:f7:12:41:b4:8a:87:37:2c:b1:66:49:30:d6:3b:94:39:
6d:cd:b2:4f:5e:94:ae:cc:78:f6:d3:2a:36:24:74:b3:9c:94:
53:c0:47:68:1a:07:37:aa:b4:c8:92:78:21:84:bf:c7:8f:08:
16:ee:e9:19:43:43:cb:3a:93:87:fd:3b:3c:71:9b:e7:b3:33:
43:5f:13:c2:10:7a:17:b4:13:fc:ab:bd:cd:59:a6:2a:f0:e9:
4e:6b:63:37:9f:1a:ca:c6:c9:b8:66:b0:d4:d9:ba:90:bf:39:
0a:7f:38:ec:6d:0d:d1:cb:13:dd:8e:cf:c8:c0:3f:86:6e:7e:
3a:75:53:05:73:61:eb:8e:d4:d3:90:6b:a9:c5:ee:62:5f:48:
5d:d3:19:78:95:67:89:79:e4:a2:e3:f2:e0:91:51:8d:33:10:
27:4b:41:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 03:22:37 2026 by rpki-client