Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/c4982c-b4a5-4cad-891a-8fd103b8cc89/1/_-LSEcNBNyjvBNJUQlgoqLQYHuA.mft
File: _-LSEcNBNyjvBNJUQlgoqLQYHuA.mft (raw, json)
Hash identifier: NtgJySQwEMMDCtHRaYLDWx3+wATLg01dHonBdxWPus0=
Subject key identifier: 21:63:A0:9C:CD:EB:69:59:D4:38:B7:88:38:1D:F9:69:FF:E5:F6:7B
Authority key identifier: FF:E2:D2:11:C3:41:37:28:EF:04:D2:54:42:58:28:A8:B4:18:1E:E0
Certificate issuer: /CN=ffe2d211c3413728ef04d254425828a8b4181ee0
Certificate serial: 019D9BF5671D444C6C6DA77578C54D2B567F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_-LSEcNBNyjvBNJUQlgoqLQYHuA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/c4982c-b4a5-4cad-891a-8fd103b8cc89/1/_-LSEcNBNyjvBNJUQlgoqLQYHuA.mft
Manifest number: 080C
Signing time: Fri 17 Apr 2026 15:00:44 +0000
Manifest this update: Fri 17 Apr 2026 15:00:44 +0000
Manifest next update: Sat 18 Apr 2026 15:00:44 +0000
Files and hashes: 1: _-LSEcNBNyjvBNJUQlgoqLQYHuA.crl (hash: rEESEZAx9iJ6m+5BNtkBHa14xcWFAPZ6S4zZ2WNX7Tw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/c4982c-b4a5-4cad-891a-8fd103b8cc89/1/_-LSEcNBNyjvBNJUQlgoqLQYHuA.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/c4982c-b4a5-4cad-891a-8fd103b8cc89/1/_-LSEcNBNyjvBNJUQlgoqLQYHuA.mft
rsync://rpki.ripe.net/repository/DEFAULT/_-LSEcNBNyjvBNJUQlgoqLQYHuA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 15:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:f5:67:1d:44:4c:6c:6d:a7:75:78:c5:4d:2b:56:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffe2d211c3413728ef04d254425828a8b4181ee0
Validity
Not Before: Apr 17 15:00:44 2026 GMT
Not After : Apr 18 15:00:44 2026 GMT
Subject: CN=2163a09ccdeb6959d438b788381df969ffe5f67b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:d7:ab:35:dc:51:30:20:c0:d4:7b:89:25:08:
78:be:e0:f4:69:76:ee:6e:96:f2:e8:df:a1:bc:42:
23:57:83:f0:18:e6:99:68:a3:53:05:d8:1e:0a:15:
cc:f4:b5:5f:b4:7b:21:f3:d0:dc:f4:2f:3b:45:26:
a9:7e:21:78:b0:c1:01:80:10:9e:da:05:33:d8:31:
fb:fb:6b:71:40:a8:35:17:c8:37:01:9a:35:20:81:
62:74:34:73:25:b5:b0:d3:fc:0f:ab:80:f9:5d:67:
41:9b:5e:46:14:a9:84:77:01:d1:80:e1:2b:f1:ac:
83:9f:4a:dc:ff:f7:8e:2c:cb:2f:81:e6:99:d0:a2:
0d:ba:44:cf:28:3f:ef:10:b2:5f:be:a4:82:92:93:
35:e2:98:7f:86:ea:1c:28:18:7d:0c:23:97:c9:6e:
44:5c:45:af:85:0c:61:42:59:b2:b8:ba:3a:e9:f6:
fb:c3:73:b6:c9:4f:ee:6e:ea:ad:72:aa:77:36:a0:
8d:a7:16:c1:9e:8c:6e:a8:38:80:a9:05:27:03:2f:
7d:4a:b0:39:8a:d1:46:f2:a5:9c:09:c5:44:19:1f:
a3:77:14:fc:ec:61:c5:c7:f7:e0:fa:40:6a:57:d9:
88:e5:09:ed:fb:e7:33:b2:47:42:dd:65:7a:eb:13:
be:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:63:A0:9C:CD:EB:69:59:D4:38:B7:88:38:1D:F9:69:FF:E5:F6:7B
X509v3 Authority Key Identifier:
keyid:FF:E2:D2:11:C3:41:37:28:EF:04:D2:54:42:58:28:A8:B4:18:1E:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_-LSEcNBNyjvBNJUQlgoqLQYHuA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/c4982c-b4a5-4cad-891a-8fd103b8cc89/1/_-LSEcNBNyjvBNJUQlgoqLQYHuA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/c4982c-b4a5-4cad-891a-8fd103b8cc89/1/_-LSEcNBNyjvBNJUQlgoqLQYHuA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:1e:55:49:f8:5c:20:e7:72:fd:09:8e:f2:d2:b8:72:39:e4:
6f:2b:c4:50:b5:d5:65:7b:ff:db:38:17:4f:7e:d1:d6:2a:af:
44:7c:44:ed:b8:13:52:55:0c:e6:a0:44:21:28:ed:aa:28:a6:
c9:38:ec:12:38:22:05:77:4b:4b:58:ce:95:2a:c6:46:c5:3a:
cd:26:63:b9:24:63:f5:38:d6:f6:53:c9:32:00:d8:7c:87:f3:
7d:43:9f:e8:19:40:50:82:3a:06:53:c1:29:db:74:2d:71:93:
f1:4b:45:07:eb:ef:f0:8b:a1:66:e7:fa:43:be:ca:ba:42:55:
0f:31:3f:27:4e:e7:b2:e8:b0:9f:fd:c4:98:92:32:67:05:e6:
f5:9f:a3:04:6b:e2:e6:4b:5d:bb:ca:51:22:79:cd:f7:cf:f9:
a2:b1:91:d2:c3:d2:6f:c6:d3:2d:37:b2:e4:e6:7a:84:2d:a2:
cc:9e:de:88:7b:92:43:1f:06:e2:86:6b:bc:be:29:a4:b1:33:
64:dc:11:47:1e:32:4f:7e:f0:45:38:dd:4c:2d:e2:06:a0:c3:
60:db:72:c5:e1:8c:85:94:ad:f4:1a:27:8c:66:a9:6c:01:46:
37:38:f5:22:1a:44:10:cc:ac:21:13:7a:57:a9:8c:72:84:8c:
b5:0e:a8:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 23:52:00 2026 by rpki-client