Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/c4982c-b4a5-4cad-891a-8fd103b8cc89/1/_-LSEcNBNyjvBNJUQlgoqLQYHuA.mft
File: _-LSEcNBNyjvBNJUQlgoqLQYHuA.mft (raw, json)
Hash identifier: YvXywp5Xi9bGmeehHSov98rYKJfMd/f+X8Nem5HTyf4=
Subject key identifier: F2:B6:71:D8:4A:C2:6B:AB:7F:F7:76:01:7C:C1:ED:6F:51:89:FE:12
Authority key identifier: FF:E2:D2:11:C3:41:37:28:EF:04:D2:54:42:58:28:A8:B4:18:1E:E0
Certificate issuer: /CN=ffe2d211c3413728ef04d254425828a8b4181ee0
Certificate serial: 019CAE6C5AE1BBFEFF299CE2165D00116EDD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_-LSEcNBNyjvBNJUQlgoqLQYHuA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/c4982c-b4a5-4cad-891a-8fd103b8cc89/1/_-LSEcNBNyjvBNJUQlgoqLQYHuA.mft
Manifest number: 0791
Signing time: Mon 02 Mar 2026 12:01:02 +0000
Manifest this update: Mon 02 Mar 2026 12:01:02 +0000
Manifest next update: Tue 03 Mar 2026 12:01:02 +0000
Files and hashes: 1: _-LSEcNBNyjvBNJUQlgoqLQYHuA.crl (hash: omJSX6OQrBvJTVkCmd1sRfDycU0OGsd7nu62DMqMC0g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/c4982c-b4a5-4cad-891a-8fd103b8cc89/1/_-LSEcNBNyjvBNJUQlgoqLQYHuA.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/c4982c-b4a5-4cad-891a-8fd103b8cc89/1/_-LSEcNBNyjvBNJUQlgoqLQYHuA.mft
rsync://rpki.ripe.net/repository/DEFAULT/_-LSEcNBNyjvBNJUQlgoqLQYHuA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 12:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:6c:5a:e1:bb:fe:ff:29:9c:e2:16:5d:00:11:6e:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffe2d211c3413728ef04d254425828a8b4181ee0
Validity
Not Before: Mar 2 12:01:02 2026 GMT
Not After : Mar 3 12:01:02 2026 GMT
Subject: CN=f2b671d84ac26bab7ff776017cc1ed6f5189fe12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:ab:3b:a1:cc:f1:b8:56:3d:eb:3b:a8:f0:b7:
7f:cf:7e:dc:3d:1c:68:b5:2e:15:18:49:14:e0:5a:
87:3a:c3:23:d8:7c:cf:85:77:fb:17:cf:93:e7:95:
1e:47:e3:c1:0d:b6:ae:19:bc:59:21:21:ee:f0:07:
6a:bd:e4:01:ba:3e:d6:cd:4f:ed:b8:d0:1b:cf:14:
d0:c0:f5:ed:5b:69:47:88:81:63:b7:ce:87:36:fe:
8d:15:22:14:70:c3:b4:b8:b2:4d:4f:0c:6b:95:3d:
69:71:16:ec:db:df:00:1b:40:23:d0:6f:46:2a:c6:
c0:4c:ec:89:ce:b4:48:c4:c7:f9:76:7a:83:1a:6a:
bf:bb:51:2c:4c:e5:30:d2:d0:a0:13:9d:f9:a4:00:
a9:1a:b3:cf:85:f7:d4:93:75:85:51:46:21:fa:a7:
ed:ef:da:fb:50:96:ba:46:f9:bf:79:95:21:df:04:
a1:c4:ec:67:58:8a:82:e5:87:32:b5:42:1c:ab:b8:
3c:13:a3:7b:81:b5:2d:7c:ef:1e:78:1c:0a:59:e9:
52:c0:a9:1a:fe:96:ec:f9:fd:dd:f0:82:a6:61:43:
fa:1a:c6:e7:10:6c:e5:16:42:93:f2:bf:b4:0f:bc:
cd:16:13:c8:a8:c6:43:e7:63:ff:53:d3:7d:67:53:
14:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:B6:71:D8:4A:C2:6B:AB:7F:F7:76:01:7C:C1:ED:6F:51:89:FE:12
X509v3 Authority Key Identifier:
keyid:FF:E2:D2:11:C3:41:37:28:EF:04:D2:54:42:58:28:A8:B4:18:1E:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_-LSEcNBNyjvBNJUQlgoqLQYHuA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/c4982c-b4a5-4cad-891a-8fd103b8cc89/1/_-LSEcNBNyjvBNJUQlgoqLQYHuA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/c4982c-b4a5-4cad-891a-8fd103b8cc89/1/_-LSEcNBNyjvBNJUQlgoqLQYHuA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:c6:ec:5a:d1:5a:bd:6b:11:9a:9b:4d:49:1f:54:ef:cc:9f:
43:44:4d:9d:ff:dd:46:ef:ed:95:4a:53:e3:34:92:c4:b2:21:
ed:fa:3d:32:cb:c2:97:eb:0f:d3:c7:2b:54:a7:62:33:48:84:
16:6a:03:8f:d2:b0:e1:3e:d3:a3:68:e6:31:be:8e:31:a3:6e:
3f:b9:cf:cf:89:ea:59:fe:30:b5:9a:57:cc:fd:e3:e6:7e:0a:
e7:28:87:21:d8:4f:7b:71:03:b8:b5:3b:c6:59:4a:02:5f:91:
d5:b6:10:e5:72:18:9f:f8:93:23:fc:8d:d7:ee:55:93:9f:2e:
c3:36:1e:d3:82:03:b1:41:bf:62:d7:1a:96:a5:df:ce:d0:08:
8b:a3:a7:bf:52:c9:8d:17:b1:a8:9b:92:16:c5:44:24:f0:fb:
15:e2:ac:93:f7:c1:24:8c:2a:0a:d8:0c:11:4e:e8:0a:ac:f1:
45:00:27:4b:35:8e:52:09:41:be:9e:16:81:69:c1:9e:d6:a1:
53:8b:ec:5a:1b:59:1d:1b:55:73:21:06:1c:13:6d:40:af:bd:
6f:e7:35:b5:2f:71:06:a4:b1:08:bf:ce:4f:ad:cf:fb:fd:11:
e0:67:08:df:81:23:bb:ee:59:b2:2a:bc:9d:3e:4f:91:7b:9e:
9f:07:32:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 20:18:14 2026 by rpki-client