Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/4f185a-3bb5-4d25-9dc8-ee28f96cf126/1/LpRuQzNsoql56Z31z11tXnFVgy0.mft
File: LpRuQzNsoql56Z31z11tXnFVgy0.mft (raw, json)
Hash identifier: 6YMXaZD8Vn+kWzbqZy56v9KUy4wGg4uYsno2A/Baj2I=
Subject key identifier: 98:48:AB:0A:70:7D:C1:D5:43:EF:F9:61:7A:54:02:22:92:51:1A:87
Authority key identifier: 2E:94:6E:43:33:6C:A2:A9:79:E9:9D:F5:CF:5D:6D:5E:71:55:83:2D
Certificate issuer: /CN=2e946e43336ca2a979e99df5cf5d6d5e7155832d
Certificate serial: 019CAD598864ACBB28515B3F1D9BF73C6CA0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LpRuQzNsoql56Z31z11tXnFVgy0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/4f185a-3bb5-4d25-9dc8-ee28f96cf126/1/LpRuQzNsoql56Z31z11tXnFVgy0.mft
Manifest number: 0ADF
Signing time: Mon 02 Mar 2026 07:00:51 +0000
Manifest this update: Mon 02 Mar 2026 07:00:51 +0000
Manifest next update: Tue 03 Mar 2026 07:00:51 +0000
Files and hashes: 1: LpRuQzNsoql56Z31z11tXnFVgy0.crl (hash: ClDSmBjhffzI28TJ7eDTcFoaaXiXpnGkC7ogYExEPzE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/4f185a-3bb5-4d25-9dc8-ee28f96cf126/1/LpRuQzNsoql56Z31z11tXnFVgy0.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/4f185a-3bb5-4d25-9dc8-ee28f96cf126/1/LpRuQzNsoql56Z31z11tXnFVgy0.mft
rsync://rpki.ripe.net/repository/DEFAULT/LpRuQzNsoql56Z31z11tXnFVgy0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 07:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:59:88:64:ac:bb:28:51:5b:3f:1d:9b:f7:3c:6c:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e946e43336ca2a979e99df5cf5d6d5e7155832d
Validity
Not Before: Mar 2 07:00:51 2026 GMT
Not After : Mar 3 07:00:51 2026 GMT
Subject: CN=9848ab0a707dc1d543eff9617a54022292511a87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:30:02:ef:54:ca:b4:1a:5f:e2:c6:15:4e:4f:
b9:5e:82:8d:4b:23:a3:ef:7c:ca:ca:44:29:0c:93:
b8:d5:42:9f:06:db:44:e2:ff:e8:57:0f:b3:28:52:
bd:fb:9c:8a:05:c0:6a:ca:7d:ee:bf:12:30:04:2c:
37:87:8c:56:30:b1:45:6d:9c:31:76:7d:59:90:ad:
99:af:7e:d7:31:a2:4f:80:94:43:00:d0:31:b6:c0:
0e:96:a8:8c:2b:e9:7f:90:be:9e:34:59:24:7e:19:
c3:d8:63:89:ff:c5:ca:56:b9:b3:a9:0e:c3:56:19:
32:ef:2a:bb:00:8a:1c:bd:0c:38:30:8d:fe:32:93:
1b:7a:79:27:e1:bb:27:99:0b:56:0e:00:cc:35:1b:
10:98:f3:f8:8a:19:3b:3d:21:e9:f0:6d:7b:4b:35:
e8:b0:e0:a8:d4:59:3a:1d:60:4b:72:af:c1:e2:80:
26:94:e5:12:de:f9:6a:24:31:88:f9:e8:33:32:ca:
5e:ae:92:01:de:69:77:4f:ff:a2:14:6a:de:81:9f:
50:bc:47:71:15:e8:3e:92:ee:e8:46:46:5a:59:8d:
39:b0:a7:f4:86:0e:d5:5b:83:9e:d9:7b:e1:22:15:
c8:bb:cb:9b:39:fb:7f:72:5c:a9:c4:9c:75:20:d2:
89:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:48:AB:0A:70:7D:C1:D5:43:EF:F9:61:7A:54:02:22:92:51:1A:87
X509v3 Authority Key Identifier:
keyid:2E:94:6E:43:33:6C:A2:A9:79:E9:9D:F5:CF:5D:6D:5E:71:55:83:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LpRuQzNsoql56Z31z11tXnFVgy0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/4f185a-3bb5-4d25-9dc8-ee28f96cf126/1/LpRuQzNsoql56Z31z11tXnFVgy0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/4f185a-3bb5-4d25-9dc8-ee28f96cf126/1/LpRuQzNsoql56Z31z11tXnFVgy0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:1b:49:b7:16:ef:f7:11:08:cf:a4:7d:00:98:66:51:ff:1e:
86:2d:d8:48:85:67:c4:10:61:9a:1a:ba:44:80:94:7e:47:1c:
18:90:f6:b8:59:39:67:b3:56:e1:a2:d8:e7:9f:c1:c9:df:0a:
07:b1:53:1e:ec:9c:8b:b2:39:9e:42:90:ad:42:3c:81:51:8b:
d4:65:d4:46:27:cc:a5:a3:5c:ad:3c:90:35:fe:10:e6:12:46:
2d:29:ab:fe:63:98:6e:7a:b1:c7:81:b3:75:2c:ae:df:54:21:
0c:4f:47:4f:f1:6f:9d:2e:4e:f9:3a:33:b2:77:52:6c:1d:ec:
91:11:8d:2a:0b:e0:71:e9:d8:6a:08:dc:d5:4a:29:5e:27:74:
41:7d:f0:a6:a3:57:4b:30:12:cf:d7:84:3b:e8:31:0d:a9:cc:
f8:ea:47:79:5f:5f:db:b5:8b:da:91:a9:3a:79:ea:89:23:6b:
d6:c0:43:73:eb:db:02:dc:7f:f6:5a:a4:d8:eb:b1:de:f4:9c:
75:f3:e5:dd:fa:5c:b4:17:d7:6a:31:ec:2e:4b:e6:c3:8a:80:
be:71:cc:ef:c8:f8:11:95:f0:9a:41:24:14:b1:2c:e4:d8:39:
b4:ef:f9:7c:cf:cd:b4:52:f2:aa:50:ab:ea:25:4c:bb:a5:98:
ae:3e:23:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:51:51 2026 by rpki-client