Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/3ff7a7-27cb-4072-b33b-0248d6afd63f/1/lKTi_J7qzc9bD1CrkyhM07CUIXE.mft
File: lKTi_J7qzc9bD1CrkyhM07CUIXE.mft (raw, json)
Hash identifier: 32JcNNXnR0ekQEBHRxaVE1pnJ09httw1cvOQZqNMIDI=
Subject key identifier: 12:A9:45:AA:32:9F:28:64:A2:59:65:68:00:2A:0B:11:DD:7D:C5:F4
Authority key identifier: 94:A4:E2:FC:9E:EA:CD:CF:5B:0F:50:AB:93:28:4C:D3:B0:94:21:71
Certificate issuer: /CN=94a4e2fc9eeacdcf5b0f50ab93284cd3b0942171
Certificate serial: 019CAD5989B619A05636CFC4D4C440C6975F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lKTi_J7qzc9bD1CrkyhM07CUIXE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/3ff7a7-27cb-4072-b33b-0248d6afd63f/1/lKTi_J7qzc9bD1CrkyhM07CUIXE.mft
Manifest number: 1006
Signing time: Mon 02 Mar 2026 07:00:52 +0000
Manifest this update: Mon 02 Mar 2026 07:00:52 +0000
Manifest next update: Tue 03 Mar 2026 07:00:52 +0000
Files and hashes: 1: lKTi_J7qzc9bD1CrkyhM07CUIXE.crl (hash: xh7s0lqXiscJEFcP4nLD8ioQNwvpwzN3sLAojC3OH60=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/3ff7a7-27cb-4072-b33b-0248d6afd63f/1/lKTi_J7qzc9bD1CrkyhM07CUIXE.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/3ff7a7-27cb-4072-b33b-0248d6afd63f/1/lKTi_J7qzc9bD1CrkyhM07CUIXE.mft
rsync://rpki.ripe.net/repository/DEFAULT/lKTi_J7qzc9bD1CrkyhM07CUIXE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 07:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:59:89:b6:19:a0:56:36:cf:c4:d4:c4:40:c6:97:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94a4e2fc9eeacdcf5b0f50ab93284cd3b0942171
Validity
Not Before: Mar 2 07:00:52 2026 GMT
Not After : Mar 3 07:00:52 2026 GMT
Subject: CN=12a945aa329f2864a2596568002a0b11dd7dc5f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:26:5f:9d:a6:e3:f2:40:30:e1:89:ff:75:50:
24:5b:b6:55:58:99:3f:3c:5c:3a:bb:d3:d7:0f:7a:
fb:63:0d:3b:f3:11:13:07:94:73:c4:54:07:e1:a9:
2e:8a:44:10:f7:a5:7d:09:90:1f:f6:6d:46:db:17:
7b:ae:00:c6:0d:ca:4d:bb:92:b2:a9:c3:f4:13:97:
85:b9:65:d9:77:65:b9:61:dc:e3:7b:a6:52:56:e7:
5c:a3:27:21:dc:be:36:5c:ff:3f:13:f9:c7:3b:c1:
7d:5b:c8:cb:44:62:b5:a5:22:77:03:7b:fc:07:09:
44:6e:f5:72:b3:e5:7e:a5:d9:d4:c6:dc:4b:d7:c7:
8b:2d:d8:3d:cc:e6:0b:83:df:ee:e3:2b:ec:26:34:
04:ff:09:79:1e:d4:f1:73:67:f8:a4:5c:25:01:21:
5e:cb:0b:59:c9:18:83:0c:66:29:76:1f:7c:cc:49:
37:e1:8d:c7:69:95:c2:eb:96:0a:0c:37:d2:0a:56:
aa:82:c3:c5:83:f4:01:4f:a7:30:8f:5c:ca:e9:ae:
2c:2a:ab:61:c2:3d:b4:88:3f:3b:fb:5d:bf:d7:51:
65:4b:59:70:c0:f0:bb:64:ab:92:97:05:cd:45:6a:
68:b1:67:c9:13:1a:74:76:08:37:5b:9a:50:df:6f:
19:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:A9:45:AA:32:9F:28:64:A2:59:65:68:00:2A:0B:11:DD:7D:C5:F4
X509v3 Authority Key Identifier:
keyid:94:A4:E2:FC:9E:EA:CD:CF:5B:0F:50:AB:93:28:4C:D3:B0:94:21:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lKTi_J7qzc9bD1CrkyhM07CUIXE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/3ff7a7-27cb-4072-b33b-0248d6afd63f/1/lKTi_J7qzc9bD1CrkyhM07CUIXE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/3ff7a7-27cb-4072-b33b-0248d6afd63f/1/lKTi_J7qzc9bD1CrkyhM07CUIXE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:f1:92:8f:7f:61:99:1c:96:3a:24:8f:9b:12:1e:80:a6:2d:
4a:b7:c7:b7:b1:0e:a8:01:4f:fc:9c:d7:5e:12:3e:ab:c0:c3:
b9:7b:20:25:99:a0:0b:2a:70:1b:74:5a:d4:65:26:df:a6:f2:
d8:94:b0:20:18:a5:4e:26:15:45:6a:25:3a:c5:30:92:70:3d:
26:76:03:f4:e3:31:43:c7:04:9a:73:2d:5d:42:60:18:09:35:
52:34:0b:0d:c6:67:43:92:86:f9:94:eb:c6:19:cd:f9:da:9c:
e1:ce:34:db:4a:f8:4c:11:da:14:cc:76:ca:61:91:9c:02:2b:
76:a8:d9:d5:b5:b2:1a:a7:c8:4d:2e:eb:00:36:ff:6f:54:57:
39:45:1d:e3:da:9b:d7:20:62:6c:4b:f7:b1:aa:f9:70:4d:3e:
17:1e:dd:d0:c8:90:9a:b7:8f:85:76:31:59:36:55:da:85:e6:
36:b7:7e:c1:04:ab:d7:51:21:19:29:dc:d1:e6:30:b8:f7:32:
53:a7:56:3c:79:54:a4:1a:db:85:31:c4:3a:81:66:74:3a:2b:
8b:7f:f9:ed:8f:84:9d:af:f8:5f:03:10:25:5b:d9:37:97:01:
07:08:9f:e5:62:e9:6f:cc:97:cd:79:00:98:33:6e:b0:d6:ec:
59:15:89:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:39:54 2026 by rpki-client