Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/3ff7a7-27cb-4072-b33b-0248d6afd63f/1/lKTi_J7qzc9bD1CrkyhM07CUIXE.mft
File: lKTi_J7qzc9bD1CrkyhM07CUIXE.mft (raw, json)
Hash identifier: vdmqkhp2r0QDo/3fpzhPw9fAsEWKRhuVpzp1Wj15sRg=
Subject key identifier: 24:AB:B1:04:07:20:45:2B:92:C5:F4:E4:B8:0D:79:22:0B:6B:FD:26
Authority key identifier: 94:A4:E2:FC:9E:EA:CD:CF:5B:0F:50:AB:93:28:4C:D3:B0:94:21:71
Certificate issuer: /CN=94a4e2fc9eeacdcf5b0f50ab93284cd3b0942171
Certificate serial: 019D98F446EC1BDF8F932A5A5F3E5F6FBCFD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lKTi_J7qzc9bD1CrkyhM07CUIXE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/3ff7a7-27cb-4072-b33b-0248d6afd63f/1/lKTi_J7qzc9bD1CrkyhM07CUIXE.mft
Manifest number: 1080
Signing time: Fri 17 Apr 2026 01:00:38 +0000
Manifest this update: Fri 17 Apr 2026 01:00:38 +0000
Manifest next update: Sat 18 Apr 2026 01:00:38 +0000
Files and hashes: 1: lKTi_J7qzc9bD1CrkyhM07CUIXE.crl (hash: SaiIvObR6X8VhqmaQm98LCpUwgleiJpEMy9E6Vqw/+k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/3ff7a7-27cb-4072-b33b-0248d6afd63f/1/lKTi_J7qzc9bD1CrkyhM07CUIXE.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/3ff7a7-27cb-4072-b33b-0248d6afd63f/1/lKTi_J7qzc9bD1CrkyhM07CUIXE.mft
rsync://rpki.ripe.net/repository/DEFAULT/lKTi_J7qzc9bD1CrkyhM07CUIXE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f4:46:ec:1b:df:8f:93:2a:5a:5f:3e:5f:6f:bc:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94a4e2fc9eeacdcf5b0f50ab93284cd3b0942171
Validity
Not Before: Apr 17 01:00:38 2026 GMT
Not After : Apr 18 01:00:38 2026 GMT
Subject: CN=24abb1040720452b92c5f4e4b80d79220b6bfd26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:8f:11:f9:2e:34:a1:3c:da:f0:0d:68:cb:dd:
e6:a4:5a:7d:48:33:d8:a4:cc:e9:c6:0b:6c:93:82:
9a:c2:ee:a3:dd:32:28:84:40:7f:9b:46:5d:5a:08:
c2:31:ea:8c:19:b9:47:81:d6:05:95:36:ef:9a:e1:
db:3b:03:49:80:b5:40:be:8a:57:18:e2:ea:ad:16:
70:f3:d9:65:60:06:f8:77:3a:cc:58:fd:c3:c8:fd:
1a:c1:b9:e9:28:d0:55:84:5e:49:9a:2d:08:c3:1b:
06:d9:ae:ea:27:50:ea:1d:bf:eb:d5:41:33:84:ee:
b8:06:1d:45:f5:30:57:ae:3c:fe:9a:85:a7:34:3d:
ce:9c:b9:99:bf:a7:31:38:9e:1c:57:e9:50:32:ea:
e9:03:dc:4f:4b:a5:8f:d4:c1:1a:92:f1:96:7e:8f:
57:24:48:c3:c5:21:d3:45:19:3c:6f:30:af:12:59:
25:cf:25:5d:16:1f:7b:ea:82:9e:46:7d:23:77:51:
17:cc:89:7e:44:0b:a6:b5:0f:51:ce:b6:9a:8b:72:
e8:7b:ed:e6:37:d3:22:c5:05:46:86:8f:22:10:03:
58:5c:a9:5e:0f:18:73:5a:a4:49:fe:76:0c:27:2c:
c7:26:55:b3:3a:c7:91:c1:91:7c:96:60:be:66:25:
6c:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:AB:B1:04:07:20:45:2B:92:C5:F4:E4:B8:0D:79:22:0B:6B:FD:26
X509v3 Authority Key Identifier:
keyid:94:A4:E2:FC:9E:EA:CD:CF:5B:0F:50:AB:93:28:4C:D3:B0:94:21:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lKTi_J7qzc9bD1CrkyhM07CUIXE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/3ff7a7-27cb-4072-b33b-0248d6afd63f/1/lKTi_J7qzc9bD1CrkyhM07CUIXE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/3ff7a7-27cb-4072-b33b-0248d6afd63f/1/lKTi_J7qzc9bD1CrkyhM07CUIXE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:a0:b8:e4:1f:61:fc:50:89:d3:f5:8b:5e:1b:63:d1:16:ba:
2a:40:21:05:70:54:31:35:0f:b6:78:8a:21:45:6c:3e:8a:ce:
68:d9:75:a7:7b:35:0b:ce:b6:b6:78:b2:e6:35:a6:4b:ee:14:
04:fd:e6:95:32:64:4d:c1:9b:e1:09:dd:69:b2:b4:da:69:3a:
e5:78:89:b9:c8:45:bd:21:a3:73:de:25:7f:64:cb:31:a5:87:
23:f3:37:a2:2d:93:4b:c6:bc:49:53:74:93:fd:78:f3:46:8e:
f0:32:55:ad:d6:4d:5c:52:29:e3:ff:e2:f0:b8:38:cc:53:81:
64:0f:a0:99:5f:97:39:6e:4f:c7:44:9b:cf:27:f2:b1:48:73:
bc:fb:e4:50:6b:c8:a8:0c:d2:f4:14:ad:f8:f8:66:27:df:ae:
90:f8:d7:f8:3b:4e:24:ac:fb:c7:d9:da:01:9b:fd:80:7a:b6:
a4:fc:5b:5c:0c:c6:1a:ea:6a:0a:d7:fe:cf:44:d9:81:6b:9b:
30:2c:a8:91:dd:67:01:f3:66:90:8a:1f:6c:82:de:5b:c9:ca:
6e:7e:68:8e:de:f3:7b:27:9e:7c:79:92:5a:9c:b3:a3:b5:35:
2b:34:4c:2f:2b:0e:4d:3a:dd:4c:7d:ae:08:ab:8d:79:52:36:
81:b0:c5:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 03:53:40 2026 by rpki-client