Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/13c33a-a46f-4889-b809-57303aa45cbb/1/lIHpRs_I4ZwWZ683XRCh5AQvDrk.mft
File: lIHpRs_I4ZwWZ683XRCh5AQvDrk.mft (raw, json)
Hash identifier: hCFACxILdpnBgbLys57teSv6N6/sm3FTO7avIGkXQ1s=
Subject key identifier: F0:35:90:15:FF:C2:5B:77:A9:7D:F9:C2:01:91:0D:71:FF:67:F7:CA
Authority key identifier: 94:81:E9:46:CF:C8:E1:9C:16:67:AF:37:5D:10:A1:E4:04:2F:0E:B9
Certificate issuer: /CN=9481e946cfc8e19c1667af375d10a1e4042f0eb9
Certificate serial: 019CAC0FA33A834BB9070B519A8C1C7E9590
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lIHpRs_I4ZwWZ683XRCh5AQvDrk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/13c33a-a46f-4889-b809-57303aa45cbb/1/lIHpRs_I4ZwWZ683XRCh5AQvDrk.mft
Manifest number: 075D
Signing time: Mon 02 Mar 2026 01:00:31 +0000
Manifest this update: Mon 02 Mar 2026 01:00:31 +0000
Manifest next update: Tue 03 Mar 2026 01:00:31 +0000
Files and hashes: 1: lIHpRs_I4ZwWZ683XRCh5AQvDrk.crl (hash: EzOc3csn+td0p251RBEtJGoocWbrK1+h9HqRtFMI2EU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/13c33a-a46f-4889-b809-57303aa45cbb/1/lIHpRs_I4ZwWZ683XRCh5AQvDrk.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/13c33a-a46f-4889-b809-57303aa45cbb/1/lIHpRs_I4ZwWZ683XRCh5AQvDrk.mft
rsync://rpki.ripe.net/repository/DEFAULT/lIHpRs_I4ZwWZ683XRCh5AQvDrk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:0f:a3:3a:83:4b:b9:07:0b:51:9a:8c:1c:7e:95:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9481e946cfc8e19c1667af375d10a1e4042f0eb9
Validity
Not Before: Mar 2 01:00:31 2026 GMT
Not After : Mar 3 01:00:31 2026 GMT
Subject: CN=f0359015ffc25b77a97df9c201910d71ff67f7ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:4b:a3:45:d8:34:b5:2b:c8:3c:92:ed:98:72:
98:79:43:4d:62:e6:af:90:25:80:4b:9a:3f:82:65:
13:ce:91:38:6f:e9:5b:bc:95:4e:15:d2:0d:d5:82:
8c:7a:22:c7:17:a9:a0:f8:2c:a8:d6:6d:a6:0e:3c:
33:90:60:28:d3:06:2e:a9:1b:5d:11:ee:32:d7:7b:
87:bc:8e:cb:b8:f4:9a:6e:aa:50:85:81:a4:a8:4c:
6b:c7:b4:c6:4e:0f:74:56:54:d1:27:b1:c3:35:0d:
1b:de:85:31:3c:65:53:dc:0c:ef:87:89:40:5d:f0:
7d:94:80:cb:21:88:57:cc:d4:e5:25:d9:c8:7c:86:
58:1b:06:a6:6c:d5:45:ea:ac:72:e4:b3:86:80:b0:
2d:aa:92:db:22:c6:05:aa:ad:2f:c4:c9:1a:2e:46:
20:fd:5b:68:94:59:65:5c:c4:b7:ed:ef:85:45:8e:
4f:ae:3f:43:ab:a8:fd:9e:68:e4:e9:05:05:0e:83:
1c:03:e7:cf:05:d1:aa:b9:da:e2:61:19:5c:e1:35:
ff:c8:7a:ed:48:99:61:37:c7:ba:e4:27:cf:80:35:
87:ab:d1:f2:3a:95:8f:3d:59:1b:93:eb:45:6b:98:
d4:42:6a:06:c6:e3:45:ff:b0:d4:b8:bc:dd:c7:76:
05:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:35:90:15:FF:C2:5B:77:A9:7D:F9:C2:01:91:0D:71:FF:67:F7:CA
X509v3 Authority Key Identifier:
keyid:94:81:E9:46:CF:C8:E1:9C:16:67:AF:37:5D:10:A1:E4:04:2F:0E:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lIHpRs_I4ZwWZ683XRCh5AQvDrk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/13c33a-a46f-4889-b809-57303aa45cbb/1/lIHpRs_I4ZwWZ683XRCh5AQvDrk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/13c33a-a46f-4889-b809-57303aa45cbb/1/lIHpRs_I4ZwWZ683XRCh5AQvDrk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:4b:08:a2:1c:ce:65:8d:8d:7d:93:0a:fc:16:67:44:85:43:
ff:87:77:f2:6c:18:14:44:f8:58:25:2a:11:36:dd:7c:a3:2d:
1d:68:87:f8:fa:96:2d:d0:d0:e8:46:99:fb:88:8d:17:0c:b0:
02:2f:e7:55:12:63:1e:5c:f4:cd:86:57:d0:e5:56:61:10:8e:
d0:0f:d3:8f:5f:aa:7f:02:eb:77:e2:69:0b:e3:0e:7a:0a:59:
a8:68:0b:07:13:06:49:cf:95:bc:f0:5c:5b:bb:4b:41:b9:16:
bf:21:d1:eb:cd:e7:9e:3e:01:41:1b:e7:d3:b6:f4:79:00:dd:
aa:55:8f:ae:ef:0d:e4:e1:84:de:e8:ad:c4:66:8c:8e:93:b9:
8c:92:27:75:74:3f:03:6e:e0:95:a0:91:f6:c4:e3:5c:1e:7f:
d0:ce:18:f1:b0:4f:d7:cf:b3:92:b7:3b:71:ae:5c:94:3e:c0:
90:04:62:16:9e:bf:97:50:bd:c8:a9:71:ee:c3:11:ad:df:cb:
56:7a:71:f9:bf:1d:47:24:9c:70:1a:ec:34:94:c6:5f:ef:12:
48:27:5e:49:c2:c0:3b:1c:f9:ac:97:cf:ef:95:ec:b8:42:15:
6e:7b:37:d8:03:e2:0a:0b:ff:bf:3e:0d:d0:9a:35:70:05:47:
f7:b4:6f:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:04:26 2026 by rpki-client