Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/1b1be4-bcc0-4b21-80df-203dcbf7d3fc/1/lPzeRTBb0MyNJdfG7cpxkTb1YG0.mft
File: lPzeRTBb0MyNJdfG7cpxkTb1YG0.mft (raw, json)
Hash identifier: drkFafQIgcwLu8oFdVCEGk+DgezpumRtM7ujinlM2W8=
Subject key identifier: 13:2A:D2:01:79:A1:28:CD:63:83:E3:BB:37:69:6D:AF:8C:12:0C:6E
Authority key identifier: 94:FC:DE:45:30:5B:D0:CC:8D:25:D7:C6:ED:CA:71:91:36:F5:60:6D
Certificate issuer: /CN=94fcde45305bd0cc8d25d7c6edca719136f5606d
Certificate serial: 019CAC4769013AD012452CD1C643D4552A3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lPzeRTBb0MyNJdfG7cpxkTb1YG0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/1b1be4-bcc0-4b21-80df-203dcbf7d3fc/1/lPzeRTBb0MyNJdfG7cpxkTb1YG0.mft
Manifest number: 15F4
Signing time: Mon 02 Mar 2026 02:01:26 +0000
Manifest this update: Mon 02 Mar 2026 02:01:26 +0000
Manifest next update: Tue 03 Mar 2026 02:01:26 +0000
Files and hashes: 1: lPzeRTBb0MyNJdfG7cpxkTb1YG0.crl (hash: /WlfRxp3VjfIDDT7Yxh4cErxL7vwMsEmbcLhI5nFf4g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/1b1be4-bcc0-4b21-80df-203dcbf7d3fc/1/lPzeRTBb0MyNJdfG7cpxkTb1YG0.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/1b1be4-bcc0-4b21-80df-203dcbf7d3fc/1/lPzeRTBb0MyNJdfG7cpxkTb1YG0.mft
rsync://rpki.ripe.net/repository/DEFAULT/lPzeRTBb0MyNJdfG7cpxkTb1YG0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:47:69:01:3a:d0:12:45:2c:d1:c6:43:d4:55:2a:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94fcde45305bd0cc8d25d7c6edca719136f5606d
Validity
Not Before: Mar 2 02:01:26 2026 GMT
Not After : Mar 3 02:01:26 2026 GMT
Subject: CN=132ad20179a128cd6383e3bb37696daf8c120c6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:f7:a1:21:05:b2:26:c9:b7:eb:6c:b9:ee:dd:
83:12:50:af:ff:0c:25:b6:8a:75:17:ff:4e:38:de:
3d:3d:2a:ce:36:25:25:38:66:da:4a:c3:60:a0:b7:
f4:a3:c7:ce:db:58:a8:a5:89:f6:c1:43:d4:b6:09:
2f:a6:cc:fd:a8:90:f7:39:f3:84:09:35:08:8c:c9:
10:e7:9d:dd:00:eb:5d:f8:98:27:ef:db:70:c7:57:
c7:fa:ed:78:1b:d7:fe:45:cd:9b:55:b7:41:6e:5c:
ca:14:76:0c:09:e0:41:a0:0c:ca:23:22:36:8a:20:
46:4e:65:be:c7:96:3b:82:98:d6:5c:01:f8:53:29:
83:5c:b3:76:7e:e8:0b:04:b7:f6:e1:90:1e:55:02:
b0:73:75:52:25:27:02:67:62:d3:87:0c:7f:91:bc:
26:fa:2a:44:39:98:0a:88:16:6d:c3:bf:1c:0f:74:
e5:b3:57:e3:e0:34:dc:65:07:d1:72:d8:f9:4d:03:
f8:d2:1b:17:00:0f:af:ce:12:ec:46:06:f8:d3:9f:
ed:b2:0f:1f:5e:f0:ff:af:d2:40:ba:63:b0:c3:3f:
79:b3:99:87:6b:58:ab:cc:55:57:ea:18:13:2c:ca:
a8:30:01:3a:aa:6f:db:84:6b:2f:d6:91:f3:97:49:
72:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:2A:D2:01:79:A1:28:CD:63:83:E3:BB:37:69:6D:AF:8C:12:0C:6E
X509v3 Authority Key Identifier:
keyid:94:FC:DE:45:30:5B:D0:CC:8D:25:D7:C6:ED:CA:71:91:36:F5:60:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lPzeRTBb0MyNJdfG7cpxkTb1YG0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/1b1be4-bcc0-4b21-80df-203dcbf7d3fc/1/lPzeRTBb0MyNJdfG7cpxkTb1YG0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/1b1be4-bcc0-4b21-80df-203dcbf7d3fc/1/lPzeRTBb0MyNJdfG7cpxkTb1YG0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:ef:ce:f2:15:5e:7c:f6:9b:e6:d0:d6:7b:9d:4d:95:d4:b0:
4a:9d:bb:0a:e3:1f:4f:49:73:b5:b8:e9:af:cd:01:d4:c9:ff:
29:6a:6e:b3:04:fe:8a:e2:6d:86:d2:be:29:92:b4:64:c9:c7:
ed:e0:20:b4:2c:21:aa:32:82:39:b1:c5:56:51:a8:1c:79:a1:
c7:de:d7:37:03:1b:e9:62:99:bf:02:de:71:6e:02:49:4a:65:
cf:ba:db:fa:71:9f:a1:75:98:b5:8e:d3:44:5d:b6:88:f3:9e:
27:fb:36:0f:e3:1e:5d:33:8a:8a:f3:fb:e7:95:cf:b8:21:9f:
b2:7b:34:8b:3e:b6:db:14:96:7b:1f:2a:28:a0:df:3e:e1:3f:
aa:2c:7b:1e:87:8e:7b:5e:66:84:70:0c:9b:91:2d:5c:13:7d:
1f:ce:90:22:5b:92:51:0f:8a:0f:e7:4e:5d:4f:95:9e:68:7a:
6c:81:b6:54:9b:62:c3:93:80:77:4e:71:f1:35:b4:ef:61:d5:
d2:d8:f9:3d:d6:f8:24:71:bc:9d:8d:00:fc:81:87:67:90:9b:
ec:5b:02:3c:e4:ea:54:88:26:00:99:a4:ff:ca:8c:5e:3c:fb:
19:b4:9f:41:a1:a1:89:ef:b9:32:71:21:9c:b2:d2:28:11:e2:
65:cd:c2:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:35:48 2026 by rpki-client