Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/1b1be4-bcc0-4b21-80df-203dcbf7d3fc/1/lPzeRTBb0MyNJdfG7cpxkTb1YG0.mft
File: lPzeRTBb0MyNJdfG7cpxkTb1YG0.mft (raw, json)
Hash identifier: XBko9UtPtiZRXa4Q3bpfq6XNCQsnhQDmtVA4KW2nR6I=
Subject key identifier: 5C:08:82:FA:BC:55:03:68:73:B3:E0:30:1B:88:E7:9F:8E:26:E9:C3
Authority key identifier: 94:FC:DE:45:30:5B:D0:CC:8D:25:D7:C6:ED:CA:71:91:36:F5:60:6D
Certificate issuer: /CN=94fcde45305bd0cc8d25d7c6edca719136f5606d
Certificate serial: 019DA378A743498BB1F25E246CE3F109B346
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lPzeRTBb0MyNJdfG7cpxkTb1YG0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/1b1be4-bcc0-4b21-80df-203dcbf7d3fc/1/lPzeRTBb0MyNJdfG7cpxkTb1YG0.mft
Manifest number: 1674
Signing time: Sun 19 Apr 2026 02:01:26 +0000
Manifest this update: Sun 19 Apr 2026 02:01:26 +0000
Manifest next update: Mon 20 Apr 2026 02:01:26 +0000
Files and hashes: 1: lPzeRTBb0MyNJdfG7cpxkTb1YG0.crl (hash: 3cdVhXtaJ2ka6WDYl5UFyNqZ74OYhkxU1AHXY9BcbrY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/1b1be4-bcc0-4b21-80df-203dcbf7d3fc/1/lPzeRTBb0MyNJdfG7cpxkTb1YG0.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/1b1be4-bcc0-4b21-80df-203dcbf7d3fc/1/lPzeRTBb0MyNJdfG7cpxkTb1YG0.mft
rsync://rpki.ripe.net/repository/DEFAULT/lPzeRTBb0MyNJdfG7cpxkTb1YG0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:78:a7:43:49:8b:b1:f2:5e:24:6c:e3:f1:09:b3:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94fcde45305bd0cc8d25d7c6edca719136f5606d
Validity
Not Before: Apr 19 02:01:26 2026 GMT
Not After : Apr 20 02:01:26 2026 GMT
Subject: CN=5c0882fabc55036873b3e0301b88e79f8e26e9c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:f2:e9:b6:32:16:38:13:6e:4e:36:5c:4d:68:
85:86:25:ae:51:d0:2f:f4:84:b1:31:04:bd:a3:75:
7e:fe:29:3a:19:f5:c3:55:da:93:01:70:0d:ff:66:
10:19:d0:31:c1:52:5c:b6:14:30:83:64:73:4c:ae:
67:a2:bb:14:2e:db:53:5b:90:e3:63:7d:db:50:4b:
01:2a:88:f7:29:15:3d:f1:f4:b6:09:a3:e5:f2:ad:
49:a0:58:b8:b9:a8:51:c1:fd:ce:21:8c:35:f5:00:
a4:36:b0:f3:f8:6e:58:7a:1d:29:05:1a:02:00:a9:
bb:c2:ef:9c:44:50:f1:e6:1d:8b:28:3c:25:b2:d9:
76:bd:f7:3a:18:a2:91:2c:91:1c:3f:a3:a2:3e:6e:
18:90:c7:b8:56:27:5b:75:ee:1a:cf:40:22:53:2a:
fa:8f:db:aa:67:6f:02:89:a6:5e:a3:d3:b6:ba:d6:
36:41:1d:2c:c0:86:9a:f2:42:55:e8:4a:3c:50:5f:
2b:33:0f:83:98:3b:fa:d9:e6:f8:f3:22:d3:f4:79:
9b:cc:86:9c:a7:3c:e0:da:6f:fd:c3:e4:5c:25:ac:
8e:b9:98:70:49:6c:4c:26:95:7f:05:36:5f:37:e8:
9e:26:4b:b4:b4:1b:ac:14:c9:85:e3:10:7f:79:13:
3b:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:08:82:FA:BC:55:03:68:73:B3:E0:30:1B:88:E7:9F:8E:26:E9:C3
X509v3 Authority Key Identifier:
keyid:94:FC:DE:45:30:5B:D0:CC:8D:25:D7:C6:ED:CA:71:91:36:F5:60:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lPzeRTBb0MyNJdfG7cpxkTb1YG0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/1b1be4-bcc0-4b21-80df-203dcbf7d3fc/1/lPzeRTBb0MyNJdfG7cpxkTb1YG0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/1b1be4-bcc0-4b21-80df-203dcbf7d3fc/1/lPzeRTBb0MyNJdfG7cpxkTb1YG0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:cf:80:0c:26:c3:12:39:9f:00:ba:fb:91:6e:08:31:0d:0f:
bd:c3:af:d3:78:cf:df:1d:04:32:53:51:a8:c0:cb:bf:e3:73:
43:49:c1:e9:fd:88:fc:7b:f6:4a:a7:bd:4d:13:03:fd:e6:d9:
65:04:eb:ca:db:13:ca:24:f8:06:e5:84:e2:df:95:51:b2:81:
f6:cd:14:37:7e:29:34:b8:8d:10:9a:f3:8f:56:9d:b5:b9:74:
01:d7:ba:7e:f3:0c:eb:e2:cf:ff:3f:94:d9:d2:11:ad:8e:c4:
94:ea:01:8d:4d:38:30:18:51:ca:c7:78:d7:db:62:35:8d:f1:
e2:39:c4:89:5a:09:1d:f0:7a:93:5d:c6:56:72:1c:34:4d:11:
b6:d6:72:26:bf:a5:15:03:75:71:dc:48:ef:99:43:8c:4e:84:
e5:7a:69:5e:78:c6:0b:cf:46:d2:2d:3c:5c:dd:f5:2f:5c:f1:
49:c5:0e:84:b5:a8:01:72:6c:e6:e5:0e:71:ed:5b:32:72:e5:
14:67:02:3a:f3:83:30:48:b6:1e:e6:48:85:3f:09:56:ff:07:
73:c9:7b:14:36:f1:b3:3d:72:38:66:4c:93:fd:ff:3e:e0:dc:
47:94:d4:4b:3d:e9:9a:5a:5d:51:88:a9:6b:05:86:66:2b:cc:
13:43:d3:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:48:30 2026 by rpki-client