Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/59f376-dfbe-478a-b81e-f4979d50ee22/1/lpblIk_vUX9NzGbBQQNSzIq_si4.mft
File: lpblIk_vUX9NzGbBQQNSzIq_si4.mft (raw, json)
Hash identifier: y+PUcCmlAvSIaZLej30DPrfPpijvdO2KsKDBRTrvwOc=
Subject key identifier: 02:94:32:CB:D4:4A:3D:43:FE:40:EE:AC:63:38:96:D1:35:76:F5:40
Authority key identifier: 96:96:E5:22:4F:EF:51:7F:4D:CC:66:C1:41:03:52:CC:8A:BF:B2:2E
Certificate issuer: /CN=9696e5224fef517f4dcc66c1410352cc8abfb22e
Certificate serial: 019CAD59E470C8A18925105340F0DCE1F44F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lpblIk_vUX9NzGbBQQNSzIq_si4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/59f376-dfbe-478a-b81e-f4979d50ee22/1/lpblIk_vUX9NzGbBQQNSzIq_si4.mft
Manifest number: 17D3
Signing time: Mon 02 Mar 2026 07:01:15 +0000
Manifest this update: Mon 02 Mar 2026 07:01:15 +0000
Manifest next update: Tue 03 Mar 2026 07:01:15 +0000
Files and hashes: 1: lpblIk_vUX9NzGbBQQNSzIq_si4.crl (hash: 1G8AEdHirv7gkeREK8W4Lv95Ju25kJ8QikFW8SXEadY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/59f376-dfbe-478a-b81e-f4979d50ee22/1/lpblIk_vUX9NzGbBQQNSzIq_si4.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/59f376-dfbe-478a-b81e-f4979d50ee22/1/lpblIk_vUX9NzGbBQQNSzIq_si4.mft
rsync://rpki.ripe.net/repository/DEFAULT/lpblIk_vUX9NzGbBQQNSzIq_si4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 07:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:59:e4:70:c8:a1:89:25:10:53:40:f0:dc:e1:f4:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9696e5224fef517f4dcc66c1410352cc8abfb22e
Validity
Not Before: Mar 2 07:01:15 2026 GMT
Not After : Mar 3 07:01:15 2026 GMT
Subject: CN=029432cbd44a3d43fe40eeac633896d13576f540
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:6b:c1:7c:75:f8:6a:88:34:f0:d3:c6:a9:71:
23:a0:08:b0:39:ad:3f:88:2b:cb:3e:99:ff:d1:17:
c2:a7:97:f3:d0:e2:e3:3b:ee:32:2b:b3:33:95:20:
02:3e:80:4c:f0:5c:65:81:ef:0f:c7:fe:1b:aa:be:
91:af:e9:7d:a1:ea:92:d1:37:4e:66:2c:cd:63:ff:
08:bc:4b:3a:a0:f8:76:91:c1:94:51:40:8f:7d:08:
99:e1:cf:e8:22:d4:cc:4d:f4:83:c8:bf:d3:db:2a:
fb:02:37:18:0e:f2:4c:59:4d:6c:01:9a:6f:84:f9:
15:85:b3:54:16:0c:bb:21:cc:0a:57:80:0f:c0:93:
e8:f0:b6:99:ed:ec:46:17:ef:cb:04:ce:df:f6:29:
e9:05:50:5f:7d:29:36:15:50:e0:a7:86:c7:0b:3a:
52:ee:2a:58:9d:2a:03:82:7a:ea:3c:8e:5e:7d:e0:
2c:ea:0d:f7:db:29:fc:ad:45:6c:4e:d1:c7:4e:cd:
3a:4c:6d:81:54:f8:eb:16:fb:7b:09:bb:33:ba:a4:
2c:10:64:be:38:4d:af:29:b5:44:af:3d:c6:67:9e:
a3:e7:62:e7:43:8b:9d:7c:98:0e:b8:82:b4:a7:08:
52:4a:8a:90:1a:01:1f:4d:c3:b6:7d:5b:6e:74:56:
52:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:94:32:CB:D4:4A:3D:43:FE:40:EE:AC:63:38:96:D1:35:76:F5:40
X509v3 Authority Key Identifier:
keyid:96:96:E5:22:4F:EF:51:7F:4D:CC:66:C1:41:03:52:CC:8A:BF:B2:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lpblIk_vUX9NzGbBQQNSzIq_si4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/59f376-dfbe-478a-b81e-f4979d50ee22/1/lpblIk_vUX9NzGbBQQNSzIq_si4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/59f376-dfbe-478a-b81e-f4979d50ee22/1/lpblIk_vUX9NzGbBQQNSzIq_si4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:fb:ca:35:84:b7:99:39:6d:e7:b3:c5:15:b2:f5:52:a0:d8:
3b:6e:aa:c5:e7:3e:1b:9d:5a:45:47:8c:5f:e6:47:fa:b3:c2:
7a:d9:45:9c:a1:d7:82:8c:9e:3d:89:71:25:b6:de:1d:9a:bd:
bc:83:7a:2d:3d:94:2d:43:c6:83:78:3f:8d:a7:4b:db:de:9d:
17:86:8e:9f:65:2f:e1:76:c6:53:82:3d:02:ee:21:55:d0:3f:
3f:2e:23:bc:3b:1d:4d:92:63:41:c7:9b:82:9c:44:dd:7c:8e:
a0:0e:e6:c5:5f:10:ce:37:fa:df:e6:29:0f:58:5d:83:74:f3:
c5:f3:c5:f9:9c:e1:b1:ef:6b:2a:86:9b:18:64:51:76:13:a5:
13:f4:71:09:8e:4e:1b:1e:6e:a7:74:d6:78:6c:cb:af:d3:8c:
cc:e5:eb:95:74:eb:9a:59:e6:4b:97:e3:9d:fd:33:93:f1:c1:
d3:71:9e:74:98:96:2f:44:12:b1:a8:26:a5:af:49:c6:65:2d:
40:18:68:1c:4d:3f:0c:94:08:2b:09:e3:97:84:25:e7:ca:68:
46:47:1f:26:62:6c:3f:ff:bd:06:31:fb:f3:b8:d1:a6:7b:3f:
7c:36:df:0e:6f:f4:7c:03:8f:a0:d3:3e:a1:b9:7e:33:be:74:
10:b4:de:42
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZytWeRwyKGJJRBTQPDc4fRPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk2OTZlNTIyNGZlZjUxN2Y0ZGNjNjZjMTQxMDM1MmNjOGFi
ZmIyMmUwHhcNMjYwMzAyMDcwMTE1WhcNMjYwMzAzMDcwMTE1WjAzMTEwLwYDVQQD
EygwMjk0MzJjYmQ0NGEzZDQzZmU0MGVlYWM2MzM4OTZkMTM1NzZmNTQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlGvBfHX4aog08NPGqXEjoAiwOa0/
iCvLPpn/0RfCp5fz0OLjO+4yK7MzlSACPoBM8Fxlge8Px/4bqr6Rr+l9oeqS0TdO
ZizNY/8IvEs6oPh2kcGUUUCPfQiZ4c/oItTMTfSDyL/T2yr7AjcYDvJMWU1sAZpv
hPkVhbNUFgy7IcwKV4APwJPo8LaZ7exGF+/LBM7f9inpBVBffSk2FVDgp4bHCzpS
7ipYnSoDgnrqPI5efeAs6g332yn8rUVsTtHHTs06TG2BVPjrFvt7CbszuqQsEGS+
OE2vKbVErz3GZ56j52LnQ4udfJgOuIK0pwhSSoqQGgEfTcO2fVtudFZSzQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAKUMsvUSj1D/kDurGM4ltE1dvVAMB8GA1UdIwQY
MBaAFJaW5SJP71F/TcxmwUEDUsyKv7IuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbHBibElrX3ZVWDlOekdiQlFRTlN6SXFfc2k0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC81OWYzNzYtZGZiZS00NzhhLWI4MWUt
ZjQ5NzlkNTBlZTIyLzEvbHBibElrX3ZVWDlOekdiQlFRTlN6SXFfc2k0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OC81OWYzNzYtZGZiZS00NzhhLWI4MWUtZjQ5NzlkNTBlZTIy
LzEvbHBibElrX3ZVWDlOekdiQlFRTlN6SXFfc2k0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAifvKNYS3
mTlt57PFFbL1UqDYO26qxec+G51aRUeMX+ZH+rPCetlFnKHXgoyePYlxJbbeHZq9
vIN6LT2ULUPGg3g/jadL296dF4aOn2Uv4XbGU4I9Au4hVdA/Py4jvDsdTZJjQceb
gpxE3XyOoA7mxV8Qzjf63+YpD1hdg3TzxfPF+Zzhse9rKoabGGRRdhOlE/RxCY5O
Gx5up3TWeGzLr9OMzOXrlXTrmlnmS5fjnf0zk/HB03GedJiWL0QSsagmpa9JxmUt
QBhoHE0/DJQIKwnjl4Ql58poRkcfJmJsP/+9BjH787jRpns/fDbfDm/0fAOPoNM+
obl+M750ELTeQg==
-----END CERTIFICATE-----
Generated at Mon Mar 2 14:10:34 2026 by rpki-client