Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/59f376-dfbe-478a-b81e-f4979d50ee22/1/lpblIk_vUX9NzGbBQQNSzIq_si4.mft
File: lpblIk_vUX9NzGbBQQNSzIq_si4.mft (raw, json)
Hash identifier: HgY2lcOg2u6d0E2/j3ULBR4DdXzOOfmxCeQvk6WOeC8=
Subject key identifier: 70:08:73:04:0C:09:B1:4E:0B:7C:B1:E9:18:27:E5:62:59:30:7F:5D
Authority key identifier: 96:96:E5:22:4F:EF:51:7F:4D:CC:66:C1:41:03:52:CC:8A:BF:B2:2E
Certificate issuer: /CN=9696e5224fef517f4dcc66c1410352cc8abfb22e
Certificate serial: 019D9CD190E63D83E2160826EA1316460BA7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lpblIk_vUX9NzGbBQQNSzIq_si4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/59f376-dfbe-478a-b81e-f4979d50ee22/1/lpblIk_vUX9NzGbBQQNSzIq_si4.mft
Manifest number: 184F
Signing time: Fri 17 Apr 2026 19:01:12 +0000
Manifest this update: Fri 17 Apr 2026 19:01:12 +0000
Manifest next update: Sat 18 Apr 2026 19:01:12 +0000
Files and hashes: 1: lpblIk_vUX9NzGbBQQNSzIq_si4.crl (hash: ZJcGrsaGasWprPiOO/pWT6JsMoGtU3T7fR4Epd46b+g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/59f376-dfbe-478a-b81e-f4979d50ee22/1/lpblIk_vUX9NzGbBQQNSzIq_si4.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/59f376-dfbe-478a-b81e-f4979d50ee22/1/lpblIk_vUX9NzGbBQQNSzIq_si4.mft
rsync://rpki.ripe.net/repository/DEFAULT/lpblIk_vUX9NzGbBQQNSzIq_si4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 19:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9c:d1:90:e6:3d:83:e2:16:08:26:ea:13:16:46:0b:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9696e5224fef517f4dcc66c1410352cc8abfb22e
Validity
Not Before: Apr 17 19:01:12 2026 GMT
Not After : Apr 18 19:01:12 2026 GMT
Subject: CN=700873040c09b14e0b7cb1e91827e56259307f5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:62:9b:95:71:26:ad:b0:06:3d:f3:5b:49:d9:
09:2c:61:ff:6f:f8:9d:f2:f9:f1:13:94:c3:9f:eb:
44:ee:f2:68:10:e4:97:32:39:df:0a:a7:c2:14:3e:
94:08:c4:a9:aa:72:ea:44:78:c4:8c:c7:75:9e:87:
18:8f:93:8e:41:80:db:21:b1:8b:a1:f8:fc:bb:4e:
70:39:e2:bf:9b:b9:94:00:90:48:72:c4:98:86:8d:
e6:75:ee:ba:7c:3d:65:b1:c8:39:d5:00:f4:bd:0a:
51:18:78:96:82:18:2a:d7:0b:b7:a6:9e:53:1b:53:
1b:6c:ee:32:28:54:0e:a7:6c:74:e2:40:c7:70:12:
b6:05:e5:4c:9e:30:7d:6a:b0:fa:95:9f:5c:e5:e4:
e2:7c:fc:4b:7c:46:03:8d:b5:6c:23:bc:8a:02:aa:
32:49:e8:54:00:94:d2:7b:de:73:4d:ca:d0:18:31:
f2:cd:a6:a8:cc:6f:74:e6:c5:4d:a1:ec:45:71:74:
3d:42:45:73:56:85:d0:61:a1:c7:0e:50:7b:d9:7c:
21:8e:72:74:39:25:6b:71:3d:cb:1d:78:7f:de:94:
f8:ac:c2:e9:32:fc:40:12:bb:fe:f2:fc:81:5a:1c:
69:bf:ce:c2:a6:fa:dd:be:6b:46:d5:e6:42:d9:49:
6e:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:08:73:04:0C:09:B1:4E:0B:7C:B1:E9:18:27:E5:62:59:30:7F:5D
X509v3 Authority Key Identifier:
keyid:96:96:E5:22:4F:EF:51:7F:4D:CC:66:C1:41:03:52:CC:8A:BF:B2:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lpblIk_vUX9NzGbBQQNSzIq_si4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/59f376-dfbe-478a-b81e-f4979d50ee22/1/lpblIk_vUX9NzGbBQQNSzIq_si4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/59f376-dfbe-478a-b81e-f4979d50ee22/1/lpblIk_vUX9NzGbBQQNSzIq_si4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:61:c1:75:93:94:7f:4b:44:10:7d:26:56:f1:81:55:70:3f:
49:0e:07:7a:50:64:be:b0:ea:09:8d:a8:a9:b4:e9:c8:b4:bd:
d1:64:5d:6f:26:51:f3:02:89:74:e9:be:e8:a9:c0:b8:b3:dd:
69:b0:f0:e6:22:99:1b:b4:a0:39:38:1b:f6:28:ae:98:fe:39:
b1:04:c3:f3:e3:ef:d7:3e:e9:b7:e6:12:bb:b7:8e:b6:71:55:
69:ce:fc:60:1e:a0:d1:77:39:77:c0:07:97:59:f4:9e:a8:2b:
50:1b:4d:76:6c:9d:67:7a:69:2e:3a:32:ef:f9:ce:80:79:c5:
8b:8e:51:4d:24:b3:ec:3d:85:42:a4:37:0f:36:d1:ed:b8:98:
c8:f6:d2:e5:96:ab:ac:8d:5d:4d:6b:4c:24:30:e8:79:46:bd:
19:98:bb:ff:9e:a4:a0:fc:90:c1:d6:4d:fb:b3:a6:71:63:ff:
f4:d1:f3:4e:ab:3c:6d:bc:6f:f9:20:1f:05:61:9e:4b:b4:9f:
5d:33:59:c3:85:45:2d:ab:60:80:e1:9c:be:39:fe:03:26:2d:
06:00:d5:2b:82:0b:4d:de:20:4e:51:74:ea:c1:57:5f:ba:7d:
4c:03:69:67:eb:12:09:ab:6f:ea:32:73:35:88:be:29:38:07:
86:a5:f9:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 04:42:48 2026 by rpki-client