Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/a98239-6179-4cdc-8b94-0a4424ff2a1f/1/laaF1WN0LJza4cNZU2at7NCpO6U.mft
File: laaF1WN0LJza4cNZU2at7NCpO6U.mft (raw, json)
Hash identifier: y/tkZaS2cKXvVzXjPgJol2JNIQxWT90Hc0bU8/BrCes=
Subject key identifier: 3E:E4:5F:A5:49:48:49:F7:E6:36:16:16:5E:64:F3:8D:F4:B7:36:92
Authority key identifier: 95:A6:85:D5:63:74:2C:9C:DA:E1:C3:59:53:66:AD:EC:D0:A9:3B:A5
Certificate issuer: /CN=95a685d563742c9cdae1c3595366adecd0a93ba5
Certificate serial: 019CAB6BCB6D86A309C850A49839A6B16F9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/laaF1WN0LJza4cNZU2at7NCpO6U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/a98239-6179-4cdc-8b94-0a4424ff2a1f/1/laaF1WN0LJza4cNZU2at7NCpO6U.mft
Manifest number: 0FDF
Signing time: Sun 01 Mar 2026 22:01:34 +0000
Manifest this update: Sun 01 Mar 2026 22:01:34 +0000
Manifest next update: Mon 02 Mar 2026 22:01:34 +0000
Files and hashes: 1: laaF1WN0LJza4cNZU2at7NCpO6U.crl (hash: lOdKIrz97nNkVJVFu08j9j0wm2ov2I78B7iYu/j/xlI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/a98239-6179-4cdc-8b94-0a4424ff2a1f/1/laaF1WN0LJza4cNZU2at7NCpO6U.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/a98239-6179-4cdc-8b94-0a4424ff2a1f/1/laaF1WN0LJza4cNZU2at7NCpO6U.mft
rsync://rpki.ripe.net/repository/DEFAULT/laaF1WN0LJza4cNZU2at7NCpO6U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:cb:6d:86:a3:09:c8:50:a4:98:39:a6:b1:6f:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95a685d563742c9cdae1c3595366adecd0a93ba5
Validity
Not Before: Mar 1 22:01:34 2026 GMT
Not After : Mar 2 22:01:34 2026 GMT
Subject: CN=3ee45fa5494849f7e63616165e64f38df4b73692
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:61:5e:ac:ff:eb:1e:c7:17:8f:fc:a3:5c:ec:
da:62:22:46:74:fc:1d:65:f5:12:ed:ba:50:08:36:
4b:1c:ca:0d:c6:b9:42:7b:f5:e6:7b:fe:56:45:e4:
76:95:c0:be:79:b6:bf:88:2d:e3:6e:53:06:ee:07:
e2:45:14:c9:6f:07:1c:55:59:1d:4a:25:66:e1:16:
fd:50:30:46:28:d3:a0:86:e5:9a:5a:09:bb:83:2b:
01:1b:69:3e:82:a7:b5:fa:b1:07:87:5f:fd:73:97:
6d:04:df:20:c9:f8:4d:56:69:d0:73:9e:d2:97:b2:
e7:a5:b1:3e:da:14:2b:7d:f4:4b:1b:31:2b:d8:08:
5a:ed:e5:68:7f:a5:0b:ee:b2:62:f7:e6:69:c5:c5:
0f:4d:ed:d7:6a:86:07:0f:6d:2e:0f:6c:fe:b0:af:
d9:fb:ad:06:c5:77:2f:74:21:6c:2c:36:1e:54:2b:
0a:c0:33:80:e4:31:4b:c2:7a:14:d3:db:3e:8e:68:
a0:79:fe:d1:ab:d5:16:5d:ce:7a:cc:52:b1:e0:5c:
f0:3b:c1:2a:6d:4e:f9:99:df:83:8c:0d:cc:b2:b4:
ce:c9:36:41:99:79:e0:fe:da:e0:d4:96:1a:cb:21:
da:64:e1:e9:85:15:9d:e7:b6:38:c0:9e:60:d4:76:
46:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:E4:5F:A5:49:48:49:F7:E6:36:16:16:5E:64:F3:8D:F4:B7:36:92
X509v3 Authority Key Identifier:
keyid:95:A6:85:D5:63:74:2C:9C:DA:E1:C3:59:53:66:AD:EC:D0:A9:3B:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/laaF1WN0LJza4cNZU2at7NCpO6U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/a98239-6179-4cdc-8b94-0a4424ff2a1f/1/laaF1WN0LJza4cNZU2at7NCpO6U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/a98239-6179-4cdc-8b94-0a4424ff2a1f/1/laaF1WN0LJza4cNZU2at7NCpO6U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:0f:35:29:bd:ea:4f:de:b7:3f:70:0d:c5:6f:6e:4c:11:7b:
c4:de:ed:ec:e8:d9:2b:7c:10:59:ec:05:dd:8b:5e:03:49:05:
91:6a:3c:18:84:be:a5:bf:0b:cc:f5:05:ed:cf:e2:03:c6:09:
e8:24:ad:e4:9c:e3:ad:ca:90:5d:74:36:a5:c1:26:c6:3e:cc:
36:5f:a4:b6:f9:91:40:a2:a2:83:45:8a:02:f7:b3:9b:12:9c:
29:35:e6:02:73:f9:e1:05:2e:bb:e1:a2:0d:1a:e4:dd:6d:93:
19:b7:26:4f:c0:f2:1a:a8:58:88:b0:af:73:18:56:ba:26:51:
c8:4a:74:2c:23:30:2b:17:09:8f:74:1b:f4:ee:6c:8a:e8:ef:
e6:35:d0:55:de:57:82:e2:6b:92:a6:85:b7:7b:d7:37:4c:c9:
4b:99:71:d8:35:48:a8:e1:3e:1d:8e:75:5b:7b:39:22:77:30:
74:f0:64:fa:69:e6:9c:50:55:50:52:00:da:4c:61:d3:51:8c:
08:f2:41:36:22:76:16:0a:29:32:0c:f5:94:97:f7:93:f4:18:
61:4e:e5:c4:4a:0a:b6:9f:8d:f1:dd:9a:04:c5:83:b8:ba:b1:
ee:75:81:f4:f7:a7:04:52:a1:5c:3c:3d:ba:71:7c:8e:c2:75:
95:f4:18:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:48:43 2026 by rpki-client