Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/dc9224-3cd7-437d-a1dc-e8c39cf66b3f/1/lPhZ34Ux35GpQAj0tJIKQSPrDws.mft
File: lPhZ34Ux35GpQAj0tJIKQSPrDws.mft (raw, json)
Hash identifier: eZiMdlkkopXcpPOVjEH+ZrKdyvGX+tLSuK8rrJR+m78=
Subject key identifier: AD:A5:8D:B3:7A:A2:A9:B0:7F:F4:4A:B2:63:94:A8:7D:30:4E:74:A0
Authority key identifier: 94:F8:59:DF:85:31:DF:91:A9:40:08:F4:B4:92:0A:41:23:EB:0F:0B
Certificate issuer: /CN=94f859df8531df91a94008f4b4920a4123eb0f0b
Certificate serial: 019CAB6BB6F02B898B08871ECA095CCD74A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lPhZ34Ux35GpQAj0tJIKQSPrDws.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/dc9224-3cd7-437d-a1dc-e8c39cf66b3f/1/lPhZ34Ux35GpQAj0tJIKQSPrDws.mft
Manifest number: 16CD
Signing time: Sun 01 Mar 2026 22:01:28 +0000
Manifest this update: Sun 01 Mar 2026 22:01:28 +0000
Manifest next update: Mon 02 Mar 2026 22:01:28 +0000
Files and hashes: 1: lPhZ34Ux35GpQAj0tJIKQSPrDws.crl (hash: gjDzeEXr7tSarW2xjtngV1G2oe7CoVUnVrHn7MLZxCg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/dc9224-3cd7-437d-a1dc-e8c39cf66b3f/1/lPhZ34Ux35GpQAj0tJIKQSPrDws.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/dc9224-3cd7-437d-a1dc-e8c39cf66b3f/1/lPhZ34Ux35GpQAj0tJIKQSPrDws.mft
rsync://rpki.ripe.net/repository/DEFAULT/lPhZ34Ux35GpQAj0tJIKQSPrDws.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 22:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:b6:f0:2b:89:8b:08:87:1e:ca:09:5c:cd:74:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94f859df8531df91a94008f4b4920a4123eb0f0b
Validity
Not Before: Mar 1 22:01:28 2026 GMT
Not After : Mar 2 22:01:28 2026 GMT
Subject: CN=ada58db37aa2a9b07ff44ab26394a87d304e74a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:40:03:f3:4b:8b:1a:55:a3:ef:a6:69:8d:d0:
02:68:e9:30:a6:1a:17:29:97:3c:53:47:6b:da:ba:
72:dd:9a:44:c5:cc:d1:36:cd:62:b1:e6:aa:ba:aa:
e6:bf:ec:03:35:64:55:c5:73:0a:5e:c7:75:4c:f8:
50:64:d9:24:58:f8:49:91:bc:f2:9c:20:05:44:b8:
34:b4:cf:5c:10:1e:d3:2b:51:0f:73:a7:8b:81:aa:
a6:79:7b:10:bb:9b:a1:62:88:1c:90:d1:ce:67:19:
ab:ea:10:29:35:ef:01:cd:60:95:f2:3d:de:43:93:
35:a0:c6:a5:ae:75:42:4c:22:0a:ca:b9:5d:4d:ec:
d1:b2:d3:44:56:1e:1e:2d:2d:d7:64:c0:e5:39:db:
96:40:3c:23:fa:cc:ea:3c:bd:9f:7c:ca:e2:d4:f5:
52:4b:b4:05:b8:5e:41:7b:4c:b9:fa:a4:84:3b:87:
50:e1:a4:ff:0a:c9:57:63:df:99:5e:82:83:48:23:
0f:e3:b7:5d:fa:66:44:94:1e:27:11:32:36:74:69:
c1:62:5e:89:6f:cb:a8:11:39:33:67:e6:1f:e8:db:
4c:c8:6a:6a:17:fc:f0:d7:d0:ad:25:ed:c6:3a:2f:
b4:3c:17:0e:40:05:7d:d8:34:24:26:8c:db:32:3d:
de:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:A5:8D:B3:7A:A2:A9:B0:7F:F4:4A:B2:63:94:A8:7D:30:4E:74:A0
X509v3 Authority Key Identifier:
keyid:94:F8:59:DF:85:31:DF:91:A9:40:08:F4:B4:92:0A:41:23:EB:0F:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lPhZ34Ux35GpQAj0tJIKQSPrDws.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/dc9224-3cd7-437d-a1dc-e8c39cf66b3f/1/lPhZ34Ux35GpQAj0tJIKQSPrDws.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/dc9224-3cd7-437d-a1dc-e8c39cf66b3f/1/lPhZ34Ux35GpQAj0tJIKQSPrDws.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:09:3d:4f:61:1c:0b:1b:b3:43:28:b3:48:ee:ee:06:b4:37:
ad:75:94:19:91:9a:83:71:2d:da:ce:fc:14:c8:e8:29:ad:d7:
d2:7d:c3:6e:e9:f3:b0:86:8a:bb:cc:ed:b1:36:0b:9f:4c:fe:
4b:6d:87:05:58:16:b3:0c:c4:5e:90:26:1f:1e:bc:cc:6d:d0:
e3:16:df:b2:b9:47:b5:d3:f3:57:0a:ab:fa:2a:38:b3:f6:75:
c3:70:8c:bd:21:0d:bd:e3:d9:d7:07:b0:08:81:ae:fe:6b:dd:
25:a5:ac:ec:88:23:b0:31:66:be:05:2e:da:07:df:0e:3e:be:
ac:f6:d3:50:d5:fe:42:76:5e:3e:ff:d4:64:0f:89:6a:4f:a6:
2b:a5:99:95:32:9b:53:eb:db:3d:16:38:ff:f3:a1:b0:62:d8:
b6:e0:58:4e:85:ca:0f:4b:5b:8e:9a:e8:5e:2e:75:94:1e:6f:
59:b0:ea:c5:54:97:b3:64:6b:7a:60:87:91:f6:44:7a:3c:54:
68:75:c8:62:9c:5b:15:fa:fe:7f:13:92:51:29:28:40:a1:67:
5f:2d:ed:5d:90:bc:c6:47:ae:9b:cd:fb:c6:aa:64:1a:cc:0d:
9d:3a:45:14:e5:1e:59:b1:84:5b:78:67:e5:d7:58:f3:8c:b7:
60:e2:cd:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:41:48 2026 by rpki-client