Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/dc9224-3cd7-437d-a1dc-e8c39cf66b3f/1/lPhZ34Ux35GpQAj0tJIKQSPrDws.mft
File: lPhZ34Ux35GpQAj0tJIKQSPrDws.mft (raw, json)
Hash identifier: SuEd5Eq0Le6VCxt4bu3ydtLfzcWzSFhypVGDxI/PZ2I=
Subject key identifier: 8C:20:6E:6E:29:94:74:7C:F5:AC:6A:11:8C:A8:8A:07:E4:11:59:FA
Authority key identifier: 94:F8:59:DF:85:31:DF:91:A9:40:08:F4:B4:92:0A:41:23:EB:0F:0B
Certificate issuer: /CN=94f859df8531df91a94008f4b4920a4123eb0f0b
Certificate serial: 019D98F44A64346DD62290B23086738F7B69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lPhZ34Ux35GpQAj0tJIKQSPrDws.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/dc9224-3cd7-437d-a1dc-e8c39cf66b3f/1/lPhZ34Ux35GpQAj0tJIKQSPrDws.mft
Manifest number: 1748
Signing time: Fri 17 Apr 2026 01:00:39 +0000
Manifest this update: Fri 17 Apr 2026 01:00:39 +0000
Manifest next update: Sat 18 Apr 2026 01:00:39 +0000
Files and hashes: 1: lPhZ34Ux35GpQAj0tJIKQSPrDws.crl (hash: oV59L1g+aHrMU2MtwjXBUzj5gYCDbFz4pSCpPl6kB5A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/dc9224-3cd7-437d-a1dc-e8c39cf66b3f/1/lPhZ34Ux35GpQAj0tJIKQSPrDws.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/dc9224-3cd7-437d-a1dc-e8c39cf66b3f/1/lPhZ34Ux35GpQAj0tJIKQSPrDws.mft
rsync://rpki.ripe.net/repository/DEFAULT/lPhZ34Ux35GpQAj0tJIKQSPrDws.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 01:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f4:4a:64:34:6d:d6:22:90:b2:30:86:73:8f:7b:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94f859df8531df91a94008f4b4920a4123eb0f0b
Validity
Not Before: Apr 17 01:00:39 2026 GMT
Not After : Apr 18 01:00:39 2026 GMT
Subject: CN=8c206e6e2994747cf5ac6a118ca88a07e41159fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:89:cb:9d:a8:9f:4d:40:43:1e:c1:e1:53:70:
58:99:b2:b4:2c:05:0f:db:f0:02:aa:29:1d:25:76:
4d:d6:91:bf:fd:4f:a1:18:16:1f:d7:fb:32:2d:5c:
0b:d2:a1:aa:6e:43:a6:7c:ac:f9:8c:c5:06:97:39:
2c:0b:3e:be:98:dc:38:fb:a4:24:bf:76:de:eb:54:
32:3c:05:30:40:2a:74:c9:68:f5:8a:30:94:79:7c:
91:d9:37:c8:c6:df:bc:c6:95:e5:06:24:22:99:93:
26:d7:4f:c6:68:87:1a:b5:25:e6:53:1e:02:b8:e3:
9d:3c:44:82:55:0c:e3:2f:80:69:14:37:88:a7:1f:
a6:02:d3:bf:06:d5:c4:bb:99:66:1a:49:bd:cf:2f:
c4:fd:6a:67:95:64:20:14:1b:d1:58:2b:08:28:2e:
73:e3:fb:56:ce:57:ac:4a:18:31:71:69:02:8b:6e:
af:98:5e:a1:0d:86:43:0d:0e:2a:cd:d8:58:f0:6e:
2a:49:87:7a:72:73:fb:f7:15:a7:bd:86:6c:1f:0b:
be:d6:b1:3a:d1:84:fa:12:48:32:88:7f:e1:20:3b:
c4:5e:3c:e5:77:7f:ea:91:59:f8:a7:5f:a4:eb:cd:
1c:9b:d0:36:1d:c7:6e:a8:33:a2:70:c2:e2:8a:a8:
a6:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:20:6E:6E:29:94:74:7C:F5:AC:6A:11:8C:A8:8A:07:E4:11:59:FA
X509v3 Authority Key Identifier:
keyid:94:F8:59:DF:85:31:DF:91:A9:40:08:F4:B4:92:0A:41:23:EB:0F:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lPhZ34Ux35GpQAj0tJIKQSPrDws.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/dc9224-3cd7-437d-a1dc-e8c39cf66b3f/1/lPhZ34Ux35GpQAj0tJIKQSPrDws.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/dc9224-3cd7-437d-a1dc-e8c39cf66b3f/1/lPhZ34Ux35GpQAj0tJIKQSPrDws.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:dc:96:79:ba:34:9d:85:32:bb:ba:04:41:d2:b3:64:09:01:
07:96:62:dc:ce:d3:50:82:0c:41:ed:49:a3:1a:6f:ca:2c:0c:
af:3a:b1:05:5c:a0:93:fa:ee:76:fb:f3:fe:61:1d:f6:36:d7:
61:af:56:a2:4c:db:9e:1b:0d:a8:90:23:a9:a5:8d:1f:ca:f4:
54:5a:f2:cc:2b:8c:c7:ce:4f:c3:9b:ec:d4:64:ed:fd:91:af:
5a:b4:de:6b:57:fd:0e:3c:0b:18:f2:0e:92:25:50:23:06:fb:
c1:99:ae:93:ea:15:47:e6:81:7b:0e:ac:0d:88:39:ad:ec:85:
21:ee:f2:b3:24:ba:6f:b9:24:80:e1:f5:4d:4b:04:56:6a:96:
f6:a2:0b:4a:da:98:80:01:76:e6:6d:dd:f3:7f:0a:8d:b8:78:
32:17:54:95:2e:09:3f:fe:7c:84:eb:9a:ac:a4:fe:fa:87:f9:
98:bb:5e:a0:63:95:b1:1f:e5:c2:d3:ed:65:08:01:8c:74:f2:
49:db:af:77:25:bf:d6:0a:dd:1a:6c:61:6a:6e:eb:43:b5:74:
21:d8:88:30:74:54:81:05:bc:47:5a:b2:28:2a:c2:4f:25:97:
54:e3:3f:56:66:05:5c:a0:9b:2d:a2:07:d7:e3:e4:91:55:db:
57:8d:59:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:44:33 2026 by rpki-client