Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/072b46-0da1-42d2-899c-a0bda8af756a/1/O_LCDaTWMBgu7jNFrZ0cStkXDVA.mft
File: O_LCDaTWMBgu7jNFrZ0cStkXDVA.mft (raw, json)
Hash identifier: XZqJQZx8vZcx+8ryj1VRnJaI5K/RHGVzEWGsMbapzuM=
Subject key identifier: E7:81:01:5F:08:83:9E:74:48:B5:78:DF:AC:AB:71:8B:54:FA:33:72
Authority key identifier: 3B:F2:C2:0D:A4:D6:30:18:2E:EE:33:45:AD:9D:1C:4A:D9:17:0D:50
Certificate issuer: /CN=3bf2c20da4d630182eee3345ad9d1c4ad9170d50
Certificate serial: 019CACB4D9DA704A2A5302BB9C8FBDE627FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O_LCDaTWMBgu7jNFrZ0cStkXDVA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/072b46-0da1-42d2-899c-a0bda8af756a/1/O_LCDaTWMBgu7jNFrZ0cStkXDVA.mft
Manifest number: 1285
Signing time: Mon 02 Mar 2026 04:00:58 +0000
Manifest this update: Mon 02 Mar 2026 04:00:58 +0000
Manifest next update: Tue 03 Mar 2026 04:00:58 +0000
Files and hashes: 1: O_LCDaTWMBgu7jNFrZ0cStkXDVA.crl (hash: KeTmxZE6CuBnfLWyH/xhV9o1ylzAkv5PtukIKbxD2Kw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/072b46-0da1-42d2-899c-a0bda8af756a/1/O_LCDaTWMBgu7jNFrZ0cStkXDVA.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/072b46-0da1-42d2-899c-a0bda8af756a/1/O_LCDaTWMBgu7jNFrZ0cStkXDVA.mft
rsync://rpki.ripe.net/repository/DEFAULT/O_LCDaTWMBgu7jNFrZ0cStkXDVA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:b4:d9:da:70:4a:2a:53:02:bb:9c:8f:bd:e6:27:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3bf2c20da4d630182eee3345ad9d1c4ad9170d50
Validity
Not Before: Mar 2 04:00:58 2026 GMT
Not After : Mar 3 04:00:58 2026 GMT
Subject: CN=e781015f08839e7448b578dfacab718b54fa3372
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:5f:62:b8:09:e7:1b:c4:cd:99:f4:1d:a3:96:
59:0e:ff:a4:01:48:b1:39:23:f1:c4:31:a9:17:d5:
9b:19:b6:8b:c8:bf:eb:34:c2:77:4b:12:ee:2a:a9:
b7:04:ee:2e:14:e3:ba:f9:8c:15:cb:d7:62:6b:73:
89:4d:f8:ba:3e:4a:b1:3b:69:7f:34:8e:83:0b:bc:
58:24:08:d0:9f:93:aa:18:45:0b:37:7c:41:6b:5d:
93:b8:26:ea:35:0f:c1:e1:f2:a1:c6:de:6b:c5:f3:
78:75:e1:7e:34:a5:02:be:79:2d:2c:54:7b:81:67:
8e:2c:72:ed:2f:92:96:33:59:c0:23:8e:57:37:4d:
ac:c6:4c:e0:5c:a7:4f:1b:da:a6:c6:d9:32:e5:97:
8e:21:62:9e:aa:e1:70:e0:18:a9:0d:48:80:da:d7:
01:c1:b3:fd:50:01:7c:2c:f4:cb:fd:68:ab:7f:f8:
38:dd:87:2f:bf:c7:c2:f7:3e:9a:fd:b2:f4:45:98:
cc:85:63:b7:4c:58:22:61:76:03:b5:8f:00:6a:ab:
8e:ec:ab:ff:71:2b:1f:ef:90:8b:2c:90:90:56:34:
e7:d1:c3:fd:00:e8:5f:a4:a2:d1:c1:22:12:d9:c4:
4e:a5:d9:09:dc:1a:5a:de:cd:71:09:4b:ea:26:82:
95:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:81:01:5F:08:83:9E:74:48:B5:78:DF:AC:AB:71:8B:54:FA:33:72
X509v3 Authority Key Identifier:
keyid:3B:F2:C2:0D:A4:D6:30:18:2E:EE:33:45:AD:9D:1C:4A:D9:17:0D:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O_LCDaTWMBgu7jNFrZ0cStkXDVA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/072b46-0da1-42d2-899c-a0bda8af756a/1/O_LCDaTWMBgu7jNFrZ0cStkXDVA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/072b46-0da1-42d2-899c-a0bda8af756a/1/O_LCDaTWMBgu7jNFrZ0cStkXDVA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:c5:45:52:56:c7:51:dc:8b:e0:f9:3c:7b:4f:37:30:d9:6b:
ab:c6:21:0e:f1:db:24:cc:77:55:0e:dd:f5:f2:8d:40:52:ed:
a1:a6:7b:4a:75:5d:29:b7:17:40:0f:69:69:a4:6a:fb:ed:8b:
83:c4:33:0c:19:52:ee:63:a4:a1:90:29:51:e6:28:63:7d:d0:
88:9d:e9:f8:db:93:ed:b0:ea:5f:df:32:c0:f6:df:d8:2c:a8:
07:01:98:9c:6a:54:2b:c3:30:be:f7:34:b4:9a:f6:b9:a8:e1:
3b:78:de:32:5d:4d:8d:9e:61:c8:0d:21:45:9c:bb:40:ad:07:
17:bb:a1:87:e4:3f:70:ae:9c:2a:ed:31:a4:13:c3:4e:3d:e4:
a0:58:77:95:a9:0b:f4:fc:30:86:82:c8:fd:bc:7a:5a:9f:46:
f5:4d:0e:3a:53:e8:1c:68:1f:60:cb:fe:8d:78:16:1f:16:43:
19:de:02:64:4b:a8:85:fe:6b:81:83:d2:5d:9a:ce:e9:f3:fc:
4f:f4:4e:df:9d:fc:cb:72:10:22:6a:00:b1:d8:58:0f:54:f3:
9e:9f:ed:cb:72:6e:c2:9b:f7:22:e4:4e:63:ea:dd:55:93:76:
d0:4d:2b:f2:c5:39:b2:05:63:e1:d3:c7:94:81:53:71:fe:d0:
22:96:de:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:03:02 2026 by rpki-client