Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/072b46-0da1-42d2-899c-a0bda8af756a/1/O_LCDaTWMBgu7jNFrZ0cStkXDVA.mft
File: O_LCDaTWMBgu7jNFrZ0cStkXDVA.mft (raw, json)
Hash identifier: /9djGTuMejQ5oZTKzWTP4CK95E0nq6jfTyJ/vKQ/JWc=
Subject key identifier: 26:85:DE:FC:0F:41:D8:81:C7:BD:28:24:88:DE:02:58:3A:14:F9:7D
Authority key identifier: 3B:F2:C2:0D:A4:D6:30:18:2E:EE:33:45:AD:9D:1C:4A:D9:17:0D:50
Certificate issuer: /CN=3bf2c20da4d630182eee3345ad9d1c4ad9170d50
Certificate serial: 019D98501C3E9AE5E5895AA26B90DBC06278
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O_LCDaTWMBgu7jNFrZ0cStkXDVA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/072b46-0da1-42d2-899c-a0bda8af756a/1/O_LCDaTWMBgu7jNFrZ0cStkXDVA.mft
Manifest number: 12FF
Signing time: Thu 16 Apr 2026 22:01:19 +0000
Manifest this update: Thu 16 Apr 2026 22:01:19 +0000
Manifest next update: Fri 17 Apr 2026 22:01:19 +0000
Files and hashes: 1: O_LCDaTWMBgu7jNFrZ0cStkXDVA.crl (hash: aIz8AI4AO5Jmjv+WqCah0O1CO7W6RC2WU4/kck8H9iQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/072b46-0da1-42d2-899c-a0bda8af756a/1/O_LCDaTWMBgu7jNFrZ0cStkXDVA.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/072b46-0da1-42d2-899c-a0bda8af756a/1/O_LCDaTWMBgu7jNFrZ0cStkXDVA.mft
rsync://rpki.ripe.net/repository/DEFAULT/O_LCDaTWMBgu7jNFrZ0cStkXDVA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:50:1c:3e:9a:e5:e5:89:5a:a2:6b:90:db:c0:62:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3bf2c20da4d630182eee3345ad9d1c4ad9170d50
Validity
Not Before: Apr 16 22:01:19 2026 GMT
Not After : Apr 17 22:01:19 2026 GMT
Subject: CN=2685defc0f41d881c7bd282488de02583a14f97d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:9d:70:58:2b:f8:58:24:ca:57:10:d7:69:76:
ca:4b:98:be:80:22:34:c3:bc:3c:6d:93:48:4b:49:
c1:8f:10:fd:c8:b7:f9:07:b9:5b:c0:70:db:ae:10:
24:08:83:7a:8a:ca:20:9d:42:ba:38:2d:b0:c2:83:
5a:8a:14:7f:d2:3d:04:98:5c:69:11:cd:fc:06:01:
7a:52:52:ea:c7:be:6e:27:65:49:65:c4:12:6a:c7:
86:07:ad:61:c8:f2:2a:69:09:af:d8:92:90:74:11:
a8:56:4a:e7:f8:92:86:7a:43:a4:d5:b9:0f:5c:57:
30:06:35:49:f7:31:24:d9:92:d9:49:46:be:01:36:
1a:98:97:dc:4f:1d:83:21:55:f1:d0:d9:2c:0c:58:
9f:dc:12:a8:70:a5:ff:f4:e9:f3:2d:56:05:5d:45:
96:26:c3:d9:47:96:65:e8:e3:b4:b1:62:8b:68:8b:
3d:46:ae:4e:62:71:1e:51:42:ed:52:29:2b:ca:9d:
64:44:0f:c4:b4:15:f6:06:e5:ca:84:00:84:a7:f8:
7c:8e:f9:0d:ce:6b:ff:b8:e8:88:c8:5b:8e:32:f4:
b4:4e:a2:60:18:59:da:57:dc:20:91:3a:1d:39:96:
e1:08:a5:02:3e:28:65:d1:25:49:7e:64:f6:06:65:
21:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:85:DE:FC:0F:41:D8:81:C7:BD:28:24:88:DE:02:58:3A:14:F9:7D
X509v3 Authority Key Identifier:
keyid:3B:F2:C2:0D:A4:D6:30:18:2E:EE:33:45:AD:9D:1C:4A:D9:17:0D:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O_LCDaTWMBgu7jNFrZ0cStkXDVA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/072b46-0da1-42d2-899c-a0bda8af756a/1/O_LCDaTWMBgu7jNFrZ0cStkXDVA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/072b46-0da1-42d2-899c-a0bda8af756a/1/O_LCDaTWMBgu7jNFrZ0cStkXDVA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:ca:70:d1:3c:e5:60:b2:0d:46:77:11:0e:57:cb:cd:00:59:
d4:c1:97:39:f7:0a:28:51:ca:f8:4f:a3:db:e9:46:e2:49:c2:
25:a0:ec:91:3c:11:f5:5e:8b:b6:ee:10:1f:b2:4a:39:8b:21:
ea:0f:3b:90:80:e6:eb:9a:0c:29:2d:bc:e1:86:f6:df:6e:12:
de:d6:a4:dd:93:55:e5:aa:d5:ae:c8:cf:de:9f:c7:1a:4c:5a:
f5:97:dd:5e:48:6f:58:5c:61:52:5a:44:b4:b1:27:61:3c:7d:
24:23:df:a8:77:8d:f7:9e:3a:a7:bd:8b:d8:b0:76:8c:15:eb:
84:2a:5b:3c:56:ed:e4:15:f5:23:be:51:1d:72:3f:f7:fb:96:
5b:9a:13:cf:32:96:0f:b0:bb:a1:81:73:a7:2d:ca:50:9f:c6:
67:06:13:55:eb:78:3e:4a:ca:b6:8c:57:39:60:ac:dc:8e:22:
54:52:d0:93:e1:ca:90:5e:4d:1c:38:43:bc:07:0d:f2:63:58:
2c:5f:e8:91:77:dd:03:ce:f3:ff:79:15:62:3e:f9:61:a3:84:
29:af:e5:a7:0f:3e:38:fa:ee:00:21:f4:3c:0a:a5:b3:a6:5e:
89:7c:88:fb:a9:b9:81:44:20:84:13:b0:c3:96:d9:28:34:82:
bf:18:7c:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 03:22:40 2026 by rpki-client