Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/e4741b-f5b5-418f-8e96-154e599fd35f/1/lowsVdyOuZe_WRIdTC_9VESiLi0.mft
File: lowsVdyOuZe_WRIdTC_9VESiLi0.mft (raw, json)
Hash identifier: LZWw+GSPLnwBGuSlR4TUCXHeEmAhbm9J0Ywt1oKXUD8=
Subject key identifier: 6D:11:77:47:AA:71:6B:0A:0F:A2:6B:F7:F8:49:96:0B:C1:8B:70:29
Authority key identifier: 96:8C:2C:55:DC:8E:B9:97:BF:59:12:1D:4C:2F:FD:54:44:A2:2E:2D
Certificate issuer: /CN=968c2c55dc8eb997bf59121d4c2ffd5444a22e2d
Certificate serial: 019CA9EB11FA1153BC6CFE746F17B85329B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lowsVdyOuZe_WRIdTC_9VESiLi0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/e4741b-f5b5-418f-8e96-154e599fd35f/1/lowsVdyOuZe_WRIdTC_9VESiLi0.mft
Manifest number: 1842
Signing time: Sun 01 Mar 2026 15:01:20 +0000
Manifest this update: Sun 01 Mar 2026 15:01:20 +0000
Manifest next update: Mon 02 Mar 2026 15:01:20 +0000
Files and hashes: 1: lowsVdyOuZe_WRIdTC_9VESiLi0.crl (hash: 51Z5CR+M2ViZ+fFj7v3x0W+RfoC1xkNmR1Y1uRSgriE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/e4741b-f5b5-418f-8e96-154e599fd35f/1/lowsVdyOuZe_WRIdTC_9VESiLi0.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/e4741b-f5b5-418f-8e96-154e599fd35f/1/lowsVdyOuZe_WRIdTC_9VESiLi0.mft
rsync://rpki.ripe.net/repository/DEFAULT/lowsVdyOuZe_WRIdTC_9VESiLi0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:eb:11:fa:11:53:bc:6c:fe:74:6f:17:b8:53:29:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=968c2c55dc8eb997bf59121d4c2ffd5444a22e2d
Validity
Not Before: Mar 1 15:01:20 2026 GMT
Not After : Mar 2 15:01:20 2026 GMT
Subject: CN=6d117747aa716b0a0fa26bf7f849960bc18b7029
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:8d:33:18:80:c3:4e:3e:53:20:b3:13:48:ff:
8a:45:1e:f2:81:ca:34:95:d0:1b:cb:04:33:b7:ca:
9c:f9:63:0e:cf:ed:eb:51:80:2e:33:ff:b0:eb:b4:
7d:f3:9c:96:cf:55:e6:5b:41:38:7b:48:6d:2b:1d:
a0:bc:00:c6:f2:df:4d:5c:45:2f:2f:65:b2:d8:d7:
3b:bd:d3:d6:9f:9f:9d:76:0f:33:37:0b:cc:6f:43:
12:b8:ca:52:8d:65:9e:74:3d:2a:ec:5d:c3:4b:25:
b4:2e:26:40:80:ca:d0:5c:ac:3c:61:a4:49:52:7f:
34:50:67:af:e3:35:db:2b:c8:9d:4d:01:6b:8f:06:
98:a2:95:59:18:e6:8b:36:b7:97:5e:37:65:88:13:
83:66:74:95:aa:01:39:3f:94:dd:bc:ce:23:86:ab:
12:50:94:e0:ec:52:e3:2a:65:c5:27:6e:1f:ac:af:
d5:5d:be:5a:d5:d8:dc:c5:55:98:e5:94:f4:40:75:
5f:bc:fc:25:51:1a:57:78:33:51:8a:fa:24:0e:85:
10:29:8b:61:e6:65:89:fd:92:07:58:ab:70:51:03:
34:31:af:bf:c5:9e:c8:17:ea:60:26:f4:5f:81:c4:
77:58:aa:c9:3e:40:b6:38:bb:18:44:a5:fc:87:0a:
48:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:11:77:47:AA:71:6B:0A:0F:A2:6B:F7:F8:49:96:0B:C1:8B:70:29
X509v3 Authority Key Identifier:
keyid:96:8C:2C:55:DC:8E:B9:97:BF:59:12:1D:4C:2F:FD:54:44:A2:2E:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lowsVdyOuZe_WRIdTC_9VESiLi0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/e4741b-f5b5-418f-8e96-154e599fd35f/1/lowsVdyOuZe_WRIdTC_9VESiLi0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/e4741b-f5b5-418f-8e96-154e599fd35f/1/lowsVdyOuZe_WRIdTC_9VESiLi0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:ab:bf:b0:d4:3b:5f:c5:4d:31:e0:d8:89:6c:a4:ac:87:fb:
95:5f:9f:b2:13:78:39:75:09:ba:23:65:3b:1b:45:5a:d5:7e:
32:9b:d0:10:4e:ef:bc:10:ad:d2:71:64:7c:a5:6b:0c:1b:f7:
1d:83:d3:66:12:8f:c8:35:3a:43:6f:e9:fe:61:9a:9b:aa:9c:
0c:2b:fc:56:e9:da:00:75:44:40:37:06:13:d8:a6:0e:ed:8e:
03:10:da:66:8f:53:4d:70:c6:d3:a3:7f:07:16:bb:49:5d:1c:
f0:b8:ae:80:fb:77:1d:86:da:33:e1:4c:b2:86:71:44:76:3c:
76:da:3e:ad:e2:72:db:7b:66:eb:c0:56:fa:fe:46:ec:42:5b:
54:c0:5c:8e:c0:1e:f6:c5:ba:ad:bc:ce:98:05:48:e5:a8:23:
e1:74:31:df:a3:81:5d:b7:2e:57:2c:ae:8d:3c:94:4f:1a:52:
16:66:6b:f3:50:78:ee:51:ca:b1:50:3d:21:71:94:ee:4f:38:
09:5b:8b:5c:93:4f:10:c4:52:eb:b4:96:39:bd:72:5d:db:2c:
3a:9f:46:96:55:02:db:0f:77:f1:bc:d8:9c:60:e9:eb:34:16:
e9:2b:4e:e4:e0:05:33:40:9c:a7:be:69:0c:9c:e3:e5:07:73:
cb:d3:74:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:44:45 2026 by rpki-client