Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/c58c8c-5c6e-44e0-82af-e96de3112dea/1/LBMiAg7k5Zy1zT3nFlDGKv1MAic.mft
File: LBMiAg7k5Zy1zT3nFlDGKv1MAic.mft (raw, json)
Hash identifier: 2R55vrLmYtil/r+ATMO7VdOdGkirhEVwV/Oh1zvlY2A=
Subject key identifier: B7:52:0B:B5:E5:18:F1:64:F8:F6:B3:ED:EE:CD:52:81:B8:9B:00:CB
Authority key identifier: 2C:13:22:02:0E:E4:E5:9C:B5:CD:3D:E7:16:50:C6:2A:FD:4C:02:27
Certificate issuer: /CN=2c1322020ee4e59cb5cd3de71650c62afd4c0227
Certificate serial: 019D98F4E0B9980E67322FFFB7D6076A1405
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LBMiAg7k5Zy1zT3nFlDGKv1MAic.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/c58c8c-5c6e-44e0-82af-e96de3112dea/1/LBMiAg7k5Zy1zT3nFlDGKv1MAic.mft
Manifest number: 0BD6
Signing time: Fri 17 Apr 2026 01:01:18 +0000
Manifest this update: Fri 17 Apr 2026 01:01:18 +0000
Manifest next update: Sat 18 Apr 2026 01:01:18 +0000
Files and hashes: 1: LBMiAg7k5Zy1zT3nFlDGKv1MAic.crl (hash: cDyIoUDDfO9+i3/D4BxGs7XvuhbPwR/lWPq/PrIqWI0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/c58c8c-5c6e-44e0-82af-e96de3112dea/1/LBMiAg7k5Zy1zT3nFlDGKv1MAic.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/c58c8c-5c6e-44e0-82af-e96de3112dea/1/LBMiAg7k5Zy1zT3nFlDGKv1MAic.mft
rsync://rpki.ripe.net/repository/DEFAULT/LBMiAg7k5Zy1zT3nFlDGKv1MAic.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 01:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f4:e0:b9:98:0e:67:32:2f:ff:b7:d6:07:6a:14:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c1322020ee4e59cb5cd3de71650c62afd4c0227
Validity
Not Before: Apr 17 01:01:18 2026 GMT
Not After : Apr 18 01:01:18 2026 GMT
Subject: CN=b7520bb5e518f164f8f6b3edeecd5281b89b00cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:b5:b0:35:ce:48:f5:26:35:0d:01:1c:83:c0:
71:ad:6f:02:20:8f:17:49:64:6f:45:32:c0:bd:7d:
b0:9b:c7:b0:a2:b2:f2:63:8c:b6:b1:32:fd:46:9d:
13:ed:41:47:98:4b:f6:5f:e1:d6:93:b3:1f:23:cf:
bf:be:36:58:49:7f:e9:ce:4e:bc:b2:a9:0d:f6:bf:
2d:fe:cc:05:d6:db:d3:ba:e7:dc:4b:23:9b:28:7d:
33:2e:37:00:57:d9:e5:b4:a7:af:17:a8:6a:2c:1d:
95:06:be:62:e3:3a:37:e9:cf:a5:b6:5b:8a:18:92:
81:54:ed:70:27:cd:ce:82:89:bb:a8:26:2c:17:e1:
8a:ad:45:ff:5b:ac:96:56:61:36:1c:b6:1a:96:13:
ae:f3:b8:bc:03:53:8f:9a:23:0d:09:ab:fa:70:91:
27:d8:1d:62:51:4a:ca:13:32:08:e7:a1:59:85:2f:
9f:aa:0c:4b:79:75:5d:86:05:38:e5:05:d3:f0:be:
6c:b1:ef:11:ee:9b:c4:06:f2:41:82:b9:8d:8d:67:
0d:76:2c:d9:63:ca:3a:5f:17:8f:87:31:60:f8:fe:
15:a0:87:40:71:64:36:fe:b3:cb:5b:ea:70:c8:bb:
b8:b2:b8:6f:ff:3c:a7:76:7f:61:2d:73:f0:a8:37:
c6:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:52:0B:B5:E5:18:F1:64:F8:F6:B3:ED:EE:CD:52:81:B8:9B:00:CB
X509v3 Authority Key Identifier:
keyid:2C:13:22:02:0E:E4:E5:9C:B5:CD:3D:E7:16:50:C6:2A:FD:4C:02:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LBMiAg7k5Zy1zT3nFlDGKv1MAic.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/c58c8c-5c6e-44e0-82af-e96de3112dea/1/LBMiAg7k5Zy1zT3nFlDGKv1MAic.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/c58c8c-5c6e-44e0-82af-e96de3112dea/1/LBMiAg7k5Zy1zT3nFlDGKv1MAic.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:58:99:7a:3a:6b:57:65:96:23:7e:bd:82:40:3f:2c:c1:8a:
de:d1:28:dc:56:bd:d6:92:cc:76:be:eb:3f:6c:b7:75:6e:9a:
61:37:52:75:08:79:dc:83:c4:e9:15:2e:0b:9c:23:e0:7c:4c:
27:aa:13:e9:31:87:4d:a1:0d:62:2e:b8:2b:91:e8:93:0f:b6:
f5:47:c2:17:04:f8:27:6c:47:84:e7:9a:17:15:e5:c5:46:3f:
70:0e:b8:96:9c:0a:d6:90:8c:1c:95:75:47:9e:ab:ac:c8:12:
8e:05:ce:f7:74:c3:02:73:de:96:98:8f:72:79:72:b0:3a:ae:
19:2a:a4:c4:c6:46:65:25:d9:44:4c:69:e7:33:83:55:73:9c:
bb:4e:ab:9d:78:04:70:08:87:32:e8:4b:1e:8d:16:31:49:69:
8c:ba:d5:83:59:5d:a2:cf:ba:26:af:81:4d:6d:17:40:24:97:
be:9c:45:4e:12:ce:9b:f1:23:ff:f8:c0:0a:fe:18:d1:53:ab:
d2:f6:74:76:b0:25:89:e4:c8:76:19:9c:56:c3:8e:9c:7f:0e:
bf:4e:ce:86:ca:cf:08:15:18:ba:3d:7a:53:62:74:32:13:09:
d7:fd:3d:89:f1:8c:ef:41:23:cb:57:6c:9f:e3:5d:06:d8:03:
3f:1b:75:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:53:26 2026 by rpki-client