
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/c58c8c-5c6e-44e0-82af-e96de3112dea/1/LBMiAg7k5Zy1zT3nFlDGKv1MAic.mft
File: LBMiAg7k5Zy1zT3nFlDGKv1MAic.mft (raw, json)
Hash identifier: sfU42F3sLKKLGJq1UJPT2hQ5/EpZXEl1N3uN7VcfOR0=
Subject key identifier: 50:11:30:0F:32:B5:B1:C2:CF:51:3D:29:76:3E:10:2E:30:F1:81:D2
Authority key identifier: 2C:13:22:02:0E:E4:E5:9C:B5:CD:3D:E7:16:50:C6:2A:FD:4C:02:27
Certificate issuer: /CN=2c1322020ee4e59cb5cd3de71650c62afd4c0227
Certificate serial: 019CAB6BE3D0DB67320A5137E5DD31EB35E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LBMiAg7k5Zy1zT3nFlDGKv1MAic.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/c58c8c-5c6e-44e0-82af-e96de3112dea/1/LBMiAg7k5Zy1zT3nFlDGKv1MAic.mft
Manifest number: 0B5B
Signing time: Sun 01 Mar 2026 22:01:40 +0000
Manifest this update: Sun 01 Mar 2026 22:01:40 +0000
Manifest next update: Mon 02 Mar 2026 22:01:40 +0000
Files and hashes: 1: LBMiAg7k5Zy1zT3nFlDGKv1MAic.crl (hash: fDo1GglXCDBpX7q/Z59dlUgiED6VUvHllPrzuUvtMck=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/c58c8c-5c6e-44e0-82af-e96de3112dea/1/LBMiAg7k5Zy1zT3nFlDGKv1MAic.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/c58c8c-5c6e-44e0-82af-e96de3112dea/1/LBMiAg7k5Zy1zT3nFlDGKv1MAic.mft
rsync://rpki.ripe.net/repository/DEFAULT/LBMiAg7k5Zy1zT3nFlDGKv1MAic.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 22:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:e3:d0:db:67:32:0a:51:37:e5:dd:31:eb:35:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c1322020ee4e59cb5cd3de71650c62afd4c0227
Validity
Not Before: Mar 1 22:01:40 2026 GMT
Not After : Mar 2 22:01:40 2026 GMT
Subject: CN=5011300f32b5b1c2cf513d29763e102e30f181d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:b7:c6:a4:f8:6e:2e:6c:de:31:a9:30:50:f6:
87:9c:c7:fd:6b:bf:4f:81:04:18:32:7b:16:0a:40:
7f:29:f7:91:7c:f6:06:7c:b4:45:3f:8d:65:49:a6:
da:63:22:b7:2f:e2:05:31:5d:c9:16:8a:c8:61:df:
a9:ed:2f:00:fb:3a:fa:a4:bc:09:14:3b:11:1b:c5:
42:b9:2e:68:17:ec:28:4c:79:64:e1:ea:2a:23:10:
00:96:9e:7b:3c:c4:e3:00:20:5d:20:21:c0:d4:14:
f5:0f:10:a3:09:2f:d1:0a:88:03:d8:1b:79:50:8e:
b2:f1:58:98:56:9a:dd:bd:6e:d9:53:10:6d:4d:ec:
be:64:be:54:f7:5f:4c:01:fc:17:02:43:c7:57:68:
a0:e2:56:74:32:3d:b6:66:01:b4:9b:5a:9e:f8:aa:
45:be:38:d0:4b:7b:33:06:d2:33:a0:5b:7d:0f:5b:
fa:d6:7d:d0:45:c6:de:b5:c6:ea:c6:43:be:1c:e9:
af:9e:1b:56:f7:c2:2e:25:be:c6:85:39:89:2d:ed:
1d:49:f5:15:bf:ea:ef:ac:fc:10:cd:d0:96:31:0a:
36:80:1f:2b:bb:22:8c:74:19:d9:dd:da:17:48:d8:
5e:8f:6f:3c:15:86:bf:0e:53:51:95:ed:a0:ed:22:
db:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:11:30:0F:32:B5:B1:C2:CF:51:3D:29:76:3E:10:2E:30:F1:81:D2
X509v3 Authority Key Identifier:
keyid:2C:13:22:02:0E:E4:E5:9C:B5:CD:3D:E7:16:50:C6:2A:FD:4C:02:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LBMiAg7k5Zy1zT3nFlDGKv1MAic.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/c58c8c-5c6e-44e0-82af-e96de3112dea/1/LBMiAg7k5Zy1zT3nFlDGKv1MAic.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/c58c8c-5c6e-44e0-82af-e96de3112dea/1/LBMiAg7k5Zy1zT3nFlDGKv1MAic.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:42:da:a7:c6:15:d6:b0:0c:49:6b:b7:70:71:58:b2:f3:c3:
57:78:d7:96:2b:07:98:e2:ac:56:d0:54:5b:0a:4f:5b:3d:d5:
9d:6e:06:ca:37:ae:f4:fe:2d:2c:a4:64:af:3a:86:d2:e2:d1:
be:83:31:fd:08:8c:de:0d:1e:f9:59:06:1c:94:bc:bf:fe:c1:
2a:41:4d:ef:fe:89:29:14:f9:fd:1a:ee:13:7d:7a:eb:4f:13:
c6:62:f8:06:5d:10:95:94:b7:1c:4a:b1:1c:7b:72:52:1b:2e:
61:dd:bf:d7:f5:69:19:70:96:f7:36:7c:14:05:66:d5:c9:2f:
98:95:ef:e0:d6:42:44:13:7a:eb:8c:d3:4b:c7:a6:17:f5:bd:
03:42:82:53:03:e1:4d:ee:2a:2e:f3:7d:2d:e7:b8:54:02:4d:
b0:75:eb:ad:c8:24:43:9e:db:d9:42:1d:a7:a1:58:97:27:66:
de:46:1a:65:22:39:0f:f8:c3:09:5f:08:a3:af:0f:fd:dc:ac:
0d:be:92:75:01:50:3e:a7:50:38:b5:b9:2c:18:60:fe:93:d2:
f8:10:09:25:2e:ef:d3:8a:19:da:9a:0c:92:bc:ee:b7:75:11:
ff:7b:6b:54:75:e6:30:da:87:45:6a:2e:b2:76:7c:23:13:53:
ed:16:73:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:38:50 2026 by rpki-client