Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/3feed9-ce5f-4a22-99b9-a4a9cc471599/1/lcGSBnFsXHnTW_FZJNszI6TsGMg.mft
File: lcGSBnFsXHnTW_FZJNszI6TsGMg.mft (raw, json)
Hash identifier: Plv5dK+7/5uLhL4qeKifDkuqyiKntPwIkhycPcQ/9/U=
Subject key identifier: 7B:37:A2:A3:5D:79:FE:0E:C7:72:1F:A6:26:1E:92:08:29:42:F1:07
Authority key identifier: 95:C1:92:06:71:6C:5C:79:D3:5B:F1:59:24:DB:33:23:A4:EC:18:C8
Certificate issuer: /CN=95c19206716c5c79d35bf15924db3323a4ec18c8
Certificate serial: 019D9B8753E4760D3A5070D700243512C790
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lcGSBnFsXHnTW_FZJNszI6TsGMg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/3feed9-ce5f-4a22-99b9-a4a9cc471599/1/lcGSBnFsXHnTW_FZJNszI6TsGMg.mft
Manifest number: 1492
Signing time: Fri 17 Apr 2026 13:00:30 +0000
Manifest this update: Fri 17 Apr 2026 13:00:30 +0000
Manifest next update: Sat 18 Apr 2026 13:00:30 +0000
Files and hashes: 1: lcGSBnFsXHnTW_FZJNszI6TsGMg.crl (hash: v6hsjgw5zpKuE9FCgxKGhYqg9uZFzHMDG2MRPP+XAzg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/3feed9-ce5f-4a22-99b9-a4a9cc471599/1/lcGSBnFsXHnTW_FZJNszI6TsGMg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/3feed9-ce5f-4a22-99b9-a4a9cc471599/1/lcGSBnFsXHnTW_FZJNszI6TsGMg.mft
rsync://rpki.ripe.net/repository/DEFAULT/lcGSBnFsXHnTW_FZJNszI6TsGMg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:87:53:e4:76:0d:3a:50:70:d7:00:24:35:12:c7:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95c19206716c5c79d35bf15924db3323a4ec18c8
Validity
Not Before: Apr 17 13:00:30 2026 GMT
Not After : Apr 18 13:00:30 2026 GMT
Subject: CN=7b37a2a35d79fe0ec7721fa6261e92082942f107
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:7d:c4:44:94:b7:5f:19:1e:04:05:56:ef:3c:
f2:7e:cd:ce:22:79:9e:cb:67:cd:bc:9b:e0:4c:97:
58:23:7f:ad:49:11:96:f9:ee:09:35:0b:ee:67:44:
9c:96:06:07:a0:58:10:db:63:10:24:f8:bf:34:50:
bb:c7:7b:c2:e2:e9:ad:81:08:f2:29:2a:f1:04:cc:
a5:58:d7:9c:1f:a0:dd:72:b7:ce:11:bd:08:60:00:
b7:90:fb:d8:2b:db:2e:d6:5d:e6:3d:86:d1:2b:f7:
48:10:6b:3b:1e:41:10:4a:d5:6e:aa:79:62:a5:16:
aa:0b:63:54:c5:3b:4f:bd:27:d9:a1:9d:30:21:64:
57:7a:7f:c9:d6:5a:d2:b0:f6:07:eb:d7:38:8d:e3:
13:e1:dc:45:88:eb:0a:c0:b8:be:17:76:7b:da:00:
3a:d9:32:09:36:ba:13:0d:5c:12:86:0a:a4:7f:4c:
48:3c:e9:27:4c:46:2d:2f:f0:e7:04:d0:6e:99:f7:
0f:23:95:17:ff:52:36:e3:25:6d:1c:48:a1:eb:89:
15:f8:b1:3c:3e:00:08:d3:0d:db:70:4f:0c:6a:16:
5a:3e:44:02:4f:48:a6:e0:b9:bc:25:e6:bc:3f:3b:
ae:2a:b4:d7:59:ab:23:b4:98:c2:0c:04:a4:60:58:
29:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:37:A2:A3:5D:79:FE:0E:C7:72:1F:A6:26:1E:92:08:29:42:F1:07
X509v3 Authority Key Identifier:
keyid:95:C1:92:06:71:6C:5C:79:D3:5B:F1:59:24:DB:33:23:A4:EC:18:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lcGSBnFsXHnTW_FZJNszI6TsGMg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/3feed9-ce5f-4a22-99b9-a4a9cc471599/1/lcGSBnFsXHnTW_FZJNszI6TsGMg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/3feed9-ce5f-4a22-99b9-a4a9cc471599/1/lcGSBnFsXHnTW_FZJNszI6TsGMg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:06:3e:0b:71:42:4d:68:79:7d:82:66:af:49:7b:96:78:1e:
5c:f5:49:5b:56:e9:a4:ce:bd:f8:39:69:1b:71:4c:44:51:ff:
36:9b:2a:fe:1f:b6:82:5d:c0:c0:68:fc:e8:2e:0c:a2:00:d0:
70:75:96:82:2f:9a:a9:9e:44:a5:0f:db:3c:29:5e:40:f3:ea:
f7:f8:3a:fd:ba:78:0f:ef:bf:4b:62:78:9d:fe:da:b9:91:45:
48:df:e1:39:8f:54:a1:1b:8f:a0:b5:ef:49:71:1c:38:56:ac:
4a:f8:49:f2:73:88:13:a8:43:b1:b4:b2:55:9f:28:fa:3f:0b:
0b:5b:2b:ad:97:93:a0:91:a1:97:ec:55:77:2c:32:b0:c0:ca:
08:17:be:2b:fa:cd:ab:03:81:14:40:ac:6e:4c:8d:5a:94:cf:
cc:51:95:bd:f5:28:61:6a:4c:9a:ab:c4:e2:ba:87:5f:e9:7c:
9d:79:0f:75:97:88:71:69:96:79:ff:f8:5a:28:53:2e:31:63:
e3:90:f0:28:e3:63:93:a6:de:26:16:b1:77:28:6f:3e:90:2d:
91:8f:87:1b:bf:6a:bc:26:c1:6a:3f:7c:82:79:13:1b:80:4c:
12:4b:24:96:d6:7e:66:ab:0b:a6:3a:3c:e2:d5:cc:e8:cf:db:
ac:db:49:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:14:19 2026 by rpki-client