Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/3feed9-ce5f-4a22-99b9-a4a9cc471599/1/lcGSBnFsXHnTW_FZJNszI6TsGMg.mft
File: lcGSBnFsXHnTW_FZJNszI6TsGMg.mft (raw, json)
Hash identifier: htoqzu4PSuCraymLR+bE8NXWHrFO+2rwgQWI/AQ0z+w=
Subject key identifier: B3:DE:BF:A8:7A:7E:8F:A2:2D:23:50:71:6C:5C:84:1E:F0:9A:0C:59
Authority key identifier: 95:C1:92:06:71:6C:5C:79:D3:5B:F1:59:24:DB:33:23:A4:EC:18:C8
Certificate issuer: /CN=95c19206716c5c79d35bf15924db3323a4ec18c8
Certificate serial: 019CAA2145EB8DF6A0DBC50EB86F04C4675F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lcGSBnFsXHnTW_FZJNszI6TsGMg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/3feed9-ce5f-4a22-99b9-a4a9cc471599/1/lcGSBnFsXHnTW_FZJNszI6TsGMg.mft
Manifest number: 1415
Signing time: Sun 01 Mar 2026 16:00:33 +0000
Manifest this update: Sun 01 Mar 2026 16:00:33 +0000
Manifest next update: Mon 02 Mar 2026 16:00:33 +0000
Files and hashes: 1: lcGSBnFsXHnTW_FZJNszI6TsGMg.crl (hash: +Zhb6AQtaFEVgKPA7Vl46HlzBjhEyI2mtjlJI796CzY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/3feed9-ce5f-4a22-99b9-a4a9cc471599/1/lcGSBnFsXHnTW_FZJNszI6TsGMg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/3feed9-ce5f-4a22-99b9-a4a9cc471599/1/lcGSBnFsXHnTW_FZJNszI6TsGMg.mft
rsync://rpki.ripe.net/repository/DEFAULT/lcGSBnFsXHnTW_FZJNszI6TsGMg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:21:45:eb:8d:f6:a0:db:c5:0e:b8:6f:04:c4:67:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95c19206716c5c79d35bf15924db3323a4ec18c8
Validity
Not Before: Mar 1 16:00:33 2026 GMT
Not After : Mar 2 16:00:33 2026 GMT
Subject: CN=b3debfa87a7e8fa22d2350716c5c841ef09a0c59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:d9:58:3e:b3:b4:cf:0a:01:fb:1b:4d:5f:15:
dd:0d:b2:81:ec:31:14:d5:1c:27:cc:d9:a1:82:7e:
4d:2a:5a:7d:89:e1:22:41:95:42:43:19:1f:76:a6:
79:2a:29:c9:57:0f:d8:b4:c3:2d:4a:05:12:1d:a6:
27:2e:2f:95:d4:93:06:f0:e8:b9:6b:cd:9e:c1:6d:
ee:ff:4f:40:75:40:41:b2:c1:f3:7c:67:fa:7b:4a:
e2:ba:fa:a5:23:47:8e:53:f7:b0:a1:e1:85:06:bf:
35:3c:d0:d4:6f:88:f1:ce:71:47:4d:ab:28:d8:ad:
aa:8d:c3:54:85:f0:54:c1:c9:f4:ff:b2:26:1b:38:
d7:a2:54:3e:f7:e1:3e:e0:02:b2:61:f1:6a:7c:ce:
7a:26:3c:74:48:29:4a:5f:f7:a2:fc:3e:f2:2a:fb:
11:83:9a:00:c0:ca:aa:03:47:ee:ec:6e:a0:7d:e0:
b5:4d:cc:1d:7d:6a:6c:c9:93:e6:1d:3a:e4:ae:c1:
c7:ad:6c:a6:36:8c:0b:0e:19:91:f6:11:0e:52:2f:
e4:a8:95:fa:a3:eb:a1:18:28:83:4f:ee:59:a3:f9:
54:fc:e7:2f:de:e6:fd:5c:bc:34:23:8b:94:74:d7:
9f:c3:05:d8:c7:d4:a9:72:b1:fe:30:a2:bc:07:32:
3e:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:DE:BF:A8:7A:7E:8F:A2:2D:23:50:71:6C:5C:84:1E:F0:9A:0C:59
X509v3 Authority Key Identifier:
keyid:95:C1:92:06:71:6C:5C:79:D3:5B:F1:59:24:DB:33:23:A4:EC:18:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lcGSBnFsXHnTW_FZJNszI6TsGMg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/3feed9-ce5f-4a22-99b9-a4a9cc471599/1/lcGSBnFsXHnTW_FZJNszI6TsGMg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/3feed9-ce5f-4a22-99b9-a4a9cc471599/1/lcGSBnFsXHnTW_FZJNszI6TsGMg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:f3:66:a8:63:4a:0c:b1:a6:d4:7f:3f:00:b2:c2:a4:9f:5b:
e4:3d:47:98:5a:c5:35:5f:16:18:2f:44:b6:db:91:36:ae:c5:
f1:1a:a4:06:c0:b9:25:39:29:5b:14:80:68:ea:5f:1d:63:d3:
3f:fe:54:66:d0:7a:42:b3:8e:17:77:9c:6f:58:95:b7:91:86:
cf:7d:68:57:4b:98:e5:dd:af:ce:7e:91:7d:f1:83:6c:f6:eb:
09:70:67:b9:49:1a:10:e7:56:6e:97:37:32:3b:bf:f1:8f:6f:
99:43:00:96:e9:75:e1:4a:28:4c:c2:dc:4a:5a:c0:04:4f:44:
a7:ce:68:60:6e:7e:3d:f8:e4:3e:79:0a:d4:eb:7c:26:e0:93:
62:8d:9e:ff:07:68:bb:89:43:02:ad:ac:7a:3a:5f:47:2d:16:
ec:4d:fc:a4:2a:a0:9e:2a:8a:34:b0:01:ec:d5:12:2b:ff:7c:
e2:64:0a:2f:34:35:98:5f:36:98:dc:3a:ff:ed:b9:b9:65:94:
a2:f1:19:11:38:74:6c:0c:9c:f3:91:01:fd:13:58:3d:14:de:
28:9f:8f:c4:fb:e6:f6:d1:46:3f:b5:40:37:f9:cd:4c:af:dd:
10:8c:0a:b9:c7:b0:be:94:77:b5:0c:d5:15:cc:e8:56:b8:c8:
11:e8:79:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:43:35 2026 by rpki-client