Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/b3c41a-492c-45e4-89d6-dcc4c45bf162/1/lsgslDmkFHsuorWXz_xRALqNMnw.mft
File: lsgslDmkFHsuorWXz_xRALqNMnw.mft (raw, json)
Hash identifier: DMmImWBHIlmAwPFRodXI4CFe7cf0z7/JxVkTftyMTOk=
Subject key identifier: 04:8D:22:18:DE:F4:A2:CC:34:CD:64:43:24:6C:E5:81:4E:F5:40:00
Authority key identifier: 96:C8:2C:94:39:A4:14:7B:2E:A2:B5:97:CF:FC:51:00:BA:8D:32:7C
Certificate issuer: /CN=96c82c9439a4147b2ea2b597cffc5100ba8d327c
Certificate serial: 019CAB6B22D72E0E8AD11CDF7BA72C45875D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lsgslDmkFHsuorWXz_xRALqNMnw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/b3c41a-492c-45e4-89d6-dcc4c45bf162/1/lsgslDmkFHsuorWXz_xRALqNMnw.mft
Manifest number: 1406
Signing time: Sun 01 Mar 2026 22:00:51 +0000
Manifest this update: Sun 01 Mar 2026 22:00:51 +0000
Manifest next update: Mon 02 Mar 2026 22:00:51 +0000
Files and hashes: 1: lsgslDmkFHsuorWXz_xRALqNMnw.crl (hash: HEGkyrQdSgHbO8ZgSIA6nJ3Csz8swazUq2/VJWj4wgQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/b3c41a-492c-45e4-89d6-dcc4c45bf162/1/lsgslDmkFHsuorWXz_xRALqNMnw.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/b3c41a-492c-45e4-89d6-dcc4c45bf162/1/lsgslDmkFHsuorWXz_xRALqNMnw.mft
rsync://rpki.ripe.net/repository/DEFAULT/lsgslDmkFHsuorWXz_xRALqNMnw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 22:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:22:d7:2e:0e:8a:d1:1c:df:7b:a7:2c:45:87:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96c82c9439a4147b2ea2b597cffc5100ba8d327c
Validity
Not Before: Mar 1 22:00:51 2026 GMT
Not After : Mar 2 22:00:51 2026 GMT
Subject: CN=048d2218def4a2cc34cd6443246ce5814ef54000
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:97:e6:d0:9f:cb:bd:8b:f0:02:b7:24:56:3f:
83:af:35:53:ba:02:2f:fe:ad:d5:a0:f7:83:2c:7f:
ce:8b:2d:de:7c:31:d7:31:24:25:1d:b2:3b:bd:71:
b6:26:07:0c:cd:7e:d5:54:5a:dd:f6:61:98:44:d8:
0e:a3:49:8d:aa:ea:da:f2:21:36:78:e9:22:63:c2:
b5:28:01:8a:ad:ab:82:aa:ae:47:1c:a9:ae:05:7f:
e1:23:2a:5f:92:92:dd:48:42:a5:f4:33:49:aa:e8:
ba:5d:0d:da:f6:aa:e5:a4:79:e9:e4:f1:34:9e:cc:
68:ba:b2:4f:c8:19:6e:63:d3:40:96:14:dc:5b:71:
7c:cc:55:1c:00:58:99:f9:32:6d:94:b2:f3:2f:43:
cd:41:b9:09:c7:68:f1:cc:78:68:fb:47:96:4d:e7:
1f:21:58:f6:52:c7:d1:84:bd:f5:49:85:27:10:e8:
dd:52:dc:b2:d3:c1:f6:cb:22:4f:9f:bd:48:4d:f8:
36:e2:f2:61:37:0d:60:b2:a6:04:3e:f4:60:38:78:
84:7f:8e:74:f2:64:c4:35:f4:c1:bc:7c:aa:69:a1:
c0:26:f1:eb:98:d4:c9:8b:5f:be:00:83:42:3f:36:
f4:0b:58:59:a3:20:6d:49:fc:a2:c3:a1:7a:e3:7a:
ad:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:8D:22:18:DE:F4:A2:CC:34:CD:64:43:24:6C:E5:81:4E:F5:40:00
X509v3 Authority Key Identifier:
keyid:96:C8:2C:94:39:A4:14:7B:2E:A2:B5:97:CF:FC:51:00:BA:8D:32:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lsgslDmkFHsuorWXz_xRALqNMnw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/b3c41a-492c-45e4-89d6-dcc4c45bf162/1/lsgslDmkFHsuorWXz_xRALqNMnw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/b3c41a-492c-45e4-89d6-dcc4c45bf162/1/lsgslDmkFHsuorWXz_xRALqNMnw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:3a:8d:75:a7:a1:9f:e1:15:70:c6:12:61:47:31:a9:fd:5a:
63:73:c1:3e:be:88:43:a2:38:4b:a3:d4:38:6b:df:00:67:f0:
20:a8:f9:06:5c:50:ca:fd:b3:e4:13:34:2e:02:49:d6:1c:fe:
27:fa:cf:03:4a:ac:99:07:b8:68:0b:14:a7:fc:d4:9a:c4:6b:
19:db:95:e9:d1:0a:f8:0a:7b:1a:06:d8:ac:c2:2f:5c:48:84:
98:7a:b7:e3:ac:a9:e2:69:28:55:cf:dc:af:08:71:5a:38:8d:
f2:ba:b1:6e:1e:db:34:ce:56:b9:b1:56:a0:7b:9b:d0:a7:51:
7f:7f:3a:e5:10:b8:9b:2e:bc:09:5a:4a:2c:28:00:cb:86:68:
c3:d9:be:51:5d:1e:83:13:04:04:a2:1a:6a:e2:bb:08:bc:cc:
4f:e4:cd:cb:e8:2c:92:71:eb:6a:08:4a:1b:bd:5b:11:f0:77:
6e:8a:82:bf:9f:a7:37:48:f7:d6:1f:a0:dc:85:25:8b:97:d9:
66:3f:31:f4:c5:b0:4f:43:bf:8b:63:d9:96:cd:11:e0:ca:ca:
ac:e4:16:07:04:de:8f:cf:05:b7:94:81:39:e3:18:cc:5b:7e:
91:4c:43:7f:a3:6d:ad:95:ef:e2:e5:a4:49:ca:b9:5f:51:50:
00:65:d9:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:20:46 2026 by rpki-client