Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/0b390f-d6d8-44c9-afcd-d49d1f5739ed/1/lN4Clz3AXsPGu_ble31qTO74GF4.mft
File: lN4Clz3AXsPGu_ble31qTO74GF4.mft (raw, json)
Hash identifier: qzHEHX4choT5naj+6Gi//tWOmIwtCha1lKyrzKAr8aE=
Subject key identifier: AD:E5:41:00:CC:D2:47:38:61:F0:FE:6D:BF:6A:97:6E:51:59:A2:D7
Authority key identifier: 94:DE:02:97:3D:C0:5E:C3:C6:BB:F6:E5:7B:7D:6A:4C:EE:F8:18:5E
Certificate issuer: /CN=94de02973dc05ec3c6bbf6e57b7d6a4ceef8185e
Certificate serial: 019CABD9C1866FDD7BFAFD66468F73317C45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lN4Clz3AXsPGu_ble31qTO74GF4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/0b390f-d6d8-44c9-afcd-d49d1f5739ed/1/lN4Clz3AXsPGu_ble31qTO74GF4.mft
Manifest number: 05AB
Signing time: Mon 02 Mar 2026 00:01:40 +0000
Manifest this update: Mon 02 Mar 2026 00:01:40 +0000
Manifest next update: Tue 03 Mar 2026 00:01:40 +0000
Files and hashes: 1: lN4Clz3AXsPGu_ble31qTO74GF4.crl (hash: 5xEoPWs+zOC/a+Tc7TzTmY1OTfdBRnE9CzGRbew8Xfw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/0b390f-d6d8-44c9-afcd-d49d1f5739ed/1/lN4Clz3AXsPGu_ble31qTO74GF4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/0b390f-d6d8-44c9-afcd-d49d1f5739ed/1/lN4Clz3AXsPGu_ble31qTO74GF4.mft
rsync://rpki.ripe.net/repository/DEFAULT/lN4Clz3AXsPGu_ble31qTO74GF4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:c1:86:6f:dd:7b:fa:fd:66:46:8f:73:31:7c:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94de02973dc05ec3c6bbf6e57b7d6a4ceef8185e
Validity
Not Before: Mar 2 00:01:40 2026 GMT
Not After : Mar 3 00:01:40 2026 GMT
Subject: CN=ade54100ccd2473861f0fe6dbf6a976e5159a2d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:ef:0e:23:86:22:a9:73:ff:48:42:f8:03:75:
f3:aa:af:8b:55:c1:10:c5:4d:6e:48:94:7f:46:d2:
de:62:d3:19:2a:e0:a4:69:d8:be:b0:c3:a3:a3:b7:
57:81:f3:6b:96:d0:d2:02:bf:bb:7a:52:0a:5b:15:
73:b4:a5:3c:d5:12:ce:79:29:cd:93:e8:8c:2c:b1:
59:5f:b7:45:9b:67:52:24:35:d9:69:ce:a5:a9:80:
ae:db:c5:a5:c5:a9:ff:e8:5c:6d:7c:7c:76:a3:99:
43:07:38:5f:8a:0f:3f:22:c1:dd:6d:8e:37:f2:e3:
2e:cd:88:c0:dd:11:ce:aa:97:df:84:17:5a:71:f0:
e4:1a:9a:ca:a3:b2:83:33:b8:f2:a5:6d:52:a3:39:
90:09:c3:03:62:13:9d:93:d1:c1:c6:71:bf:37:c9:
5a:20:f9:c5:e8:a6:98:b5:3f:e3:dc:bc:15:4f:36:
b5:51:2e:86:a4:4e:2d:28:88:2f:ec:5a:3d:c4:0e:
3b:04:21:61:8a:8f:83:10:71:47:c3:9e:7e:5b:25:
3b:aa:8e:b1:2e:eb:91:9b:7c:b6:2d:18:47:e4:f4:
be:d0:ef:9d:07:0b:58:9a:6a:43:fc:e5:f8:03:ee:
37:96:6c:63:4a:89:05:f4:27:47:52:0e:23:ae:0a:
2c:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:E5:41:00:CC:D2:47:38:61:F0:FE:6D:BF:6A:97:6E:51:59:A2:D7
X509v3 Authority Key Identifier:
keyid:94:DE:02:97:3D:C0:5E:C3:C6:BB:F6:E5:7B:7D:6A:4C:EE:F8:18:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lN4Clz3AXsPGu_ble31qTO74GF4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/0b390f-d6d8-44c9-afcd-d49d1f5739ed/1/lN4Clz3AXsPGu_ble31qTO74GF4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/0b390f-d6d8-44c9-afcd-d49d1f5739ed/1/lN4Clz3AXsPGu_ble31qTO74GF4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:0f:09:1e:7d:23:34:7a:ce:ec:97:3c:db:2b:2a:51:7d:57:
2a:8d:51:de:ab:59:0f:bf:df:de:41:7a:2d:1a:91:65:0b:52:
b8:28:47:51:cd:51:2b:eb:0e:b4:57:3e:48:7d:3b:84:fa:8c:
64:f7:e6:67:d7:28:ec:45:2a:3b:48:73:41:b7:39:0a:b1:2b:
00:3d:7f:6b:c3:b0:a6:13:49:4f:05:92:72:6e:dd:3b:44:9b:
c6:17:36:5c:c1:22:44:96:80:3b:d7:cc:20:ec:87:26:3b:92:
c3:76:9c:bd:d3:ca:01:5f:1c:af:46:ce:63:2f:bf:40:49:53:
42:e0:5e:86:3c:45:5a:3d:84:d9:98:8c:47:ea:c1:26:35:d4:
6d:23:31:aa:5e:bf:45:58:5f:57:4d:93:91:f0:66:84:a4:a8:
4d:bf:d3:03:73:28:21:13:6b:08:31:84:fd:3d:57:26:df:d8:
0b:6c:39:17:61:ea:56:70:6c:68:01:e9:8a:a6:af:b5:57:8c:
02:f6:5b:fd:5b:a9:d1:3d:dd:ff:8b:51:e9:9c:df:5e:e6:46:
44:5b:a0:0f:71:41:0b:81:bf:ff:f0:ec:b2:12:07:a7:cc:24:
3e:77:6a:f2:ba:f3:07:c9:20:b4:1a:5e:07:96:f1:ec:4a:8b:
99:c3:96:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:41:40 2026 by rpki-client