Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/0add7c-a28c-4ae8-8885-01ce06d315cd/1/LKzIXJmo4dt9HFImfC3b08OeGLI.mft
File: LKzIXJmo4dt9HFImfC3b08OeGLI.mft (raw, json)
Hash identifier: 4k/QjnHKogNjuZbZBbQS8Lg4z2FbG1Pqxd2ZzyXnDbw=
Subject key identifier: D0:BF:C1:5A:4C:9C:AA:CC:C8:46:51:9D:EB:72:49:92:25:9F:A0:2B
Authority key identifier: 2C:AC:C8:5C:99:A8:E1:DB:7D:1C:52:26:7C:2D:DB:D3:C3:9E:18:B2
Certificate issuer: /CN=2cacc85c99a8e1db7d1c52267c2ddbd3c39e18b2
Certificate serial: 019CAF489D6BDE950585C49A6A497B6525FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LKzIXJmo4dt9HFImfC3b08OeGLI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/0add7c-a28c-4ae8-8885-01ce06d315cd/1/LKzIXJmo4dt9HFImfC3b08OeGLI.mft
Manifest number: 0F5F
Signing time: Mon 02 Mar 2026 16:01:37 +0000
Manifest this update: Mon 02 Mar 2026 16:01:37 +0000
Manifest next update: Tue 03 Mar 2026 16:01:37 +0000
Files and hashes: 1: LKzIXJmo4dt9HFImfC3b08OeGLI.crl (hash: pjtqYcDok/2MYOSw5NU1m5jfdraPIRSzEmWn4ENlNcI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/0add7c-a28c-4ae8-8885-01ce06d315cd/1/LKzIXJmo4dt9HFImfC3b08OeGLI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/0add7c-a28c-4ae8-8885-01ce06d315cd/1/LKzIXJmo4dt9HFImfC3b08OeGLI.mft
rsync://rpki.ripe.net/repository/DEFAULT/LKzIXJmo4dt9HFImfC3b08OeGLI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 15:05:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:af:48:9d:6b:de:95:05:85:c4:9a:6a:49:7b:65:25:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2cacc85c99a8e1db7d1c52267c2ddbd3c39e18b2
Validity
Not Before: Mar 2 16:01:37 2026 GMT
Not After : Mar 3 16:01:37 2026 GMT
Subject: CN=d0bfc15a4c9caaccc846519deb724992259fa02b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:39:c5:23:c3:40:ff:96:1f:a1:ef:68:14:3d:
19:9b:fc:71:77:07:db:66:f1:8f:46:9b:70:a6:69:
f7:39:03:83:5f:37:0d:76:91:c5:d3:66:7a:0a:a8:
76:6c:42:58:ff:ae:2d:cb:a4:ae:7d:6f:69:cf:0a:
8f:ed:37:40:12:e1:51:5e:e3:cd:23:52:a6:b6:72:
92:59:3d:ee:47:26:f2:47:75:35:fd:fe:02:f7:60:
5c:5b:f4:73:3e:f1:3a:e9:23:b6:f2:1b:28:75:19:
21:cb:cf:a8:a1:f9:25:3e:d1:2d:ef:09:92:fd:80:
6b:7b:d0:40:6e:85:b0:a6:c9:05:99:9b:49:ab:c6:
d5:d2:2c:b5:5e:0c:be:0e:a7:d8:d8:0e:33:61:81:
7d:d2:cd:d6:1e:7e:6a:cd:49:77:0e:cd:c5:1a:42:
2a:e7:df:dc:34:fb:36:23:a3:55:70:9c:17:96:56:
7b:f0:d5:b9:a4:cc:f9:b1:89:54:da:61:5b:4c:6e:
a6:2c:d7:00:04:fb:ae:04:45:e0:e0:cc:c6:bb:f5:
b5:b4:99:33:a0:da:88:f0:2a:03:8b:3f:2e:f2:1c:
ef:97:c7:35:62:f4:ba:cb:84:c6:5d:78:b9:36:3f:
5b:39:22:7c:2f:80:32:b4:85:a6:12:03:76:f3:88:
bd:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:BF:C1:5A:4C:9C:AA:CC:C8:46:51:9D:EB:72:49:92:25:9F:A0:2B
X509v3 Authority Key Identifier:
keyid:2C:AC:C8:5C:99:A8:E1:DB:7D:1C:52:26:7C:2D:DB:D3:C3:9E:18:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LKzIXJmo4dt9HFImfC3b08OeGLI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/0add7c-a28c-4ae8-8885-01ce06d315cd/1/LKzIXJmo4dt9HFImfC3b08OeGLI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/0add7c-a28c-4ae8-8885-01ce06d315cd/1/LKzIXJmo4dt9HFImfC3b08OeGLI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c4:fd:fc:86:18:ff:12:93:e7:3c:ba:b0:88:48:34:25:92:67:
24:69:7b:4a:6d:c6:9f:dc:c0:01:80:1d:0f:42:a1:ed:30:37:
4a:d5:45:88:7d:07:54:d5:96:84:81:b7:8a:df:7d:0a:89:a6:
45:51:87:ae:75:db:46:3a:57:12:6a:65:dd:1a:7f:f3:79:e5:
37:36:1e:12:1c:3d:7e:00:71:b0:20:3e:ff:ca:81:48:98:6f:
e8:62:f4:53:8f:89:a2:b2:e3:65:99:ba:ba:5c:08:a2:0d:a2:
12:1f:c6:00:ad:bd:f7:e0:38:91:42:f0:07:68:07:73:d7:73:
a2:63:4d:da:66:3e:a5:06:a8:0f:17:39:b9:65:78:55:eb:31:
7d:ed:9f:33:51:9d:0c:db:20:58:d7:e2:bd:1a:a7:33:79:54:
b1:db:8c:d5:d8:c4:9a:c0:ff:8d:27:eb:98:eb:24:0f:ac:82:
a3:9a:91:6b:de:97:79:5a:c9:fe:f8:dd:3f:5c:c3:6d:0c:b3:
ef:1d:30:27:b0:cb:96:63:00:37:33:b6:76:97:82:cd:a7:f2:
1c:b3:f6:c5:9e:7d:07:8f:f6:da:91:48:ee:58:7a:1f:ac:8b:
cc:f8:36:6b:9b:e8:33:8c:3f:f1:36:f5:f8:49:ec:ff:56:be:
ef:de:1d:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 20:56:48 2026 by rpki-client