Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/d6c18a-55ef-4118-970c-60d1ed80c7cf/1/lEcuhZlXNV2l3dE0ltcNcHc0kfk.mft
File: lEcuhZlXNV2l3dE0ltcNcHc0kfk.mft (raw, json)
Hash identifier: Q7yHLKKN40E5ixr06ifB0vW2YMHlCQtULw+RKmTzowY=
Subject key identifier: BB:42:5C:AE:EB:64:3F:92:A7:CE:A0:28:30:0B:65:95:F1:2D:6D:09
Authority key identifier: 94:47:2E:85:99:57:35:5D:A5:DD:D1:34:96:D7:0D:70:77:34:91:F9
Certificate issuer: /CN=94472e859957355da5ddd13496d70d70773491f9
Certificate serial: 019CABD94213A7001D0603AF8BFDC33730C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lEcuhZlXNV2l3dE0ltcNcHc0kfk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/d6c18a-55ef-4118-970c-60d1ed80c7cf/1/lEcuhZlXNV2l3dE0ltcNcHc0kfk.mft
Manifest number: 1169
Signing time: Mon 02 Mar 2026 00:01:07 +0000
Manifest this update: Mon 02 Mar 2026 00:01:07 +0000
Manifest next update: Tue 03 Mar 2026 00:01:07 +0000
Files and hashes: 1: lEcuhZlXNV2l3dE0ltcNcHc0kfk.crl (hash: q1mtiYHZ7YlYRqoTgEb9SBPZZLRz1GgWu2Cv+3SjFio=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/d6c18a-55ef-4118-970c-60d1ed80c7cf/1/lEcuhZlXNV2l3dE0ltcNcHc0kfk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/d6c18a-55ef-4118-970c-60d1ed80c7cf/1/lEcuhZlXNV2l3dE0ltcNcHc0kfk.mft
rsync://rpki.ripe.net/repository/DEFAULT/lEcuhZlXNV2l3dE0ltcNcHc0kfk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:42:13:a7:00:1d:06:03:af:8b:fd:c3:37:30:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94472e859957355da5ddd13496d70d70773491f9
Validity
Not Before: Mar 2 00:01:07 2026 GMT
Not After : Mar 3 00:01:07 2026 GMT
Subject: CN=bb425caeeb643f92a7cea028300b6595f12d6d09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:30:5b:51:ae:75:84:bd:12:0f:ec:b0:c0:08:
14:58:f0:7d:1b:3f:7d:03:e1:ae:fd:d4:19:15:bd:
29:24:6d:ad:6f:50:00:8c:54:2a:d0:c3:1a:38:12:
a9:0c:05:e6:d8:5c:9b:39:69:b4:64:c9:38:ba:cd:
26:a7:48:9b:38:5e:30:61:bd:70:17:c6:38:69:8f:
f6:c1:2b:15:e8:4a:ac:d0:25:4e:a6:cc:4e:82:7a:
cb:0f:4c:bb:39:22:c0:02:07:89:c4:75:e3:d2:2a:
04:e5:10:b5:1c:4d:cd:a3:4e:97:0d:b9:c9:cb:7e:
1f:3f:57:6d:5d:f9:bd:37:29:da:dc:81:31:15:66:
7d:d6:5c:47:a5:49:05:e3:69:e0:a4:33:11:83:49:
d0:d0:0d:21:da:b6:4f:d2:17:27:f1:f1:2f:b5:b6:
cf:f8:eb:53:c0:1c:19:a7:40:64:d6:73:4d:b8:23:
39:2d:5e:4d:cb:fe:aa:65:0a:dd:8b:25:3d:29:e4:
25:75:e0:f4:4d:b7:29:48:f8:e5:a1:dc:b3:ec:13:
67:28:de:33:e0:fa:3a:8b:69:e7:5c:ad:21:f9:46:
5b:1f:60:c2:49:97:e6:9a:d8:be:09:4e:d4:74:bb:
8b:26:eb:b6:7b:48:bf:82:43:a1:e7:a8:7e:b0:93:
b4:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:42:5C:AE:EB:64:3F:92:A7:CE:A0:28:30:0B:65:95:F1:2D:6D:09
X509v3 Authority Key Identifier:
keyid:94:47:2E:85:99:57:35:5D:A5:DD:D1:34:96:D7:0D:70:77:34:91:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lEcuhZlXNV2l3dE0ltcNcHc0kfk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/d6c18a-55ef-4118-970c-60d1ed80c7cf/1/lEcuhZlXNV2l3dE0ltcNcHc0kfk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/d6c18a-55ef-4118-970c-60d1ed80c7cf/1/lEcuhZlXNV2l3dE0ltcNcHc0kfk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d4:61:c6:82:c5:25:c5:32:12:64:a5:05:ab:91:3c:8f:76:a3:
a9:1b:5e:17:f4:fc:a6:d8:69:39:f1:ae:2b:6d:72:ae:af:2c:
71:7c:18:9e:83:8e:f2:ec:a3:55:5e:21:d4:ba:bc:e6:39:b7:
cc:ae:84:be:0e:a6:1b:8a:8d:79:08:ff:48:da:f1:c1:19:ba:
bd:41:58:4a:20:cb:e6:9c:2a:08:d3:83:8a:91:63:e1:e4:16:
a4:67:de:5e:ce:3b:c4:a9:1f:20:62:cf:39:2a:67:62:22:96:
47:ce:d0:79:b4:2b:5c:70:ca:8c:93:f5:86:9d:1b:f6:0c:08:
1e:03:3e:3b:50:b4:7a:7c:d8:31:72:96:96:d1:17:51:e7:f6:
86:aa:d1:bf:86:9b:c8:7d:78:3c:ad:4b:78:43:16:1e:6e:48:
96:39:2a:db:f0:5c:02:af:24:ce:18:f3:b4:d8:d0:43:58:24:
70:ac:24:1a:05:12:f2:fc:45:25:1b:d6:5c:3b:75:3b:61:c4:
26:27:8a:a2:06:5e:99:6c:8f:41:35:42:98:a7:32:51:14:b7:
88:ca:5b:c4:5d:28:f1:8d:12:9b:36:2a:a8:69:18:db:6f:b4:
c2:45:e1:f1:32:bc:db:8f:8d:8d:10:37:2d:92:82:97:f5:ae:
72:36:85:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:06:25 2026 by rpki-client