Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/08e404-f426-42e2-9594-da99e34cc30b/1/lB47mlO74C4stDl6bRoB2Aym5Bg.mft
File: lB47mlO74C4stDl6bRoB2Aym5Bg.mft (raw, json)
Hash identifier: YO4DbnimuadzujnDPLxGaRbzJ0gU7Ydz+EwwXHhrruI=
Subject key identifier: A2:C1:F3:9E:3E:6D:38:F3:35:D9:15:53:82:C2:67:85:20:00:5B:44
Authority key identifier: 94:1E:3B:9A:53:BB:E0:2E:2C:B4:39:7A:6D:1A:01:D8:0C:A6:E4:18
Certificate issuer: /CN=941e3b9a53bbe02e2cb4397a6d1a01d80ca6e418
Certificate serial: 019CABD9BCDA492865924A4E030DD1185AC0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lB47mlO74C4stDl6bRoB2Aym5Bg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/08e404-f426-42e2-9594-da99e34cc30b/1/lB47mlO74C4stDl6bRoB2Aym5Bg.mft
Manifest number: 1844
Signing time: Mon 02 Mar 2026 00:01:39 +0000
Manifest this update: Mon 02 Mar 2026 00:01:39 +0000
Manifest next update: Tue 03 Mar 2026 00:01:39 +0000
Files and hashes: 1: lB47mlO74C4stDl6bRoB2Aym5Bg.crl (hash: n9NWnuaLFaygz8TEDBUoN5diUT+kA9jSJJRNsli/U38=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/08e404-f426-42e2-9594-da99e34cc30b/1/lB47mlO74C4stDl6bRoB2Aym5Bg.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/08e404-f426-42e2-9594-da99e34cc30b/1/lB47mlO74C4stDl6bRoB2Aym5Bg.mft
rsync://rpki.ripe.net/repository/DEFAULT/lB47mlO74C4stDl6bRoB2Aym5Bg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:bc:da:49:28:65:92:4a:4e:03:0d:d1:18:5a:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=941e3b9a53bbe02e2cb4397a6d1a01d80ca6e418
Validity
Not Before: Mar 2 00:01:39 2026 GMT
Not After : Mar 3 00:01:39 2026 GMT
Subject: CN=a2c1f39e3e6d38f335d9155382c2678520005b44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:82:7e:1f:2b:0b:42:30:ae:69:3e:21:ce:fc:
8e:58:52:cb:6a:aa:3a:07:b1:2e:03:cd:da:4c:3b:
53:1b:2d:8f:01:41:34:71:6e:eb:8d:b9:18:2d:e4:
87:78:06:91:a3:75:f0:09:6b:22:65:4c:e8:61:51:
6e:bc:bc:39:9e:83:f2:46:bd:95:e1:83:b0:01:41:
46:28:86:47:6a:31:6b:9c:4c:51:8c:8d:51:6d:d5:
db:6c:fb:19:87:b7:a2:c0:90:64:09:85:f5:b6:c1:
ab:19:1d:18:13:63:32:59:bf:68:1e:54:b7:7f:c3:
ea:74:8e:97:de:bf:b6:5e:d6:f5:75:59:74:bc:eb:
5e:80:18:05:3b:a4:ab:af:de:94:fb:60:cb:76:7c:
fe:c0:e2:f4:cb:ff:78:a4:43:b2:6b:56:37:22:62:
66:0d:bc:f0:6e:30:0c:05:50:7d:37:61:63:fb:67:
fa:29:c6:c3:58:62:ad:95:cf:bc:b9:ad:a5:6a:5c:
e5:e0:73:60:65:a4:ee:11:ed:11:dd:de:a5:fc:e1:
56:1c:fc:bf:7e:8f:d5:75:5d:6e:5e:ac:b1:a0:d0:
19:31:11:7e:0d:4c:36:ca:f5:19:a8:f0:a9:30:da:
b9:b3:cf:5f:9e:10:bd:5a:7b:c5:f1:26:ea:b4:fd:
d6:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:C1:F3:9E:3E:6D:38:F3:35:D9:15:53:82:C2:67:85:20:00:5B:44
X509v3 Authority Key Identifier:
keyid:94:1E:3B:9A:53:BB:E0:2E:2C:B4:39:7A:6D:1A:01:D8:0C:A6:E4:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lB47mlO74C4stDl6bRoB2Aym5Bg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/08e404-f426-42e2-9594-da99e34cc30b/1/lB47mlO74C4stDl6bRoB2Aym5Bg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/08e404-f426-42e2-9594-da99e34cc30b/1/lB47mlO74C4stDl6bRoB2Aym5Bg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:d1:d5:f1:97:62:17:67:93:34:2c:58:b3:78:14:73:69:e4:
e9:3a:8f:cb:6e:0a:18:08:7d:a4:45:23:4e:28:12:98:6e:44:
74:3a:cb:f7:a4:7b:d5:0e:74:58:fd:a0:f6:15:b3:5d:7f:79:
43:e1:2a:83:5e:57:a3:27:58:fe:18:a3:bb:18:a5:48:9d:bc:
49:32:34:d9:06:90:e8:7b:d5:d4:85:f4:71:5b:3b:d1:d4:69:
99:84:e9:2e:d5:9c:97:c6:fb:66:b4:ce:44:7d:3e:d9:9d:7b:
e9:80:94:bb:b1:a7:12:fa:ef:23:04:a4:6a:83:09:42:e4:fd:
53:f2:d5:e8:51:89:57:cb:f6:a5:dd:7e:f9:b2:2d:24:36:2c:
70:03:6e:2d:20:eb:e3:0b:06:27:65:d7:66:9f:fb:b7:72:02:
26:3e:14:fd:d9:40:7c:ef:ae:3e:de:4f:52:4e:9c:52:76:37:
4b:17:4e:e5:ea:42:0c:fd:26:05:c8:c9:6a:e9:70:98:6b:7d:
93:ef:4f:60:59:9c:02:cb:c8:ff:26:1a:9f:2d:72:71:83:c3:
fe:43:45:0f:a5:f9:34:af:17:21:46:67:1d:7f:9c:22:74:a6:
ea:5c:d3:d3:dc:f2:ef:02:79:07:84:60:d9:dd:da:a0:fd:a1:
10:f8:4c:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:27:48 2026 by rpki-client