Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/cab198-3e84-4b01-bfba-82b9e5fe9b06/1/lPNHF_8y_ix2RK610O6iMBYX8SQ.mft
File: lPNHF_8y_ix2RK610O6iMBYX8SQ.mft (raw, json)
Hash identifier: KgxMReWeEXuWFOTLN4WWQLQEs81cIYQtFgkzbAiIS2Q=
Subject key identifier: 81:2D:86:8B:A4:ED:E9:94:AB:A4:7D:93:94:FE:33:C2:A6:31:9F:4F
Authority key identifier: 94:F3:47:17:FF:32:FE:2C:76:44:AE:B5:D0:EE:A2:30:16:17:F1:24
Certificate issuer: /CN=94f34717ff32fe2c7644aeb5d0eea2301617f124
Certificate serial: 019CAC7DF15030EA7327DFED7C03DE75C3F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lPNHF_8y_ix2RK610O6iMBYX8SQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/cab198-3e84-4b01-bfba-82b9e5fe9b06/1/lPNHF_8y_ix2RK610O6iMBYX8SQ.mft
Manifest number: 07C8
Signing time: Mon 02 Mar 2026 03:01:00 +0000
Manifest this update: Mon 02 Mar 2026 03:01:00 +0000
Manifest next update: Tue 03 Mar 2026 03:01:00 +0000
Files and hashes: 1: lPNHF_8y_ix2RK610O6iMBYX8SQ.crl (hash: doOOzLmn4SF6XT2GFVPKs79kGDxl4sO/16HpTow84gg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/cab198-3e84-4b01-bfba-82b9e5fe9b06/1/lPNHF_8y_ix2RK610O6iMBYX8SQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/cab198-3e84-4b01-bfba-82b9e5fe9b06/1/lPNHF_8y_ix2RK610O6iMBYX8SQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/lPNHF_8y_ix2RK610O6iMBYX8SQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 03:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:7d:f1:50:30:ea:73:27:df:ed:7c:03:de:75:c3:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94f34717ff32fe2c7644aeb5d0eea2301617f124
Validity
Not Before: Mar 2 03:01:00 2026 GMT
Not After : Mar 3 03:01:00 2026 GMT
Subject: CN=812d868ba4ede994aba47d9394fe33c2a6319f4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:ba:15:a7:9a:36:82:e4:d6:c5:00:8e:fc:de:
39:c6:7a:69:41:de:0e:57:a4:9c:f7:4c:e7:7f:a0:
1b:49:09:16:9a:38:d2:96:44:ad:11:05:e9:f7:fd:
ea:97:ca:07:b3:c1:09:e5:dc:02:93:a2:63:4e:e7:
b1:0f:c6:ad:c6:54:ca:38:c9:59:3a:66:a6:9e:ff:
26:96:50:41:c2:15:dc:07:65:01:82:30:9a:81:b7:
26:43:7f:22:e8:f4:81:ab:77:4a:61:42:23:f1:57:
38:a6:a1:0c:23:ec:00:fe:12:b2:9e:3c:e6:0c:a5:
7b:59:3c:c2:a5:fa:97:87:29:2c:38:ac:ca:6a:65:
95:9c:51:cd:1c:45:3c:cb:3b:92:c4:95:6b:e3:12:
6e:07:b1:87:73:65:76:3b:9d:f9:77:d8:09:ea:01:
ce:a4:ed:ef:c7:06:bc:5d:1d:c3:a0:98:ae:0f:1d:
06:3b:60:15:84:ff:df:76:f4:c8:3d:2c:cc:d8:bc:
5e:74:82:64:d8:a3:0c:2e:fb:ba:88:fa:9d:2d:26:
ad:1c:6d:bb:5f:b8:dd:2d:40:d6:e4:00:4e:11:d3:
52:35:de:63:aa:e3:11:36:a1:a5:15:5f:27:c8:36:
e3:2d:a9:c5:f7:a6:44:4c:ed:a6:68:9b:e9:96:f5:
50:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:2D:86:8B:A4:ED:E9:94:AB:A4:7D:93:94:FE:33:C2:A6:31:9F:4F
X509v3 Authority Key Identifier:
keyid:94:F3:47:17:FF:32:FE:2C:76:44:AE:B5:D0:EE:A2:30:16:17:F1:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lPNHF_8y_ix2RK610O6iMBYX8SQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/cab198-3e84-4b01-bfba-82b9e5fe9b06/1/lPNHF_8y_ix2RK610O6iMBYX8SQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/cab198-3e84-4b01-bfba-82b9e5fe9b06/1/lPNHF_8y_ix2RK610O6iMBYX8SQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:c2:2e:3f:8a:45:99:8e:08:65:92:57:67:f7:4a:a3:e9:05:
b7:44:12:ab:90:d1:4f:bb:61:d5:39:55:d6:60:2f:2b:0e:28:
91:4a:f5:a9:f0:9f:58:20:71:e9:18:72:60:3d:e0:ae:58:48:
e6:46:1a:20:c9:c5:55:64:5c:07:6e:e5:74:44:09:fe:cd:58:
2f:fa:58:77:4e:6f:ad:fe:c9:13:25:b3:8e:e3:c0:20:4d:95:
fd:f0:3f:16:62:ef:ae:3c:41:45:ec:54:ba:d7:b7:1f:c5:2c:
a0:5a:5c:d7:ee:12:23:69:9b:f8:f8:64:5f:d0:c2:1b:ce:e9:
b5:b3:b5:27:d3:cd:6d:fb:ea:5f:8a:3a:8a:64:e8:15:07:1e:
82:75:c0:7a:0b:a1:33:75:1d:10:aa:92:c3:7c:fc:17:f2:46:
fd:3f:b9:cb:ce:87:96:59:82:58:d3:f9:13:a5:ef:9e:42:91:
6f:7e:90:a4:5c:ff:79:b2:b2:09:9c:a5:6a:5f:d0:e4:91:75:
7b:6e:fe:82:14:0f:56:c5:52:78:72:40:00:2e:25:07:8a:cf:
d0:25:bd:fb:2c:ea:d0:95:66:c1:a7:72:ea:ba:c9:ad:c8:4a:
c8:e4:57:d9:d7:64:04:6f:b9:3e:70:6f:57:73:02:8a:2e:32:
70:16:ed:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:41:40 2026 by rpki-client