Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/9120cb-0b06-4861-b657-757838670948/1/lnc-nMl0MBp4t-5tmUUo8fiC5G8.mft
File: lnc-nMl0MBp4t-5tmUUo8fiC5G8.mft (raw, json)
Hash identifier: I4y6DlwbK/ahxW20EcpoLPb3zgd4sJPA8kYPsGMhpDM=
Subject key identifier: B2:9E:21:BE:95:C2:31:35:2F:0D:C9:C1:41:0E:3F:70:E7:C2:2B:B1
Authority key identifier: 96:77:3E:9C:C9:74:30:1A:78:B7:EE:6D:99:45:28:F1:F8:82:E4:6F
Certificate issuer: /CN=96773e9cc974301a78b7ee6d994528f1f882e46f
Certificate serial: 019D3909B0711EC029FA208BC27E08DCB1B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lnc-nMl0MBp4t-5tmUUo8fiC5G8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/9120cb-0b06-4861-b657-757838670948/1/lnc-nMl0MBp4t-5tmUUo8fiC5G8.mft
Manifest number: 1891
Signing time: Sun 29 Mar 2026 10:00:29 +0000
Manifest this update: Sun 29 Mar 2026 10:00:29 +0000
Manifest next update: Mon 30 Mar 2026 10:00:29 +0000
Files and hashes: 1: 9jb7Om6miiOrT_ZooT83lO4qkYk.roa (hash: gjvHmuorLDsWHz05bRfIkR6+1mIVFz/jhg8KpqLFtDA=)
2: RAO_pCNhlBiv40T04NHXU2aXE2U.roa (hash: uo+4uUhKB5sDU8h5KxZgJWoE2h74C7AtuYv/i5HRqbQ=)
3: lnc-nMl0MBp4t-5tmUUo8fiC5G8.crl (hash: rVRCxKpGxVa9c2I1sKBOjZHJR+fRv7UZDVKHI6XNGPk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/9120cb-0b06-4861-b657-757838670948/1/lnc-nMl0MBp4t-5tmUUo8fiC5G8.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/9120cb-0b06-4861-b657-757838670948/1/lnc-nMl0MBp4t-5tmUUo8fiC5G8.mft
rsync://rpki.ripe.net/repository/DEFAULT/lnc-nMl0MBp4t-5tmUUo8fiC5G8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:09:b0:71:1e:c0:29:fa:20:8b:c2:7e:08:dc:b1:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96773e9cc974301a78b7ee6d994528f1f882e46f
Validity
Not Before: Mar 29 10:00:29 2026 GMT
Not After : Mar 30 10:00:29 2026 GMT
Subject: CN=b29e21be95c231352f0dc9c1410e3f70e7c22bb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:8c:36:f8:3c:94:1a:9e:b2:ed:22:d8:75:e7:
60:8e:34:f0:e1:77:6d:8c:a8:60:7f:be:ba:76:a9:
5c:f6:e3:26:64:41:1e:3f:0b:be:19:37:fd:c5:72:
0a:65:d5:88:3f:e7:d7:15:4a:22:98:a2:eb:b7:aa:
7f:a9:6d:0f:52:1a:82:74:86:9f:d4:ef:f8:d7:34:
0e:5b:a4:b3:34:6b:05:48:b3:cc:a9:b0:e0:69:a0:
22:cc:a0:10:7b:8f:70:13:16:09:37:51:ea:42:a0:
8c:af:8c:2f:38:35:e4:78:f8:fa:08:9b:40:05:3c:
4d:09:77:92:99:87:8f:14:42:c3:27:d5:e9:4d:e9:
27:44:5b:d5:73:52:4a:cc:ae:36:6a:8a:ef:ce:d4:
d1:06:8e:5e:d6:c5:9f:35:29:35:1d:b9:8e:b6:0b:
cd:90:16:cc:ec:f1:74:49:ef:f5:dd:f1:aa:6f:77:
75:a6:96:da:7a:23:5e:f6:9b:0e:a8:f0:07:a0:4e:
cb:e6:fd:92:fe:a3:f2:c7:f8:05:53:fc:ff:18:83:
e4:8d:9e:f9:1d:84:65:d9:cb:25:fd:c0:90:e2:06:
a0:10:af:80:d5:27:72:89:e0:d3:3c:42:e4:03:45:
99:42:19:c1:96:d9:1c:cc:d9:03:09:bf:dd:db:aa:
74:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:9E:21:BE:95:C2:31:35:2F:0D:C9:C1:41:0E:3F:70:E7:C2:2B:B1
X509v3 Authority Key Identifier:
keyid:96:77:3E:9C:C9:74:30:1A:78:B7:EE:6D:99:45:28:F1:F8:82:E4:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lnc-nMl0MBp4t-5tmUUo8fiC5G8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/9120cb-0b06-4861-b657-757838670948/1/lnc-nMl0MBp4t-5tmUUo8fiC5G8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/9120cb-0b06-4861-b657-757838670948/1/lnc-nMl0MBp4t-5tmUUo8fiC5G8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:b6:d4:f1:2d:87:71:08:a3:a9:0a:e0:5a:71:a1:c4:d1:27:
3e:17:f8:9e:ec:82:30:8e:c7:5a:83:2d:9e:ed:bb:1a:9b:c9:
85:0e:0c:37:ed:5e:57:71:7f:8a:1e:5d:c4:c8:a2:6c:11:89:
25:39:8f:37:a4:c7:7a:6b:ed:43:24:9d:ed:b5:0c:6d:05:62:
d6:18:6d:30:c9:1d:84:d3:c4:dc:8d:56:c5:38:a5:7f:c8:15:
48:d1:e8:97:57:d7:f4:75:d0:ca:b4:3c:08:ba:17:d7:8c:7c:
76:fa:5d:62:cc:67:d8:ff:6f:33:a8:dd:e0:6a:52:a6:c5:bc:
10:64:86:2c:da:b6:32:4b:e5:b5:f6:d6:18:77:5f:d0:58:7b:
a6:16:40:ea:62:a8:e0:cb:c0:f3:46:7b:04:25:30:a8:cd:81:
3e:97:01:71:93:ed:62:2e:04:3b:4d:08:bc:e8:0a:8b:bb:57:
80:29:1c:b0:85:9d:0c:29:2e:17:2e:d0:36:a8:fb:be:05:90:
84:14:d1:05:f3:c0:7f:76:0d:d3:d5:3d:53:4c:d4:86:6b:15:
94:a0:96:f4:e0:8e:35:fb:35:cb:6a:8b:05:6e:30:4c:66:cb:
54:e4:f3:0b:43:9a:7e:b1:c7:f1:f1:41:ad:04:43:fd:e6:83:
ba:c0:87:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 18:38:12 2026 by rpki-client