Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/f3f2d9-2a8f-4ae6-ba55-f4affc8028f3/1/LnPLOHXZEhkmGzrpAQgTEaWgcas.mft
File: LnPLOHXZEhkmGzrpAQgTEaWgcas.mft (raw, json)
Hash identifier: C79/TBqOjDHFU6vchC8hR5pAqcTyou782F9yzuSYCmE=
Subject key identifier: C1:C2:B8:A4:53:1F:81:DD:C4:81:6F:F9:07:F0:02:F7:8E:46:BF:09
Authority key identifier: 2E:73:CB:38:75:D9:12:19:26:1B:3A:E9:01:08:13:11:A5:A0:71:AB
Certificate issuer: /CN=2e73cb3875d91219261b3ae901081311a5a071ab
Certificate serial: 019EB80F423ABCB02A8C3FDA63EABEE89410
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LnPLOHXZEhkmGzrpAQgTEaWgcas.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/f3f2d9-2a8f-4ae6-ba55-f4affc8028f3/1/LnPLOHXZEhkmGzrpAQgTEaWgcas.mft
Manifest number: 02D2
Signing time: Thu 11 Jun 2026 19:01:08 +0000
Manifest this update: Thu 11 Jun 2026 19:01:08 +0000
Manifest next update: Fri 12 Jun 2026 19:01:08 +0000
Files and hashes: 1: LnPLOHXZEhkmGzrpAQgTEaWgcas.crl (hash: tzpRpTdAphrdCvYSCYMYYrDooUufY2b3JCyaCOGeEPQ=)
2: d9bKfKc4CWNG5hnKSbTK0Rni9UU.roa (hash: 4jZ3a0Nmi0XTCu3Uai+tAC5QbHyDGtcHMO/I90in7Wg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/f3f2d9-2a8f-4ae6-ba55-f4affc8028f3/1/LnPLOHXZEhkmGzrpAQgTEaWgcas.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/f3f2d9-2a8f-4ae6-ba55-f4affc8028f3/1/LnPLOHXZEhkmGzrpAQgTEaWgcas.mft
rsync://rpki.ripe.net/repository/DEFAULT/LnPLOHXZEhkmGzrpAQgTEaWgcas.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 19:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b8:0f:42:3a:bc:b0:2a:8c:3f:da:63:ea:be:e8:94:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e73cb3875d91219261b3ae901081311a5a071ab
Validity
Not Before: Jun 11 19:01:08 2026 GMT
Not After : Jun 12 19:01:08 2026 GMT
Subject: CN=c1c2b8a4531f81ddc4816ff907f002f78e46bf09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:e1:c0:a9:f4:d8:28:52:55:18:c0:28:01:1b:
48:2a:de:2b:35:91:78:75:4f:13:08:97:a3:b7:0c:
ef:ee:f2:a1:0e:10:1a:a2:80:85:df:67:d8:d4:7d:
8d:dd:69:3d:51:85:92:71:43:a5:99:c8:44:a0:6e:
87:a8:47:b8:52:bf:c0:81:1c:94:6a:5b:f8:7a:1e:
79:14:a1:cc:03:55:52:bd:df:0d:8d:59:16:52:ff:
71:9a:f3:31:9b:3a:ef:8a:a8:40:db:71:74:82:8b:
37:d7:40:8c:04:cf:de:4e:0f:38:eb:11:03:d4:e5:
4c:43:18:3a:50:be:b7:09:44:77:07:ca:bf:b4:d2:
9e:47:fa:88:6b:dc:af:9e:b2:17:6e:92:5e:be:c3:
31:af:20:31:40:ea:43:8d:6e:ef:4e:09:24:c0:12:
42:41:9c:8c:33:55:0d:82:f8:8e:11:d2:30:fc:c1:
ee:8f:09:7c:36:cb:50:9b:07:b5:b1:aa:96:c9:0f:
f7:7c:72:2f:c0:01:5c:f7:6b:19:c3:f2:4c:86:cc:
9b:a9:1a:28:53:c4:c4:9d:72:6a:fc:23:6c:2c:e3:
de:de:d5:50:f6:4e:a0:2e:74:31:ef:f7:fb:52:1d:
2b:40:a3:6b:82:b8:47:24:de:c5:a2:4a:ba:54:2c:
80:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:C2:B8:A4:53:1F:81:DD:C4:81:6F:F9:07:F0:02:F7:8E:46:BF:09
X509v3 Authority Key Identifier:
keyid:2E:73:CB:38:75:D9:12:19:26:1B:3A:E9:01:08:13:11:A5:A0:71:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LnPLOHXZEhkmGzrpAQgTEaWgcas.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/f3f2d9-2a8f-4ae6-ba55-f4affc8028f3/1/LnPLOHXZEhkmGzrpAQgTEaWgcas.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/f3f2d9-2a8f-4ae6-ba55-f4affc8028f3/1/LnPLOHXZEhkmGzrpAQgTEaWgcas.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:cc:a8:05:4a:d7:22:9b:4c:e3:4c:b0:2d:05:b4:87:15:a4:
0d:f8:b6:ee:3d:ce:71:97:60:0b:d4:12:5f:a4:41:2f:68:66:
3f:4e:b0:b8:b4:b6:30:bc:7e:24:e5:38:6b:09:f4:db:f0:50:
3d:f2:db:af:ba:7e:bb:a6:fe:9a:9c:3f:b9:24:6d:d6:dc:9c:
03:cc:0c:7d:2b:31:27:eb:59:00:b6:ea:68:13:08:2e:c2:fd:
52:c1:bd:93:8c:90:1d:10:e9:22:6e:d9:af:1a:d7:70:d5:7e:
fe:c8:44:12:17:25:ac:da:a8:d7:2e:1b:db:0f:a1:5a:13:c8:
03:27:70:bc:24:c0:30:b1:77:7e:ef:ab:36:2d:73:0a:ff:7e:
ea:76:23:4e:46:17:a8:50:dc:e7:54:56:1d:59:5b:30:cb:e0:
2a:85:77:cb:85:92:20:a6:d9:90:f2:77:c0:6c:50:7c:19:99:
39:20:0c:34:9d:e6:29:e9:ee:87:c0:f9:79:50:06:f8:f8:6d:
65:7c:ef:dc:c0:32:db:76:da:17:b2:f8:83:02:c9:af:2a:1b:
1e:f9:bd:a5:3a:89:16:b0:ab:5a:b6:11:cd:93:b7:ed:01:ae:
64:70:af:47:f6:c4:30:5e:30:77:60:9f:11:36:ad:44:13:bc:
50:02:0f:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 03:54:26 2026 by rpki-client