Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/f3f2d9-2a8f-4ae6-ba55-f4affc8028f3/1/LnPLOHXZEhkmGzrpAQgTEaWgcas.mft
File: LnPLOHXZEhkmGzrpAQgTEaWgcas.mft (raw, json)
Hash identifier: F0SYv52+CcSSU0Ehz3beS5fVJnkPkh9MmaNnXQ04Bz0=
Subject key identifier: 46:CD:E6:28:C9:CD:56:5D:CC:98:28:DC:CC:BE:F4:04:4C:59:12:B7
Authority key identifier: 2E:73:CB:38:75:D9:12:19:26:1B:3A:E9:01:08:13:11:A5:A0:71:AB
Certificate issuer: /CN=2e73cb3875d91219261b3ae901081311a5a071ab
Certificate serial: 019CE6A4A24A194240A96977D4A776783677
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LnPLOHXZEhkmGzrpAQgTEaWgcas.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/f3f2d9-2a8f-4ae6-ba55-f4affc8028f3/1/LnPLOHXZEhkmGzrpAQgTEaWgcas.mft
Manifest number: 01E1
Signing time: Fri 13 Mar 2026 10:01:14 +0000
Manifest this update: Fri 13 Mar 2026 10:01:14 +0000
Manifest next update: Sat 14 Mar 2026 10:01:14 +0000
Files and hashes: 1: LnPLOHXZEhkmGzrpAQgTEaWgcas.crl (hash: Q6aTVQeqDez4T2a3lcUbV5vmjVQ8xk6pHImJT00sKAQ=)
2: d9bKfKc4CWNG5hnKSbTK0Rni9UU.roa (hash: 4jZ3a0Nmi0XTCu3Uai+tAC5QbHyDGtcHMO/I90in7Wg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/f3f2d9-2a8f-4ae6-ba55-f4affc8028f3/1/LnPLOHXZEhkmGzrpAQgTEaWgcas.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/f3f2d9-2a8f-4ae6-ba55-f4affc8028f3/1/LnPLOHXZEhkmGzrpAQgTEaWgcas.mft
rsync://rpki.ripe.net/repository/DEFAULT/LnPLOHXZEhkmGzrpAQgTEaWgcas.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 09:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e6:a4:a2:4a:19:42:40:a9:69:77:d4:a7:76:78:36:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e73cb3875d91219261b3ae901081311a5a071ab
Validity
Not Before: Mar 13 10:01:14 2026 GMT
Not After : Mar 14 10:01:14 2026 GMT
Subject: CN=46cde628c9cd565dcc9828dcccbef4044c5912b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:c1:50:b6:62:ae:fe:b7:22:7d:1e:ee:42:dd:
53:6f:0f:59:30:f1:8c:8d:c6:16:f9:1c:3f:30:1b:
8d:b4:43:5d:b5:57:8c:e9:22:67:64:6b:9f:de:37:
5c:d5:07:db:26:10:4a:ae:89:c2:5e:b3:84:07:da:
30:49:bc:01:99:b9:f3:76:6c:55:9a:72:d4:55:ee:
a1:b8:c9:8a:d5:60:19:55:f1:a2:01:d3:b4:42:79:
47:30:bd:e1:e4:f2:ee:ae:b5:3b:62:a8:f7:23:b7:
63:a3:17:ac:62:f2:35:0c:67:ea:55:b5:1a:63:23:
38:e3:c7:98:2f:4c:b7:31:1e:ed:2a:23:84:9b:d9:
d4:c9:42:73:ef:b6:b2:36:85:fa:f9:d3:38:16:c3:
65:3a:19:d3:83:6c:55:7c:79:c4:40:fb:bc:cd:ff:
c0:ad:00:b0:ab:63:a0:f7:ec:1a:e5:e0:50:57:07:
e8:90:c2:91:e6:29:1d:fc:10:34:91:42:3e:a7:79:
b1:c8:8b:6d:ce:d2:d4:c0:5d:50:14:c3:98:30:ca:
08:8e:bf:30:cb:30:a9:32:d9:b4:2a:01:9e:76:ac:
38:b2:84:9c:73:05:c5:e7:a8:be:c5:d1:2e:20:39:
a4:d1:16:a0:d3:9b:7d:fb:64:fc:84:9c:4a:f9:89:
75:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:CD:E6:28:C9:CD:56:5D:CC:98:28:DC:CC:BE:F4:04:4C:59:12:B7
X509v3 Authority Key Identifier:
keyid:2E:73:CB:38:75:D9:12:19:26:1B:3A:E9:01:08:13:11:A5:A0:71:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LnPLOHXZEhkmGzrpAQgTEaWgcas.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/f3f2d9-2a8f-4ae6-ba55-f4affc8028f3/1/LnPLOHXZEhkmGzrpAQgTEaWgcas.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/f3f2d9-2a8f-4ae6-ba55-f4affc8028f3/1/LnPLOHXZEhkmGzrpAQgTEaWgcas.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:ca:f6:47:c4:30:df:d9:ef:8d:9f:b9:3b:57:a2:6b:70:00:
57:66:f6:33:00:6a:6f:38:59:f5:96:2f:94:10:99:57:9b:35:
0f:a2:48:f7:94:1e:46:7b:8b:29:3d:e1:16:2d:67:e4:74:63:
ae:5f:ce:7d:42:37:a7:99:44:46:cc:54:ef:6e:99:90:7f:91:
76:ab:63:f0:0e:46:78:96:02:86:53:f3:cb:37:a0:d6:60:09:
c2:20:f7:5f:7a:c3:47:e9:a7:10:63:da:88:8b:86:25:5c:c7:
54:f5:57:c4:f5:df:be:6a:c8:b3:61:24:02:2f:cf:11:ba:45:
2d:b9:37:a0:f0:aa:9c:3c:6c:11:d6:a4:59:d1:20:31:83:28:
bc:1a:0c:41:f3:7f:7f:5b:02:f7:5a:b5:fe:9d:16:2b:0f:55:
cb:c6:2f:da:4d:0c:8b:37:a3:e4:93:d4:8f:5b:de:c3:05:87:
04:82:4d:58:cd:76:31:ca:8b:b2:0b:ea:35:b6:4a:13:5e:a9:
7d:60:7b:76:f7:4f:fd:01:1f:e8:b3:82:61:4b:0b:ef:5c:1b:
8a:c8:9b:af:cb:56:58:77:9e:95:c6:d8:92:c5:b9:91:f7:25:
fb:43:e6:5c:fe:21:a3:fd:75:3d:8b:03:f0:0c:c6:a1:eb:78:
60:5f:6e:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 13:52:41 2026 by rpki-client