Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/f3f2d9-2a8f-4ae6-ba55-f4affc8028f3/1/LnPLOHXZEhkmGzrpAQgTEaWgcas.mft
File: LnPLOHXZEhkmGzrpAQgTEaWgcas.mft (raw, json)
Hash identifier: VGVfRKGAwOI7aGqICQ7VJGQbHXyuwDYND7Sr7jtR7g0=
Subject key identifier: 9E:3F:27:75:2A:03:47:1F:A7:4C:1A:CD:82:80:7F:70:1F:53:81:C8
Authority key identifier: 2E:73:CB:38:75:D9:12:19:26:1B:3A:E9:01:08:13:11:A5:A0:71:AB
Certificate issuer: /CN=2e73cb3875d91219261b3ae901081311a5a071ab
Certificate serial: 019FA1BBDD8E71C71666627E96728AA0362C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LnPLOHXZEhkmGzrpAQgTEaWgcas.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/f3f2d9-2a8f-4ae6-ba55-f4affc8028f3/1/LnPLOHXZEhkmGzrpAQgTEaWgcas.mft
Manifest number: 034B
Signing time: Mon 27 Jul 2026 04:01:11 +0000
Manifest this update: Mon 27 Jul 2026 04:01:11 +0000
Manifest next update: Tue 28 Jul 2026 04:01:11 +0000
Files and hashes: 1: LnPLOHXZEhkmGzrpAQgTEaWgcas.crl (hash: PxFR8Kw6mPSGh2FirDflHONLxhtoFnUoVoE5FLqMwm8=)
2: d9bKfKc4CWNG5hnKSbTK0Rni9UU.roa (hash: 4jZ3a0Nmi0XTCu3Uai+tAC5QbHyDGtcHMO/I90in7Wg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/f3f2d9-2a8f-4ae6-ba55-f4affc8028f3/1/LnPLOHXZEhkmGzrpAQgTEaWgcas.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/f3f2d9-2a8f-4ae6-ba55-f4affc8028f3/1/LnPLOHXZEhkmGzrpAQgTEaWgcas.mft
rsync://rpki.ripe.net/repository/DEFAULT/LnPLOHXZEhkmGzrpAQgTEaWgcas.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 04:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a1:bb:dd:8e:71:c7:16:66:62:7e:96:72:8a:a0:36:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e73cb3875d91219261b3ae901081311a5a071ab
Validity
Not Before: Jul 27 04:01:11 2026 GMT
Not After : Jul 28 04:01:11 2026 GMT
Subject: CN=9e3f27752a03471fa74c1acd82807f701f5381c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:f4:82:77:38:5c:b7:ae:4e:fd:00:db:fc:76:
81:78:37:d1:90:4a:dc:9d:ee:1f:9b:0c:b9:45:d4:
c2:d4:a0:27:93:d8:0e:af:7f:d7:2c:43:bf:c6:cc:
95:87:0a:a5:8d:35:e5:8a:93:e1:a8:56:90:81:39:
28:9e:f5:5f:48:56:64:1c:0d:64:c4:28:95:40:93:
42:27:30:58:53:05:02:1f:13:ab:27:23:f2:d3:ec:
72:12:9c:5e:00:20:33:9e:fc:1e:30:3f:a8:de:30:
35:a3:c4:ef:93:39:d9:94:7b:48:18:d6:1f:f2:32:
e3:85:56:e1:46:4d:bd:72:45:c9:4a:4d:dd:5e:90:
b8:96:27:3b:a5:f0:a2:62:31:f2:5f:d8:cd:2f:b0:
6d:44:6e:08:7c:ba:29:90:a9:82:52:ec:f3:ff:b7:
f0:e4:e0:d7:4a:06:c1:ea:83:cd:2d:c4:b3:00:65:
d4:df:80:ba:76:6f:78:d7:f0:0f:d2:43:c0:a5:cf:
3e:d4:6f:15:3d:c8:25:51:af:79:b5:3c:5d:d7:dc:
09:66:2d:05:a5:92:85:73:f9:4b:a8:d1:e1:13:de:
a4:7d:1c:ad:82:e1:c4:01:7f:5d:ca:be:4b:b5:83:
d2:c5:d5:ed:88:db:5b:e2:50:9c:d6:41:d8:ab:d9:
ce:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:3F:27:75:2A:03:47:1F:A7:4C:1A:CD:82:80:7F:70:1F:53:81:C8
X509v3 Authority Key Identifier:
keyid:2E:73:CB:38:75:D9:12:19:26:1B:3A:E9:01:08:13:11:A5:A0:71:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LnPLOHXZEhkmGzrpAQgTEaWgcas.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/f3f2d9-2a8f-4ae6-ba55-f4affc8028f3/1/LnPLOHXZEhkmGzrpAQgTEaWgcas.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/f3f2d9-2a8f-4ae6-ba55-f4affc8028f3/1/LnPLOHXZEhkmGzrpAQgTEaWgcas.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:4b:6c:71:71:91:29:38:b3:2a:ac:1f:de:05:79:c6:be:e3:
7e:5d:9e:52:7c:4b:5e:76:eb:4b:fb:fd:35:6d:ce:48:36:0a:
ea:63:b6:54:2b:b1:3d:bd:95:19:db:e1:69:11:43:05:7b:d8:
6e:f2:e1:9a:7a:5b:71:a3:b5:a7:c5:6a:97:83:7b:21:75:79:
c3:91:03:40:73:26:55:50:ff:8d:c8:7b:23:81:3d:15:24:72:
b1:9c:4d:6e:14:73:f9:73:fc:9b:68:a9:cc:b5:5f:b4:55:33:
b3:48:2c:f5:e3:0b:e7:47:a4:34:93:b0:7c:eb:9b:72:51:c9:
79:35:ef:5a:9c:be:3c:16:b5:16:86:33:d4:d0:7e:0a:18:30:
95:77:15:ae:bc:8b:ad:c3:07:86:b5:47:cc:15:a2:4a:8a:77:
0f:18:22:2d:58:0d:8e:ae:0f:43:9f:98:2d:cf:05:4f:05:7a:
41:dc:83:1d:4a:34:94:42:28:f1:56:c1:0b:cc:f8:ad:01:5b:
cf:d2:e3:d8:f8:2a:a1:65:19:cd:df:d1:9a:a2:b5:4a:c2:d7:
83:12:83:af:b9:7c:08:5c:3a:23:d6:a7:38:6e:60:70:3a:64:
8b:d5:ed:81:7a:9c:6e:50:0b:f7:a4:62:0a:b0:b8:5d:3d:01:
dd:13:71:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 13:17:02 2026 by rpki-client