Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7c/f3f2d9-2a8f-4ae6-ba55-f4affc8028f3/1/LnPLOHXZEhkmGzrpAQgTEaWgcas.mft
File: LnPLOHXZEhkmGzrpAQgTEaWgcas.mft (raw, json)
Hash identifier: TxZZIkv3yC4w30wkGNMEkcBU8fLf0mD/pd21GKBZZlU=
Subject key identifier: B3:AC:F4:97:D6:B9:0D:99:FF:9E:6F:89:E6:A3:62:34:C1:69:41:16
Authority key identifier: 2E:73:CB:38:75:D9:12:19:26:1B:3A:E9:01:08:13:11:A5:A0:71:AB
Certificate issuer: /CN=2e73cb3875d91219261b3ae901081311a5a071ab
Certificate serial: 01A17EBD47EE59F2F2DD01547DF82DE153A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LnPLOHXZEhkmGzrpAQgTEaWgcas.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/f3f2d9-2a8f-4ae6-ba55-f4affc8028f3/1/LnPLOHXZEhkmGzrpAQgTEaWgcas.mft
Manifest number: 0442
Signing time: Tue 27 Oct 2026 19:01:36 +0000
Manifest this update: Tue 27 Oct 2026 19:01:36 +0000
Manifest next update: Wed 28 Oct 2026 19:01:36 +0000
Files and hashes: 1: LnPLOHXZEhkmGzrpAQgTEaWgcas.crl (hash: T/bMWF1oSSu+bWEvA68NO0mhKtt5ntKBYNClPdHc6IA=)
2: d9bKfKc4CWNG5hnKSbTK0Rni9UU.roa (hash: 4jZ3a0Nmi0XTCu3Uai+tAC5QbHyDGtcHMO/I90in7Wg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/f3f2d9-2a8f-4ae6-ba55-f4affc8028f3/1/LnPLOHXZEhkmGzrpAQgTEaWgcas.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/f3f2d9-2a8f-4ae6-ba55-f4affc8028f3/1/LnPLOHXZEhkmGzrpAQgTEaWgcas.mft
rsync://rpki.ripe.net/repository/DEFAULT/LnPLOHXZEhkmGzrpAQgTEaWgcas.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 19:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7e:bd:47:ee:59:f2:f2:dd:01:54:7d:f8:2d:e1:53:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e73cb3875d91219261b3ae901081311a5a071ab
Validity
Not Before: Oct 27 19:01:36 2026 GMT
Not After : Oct 28 19:01:36 2026 GMT
Subject: CN=b3acf497d6b90d99ff9e6f89e6a36234c1694116
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:ce:38:8d:cb:dd:85:21:79:6b:f1:6a:d5:4b:
c4:9c:d3:44:12:d1:d0:8c:cb:9e:b9:f3:11:90:47:
40:c6:8b:b3:d2:46:5e:e5:4f:29:74:8c:68:07:00:
bc:a2:e9:d4:82:55:f0:f3:34:80:87:25:17:b4:ee:
11:92:39:13:e8:1f:10:16:d9:54:15:ff:68:b0:50:
94:f2:e2:51:b2:3f:c5:15:af:d7:d0:6c:04:a3:66:
d6:39:d8:e1:20:7a:cf:27:6b:46:6e:5a:bf:8c:ad:
7a:1c:a2:0f:85:61:fe:e7:f2:0b:5b:6d:23:43:2d:
b7:d3:29:43:b5:f4:93:dc:69:f7:3c:93:87:d7:40:
7b:b7:f7:e1:6b:a9:17:db:42:7c:03:bd:ad:96:bc:
21:c6:cd:8a:d5:5e:2b:bd:5e:26:f8:0a:f4:e5:42:
66:34:2b:ba:92:b6:77:4e:14:30:42:ae:60:0c:37:
94:36:ea:8d:87:d4:8f:89:cd:36:2f:f8:81:5a:7d:
f2:65:e2:8f:19:b4:99:d1:f0:36:c6:79:8f:ac:ad:
dc:a3:2c:62:df:d4:4a:fc:5d:d7:4c:7e:40:e9:66:
47:3a:d2:df:ab:c2:98:ab:42:21:01:d9:20:24:c5:
8b:ab:97:09:48:51:38:22:ee:5d:e9:e9:6e:29:e9:
49:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:AC:F4:97:D6:B9:0D:99:FF:9E:6F:89:E6:A3:62:34:C1:69:41:16
X509v3 Authority Key Identifier:
keyid:2E:73:CB:38:75:D9:12:19:26:1B:3A:E9:01:08:13:11:A5:A0:71:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LnPLOHXZEhkmGzrpAQgTEaWgcas.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/f3f2d9-2a8f-4ae6-ba55-f4affc8028f3/1/LnPLOHXZEhkmGzrpAQgTEaWgcas.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/f3f2d9-2a8f-4ae6-ba55-f4affc8028f3/1/LnPLOHXZEhkmGzrpAQgTEaWgcas.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:f6:df:2e:01:ea:0a:1f:95:6b:2f:89:5d:21:18:9a:9e:15:
ce:1d:1a:da:e0:b7:32:89:8a:35:97:5b:40:96:32:3c:0a:95:
30:ee:1f:79:c4:a8:3f:bc:0e:d0:17:0b:e3:08:43:ed:37:51:
63:de:d2:51:26:d4:a1:b8:3a:a0:08:b4:99:b6:88:66:99:8b:
6f:da:04:0f:9a:e4:54:3d:f8:de:5a:6a:d9:6d:72:e2:b6:e3:
bc:60:0b:1c:8f:92:f0:73:d9:a9:8a:fd:38:52:a4:e9:ea:6d:
6f:4e:34:79:de:42:31:b3:6c:a5:fe:03:c2:07:d4:17:fe:59:
98:06:4f:8a:ad:29:ed:e1:46:85:00:af:53:d0:a9:98:f6:8d:
48:cb:df:38:7a:a3:a1:14:32:e5:d8:eb:8a:2c:3c:6c:11:11:
34:fe:12:b3:3e:2f:7a:a6:c9:f1:26:bc:13:87:6a:49:df:fa:
18:88:36:a5:c1:c5:b6:f7:fd:9a:e4:f3:bf:1a:ae:b2:49:27:
72:59:5e:11:1a:c0:1f:1e:9c:17:f1:dc:31:cc:39:6a:cc:e4:
5d:0d:df:90:21:e4:dd:b6:85:c5:12:d3:dc:62:0e:7a:b6:dd:
33:27:71:49:80:63:12:ed:55:03:a8:e9:18:70:fc:50:89:e0:
ab:41:5e:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 00:44:26 2026 by rpki-client