Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/f3f2d9-2a8f-4ae6-ba55-f4affc8028f3/1/LnPLOHXZEhkmGzrpAQgTEaWgcas.mft
File: LnPLOHXZEhkmGzrpAQgTEaWgcas.mft (raw, json)
Hash identifier: y2aRT3YClM/5y/vfhNTMLEK34q1ZrGUlWwk2SWa4WhY=
Subject key identifier: 20:B8:CB:A2:79:0B:97:1E:F9:16:9D:B9:2A:2F:E2:FA:47:B4:D9:5B
Authority key identifier: 2E:73:CB:38:75:D9:12:19:26:1B:3A:E9:01:08:13:11:A5:A0:71:AB
Certificate issuer: /CN=2e73cb3875d91219261b3ae901081311a5a071ab
Certificate serial: 019DD051168087CFA20B93957ED6A17E34BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LnPLOHXZEhkmGzrpAQgTEaWgcas.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/f3f2d9-2a8f-4ae6-ba55-f4affc8028f3/1/LnPLOHXZEhkmGzrpAQgTEaWgcas.mft
Manifest number: 025A
Signing time: Mon 27 Apr 2026 19:01:08 +0000
Manifest this update: Mon 27 Apr 2026 19:01:08 +0000
Manifest next update: Tue 28 Apr 2026 19:01:08 +0000
Files and hashes: 1: LnPLOHXZEhkmGzrpAQgTEaWgcas.crl (hash: dKeJG5+XUSmj2tqJ37bOvr2hcyzTmcdGNiyu7RO7/Ek=)
2: d9bKfKc4CWNG5hnKSbTK0Rni9UU.roa (hash: 4jZ3a0Nmi0XTCu3Uai+tAC5QbHyDGtcHMO/I90in7Wg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/f3f2d9-2a8f-4ae6-ba55-f4affc8028f3/1/LnPLOHXZEhkmGzrpAQgTEaWgcas.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/f3f2d9-2a8f-4ae6-ba55-f4affc8028f3/1/LnPLOHXZEhkmGzrpAQgTEaWgcas.mft
rsync://rpki.ripe.net/repository/DEFAULT/LnPLOHXZEhkmGzrpAQgTEaWgcas.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 17:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:d0:51:16:80:87:cf:a2:0b:93:95:7e:d6:a1:7e:34:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e73cb3875d91219261b3ae901081311a5a071ab
Validity
Not Before: Apr 27 19:01:08 2026 GMT
Not After : Apr 28 19:01:08 2026 GMT
Subject: CN=20b8cba2790b971ef9169db92a2fe2fa47b4d95b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:ca:db:28:3a:82:cc:41:e7:b3:a0:58:d1:c2:
86:1d:c5:cf:5c:db:cc:9b:64:08:33:ff:a3:4d:c9:
47:64:a0:3d:4f:78:55:42:8f:83:f4:f5:02:77:67:
43:1b:59:b7:d4:82:ef:11:73:6a:ad:af:77:f8:19:
e9:e0:f9:ca:8c:ad:54:42:9b:5e:f7:d2:ad:82:80:
f0:ed:8a:11:d7:7e:72:b8:3f:83:09:3c:88:33:b7:
19:3d:d6:75:f0:c8:04:e3:ec:82:d8:0a:2b:de:30:
34:0d:fa:85:f6:a5:2f:24:6a:0e:6b:f7:94:b9:9c:
2a:c2:81:04:24:70:a8:17:a3:db:a7:03:2c:4a:1d:
ac:72:b4:51:fe:1b:53:48:cb:09:a6:af:9f:61:39:
fa:84:8f:cd:59:38:ee:14:f6:f2:11:55:e4:34:55:
b6:9a:9e:1b:23:af:ce:4a:fd:f1:32:54:53:e2:cf:
8d:38:3c:20:18:a8:b7:7b:4f:bd:39:ce:1f:11:53:
71:eb:99:a9:16:e3:f2:ce:f6:19:4e:4c:39:bc:cf:
56:82:00:d6:11:5e:e4:21:14:d4:66:eb:f5:9c:71:
a8:4f:a7:7d:5f:36:a6:e6:29:ce:ea:3a:45:f0:b8:
de:22:0a:b6:d4:d1:bd:d9:09:11:39:bb:8f:e7:a5:
65:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:B8:CB:A2:79:0B:97:1E:F9:16:9D:B9:2A:2F:E2:FA:47:B4:D9:5B
X509v3 Authority Key Identifier:
keyid:2E:73:CB:38:75:D9:12:19:26:1B:3A:E9:01:08:13:11:A5:A0:71:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LnPLOHXZEhkmGzrpAQgTEaWgcas.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/f3f2d9-2a8f-4ae6-ba55-f4affc8028f3/1/LnPLOHXZEhkmGzrpAQgTEaWgcas.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/f3f2d9-2a8f-4ae6-ba55-f4affc8028f3/1/LnPLOHXZEhkmGzrpAQgTEaWgcas.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:70:49:52:26:0d:87:b8:97:fb:35:aa:8f:45:ac:ac:c1:d7:
c9:e7:de:29:b6:05:15:cc:9c:24:98:5c:12:53:a9:e0:dd:13:
93:2e:4d:34:57:17:0d:73:6d:2d:91:60:9a:72:8c:4e:b4:b5:
87:a5:dd:06:98:5d:08:13:57:78:07:a8:f0:65:55:90:aa:42:
ee:4e:b4:1a:e3:bd:07:14:87:41:3c:0b:66:61:32:a0:2a:e9:
0d:99:d5:95:8e:ec:bc:4c:8f:1f:46:6b:27:d7:58:d2:a6:ac:
59:65:bb:df:fd:81:22:66:a0:4f:6a:3d:c8:e9:60:14:7c:34:
ec:7f:0d:cb:11:41:1d:49:1b:b6:0e:f3:40:25:bd:5b:ba:d6:
2a:99:10:fd:42:57:e3:09:5d:53:40:b8:2d:6a:2e:3d:9e:53:
f8:f4:ba:20:37:1c:bf:17:92:11:04:d9:4d:f3:ab:4b:da:f2:
fa:1b:ba:a7:ab:a2:18:28:0c:c7:00:41:5a:77:3a:d5:73:6f:
7e:9b:68:20:8d:0d:15:8f:f4:35:ea:15:4f:42:94:c4:e4:5c:
84:e3:0a:aa:3b:02:90:3a:c6:f8:e3:84:cc:8c:e1:1d:20:1e:
ba:14:1f:a5:63:c4:45:d2:8b:35:37:20:1c:b2:13:3f:7c:a8:
19:97:e5:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 23:16:42 2026 by rpki-client