Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/9a60cf-9d94-4585-a25b-5e7f95811562/1/LnOtRfij6-Znq7GWoonWcZvruC0.mft
File: LnOtRfij6-Znq7GWoonWcZvruC0.mft (raw, json)
Hash identifier: 9CLGEMprSzHiamNWqK0e8FPdifj4b97VTvPqlpNPPGU=
Subject key identifier: 29:F7:A8:80:0A:A1:86:FA:CC:00:E3:E4:51:4C:09:E4:3B:C2:88:0E
Authority key identifier: 2E:73:AD:45:F8:A3:EB:E6:67:AB:B1:96:A2:89:D6:71:9B:EB:B8:2D
Certificate issuer: /CN=2e73ad45f8a3ebe667abb196a289d6719bebb82d
Certificate serial: 019D3865B1C4E8B85E30ED2B3C02B7E7A9E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LnOtRfij6-Znq7GWoonWcZvruC0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/9a60cf-9d94-4585-a25b-5e7f95811562/1/LnOtRfij6-Znq7GWoonWcZvruC0.mft
Manifest number: 1890
Signing time: Sun 29 Mar 2026 07:01:21 +0000
Manifest this update: Sun 29 Mar 2026 07:01:21 +0000
Manifest next update: Mon 30 Mar 2026 07:01:21 +0000
Files and hashes: 1: LnOtRfij6-Znq7GWoonWcZvruC0.crl (hash: TpMXd8aDhYtwnKK3g+aEixijvfybqYcq6OKE32LWayk=)
2: Nl65Np2NbEnihFgj_3m0_3bzCWY.roa (hash: 7UhBMBB84iPxUUXErAiMT9ZI08Sl9FFg4+ED0ZMQtcM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/9a60cf-9d94-4585-a25b-5e7f95811562/1/LnOtRfij6-Znq7GWoonWcZvruC0.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/9a60cf-9d94-4585-a25b-5e7f95811562/1/LnOtRfij6-Znq7GWoonWcZvruC0.mft
rsync://rpki.ripe.net/repository/DEFAULT/LnOtRfij6-Znq7GWoonWcZvruC0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:b1:c4:e8:b8:5e:30:ed:2b:3c:02:b7:e7:a9:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e73ad45f8a3ebe667abb196a289d6719bebb82d
Validity
Not Before: Mar 29 07:01:21 2026 GMT
Not After : Mar 30 07:01:21 2026 GMT
Subject: CN=29f7a8800aa186facc00e3e4514c09e43bc2880e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:34:f2:d7:df:71:83:d0:84:26:67:17:f9:0e:
70:e1:d8:60:53:58:63:03:36:77:5e:49:a2:99:97:
32:03:d7:28:c5:59:a8:b7:06:24:30:8b:80:42:c5:
d3:99:03:83:67:dd:25:59:77:d7:8a:e6:f7:cb:99:
7f:36:19:df:a6:17:87:2c:42:3c:35:c6:e0:22:ab:
8d:70:b7:d4:a9:33:05:83:f5:19:8c:b4:00:62:cc:
e8:00:11:b5:ac:0f:df:fb:b3:65:ba:4a:14:b6:cf:
99:77:ee:3c:f3:3d:f9:10:f7:73:a1:cd:c2:95:ff:
1d:f3:8a:ad:ac:c5:0a:54:02:68:41:a3:15:1e:e0:
d9:66:46:8c:5c:2a:f9:e3:52:d4:30:73:cd:14:d7:
a1:59:95:84:d3:ce:e1:ab:f7:1b:03:10:c8:3d:8f:
33:4b:6b:20:f7:cb:2c:4d:a7:6a:e1:69:ed:86:be:
e8:c7:88:59:0c:fa:8a:e8:98:7d:0c:7c:b2:c6:66:
18:ae:14:b9:ee:68:02:22:bf:f9:f9:c8:5f:da:af:
07:b4:b4:25:45:0a:8e:1d:c5:8a:96:9a:c6:37:4c:
f0:9d:26:d5:b5:5b:ac:49:b7:8c:96:c8:b4:a5:89:
a5:49:53:63:fe:7b:01:66:a4:d2:ff:b6:2a:f8:a2:
08:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:F7:A8:80:0A:A1:86:FA:CC:00:E3:E4:51:4C:09:E4:3B:C2:88:0E
X509v3 Authority Key Identifier:
keyid:2E:73:AD:45:F8:A3:EB:E6:67:AB:B1:96:A2:89:D6:71:9B:EB:B8:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LnOtRfij6-Znq7GWoonWcZvruC0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/9a60cf-9d94-4585-a25b-5e7f95811562/1/LnOtRfij6-Znq7GWoonWcZvruC0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/9a60cf-9d94-4585-a25b-5e7f95811562/1/LnOtRfij6-Znq7GWoonWcZvruC0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:6f:e8:19:75:09:7d:6c:5c:48:95:f0:dc:59:29:0b:ea:36:
15:4c:fa:e0:b9:80:91:6f:d6:db:a7:5b:77:91:84:0b:96:bf:
a4:8f:f5:bc:dc:af:56:4a:d4:cf:f6:0d:fc:d7:ba:ce:87:06:
05:ab:47:1f:70:63:1c:da:29:bc:e8:90:79:ba:f1:1d:6a:5b:
ac:0e:9d:be:ff:7b:cb:c7:3c:9b:cb:ca:ec:64:b2:04:5f:ce:
5f:db:a3:c1:c7:14:34:e7:a8:ca:9e:41:18:7d:0c:de:80:2d:
f1:ea:57:3e:7c:80:68:c9:1c:1c:4d:19:8e:be:1e:5c:2b:cd:
b4:ac:86:c3:9b:be:27:22:ff:d5:ea:39:f1:47:07:af:10:d6:
b1:12:12:6f:83:e1:f2:5e:85:1b:b9:5d:0e:ec:40:f8:e6:70:
a5:70:ce:af:00:7f:f0:11:c6:db:b9:df:bf:06:ad:b7:c0:3c:
f0:a2:06:4a:56:84:c6:32:b9:8e:eb:14:f1:09:4a:1d:96:00:
b5:a7:e3:83:f9:97:74:88:c6:ce:c0:ae:32:1b:4b:37:bd:16:
2f:69:21:b5:03:17:05:58:bd:bf:f5:b8:4d:66:5c:9b:41:f9:
1c:c0:b2:b3:12:c3:bc:cd:a2:93:d2:8a:7a:9a:2a:e2:59:ed:
03:4c:3d:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:05:47 2026 by rpki-client