
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/d5c45a-8448-47b8-b577-af9d695e940f/1/LnKImCrdg2QvgaPeuo-FbxTgmQo.mft
File: LnKImCrdg2QvgaPeuo-FbxTgmQo.mft (raw, json)
Hash identifier: DQ8w3+FbNdU9EDFP/sOkCq3ljz7I0IjNMYT68rTseFM=
Subject key identifier: 3C:14:8D:59:07:F7:0A:A8:EC:3D:54:F5:7F:4E:13:A2:78:4E:2F:D9
Authority key identifier: 2E:72:88:98:2A:DD:83:64:2F:81:A3:DE:BA:8F:85:6F:14:E0:99:0A
Certificate issuer: /CN=2e7288982add83642f81a3deba8f856f14e0990a
Certificate serial: 019D382E9D78280556AB9BC765E0853C4B47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LnKImCrdg2QvgaPeuo-FbxTgmQo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/d5c45a-8448-47b8-b577-af9d695e940f/1/LnKImCrdg2QvgaPeuo-FbxTgmQo.mft
Manifest number: 1460
Signing time: Sun 29 Mar 2026 06:01:12 +0000
Manifest this update: Sun 29 Mar 2026 06:01:12 +0000
Manifest next update: Mon 30 Mar 2026 06:01:12 +0000
Files and hashes: 1: LnKImCrdg2QvgaPeuo-FbxTgmQo.crl (hash: YkcyXGPPqyDvMF7/90JqnCmhKI53l66o2IONDfwT8mc=)
2: PdB7yHgtRY5AbRPzGQ7Kal7stk0.roa (hash: ZfhLG4tdAsP3dDzk6eFVvwC/Pe3dDXcwaTLLVzg2Rko=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/d5c45a-8448-47b8-b577-af9d695e940f/1/LnKImCrdg2QvgaPeuo-FbxTgmQo.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/d5c45a-8448-47b8-b577-af9d695e940f/1/LnKImCrdg2QvgaPeuo-FbxTgmQo.mft
rsync://rpki.ripe.net/repository/DEFAULT/LnKImCrdg2QvgaPeuo-FbxTgmQo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:9d:78:28:05:56:ab:9b:c7:65:e0:85:3c:4b:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e7288982add83642f81a3deba8f856f14e0990a
Validity
Not Before: Mar 29 06:01:12 2026 GMT
Not After : Mar 30 06:01:12 2026 GMT
Subject: CN=3c148d5907f70aa8ec3d54f57f4e13a2784e2fd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:30:63:42:49:d6:a5:ca:dc:a2:f0:df:29:77:
43:29:8a:e4:cf:56:67:f2:0c:b1:c8:db:c7:9c:fd:
c6:c3:67:53:ce:fd:57:73:10:4d:13:d5:f3:1c:b3:
fe:1e:51:bc:fe:a8:35:5a:fe:53:cc:0f:ed:51:e5:
56:dc:72:e3:05:31:2b:74:cd:94:cc:9e:19:32:0f:
9d:d3:51:72:41:66:9f:de:dd:06:82:3d:71:15:4c:
80:5c:88:28:ee:18:f8:e6:cf:d0:ed:c0:88:1a:78:
1a:8f:31:50:ba:92:41:b3:cb:71:4a:5d:c6:43:0d:
a3:b5:6a:b0:57:0d:cb:48:cb:b3:55:c8:9a:76:df:
7e:33:20:ec:c8:44:cd:e7:5c:fc:03:b7:3c:b0:ce:
b0:54:9b:00:04:87:af:4a:e4:2b:c2:20:ae:dc:8b:
61:bf:dd:30:48:88:ea:30:46:f7:4d:3b:52:71:8a:
d9:c4:ea:b9:4c:7e:ae:16:56:1d:9c:18:82:56:c0:
41:79:a8:d3:71:eb:67:e3:1a:85:85:7a:05:76:91:
2e:60:1c:6b:33:4d:4b:fd:4f:46:28:0c:0f:7c:96:
37:5a:4a:6f:ca:7a:eb:5c:59:ee:ad:b5:55:6c:c3:
5f:a1:f0:e0:36:0c:99:6f:71:39:fb:22:37:b3:88:
91:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:14:8D:59:07:F7:0A:A8:EC:3D:54:F5:7F:4E:13:A2:78:4E:2F:D9
X509v3 Authority Key Identifier:
keyid:2E:72:88:98:2A:DD:83:64:2F:81:A3:DE:BA:8F:85:6F:14:E0:99:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LnKImCrdg2QvgaPeuo-FbxTgmQo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/d5c45a-8448-47b8-b577-af9d695e940f/1/LnKImCrdg2QvgaPeuo-FbxTgmQo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/d5c45a-8448-47b8-b577-af9d695e940f/1/LnKImCrdg2QvgaPeuo-FbxTgmQo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:30:49:66:8e:04:28:f5:64:bd:24:b2:cc:a5:7e:17:e6:e5:
ae:c7:66:57:6e:d0:ab:a8:79:ac:25:eb:10:b3:c9:2b:bc:9b:
f6:13:20:db:23:0e:75:c7:77:ae:e3:9f:12:8a:7b:ec:ff:33:
25:dd:f7:98:83:0e:e7:74:8d:85:c1:a1:9a:58:07:7d:4d:f8:
35:12:eb:e3:74:91:f4:68:61:b3:76:cd:98:c7:81:7e:ba:63:
1d:9a:c1:32:c8:aa:7e:44:d8:19:10:4d:f0:78:f6:34:0a:ac:
63:03:b3:37:77:3e:0a:3a:cb:3c:f3:73:fd:71:6c:c3:8f:a6:
09:af:08:6e:23:ad:48:a3:e7:bf:7e:d3:cd:fa:1c:77:52:93:
95:9c:1e:c8:a9:91:e5:85:0f:52:7f:7f:7f:a5:e9:56:f4:1c:
f6:66:2b:18:33:de:45:5c:dd:81:53:5d:9b:f4:2b:2b:8a:39:
4c:98:77:8d:aa:2a:9d:83:53:42:44:53:11:03:8b:81:af:47:
87:ee:4c:b9:8e:d8:1d:05:ee:a8:17:13:d7:44:b1:ac:49:87:
4c:63:eb:6f:cb:36:d3:bc:a7:3e:2c:dc:3f:2b:16:30:09:d1:
f9:05:a2:0c:9e:1a:11:9c:23:8c:5c:d7:ae:69:4a:f4:f4:97:
bd:fa:65:46
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04Lp14KAVWq5vHZeCFPEtHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJlNzI4ODk4MmFkZDgzNjQyZjgxYTNkZWJhOGY4NTZmMTRl
MDk5MGEwHhcNMjYwMzI5MDYwMTEyWhcNMjYwMzMwMDYwMTEyWjAzMTEwLwYDVQQD
EygzYzE0OGQ1OTA3ZjcwYWE4ZWMzZDU0ZjU3ZjRlMTNhMjc4NGUyZmQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxzBjQknWpcrcovDfKXdDKYrkz1Zn
8gyxyNvHnP3Gw2dTzv1XcxBNE9XzHLP+HlG8/qg1Wv5TzA/tUeVW3HLjBTErdM2U
zJ4ZMg+d01FyQWaf3t0Ggj1xFUyAXIgo7hj45s/Q7cCIGngajzFQupJBs8txSl3G
Qw2jtWqwVw3LSMuzVciadt9+MyDsyETN51z8A7c8sM6wVJsABIevSuQrwiCu3Ith
v90wSIjqMEb3TTtScYrZxOq5TH6uFlYdnBiCVsBBeajTcetn4xqFhXoFdpEuYBxr
M01L/U9GKAwPfJY3WkpvynrrXFnurbVVbMNfofDgNgyZb3E5+yI3s4iR9wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDwUjVkH9wqo7D1U9X9OE6J4Ti/ZMB8GA1UdIwQY
MBaAFC5yiJgq3YNkL4Gj3rqPhW8U4JkKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTG5LSW1DcmRnMlF2Z2FQZXVvLUZieFRnbVFvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC9kNWM0NWEtODQ0OC00N2I4LWI1Nzct
YWY5ZDY5NWU5NDBmLzEvTG5LSW1DcmRnMlF2Z2FQZXVvLUZieFRnbVFvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMC9kNWM0NWEtODQ0OC00N2I4LWI1NzctYWY5ZDY5NWU5NDBm
LzEvTG5LSW1DcmRnMlF2Z2FQZXVvLUZieFRnbVFvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJjBJZo4E
KPVkvSSyzKV+F+blrsdmV27Qq6h5rCXrELPJK7yb9hMg2yMOdcd3ruOfEop77P8z
Jd33mIMO53SNhcGhmlgHfU34NRLr43SR9Ghhs3bNmMeBfrpjHZrBMsiqfkTYGRBN
8Hj2NAqsYwOzN3c+CjrLPPNz/XFsw4+mCa8IbiOtSKPnv37Tzfocd1KTlZweyKmR
5YUPUn9/f6XpVvQc9mYrGDPeRVzdgVNdm/QrK4o5TJh3jaoqnYNTQkRTEQOLga9H
h+5MuY7YHQXuqBcT10SxrEmHTGPrb8s207ynPizcPysWMAnR+QWiDJ4aEZwjjFzX
rmlK9PSXvfplRg==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:16:48 2026 by rpki-client