
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/d5c45a-8448-47b8-b577-af9d695e940f/1/LnKImCrdg2QvgaPeuo-FbxTgmQo.mft
File: LnKImCrdg2QvgaPeuo-FbxTgmQo.mft (raw, json)
Hash identifier: tgIuCyau9+kR72iSxdNqfJnjmKn7CMjlcSwGwEA7p5g=
Subject key identifier: F6:77:7F:5E:E9:79:50:60:E5:8D:4C:0B:3E:98:04:70:65:8A:E1:33
Authority key identifier: 2E:72:88:98:2A:DD:83:64:2F:81:A3:DE:BA:8F:85:6F:14:E0:99:0A
Certificate issuer: /CN=2e7288982add83642f81a3deba8f856f14e0990a
Certificate serial: 019EB87C54C29F1738BF6DD2C1505DDF985E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LnKImCrdg2QvgaPeuo-FbxTgmQo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/d5c45a-8448-47b8-b577-af9d695e940f/1/LnKImCrdg2QvgaPeuo-FbxTgmQo.mft
Manifest number: 1527
Signing time: Thu 11 Jun 2026 21:00:16 +0000
Manifest this update: Thu 11 Jun 2026 21:00:16 +0000
Manifest next update: Fri 12 Jun 2026 21:00:16 +0000
Files and hashes: 1: LnKImCrdg2QvgaPeuo-FbxTgmQo.crl (hash: tXJz6IQ99esppl4apkjXhsJct97p0G3b6P6455fQCP4=)
2: PdB7yHgtRY5AbRPzGQ7Kal7stk0.roa (hash: ZfhLG4tdAsP3dDzk6eFVvwC/Pe3dDXcwaTLLVzg2Rko=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/d5c45a-8448-47b8-b577-af9d695e940f/1/LnKImCrdg2QvgaPeuo-FbxTgmQo.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/d5c45a-8448-47b8-b577-af9d695e940f/1/LnKImCrdg2QvgaPeuo-FbxTgmQo.mft
rsync://rpki.ripe.net/repository/DEFAULT/LnKImCrdg2QvgaPeuo-FbxTgmQo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 20:26:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b8:7c:54:c2:9f:17:38:bf:6d:d2:c1:50:5d:df:98:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e7288982add83642f81a3deba8f856f14e0990a
Validity
Not Before: Jun 11 21:00:16 2026 GMT
Not After : Jun 12 21:00:16 2026 GMT
Subject: CN=f6777f5ee9795060e58d4c0b3e980470658ae133
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:44:70:93:3b:80:71:81:c3:5c:49:cf:96:e7:
cb:48:b6:f3:24:16:28:5d:a7:07:56:33:62:64:ed:
55:2f:2d:63:25:f4:2f:ec:cf:a8:96:18:e1:b9:14:
5b:d0:7c:a1:80:4e:e4:13:b6:82:47:44:9d:cd:f7:
3d:5d:f1:6f:d6:c5:b4:9d:f8:8b:10:9a:09:a2:ca:
e8:42:45:f8:6d:66:db:6f:c3:aa:42:5c:cb:12:96:
e0:b2:c7:d9:35:cb:3c:97:10:24:8c:12:fe:73:e9:
f3:3c:a8:93:5b:f2:f9:a6:78:82:c1:27:63:6d:bb:
3f:43:f1:df:68:84:bd:2b:c0:ed:08:77:d3:a4:a1:
58:29:ee:61:f6:6e:6f:7d:3f:e2:d5:0f:b7:9f:dc:
47:46:8a:d1:fd:0f:20:d9:7e:64:ec:4a:56:42:46:
19:71:f6:9d:44:f8:a7:ac:93:17:b4:0f:76:02:7a:
1e:b6:b8:33:95:83:89:eb:54:20:b8:e0:81:16:fe:
84:6a:67:18:3d:4e:40:a8:fa:d5:bb:4a:5e:8c:b9:
c9:8a:cc:8a:40:be:43:a2:9d:c8:4d:de:7e:9b:02:
92:2f:8c:f4:6d:e4:f6:80:ef:03:15:b6:4f:9f:22:
57:36:32:b3:ff:48:cb:39:00:3b:a7:8e:83:29:9f:
70:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:77:7F:5E:E9:79:50:60:E5:8D:4C:0B:3E:98:04:70:65:8A:E1:33
X509v3 Authority Key Identifier:
keyid:2E:72:88:98:2A:DD:83:64:2F:81:A3:DE:BA:8F:85:6F:14:E0:99:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LnKImCrdg2QvgaPeuo-FbxTgmQo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/d5c45a-8448-47b8-b577-af9d695e940f/1/LnKImCrdg2QvgaPeuo-FbxTgmQo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/d5c45a-8448-47b8-b577-af9d695e940f/1/LnKImCrdg2QvgaPeuo-FbxTgmQo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:a7:28:c8:2a:a3:9d:c2:ea:48:f9:3c:c8:e4:99:eb:12:43:
4f:5d:9a:52:4a:1e:0d:fb:6c:39:cb:41:a9:50:4e:38:21:e8:
39:08:96:93:7b:f6:90:43:1b:78:28:b8:1e:6c:4a:60:5b:41:
81:aa:dd:3d:9e:bd:1a:87:80:3a:05:50:19:6c:31:40:bb:b0:
49:11:1a:ca:e0:12:a8:8a:14:ed:b4:9b:6f:21:f8:2d:1f:74:
b8:be:1e:e9:a0:af:85:d5:ee:22:d0:3b:7b:ea:d1:05:a4:ad:
d7:81:9c:79:11:26:3e:03:ed:e6:28:5a:07:fe:56:49:0e:f6:
a1:45:ea:66:94:8d:1b:16:e6:d8:72:8f:5a:94:c6:21:c5:c6:
0c:9a:dc:c7:60:90:e6:47:e5:f8:a0:2f:66:7e:5b:10:7a:a7:
9d:19:cb:21:8a:4e:e3:ab:06:70:a6:65:35:5a:fe:2e:e9:56:
d8:84:95:9e:81:40:8c:4e:e8:32:79:7d:f3:3a:d6:e6:79:0b:
c2:f0:7a:9a:8c:cd:db:c0:44:f8:d1:e0:eb:75:0d:85:a3:3d:
58:ad:70:fe:b8:0d:c8:43:2f:78:28:59:66:1d:3c:07:8f:6c:
f5:bc:a8:69:43:46:c6:a3:88:a1:b0:0f:b3:ec:bf:ee:5e:b8:
c5:2b:94:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 23:53:36 2026 by rpki-client