Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a0/d5c45a-8448-47b8-b577-af9d695e940f/1/LnKImCrdg2QvgaPeuo-FbxTgmQo.mft
File: LnKImCrdg2QvgaPeuo-FbxTgmQo.mft (raw, json)
Hash identifier: hQhPVdoUtXl0k++YNNQQdbZfVcO+dR3DVpsp9IR4/VM=
Subject key identifier: 32:68:FC:01:1D:E5:2C:1F:AB:9F:17:81:FB:AD:25:BD:31:29:32:39
Authority key identifier: 2E:72:88:98:2A:DD:83:64:2F:81:A3:DE:BA:8F:85:6F:14:E0:99:0A
Certificate issuer: /CN=2e7288982add83642f81a3deba8f856f14e0990a
Certificate serial: 01A17B4D1EB8B7312A7B9FB4823E8DD82E89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LnKImCrdg2QvgaPeuo-FbxTgmQo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/d5c45a-8448-47b8-b577-af9d695e940f/1/LnKImCrdg2QvgaPeuo-FbxTgmQo.mft
Manifest number: 1695
Signing time: Tue 27 Oct 2026 03:00:13 +0000
Manifest this update: Tue 27 Oct 2026 03:00:13 +0000
Manifest next update: Wed 28 Oct 2026 03:00:13 +0000
Files and hashes: 1: LnKImCrdg2QvgaPeuo-FbxTgmQo.crl (hash: TQ2dStrB/2kjXjpliqjpSUSsC+7m6OgvUXWcNWhYClw=)
2: PdB7yHgtRY5AbRPzGQ7Kal7stk0.roa (hash: ZfhLG4tdAsP3dDzk6eFVvwC/Pe3dDXcwaTLLVzg2Rko=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/d5c45a-8448-47b8-b577-af9d695e940f/1/LnKImCrdg2QvgaPeuo-FbxTgmQo.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/d5c45a-8448-47b8-b577-af9d695e940f/1/LnKImCrdg2QvgaPeuo-FbxTgmQo.mft
rsync://rpki.ripe.net/repository/DEFAULT/LnKImCrdg2QvgaPeuo-FbxTgmQo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 03:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7b:4d:1e:b8:b7:31:2a:7b:9f:b4:82:3e:8d:d8:2e:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e7288982add83642f81a3deba8f856f14e0990a
Validity
Not Before: Oct 27 03:00:13 2026 GMT
Not After : Oct 28 03:00:13 2026 GMT
Subject: CN=3268fc011de52c1fab9f1781fbad25bd31293239
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:83:0b:5e:82:0a:7f:89:af:b2:a9:b1:5e:de:
79:2c:4e:97:aa:2f:d7:c5:c2:a7:25:22:d0:34:ce:
54:26:f4:01:cf:85:87:7b:95:29:68:01:56:4b:23:
01:1d:cb:28:0f:6d:d2:3c:2a:81:11:97:b0:d8:78:
ea:86:5a:ac:85:be:d7:5b:4a:1e:78:78:0d:e5:93:
6b:4d:53:e2:a4:3a:0e:30:46:ed:a8:42:96:b1:88:
b2:05:34:53:11:14:1f:03:25:38:50:68:fe:4e:e1:
ee:b8:79:71:21:bd:72:a9:91:5e:a3:36:86:a2:59:
67:84:06:0e:05:45:82:48:cb:4b:8b:22:09:fc:1d:
d8:71:0a:78:c2:8c:c8:59:63:1f:3a:23:86:b0:80:
58:25:be:f0:70:4d:0b:52:75:a6:3b:20:ae:e3:36:
c4:fd:5e:c3:8c:8c:24:d9:2b:29:a7:e6:e0:cc:d0:
ce:9a:94:7e:1f:c7:bd:69:5d:f5:29:a0:88:fd:d0:
74:80:0c:cc:0d:92:99:e1:4b:81:1a:6b:b2:92:3c:
86:d9:88:7b:ec:f9:4b:59:f2:da:9a:ed:c3:f3:8a:
72:65:28:3f:bd:62:79:39:d0:17:3b:d7:67:ae:8f:
fa:92:d7:4c:87:84:7a:bf:02:c0:f8:a5:72:3b:23:
d1:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:68:FC:01:1D:E5:2C:1F:AB:9F:17:81:FB:AD:25:BD:31:29:32:39
X509v3 Authority Key Identifier:
keyid:2E:72:88:98:2A:DD:83:64:2F:81:A3:DE:BA:8F:85:6F:14:E0:99:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LnKImCrdg2QvgaPeuo-FbxTgmQo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/d5c45a-8448-47b8-b577-af9d695e940f/1/LnKImCrdg2QvgaPeuo-FbxTgmQo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/d5c45a-8448-47b8-b577-af9d695e940f/1/LnKImCrdg2QvgaPeuo-FbxTgmQo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:45:50:48:8b:ab:1a:14:e4:ee:fc:2a:b7:40:cd:aa:83:37:
24:8a:11:ff:91:9c:85:8c:d2:1c:4b:0b:95:4a:ae:8c:1d:f9:
e6:9f:25:ae:ac:a6:ec:f6:e4:66:2a:6a:16:be:ec:fb:f7:da:
90:05:6a:13:db:f1:24:d8:3c:f4:5f:27:35:f1:e3:8e:43:05:
2a:5b:9a:f8:74:c4:e3:53:95:e6:42:e6:84:fd:c2:d2:d4:41:
c5:df:d6:b1:28:7d:33:df:65:2e:63:0f:da:83:f7:fb:d6:a4:
5a:3e:52:e1:bb:c6:93:87:05:ae:7b:88:5d:4e:b7:19:9a:08:
47:27:4b:80:18:28:c0:e9:ed:3a:80:de:68:73:c8:28:b4:c7:
00:3d:82:20:65:2a:cb:71:a9:a0:38:20:4f:f4:b3:b2:65:ee:
56:8d:47:05:0d:a3:a6:ef:23:a4:c9:f4:ef:9d:d9:d5:76:e4:
13:b7:69:1b:63:80:25:d3:9b:df:9d:f8:43:52:22:a5:69:59:
25:cd:f5:2b:e2:e7:9b:d7:32:d7:27:91:cf:a6:47:49:b1:bb:
c9:bd:6b:56:8e:57:fd:4f:86:cf:85:9c:55:79:40:35:f0:a3:
bb:02:49:ac:10:54:28:0e:d0:d8:31:7a:66:51:33:82:2c:a2:
bd:17:1f:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 08:51:46 2026 by rpki-client