Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/ecbffa-1166-4d1e-9f55-11575db64fbe/1/LBKCZbgJkXiNhuImLpM5A4tO-oI.mft
File: LBKCZbgJkXiNhuImLpM5A4tO-oI.mft (raw, json)
Hash identifier: neWBL+TLpp+pR0ABs2e/csrkMuzJzP5IgEgB93lU7iE=
Subject key identifier: 9F:18:14:DC:18:19:37:5D:36:4B:A1:FD:0D:6F:C1:D0:7D:70:E5:C2
Authority key identifier: 2C:12:82:65:B8:09:91:78:8D:86:E2:26:2E:93:39:03:8B:4E:FA:82
Certificate issuer: /CN=2c128265b80991788d86e2262e9339038b4efa82
Certificate serial: 019D37F7428B64799290D70183BDDEE36FCD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LBKCZbgJkXiNhuImLpM5A4tO-oI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/ecbffa-1166-4d1e-9f55-11575db64fbe/1/LBKCZbgJkXiNhuImLpM5A4tO-oI.mft
Manifest number: 041F
Signing time: Sun 29 Mar 2026 05:00:44 +0000
Manifest this update: Sun 29 Mar 2026 05:00:44 +0000
Manifest next update: Mon 30 Mar 2026 05:00:44 +0000
Files and hashes: 1: Edwl4zoG96dbPmsUFIhkRgXADTQ.roa (hash: IM2GNpBVkyKGNEQ7blWR/nLPMnuseIERVwBOhweWa0c=)
2: LBKCZbgJkXiNhuImLpM5A4tO-oI.crl (hash: 7/ljwOXTFy5VkBjkMxipbUAVMrGFPJLV3APtAIqxXGw=)
3: SiTvdADyt2fD0BmQero13SpoFlc.roa (hash: Rvbprp9eKcxJ4n+nMPmN6bW/SfzHf4iedPaOjtazvI8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/ecbffa-1166-4d1e-9f55-11575db64fbe/1/LBKCZbgJkXiNhuImLpM5A4tO-oI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/ecbffa-1166-4d1e-9f55-11575db64fbe/1/LBKCZbgJkXiNhuImLpM5A4tO-oI.mft
rsync://rpki.ripe.net/repository/DEFAULT/LBKCZbgJkXiNhuImLpM5A4tO-oI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f7:42:8b:64:79:92:90:d7:01:83:bd:de:e3:6f:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c128265b80991788d86e2262e9339038b4efa82
Validity
Not Before: Mar 29 05:00:44 2026 GMT
Not After : Mar 30 05:00:44 2026 GMT
Subject: CN=9f1814dc1819375d364ba1fd0d6fc1d07d70e5c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:2c:77:7f:a0:a6:f8:0e:fb:95:26:58:fd:46:
40:42:75:38:d2:69:cc:cb:4f:5f:52:a0:b4:49:37:
85:8f:65:51:54:d7:a4:6e:a3:0e:c4:2a:65:9b:1b:
a7:d8:a2:5d:bb:20:4a:a4:c1:e8:3c:d1:e8:2f:f9:
9a:70:96:a8:ee:59:4b:4a:01:bd:a5:23:8f:b8:c7:
5b:87:64:58:73:bd:2d:b4:55:8b:47:5b:ea:1f:f2:
36:8f:5c:40:2f:b1:f4:a9:c8:18:e0:2d:8a:e1:21:
cc:2a:4b:1e:cd:5e:79:0e:b0:ee:9c:a2:1e:8b:2c:
ab:ff:67:c1:06:80:6e:f5:ba:23:98:6c:1b:00:21:
40:eb:df:48:f9:78:a1:f7:49:33:6d:4b:0d:04:c5:
a1:30:fa:30:2a:44:96:ce:29:a3:b0:3c:14:ba:07:
9a:88:75:fe:9b:f7:c1:a1:6b:0e:46:38:54:2d:bb:
53:bf:6f:30:54:ed:69:0d:3a:45:52:61:43:4e:6c:
8e:cd:f7:5b:7e:f2:b8:a7:3c:94:90:a2:6a:05:dd:
e4:2d:11:5d:5e:31:db:d2:86:54:b3:f5:5d:66:a2:
26:5e:b8:01:9e:f2:74:88:e0:83:99:77:51:19:69:
e8:ba:93:5b:70:4b:e1:e2:4a:38:e5:f7:9b:7a:cd:
b4:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:18:14:DC:18:19:37:5D:36:4B:A1:FD:0D:6F:C1:D0:7D:70:E5:C2
X509v3 Authority Key Identifier:
keyid:2C:12:82:65:B8:09:91:78:8D:86:E2:26:2E:93:39:03:8B:4E:FA:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LBKCZbgJkXiNhuImLpM5A4tO-oI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/ecbffa-1166-4d1e-9f55-11575db64fbe/1/LBKCZbgJkXiNhuImLpM5A4tO-oI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/ecbffa-1166-4d1e-9f55-11575db64fbe/1/LBKCZbgJkXiNhuImLpM5A4tO-oI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:37:f7:49:f5:d8:21:e6:a1:29:12:22:65:40:25:69:0d:d6:
4e:2a:90:69:26:05:73:c9:fd:bd:78:c7:1d:f5:02:64:c5:2b:
da:79:1a:a2:a3:e1:c6:74:f2:54:44:e9:44:5f:c4:32:56:2f:
9d:34:2e:3c:82:9d:60:43:3d:a0:b3:b2:c0:cd:27:2f:52:e9:
a4:09:e1:96:5d:2b:97:a7:81:1e:47:72:00:33:b8:65:c9:eb:
d7:b2:17:c4:f0:92:99:16:0c:fe:85:2d:cf:36:d1:32:dc:f0:
f5:66:c0:13:e1:66:44:ed:0c:f8:e8:4c:5c:9e:ed:8c:51:f7:
f4:f2:84:cb:6f:71:31:ea:7a:9b:8a:08:2c:c7:2d:62:54:a6:
be:c1:4b:6c:bc:2d:5e:85:a3:ed:5b:ba:77:75:a6:9b:19:c2:
2b:ba:33:fe:00:b1:ec:08:66:9a:9c:0e:ac:e3:5e:a5:37:ed:
95:9d:68:ef:d8:30:5e:4f:cf:a4:e7:c1:8f:67:11:ce:16:14:
91:14:91:d6:cd:3e:c7:df:96:ee:e5:59:18:eb:cb:6d:e3:7a:
fa:87:9a:f5:59:60:b9:dd:24:92:c4:53:35:1e:22:30:4c:0b:
74:c4:f7:38:c9:af:77:6d:29:e1:41:ce:bd:bd:77:3e:23:ba:
a0:2b:74:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:29:30 2026 by rpki-client