Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/3838c4-6e46-49a8-8c14-ae8b8d788700/1/LNpfA-r1E6d_LsIN5bsWcsXSeas.mft
File: LNpfA-r1E6d_LsIN5bsWcsXSeas.mft (raw, json)
Hash identifier: V4Qwl9fiuAlS/BRfQpSwKgqiegDFoZUf9LS3ScqfksI=
Subject key identifier: 29:83:44:27:EC:4F:7B:A5:D6:B6:8B:E9:2D:0E:EE:EF:A8:C0:7A:6A
Authority key identifier: 2C:DA:5F:03:EA:F5:13:A7:7F:2E:C2:0D:E5:BB:16:72:C5:D2:79:AB
Certificate issuer: /CN=2cda5f03eaf513a77f2ec20de5bb1672c5d279ab
Certificate serial: 019D3A1CC7EB07A61BB68191FC9F1BF36A8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LNpfA-r1E6d_LsIN5bsWcsXSeas.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/3838c4-6e46-49a8-8c14-ae8b8d788700/1/LNpfA-r1E6d_LsIN5bsWcsXSeas.mft
Manifest number: 1890
Signing time: Sun 29 Mar 2026 15:00:57 +0000
Manifest this update: Sun 29 Mar 2026 15:00:57 +0000
Manifest next update: Mon 30 Mar 2026 15:00:57 +0000
Files and hashes: 1: LNpfA-r1E6d_LsIN5bsWcsXSeas.crl (hash: TwZRo/NGG/qBnKIYkCK+H/Emyzi6wSqEgR0YimetVSs=)
2: fd8Ev0hcgslfyVKkXYe9Nwx0kyc.roa (hash: ZQjqK7exhVB66BBUdBf2gOZ8d37Zs6sdCNMpDp0YRYQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/3838c4-6e46-49a8-8c14-ae8b8d788700/1/LNpfA-r1E6d_LsIN5bsWcsXSeas.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/3838c4-6e46-49a8-8c14-ae8b8d788700/1/LNpfA-r1E6d_LsIN5bsWcsXSeas.mft
rsync://rpki.ripe.net/repository/DEFAULT/LNpfA-r1E6d_LsIN5bsWcsXSeas.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 15:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:1c:c7:eb:07:a6:1b:b6:81:91:fc:9f:1b:f3:6a:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2cda5f03eaf513a77f2ec20de5bb1672c5d279ab
Validity
Not Before: Mar 29 15:00:57 2026 GMT
Not After : Mar 30 15:00:57 2026 GMT
Subject: CN=29834427ec4f7ba5d6b68be92d0eeeefa8c07a6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:b5:2c:ed:37:b1:3f:e3:92:e0:dd:d7:d4:47:
51:94:1a:a1:b0:7a:5e:ee:11:51:94:fe:cc:9f:09:
cc:2a:19:70:37:ed:e3:d9:c8:c9:13:a4:63:bd:12:
ac:54:37:64:69:5f:b2:8d:29:88:1d:e1:1f:e7:6b:
38:d9:98:01:42:97:bb:7a:18:5d:4c:b8:47:db:91:
f3:59:69:3a:3f:a9:82:e4:21:82:9a:2a:5c:4f:f1:
d3:8a:da:4a:3d:1d:13:29:fb:66:e9:18:5f:74:fc:
04:b5:0c:0d:d3:9c:57:61:84:aa:9c:9f:52:0a:7c:
0a:f5:5f:a4:0c:00:ed:67:5e:f7:38:f0:7e:56:b5:
de:d8:f8:d5:be:6a:a5:a7:43:4f:de:fc:2f:dd:63:
5b:79:f7:3b:22:55:bb:31:7c:9a:42:bd:59:17:ef:
04:cf:d5:bb:53:1d:51:cc:42:b5:00:4b:de:53:4f:
cb:dc:8c:d4:51:97:61:a4:44:69:f3:ff:77:77:11:
d9:b0:ad:72:65:00:d3:26:cb:c1:01:5a:8b:0f:5f:
33:65:1c:fe:1f:53:d6:30:5a:f2:8d:34:43:18:0c:
9c:5d:03:06:24:ef:40:61:91:49:8a:fb:2f:72:a8:
7c:4d:e0:12:7d:35:ed:d4:f0:80:bd:92:48:e2:c2:
f3:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:83:44:27:EC:4F:7B:A5:D6:B6:8B:E9:2D:0E:EE:EF:A8:C0:7A:6A
X509v3 Authority Key Identifier:
keyid:2C:DA:5F:03:EA:F5:13:A7:7F:2E:C2:0D:E5:BB:16:72:C5:D2:79:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LNpfA-r1E6d_LsIN5bsWcsXSeas.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/3838c4-6e46-49a8-8c14-ae8b8d788700/1/LNpfA-r1E6d_LsIN5bsWcsXSeas.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/3838c4-6e46-49a8-8c14-ae8b8d788700/1/LNpfA-r1E6d_LsIN5bsWcsXSeas.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:b4:10:75:a1:a4:3f:f3:8d:02:ed:89:28:5c:ee:59:6c:d2:
cd:f3:3b:c8:e2:c9:7e:50:01:49:71:83:3f:f6:eb:74:36:15:
cd:90:58:a1:40:8a:11:a8:7b:09:7b:b2:bc:c6:25:7d:87:7d:
32:59:45:1c:2d:30:42:8c:f3:34:7f:24:fe:2e:79:32:13:1c:
e4:cc:a7:18:ff:7d:16:a5:eb:9f:b0:46:42:de:a3:f3:65:0c:
69:69:ea:67:4f:2e:b1:6a:c3:c0:e1:60:8d:e1:91:00:a2:2c:
2a:0e:a5:5c:5c:75:f0:34:10:eb:01:fe:12:80:8b:eb:bd:61:
e8:db:f4:e4:8d:1d:f2:da:8d:77:09:5b:a6:30:ab:31:7c:ec:
f9:20:74:97:7f:ce:cb:e2:fa:b7:2d:72:a6:d7:0f:d8:dd:11:
61:2c:f2:37:af:0b:3d:94:cc:1c:9c:bc:5c:2d:b4:90:f4:bf:
9c:ce:06:b3:8d:6b:4d:2c:99:89:1c:a0:22:d2:c2:5a:90:5b:
bf:92:a2:a6:9c:0d:d0:51:a7:c9:88:df:f5:1e:e6:be:c6:7b:
68:b3:35:1c:58:3b:61:51:57:3f:32:80:cd:6b:b7:e3:af:d4:
b9:c9:55:f5:4b:ef:ea:a4:f8:5c:b0:e2:de:00:c7:11:b4:af:
a8:f9:40:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:22:30 2026 by rpki-client