Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/e17e9a-d3e9-43b1-a2c7-5f65103e6f70/1/LnOM8y5uT5QCIPO4KPB7d-gT0JY.mft
File: LnOM8y5uT5QCIPO4KPB7d-gT0JY.mft (raw, json)
Hash identifier: lEUIr/H7Ty3OjDp2QQQvpRwzf6R4b1mScHmKaC+m/UU=
Subject key identifier: 73:96:47:EA:16:EC:CA:B2:96:6B:AE:96:F1:C9:0E:8A:2E:BC:92:28
Authority key identifier: 2E:73:8C:F3:2E:6E:4F:94:02:20:F3:B8:28:F0:7B:77:E8:13:D0:96
Certificate issuer: /CN=2e738cf32e6e4f940220f3b828f07b77e813d096
Certificate serial: 019D37526E06378FC439A5613057053E0C02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LnOM8y5uT5QCIPO4KPB7d-gT0JY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/e17e9a-d3e9-43b1-a2c7-5f65103e6f70/1/LnOM8y5uT5QCIPO4KPB7d-gT0JY.mft
Manifest number: 07DD
Signing time: Sun 29 Mar 2026 02:00:42 +0000
Manifest this update: Sun 29 Mar 2026 02:00:42 +0000
Manifest next update: Mon 30 Mar 2026 02:00:42 +0000
Files and hashes: 1: LnOM8y5uT5QCIPO4KPB7d-gT0JY.crl (hash: vUmIVZyBlT0FuQ13tVSOARiKRXmWw+0U7GULZdiZx/I=)
2: SLoD8WlsE6Q2x9w7dRO-_5Gjieg.roa (hash: AakEz/uG7k8VdhJpZPmGVxjxcBRrnDPnuAQSdndF1BM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/e17e9a-d3e9-43b1-a2c7-5f65103e6f70/1/LnOM8y5uT5QCIPO4KPB7d-gT0JY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/e17e9a-d3e9-43b1-a2c7-5f65103e6f70/1/LnOM8y5uT5QCIPO4KPB7d-gT0JY.mft
rsync://rpki.ripe.net/repository/DEFAULT/LnOM8y5uT5QCIPO4KPB7d-gT0JY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:52:6e:06:37:8f:c4:39:a5:61:30:57:05:3e:0c:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e738cf32e6e4f940220f3b828f07b77e813d096
Validity
Not Before: Mar 29 02:00:42 2026 GMT
Not After : Mar 30 02:00:42 2026 GMT
Subject: CN=739647ea16eccab2966bae96f1c90e8a2ebc9228
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:c9:08:40:ae:e5:50:d4:0c:18:47:18:5f:c0:
67:61:35:c2:6e:00:b7:86:7b:a6:64:15:0c:24:f2:
ff:4c:5f:64:9d:c4:c4:85:6e:8c:b0:6a:26:2c:f5:
ce:55:88:e3:65:66:a3:17:25:6a:9e:22:e3:2e:c5:
7e:33:43:30:a5:af:74:38:1b:8b:10:d4:66:45:fb:
60:a9:c9:35:0c:02:0b:58:98:e0:8f:64:75:9f:21:
bb:81:bf:eb:85:04:10:58:a0:6b:2c:fb:55:c5:08:
01:35:cf:f7:65:76:16:53:44:2f:11:ea:3a:94:dc:
60:11:c8:e5:0d:28:92:5a:4a:18:c1:9c:5a:55:93:
91:1c:d7:9d:4c:3c:47:f3:b0:68:82:de:ed:02:ee:
e4:29:e5:4e:34:3d:b3:c6:30:bf:86:a4:9a:0a:e1:
e6:20:d2:56:22:0a:5a:4a:bd:e7:aa:e1:4f:62:57:
8d:8d:d8:6a:da:4d:e6:24:c8:58:88:f3:5a:45:f4:
0d:c1:39:d3:0f:7c:3a:5b:f8:60:02:1d:4a:8d:e9:
c3:b1:30:d6:0c:c1:8f:c1:ac:c4:ce:6b:aa:7f:2b:
a4:83:72:f9:9c:16:46:1f:3e:0a:57:88:3a:75:f4:
55:de:d9:59:26:83:fb:a8:bc:92:2f:59:7e:7e:df:
94:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:96:47:EA:16:EC:CA:B2:96:6B:AE:96:F1:C9:0E:8A:2E:BC:92:28
X509v3 Authority Key Identifier:
keyid:2E:73:8C:F3:2E:6E:4F:94:02:20:F3:B8:28:F0:7B:77:E8:13:D0:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LnOM8y5uT5QCIPO4KPB7d-gT0JY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/e17e9a-d3e9-43b1-a2c7-5f65103e6f70/1/LnOM8y5uT5QCIPO4KPB7d-gT0JY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/e17e9a-d3e9-43b1-a2c7-5f65103e6f70/1/LnOM8y5uT5QCIPO4KPB7d-gT0JY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
db:bc:7b:5d:0b:55:5c:55:98:aa:28:83:ee:1b:d8:06:a6:46:
62:f3:e5:53:a8:34:82:14:86:60:11:ce:3f:31:ac:da:3c:a1:
ab:cc:27:8f:e8:28:cc:17:69:a9:5e:b4:0b:95:2e:e0:4f:ad:
91:5e:ee:76:48:3e:c3:0d:ab:2c:ef:3b:51:9d:2a:87:fe:4f:
a7:3e:2c:17:40:9a:86:f6:b9:d6:0d:ef:3e:c9:3f:e3:d7:82:
05:3a:17:9f:ac:a0:7a:b2:97:24:c7:8e:a1:b9:c4:c7:f1:0c:
e5:08:ce:ae:bb:dc:17:0b:7e:9d:19:cd:96:b7:7f:6c:09:ab:
87:77:bf:94:62:36:93:86:a9:6b:32:b1:04:b3:6b:9f:37:a1:
d3:64:3d:99:db:ba:46:b6:48:cd:fe:29:ec:0c:c6:dc:f0:c1:
dd:56:33:f6:fa:65:61:ba:42:5b:48:54:c7:ae:2d:b8:f1:60:
aa:08:80:19:83:4d:6e:05:74:51:8a:83:ca:4e:40:c0:82:73:
29:eb:c7:bf:79:35:5f:23:c5:ed:59:38:b8:fd:26:6b:43:23:
1c:b9:39:df:b5:69:33:55:94:53:26:c9:b4:1c:5e:08:31:71:
c7:be:87:5b:a4:49:ae:3f:e7:55:a6:72:87:9e:d3:a4:62:0a:
a2:35:5e:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:32:07 2026 by rpki-client