Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/dd/1ad9bf-0322-4534-b009-e6e91bf052fe/1/LNQbzDzXPg3H9-lbXQ3KbWhXvtw.mft
File: LNQbzDzXPg3H9-lbXQ3KbWhXvtw.mft (raw, json)
Hash identifier: XuvSMeCjtU3yND9OpzymO1cok4KvJHo0cSeO4ogJFRo=
Subject key identifier: BF:20:8C:CF:AC:8C:8C:AB:98:65:72:7E:FF:CF:74:7B:5F:6E:2E:0D
Authority key identifier: 2C:D4:1B:CC:3C:D7:3E:0D:C7:F7:E9:5B:5D:0D:CA:6D:68:57:BE:DC
Certificate issuer: /CN=2cd41bcc3cd73e0dc7f7e95b5d0dca6d6857bedc
Certificate serial: 01A08A8C4ADA93C0DC9112AB1367FECFFB5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LNQbzDzXPg3H9-lbXQ3KbWhXvtw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/1ad9bf-0322-4534-b009-e6e91bf052fe/1/LNQbzDzXPg3H9-lbXQ3KbWhXvtw.mft
Manifest number: 1A41
Signing time: Thu 10 Sep 2026 09:00:44 +0000
Manifest this update: Thu 10 Sep 2026 09:00:44 +0000
Manifest next update: Fri 11 Sep 2026 09:00:44 +0000
Files and hashes: 1: 9UXsLKG5ISnWSEO-TCG0hlAjiEY.roa (hash: SyhzNR0OFmBqX9d1/jz00jh2vv/1QKU6100ZrfZ9Ouk=)
2: LNQbzDzXPg3H9-lbXQ3KbWhXvtw.crl (hash: +8Yy2SmxE8Ekn7oUOTBCA9Xbhi3IHrFmAg+M7Lz3IRQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/1ad9bf-0322-4534-b009-e6e91bf052fe/1/LNQbzDzXPg3H9-lbXQ3KbWhXvtw.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/1ad9bf-0322-4534-b009-e6e91bf052fe/1/LNQbzDzXPg3H9-lbXQ3KbWhXvtw.mft
rsync://rpki.ripe.net/repository/DEFAULT/LNQbzDzXPg3H9-lbXQ3KbWhXvtw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 09:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:8c:4a:da:93:c0:dc:91:12:ab:13:67:fe:cf:fb:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2cd41bcc3cd73e0dc7f7e95b5d0dca6d6857bedc
Validity
Not Before: Sep 10 09:00:44 2026 GMT
Not After : Sep 11 09:00:44 2026 GMT
Subject: CN=bf208ccfac8c8cab9865727effcf747b5f6e2e0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:cb:44:bb:60:ab:8a:ed:d2:38:63:87:46:a0:
03:94:25:e8:4e:80:85:02:09:45:a4:bd:c9:9a:ea:
e5:e0:d7:e6:0a:26:31:80:80:e9:2a:7a:2c:cb:01:
53:a7:51:3f:f6:c8:2c:4e:8a:a7:7a:6a:c6:7a:55:
82:a9:f6:8d:19:cc:62:14:ff:d5:df:0c:91:dc:7f:
1b:ec:1a:b7:1a:5e:06:3d:c0:7d:fe:16:a9:b4:48:
88:3e:49:89:54:57:80:e8:f3:de:71:2c:70:dd:9f:
9e:a5:6d:44:3e:df:0d:cd:3d:32:32:5a:72:5d:f4:
7b:c5:8c:9d:2e:14:86:15:b6:a6:2f:98:53:bd:be:
23:08:f2:18:d0:63:04:55:26:90:9a:06:58:1d:df:
1b:80:cb:08:3d:9d:02:d4:1c:a3:c3:5a:eb:cc:1f:
3c:df:89:c1:8f:30:31:ba:db:45:47:29:2d:80:e1:
f6:1f:43:d6:b7:d0:38:9a:52:d0:b2:04:1b:e6:4b:
16:f9:42:80:44:3b:99:f3:fc:ae:92:cc:e2:a2:3f:
f0:21:44:88:e1:f8:36:ea:7e:92:d2:1b:b5:c8:31:
1c:6f:42:d1:4b:d9:b6:94:62:26:b2:6e:be:8a:0a:
a2:d1:14:f8:ce:02:c5:69:7a:a2:ac:a9:85:9f:ad:
09:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:20:8C:CF:AC:8C:8C:AB:98:65:72:7E:FF:CF:74:7B:5F:6E:2E:0D
X509v3 Authority Key Identifier:
keyid:2C:D4:1B:CC:3C:D7:3E:0D:C7:F7:E9:5B:5D:0D:CA:6D:68:57:BE:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LNQbzDzXPg3H9-lbXQ3KbWhXvtw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/1ad9bf-0322-4534-b009-e6e91bf052fe/1/LNQbzDzXPg3H9-lbXQ3KbWhXvtw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/1ad9bf-0322-4534-b009-e6e91bf052fe/1/LNQbzDzXPg3H9-lbXQ3KbWhXvtw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:c2:f6:c4:2b:41:11:0e:37:24:98:0b:4b:0c:c3:f6:60:71:
fb:52:74:80:5c:79:56:66:6b:3f:67:d4:05:61:59:4d:29:01:
55:bb:d6:9e:e7:ef:4e:99:65:63:b9:00:f0:a2:3b:6c:a3:47:
61:b3:98:5d:f5:7a:d7:7c:f6:32:14:37:f3:6b:57:e6:89:d5:
17:f6:af:b1:8f:4e:fe:6b:29:e7:44:ab:e8:8d:61:8b:0d:92:
7f:28:48:ec:e4:5b:01:5b:48:1a:1a:6c:f8:24:b8:96:8f:bb:
a0:f9:ae:3e:99:e7:22:80:d5:0e:c5:01:ed:f1:5d:ac:6c:e8:
bc:a1:d3:55:11:04:51:f6:eb:43:30:2b:42:ae:f7:75:f3:9b:
84:20:e3:d2:cc:53:51:de:77:4d:3d:54:2d:c9:b9:6f:3d:5d:
13:15:20:3a:18:16:7c:13:af:b1:d9:53:1e:a4:e5:d9:47:61:
75:2c:c9:1a:f2:9d:a2:8c:a8:6e:63:a9:a0:fa:fe:50:ad:a8:
0e:6d:2d:02:f3:a4:bb:a1:bd:6b:8d:d9:4e:bb:03:67:66:73:
99:b2:4d:a0:f2:b2:f1:e3:f2:c1:a1:be:fd:2e:fd:0a:8f:e7:
cb:94:11:4d:13:8c:92:6a:b6:80:80:69:c1:71:02:fe:6e:23:
61:d5:99:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 17:30:45 2026 by rpki-client