Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/1ad9bf-0322-4534-b009-e6e91bf052fe/1/LNQbzDzXPg3H9-lbXQ3KbWhXvtw.mft
File: LNQbzDzXPg3H9-lbXQ3KbWhXvtw.mft (raw, json)
Hash identifier: B6Fln0dWdq3rj70OAq3xMrpfrCM+PgtmGOO2OaR/M8k=
Subject key identifier: 1E:3C:5C:27:A6:BA:50:2D:F2:F3:A4:5C:9E:11:42:07:5F:01:3B:85
Authority key identifier: 2C:D4:1B:CC:3C:D7:3E:0D:C7:F7:E9:5B:5D:0D:CA:6D:68:57:BE:DC
Certificate issuer: /CN=2cd41bcc3cd73e0dc7f7e95b5d0dca6d6857bedc
Certificate serial: 019EB733AC1554BC8A03E7CEDDFBD1363B58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LNQbzDzXPg3H9-lbXQ3KbWhXvtw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/1ad9bf-0322-4534-b009-e6e91bf052fe/1/LNQbzDzXPg3H9-lbXQ3KbWhXvtw.mft
Manifest number: 194F
Signing time: Thu 11 Jun 2026 15:01:17 +0000
Manifest this update: Thu 11 Jun 2026 15:01:17 +0000
Manifest next update: Fri 12 Jun 2026 15:01:17 +0000
Files and hashes: 1: 9UXsLKG5ISnWSEO-TCG0hlAjiEY.roa (hash: SyhzNR0OFmBqX9d1/jz00jh2vv/1QKU6100ZrfZ9Ouk=)
2: LNQbzDzXPg3H9-lbXQ3KbWhXvtw.crl (hash: v/OTxN+dm9q3nh1KnkJtYOPrLZRnGYiR/eJZB/4N1pY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/1ad9bf-0322-4534-b009-e6e91bf052fe/1/LNQbzDzXPg3H9-lbXQ3KbWhXvtw.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/1ad9bf-0322-4534-b009-e6e91bf052fe/1/LNQbzDzXPg3H9-lbXQ3KbWhXvtw.mft
rsync://rpki.ripe.net/repository/DEFAULT/LNQbzDzXPg3H9-lbXQ3KbWhXvtw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 13:27:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b7:33:ac:15:54:bc:8a:03:e7:ce:dd:fb:d1:36:3b:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2cd41bcc3cd73e0dc7f7e95b5d0dca6d6857bedc
Validity
Not Before: Jun 11 15:01:17 2026 GMT
Not After : Jun 12 15:01:17 2026 GMT
Subject: CN=1e3c5c27a6ba502df2f3a45c9e1142075f013b85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:e1:66:a5:86:65:b0:17:f3:f7:2a:54:2b:08:
b0:d1:3a:f4:ee:f9:62:4a:25:b7:b8:d9:57:af:41:
bd:23:cc:d0:bb:9f:c3:9f:d4:24:5f:ea:0d:30:ff:
77:3f:a0:b3:b3:89:c2:01:77:b2:29:ab:e8:c5:67:
00:15:7e:7e:f4:d3:22:f9:57:ea:df:72:54:71:2c:
70:5b:f9:d3:07:ca:cc:0d:eb:04:5a:09:81:0d:60:
cf:08:48:b2:52:3a:b8:2d:91:5d:59:c0:d6:b9:bb:
3f:7d:77:b8:26:96:6e:92:95:cc:af:38:92:9a:cd:
84:46:67:0b:3a:af:6e:83:0b:e2:63:13:cb:9e:16:
77:5e:a1:7a:01:ed:99:e9:e6:72:20:31:8a:95:c8:
0c:fe:0d:c7:c5:b0:81:0f:9f:c6:9c:da:c3:21:ab:
a9:ad:37:99:5d:30:e9:be:b4:a6:74:f4:1a:e4:1c:
5c:4a:e9:6c:55:df:10:ab:86:ea:71:1d:63:b0:72:
43:e1:d3:bd:f7:ce:51:73:c6:c3:b2:32:1f:68:ea:
91:1e:4e:1c:e3:3b:68:61:70:44:74:19:01:d5:73:
9d:09:e9:d7:45:f2:dd:dc:1b:70:06:97:e4:08:05:
2b:b1:d4:4a:62:ba:75:f4:67:43:5f:81:ef:3a:42:
b4:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:3C:5C:27:A6:BA:50:2D:F2:F3:A4:5C:9E:11:42:07:5F:01:3B:85
X509v3 Authority Key Identifier:
keyid:2C:D4:1B:CC:3C:D7:3E:0D:C7:F7:E9:5B:5D:0D:CA:6D:68:57:BE:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LNQbzDzXPg3H9-lbXQ3KbWhXvtw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/1ad9bf-0322-4534-b009-e6e91bf052fe/1/LNQbzDzXPg3H9-lbXQ3KbWhXvtw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/1ad9bf-0322-4534-b009-e6e91bf052fe/1/LNQbzDzXPg3H9-lbXQ3KbWhXvtw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ca:eb:0f:48:11:e2:56:af:38:b6:18:38:16:3e:d1:ef:ff:5a:
49:b0:5e:df:ea:f4:00:5d:1b:4e:52:e4:97:fd:33:d4:84:e2:
37:cf:40:62:66:3a:ae:4f:06:a5:a7:96:06:4c:f4:54:e7:7c:
a6:ad:af:b3:f7:8d:3a:e4:dd:7b:82:78:5a:07:26:a7:d1:d4:
84:51:d4:08:49:02:a5:15:78:41:f8:fe:9a:35:55:40:0c:e2:
df:64:89:1d:b5:08:81:45:6a:ce:df:54:49:c1:e4:06:4f:48:
a2:b9:17:56:95:e8:0b:79:86:89:a3:da:d3:c0:5c:d8:ca:ad:
bb:5a:46:5f:f5:b7:7a:68:fa:9e:d2:06:27:ae:a2:5f:5f:38:
ba:0a:69:a0:eb:13:5a:b0:59:c9:58:fe:89:55:0a:5e:aa:0e:
32:c9:df:f0:09:f7:0a:71:3c:e4:8e:8e:90:4d:fc:4a:75:2b:
4f:31:d1:21:51:c1:24:d9:2d:a6:f3:e3:95:20:4e:eb:66:6d:
cd:dc:6d:9b:f8:e9:85:1a:1b:ab:41:88:d4:5e:72:b0:11:ad:
d7:46:f4:5b:cd:2f:4a:e6:f9:7c:18:ec:76:f1:62:e2:c4:5c:
67:75:ef:06:f1:00:fa:0f:83:02:66:db:b7:a2:16:0e:77:33:
1a:39:15:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 22:42:27 2026 by rpki-client