Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/dd/1ad9bf-0322-4534-b009-e6e91bf052fe/1/LNQbzDzXPg3H9-lbXQ3KbWhXvtw.mft
File: LNQbzDzXPg3H9-lbXQ3KbWhXvtw.mft (raw, json)
Hash identifier: a6Pk3q+8WcVVM9yE1tx+xWrhsm9WWbckK7ypOPNyKO8=
Subject key identifier: 67:7D:B0:B8:B1:C5:56:24:B6:E4:F1:90:70:AB:73:C8:8E:57:D0:9F
Authority key identifier: 2C:D4:1B:CC:3C:D7:3E:0D:C7:F7:E9:5B:5D:0D:CA:6D:68:57:BE:DC
Certificate issuer: /CN=2cd41bcc3cd73e0dc7f7e95b5d0dca6d6857bedc
Certificate serial: 01A18B65647DD50375D8C3B77379353122C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LNQbzDzXPg3H9-lbXQ3KbWhXvtw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/1ad9bf-0322-4534-b009-e6e91bf052fe/1/LNQbzDzXPg3H9-lbXQ3KbWhXvtw.mft
Manifest number: 1AC6
Signing time: Fri 30 Oct 2026 06:00:40 +0000
Manifest this update: Fri 30 Oct 2026 06:00:40 +0000
Manifest next update: Sat 31 Oct 2026 06:00:40 +0000
Files and hashes: 1: 9UXsLKG5ISnWSEO-TCG0hlAjiEY.roa (hash: SyhzNR0OFmBqX9d1/jz00jh2vv/1QKU6100ZrfZ9Ouk=)
2: LNQbzDzXPg3H9-lbXQ3KbWhXvtw.crl (hash: ql4Z97r9Hyya7sp0GQXrrCjxmjvSVZZUQQnb/JFJ2I4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/1ad9bf-0322-4534-b009-e6e91bf052fe/1/LNQbzDzXPg3H9-lbXQ3KbWhXvtw.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/1ad9bf-0322-4534-b009-e6e91bf052fe/1/LNQbzDzXPg3H9-lbXQ3KbWhXvtw.mft
rsync://rpki.ripe.net/repository/DEFAULT/LNQbzDzXPg3H9-lbXQ3KbWhXvtw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 31 Oct 2026 06:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:8b:65:64:7d:d5:03:75:d8:c3:b7:73:79:35:31:22:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2cd41bcc3cd73e0dc7f7e95b5d0dca6d6857bedc
Validity
Not Before: Oct 30 06:00:40 2026 GMT
Not After : Oct 31 06:00:40 2026 GMT
Subject: CN=677db0b8b1c55624b6e4f19070ab73c88e57d09f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:8f:f8:dd:a6:1d:55:66:61:37:fa:c6:83:30:
1e:94:c8:ff:05:7e:1d:8e:fb:b3:06:36:17:a8:98:
70:13:ea:33:ec:eb:d8:00:1b:4c:06:73:5b:2d:9b:
ce:8e:2c:6d:23:62:5f:b9:0b:3f:1e:a6:60:81:80:
43:bf:5d:a0:cc:6b:32:22:f9:0b:a7:7f:98:0f:a4:
66:cf:b4:77:1c:92:dd:a3:7e:03:58:0e:96:dd:49:
4d:c7:f7:79:f7:41:71:64:84:d3:21:3b:94:c8:6e:
73:c2:86:a8:2e:03:ff:3a:20:35:53:49:ed:7b:56:
3a:f1:ee:13:a8:e6:6a:83:14:8d:cf:99:e8:86:56:
f0:eb:a1:d3:b4:cc:17:f0:3e:7b:b3:5b:f3:e5:52:
1b:17:a4:c6:df:79:51:c6:ec:2d:d4:cc:6a:0e:bd:
b4:4e:79:64:7e:6e:a1:2c:d4:b6:79:6f:3b:b1:f4:
af:b5:f3:18:bf:2c:82:dd:47:72:4e:16:08:22:2f:
e8:9b:59:4f:83:28:14:08:e3:75:76:3f:d0:b2:c8:
1d:47:30:f7:51:ea:5b:dc:8c:90:79:61:45:01:09:
23:43:8e:ac:60:9c:60:b5:2b:64:9a:76:06:e2:2f:
b4:2b:44:4b:eb:c6:3d:79:f1:0e:cd:34:80:2f:b4:
16:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:7D:B0:B8:B1:C5:56:24:B6:E4:F1:90:70:AB:73:C8:8E:57:D0:9F
X509v3 Authority Key Identifier:
keyid:2C:D4:1B:CC:3C:D7:3E:0D:C7:F7:E9:5B:5D:0D:CA:6D:68:57:BE:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LNQbzDzXPg3H9-lbXQ3KbWhXvtw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/1ad9bf-0322-4534-b009-e6e91bf052fe/1/LNQbzDzXPg3H9-lbXQ3KbWhXvtw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/1ad9bf-0322-4534-b009-e6e91bf052fe/1/LNQbzDzXPg3H9-lbXQ3KbWhXvtw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:1d:68:a7:70:e1:42:6f:f5:76:2c:4b:01:b6:ae:42:d9:36:
fa:35:e2:8d:15:f6:af:c9:90:a2:85:c7:13:53:9c:f8:fe:a2:
c0:b6:d3:d3:76:34:78:72:ae:a6:cb:5b:67:fb:5b:3b:c9:70:
06:9e:1f:54:c8:56:b9:3c:bf:a0:ef:e9:a2:27:1a:e0:8d:bd:
d6:4e:57:21:93:5d:45:08:07:29:8a:92:6f:49:84:7a:51:3f:
09:9f:fb:7a:e0:75:e5:e7:1a:29:45:41:8a:f3:33:73:eb:17:
0d:d7:98:cd:24:ef:e0:9b:86:cc:40:79:aa:d5:55:65:03:aa:
53:4f:da:a9:22:dd:f8:98:85:e7:3a:b8:2b:5d:07:5a:08:8a:
1e:b9:9f:31:11:50:ed:69:8f:90:3a:07:cf:45:53:1a:87:ca:
92:2d:79:c8:76:5c:8f:ae:a6:12:b7:7f:aa:d8:6a:63:de:ab:
69:27:44:77:3e:ee:20:59:30:e1:e1:8d:ec:eb:6e:93:ed:98:
c5:b4:47:de:d0:63:a9:86:0c:f9:d0:2b:1a:6e:57:24:7e:b5:
c8:6a:e1:fd:1b:a7:4c:b6:76:0c:11:70:0f:57:20:d7:53:3f:
30:af:dd:cb:66:40:c5:78:2a:7e:c8:15:d4:50:c3:46:fc:8e:
cf:39:f7:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 30 14:26:37 2026 by rpki-client