Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/1ad9bf-0322-4534-b009-e6e91bf052fe/1/LNQbzDzXPg3H9-lbXQ3KbWhXvtw.mft
File: LNQbzDzXPg3H9-lbXQ3KbWhXvtw.mft (raw, json)
Hash identifier: i5/ha/Knt7HaNdqxrMQGoQV7b/dxCvI2x8VOeps+EGw=
Subject key identifier: 3A:E3:61:E6:25:21:58:38:41:1F:79:60:D6:5B:5F:12:EF:F1:FC:F3
Authority key identifier: 2C:D4:1B:CC:3C:D7:3E:0D:C7:F7:E9:5B:5D:0D:CA:6D:68:57:BE:DC
Certificate issuer: /CN=2cd41bcc3cd73e0dc7f7e95b5d0dca6d6857bedc
Certificate serial: 019D38D34B324FD084F57603F66EFD71EAD0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LNQbzDzXPg3H9-lbXQ3KbWhXvtw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/1ad9bf-0322-4534-b009-e6e91bf052fe/1/LNQbzDzXPg3H9-lbXQ3KbWhXvtw.mft
Manifest number: 1889
Signing time: Sun 29 Mar 2026 09:01:04 +0000
Manifest this update: Sun 29 Mar 2026 09:01:04 +0000
Manifest next update: Mon 30 Mar 2026 09:01:04 +0000
Files and hashes: 1: 9UXsLKG5ISnWSEO-TCG0hlAjiEY.roa (hash: SyhzNR0OFmBqX9d1/jz00jh2vv/1QKU6100ZrfZ9Ouk=)
2: LNQbzDzXPg3H9-lbXQ3KbWhXvtw.crl (hash: sNqCQqBpg06ccLaMH9H9FtT3F2HjStY6Aux5oodfcBw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/1ad9bf-0322-4534-b009-e6e91bf052fe/1/LNQbzDzXPg3H9-lbXQ3KbWhXvtw.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/1ad9bf-0322-4534-b009-e6e91bf052fe/1/LNQbzDzXPg3H9-lbXQ3KbWhXvtw.mft
rsync://rpki.ripe.net/repository/DEFAULT/LNQbzDzXPg3H9-lbXQ3KbWhXvtw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:4b:32:4f:d0:84:f5:76:03:f6:6e:fd:71:ea:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2cd41bcc3cd73e0dc7f7e95b5d0dca6d6857bedc
Validity
Not Before: Mar 29 09:01:04 2026 GMT
Not After : Mar 30 09:01:04 2026 GMT
Subject: CN=3ae361e625215838411f7960d65b5f12eff1fcf3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:98:d8:63:30:aa:8f:35:35:32:1a:96:19:6c:
92:78:68:36:6b:f3:06:92:54:06:b0:56:4f:29:e8:
39:e6:d5:e4:65:69:b7:aa:31:90:16:d3:de:2e:14:
5c:3c:5a:0a:f6:11:ae:d1:b2:79:7e:1c:b8:a5:6b:
fb:24:b4:43:67:e1:6c:d4:14:1e:ac:2d:49:0f:96:
be:de:29:1c:13:27:ba:f4:8f:3c:9c:dc:bc:3a:80:
9d:f8:da:65:2d:c3:b5:4a:aa:3b:bf:a7:f0:61:20:
e1:fe:d3:3f:85:56:8c:f1:c9:25:f8:26:31:bb:70:
b3:4a:6a:a7:8a:21:75:68:c3:9e:1c:64:1d:3c:c4:
5d:df:b0:ef:22:cb:70:d0:83:5a:e8:22:11:f6:4a:
72:ac:1e:4e:34:ed:86:92:e9:fe:f9:bd:51:8b:8f:
cc:63:4b:04:89:e2:48:99:01:26:75:42:ca:58:a1:
60:f4:f7:7f:2c:c9:5a:67:7f:0a:48:54:6d:00:5d:
a2:42:4b:10:78:d2:08:76:d7:c1:42:3e:cf:8e:a0:
f2:87:68:fa:32:57:19:69:b0:f7:00:2b:86:1a:9e:
61:37:ec:e2:ee:1b:7f:16:a0:36:b1:16:c3:c4:78:
9c:14:a4:17:10:49:5e:b5:87:33:a8:5b:de:97:dd:
3d:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:E3:61:E6:25:21:58:38:41:1F:79:60:D6:5B:5F:12:EF:F1:FC:F3
X509v3 Authority Key Identifier:
keyid:2C:D4:1B:CC:3C:D7:3E:0D:C7:F7:E9:5B:5D:0D:CA:6D:68:57:BE:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LNQbzDzXPg3H9-lbXQ3KbWhXvtw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/1ad9bf-0322-4534-b009-e6e91bf052fe/1/LNQbzDzXPg3H9-lbXQ3KbWhXvtw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/1ad9bf-0322-4534-b009-e6e91bf052fe/1/LNQbzDzXPg3H9-lbXQ3KbWhXvtw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:41:4b:3b:5e:1d:c6:b8:26:aa:1c:95:cb:77:c8:1a:f5:5e:
c7:54:a6:52:28:ba:79:0e:49:c3:83:6b:ed:23:26:72:90:62:
aa:ed:b1:7c:ca:a2:b0:d4:62:65:44:5f:a3:a9:8f:bc:59:08:
3a:20:5c:3d:fe:c8:8a:6c:2f:26:3e:34:4e:aa:3c:f7:8d:2e:
1f:25:9a:d7:70:68:db:a6:ab:0a:ff:e3:06:c8:2d:92:34:16:
e5:37:a7:91:cf:39:4d:00:d1:79:d2:d7:ea:b1:c3:12:ea:3b:
8c:dd:65:26:97:88:94:fd:e7:da:95:bd:c3:da:93:70:b3:8c:
8c:e5:19:01:c0:97:1e:69:5d:41:4d:cb:e5:65:88:24:21:42:
28:db:c8:80:59:a7:ab:5c:63:d7:a0:a1:8f:f4:9d:2a:5e:1c:
96:04:65:9a:bc:1e:49:db:6a:78:0a:bb:bc:e6:dd:63:3f:d3:
5d:78:5b:24:92:75:8b:b0:29:21:88:e7:2f:b2:29:f0:7a:c6:
3b:ac:c2:ab:ce:46:3b:6c:4e:ec:49:6b:49:26:10:51:74:e5:
5a:4d:0c:26:fa:f2:49:82:91:91:50:4e:12:0b:d5:f4:dd:f3:
fd:4b:52:6f:73:68:2d:c5:b3:2b:14:53:43:6c:cc:63:28:4f:
ac:9f:7b:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:34:58 2026 by rpki-client