Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/1ad9bf-0322-4534-b009-e6e91bf052fe/1/LNQbzDzXPg3H9-lbXQ3KbWhXvtw.mft
File: LNQbzDzXPg3H9-lbXQ3KbWhXvtw.mft (raw, json)
Hash identifier: 6adnctJyKQ+NYsdH71ArvW6BNg5W4GNC5UKE9B1+iQI=
Subject key identifier: 6F:CC:5B:C6:54:61:E3:9B:ED:FF:2B:1E:9F:DC:0D:0E:80:9B:F2:42
Authority key identifier: 2C:D4:1B:CC:3C:D7:3E:0D:C7:F7:E9:5B:5D:0D:CA:6D:68:57:BE:DC
Certificate issuer: /CN=2cd41bcc3cd73e0dc7f7e95b5d0dca6d6857bedc
Certificate serial: 019FA0E0C78D20FB918AF758D53C3CA6CB48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LNQbzDzXPg3H9-lbXQ3KbWhXvtw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/1ad9bf-0322-4534-b009-e6e91bf052fe/1/LNQbzDzXPg3H9-lbXQ3KbWhXvtw.mft
Manifest number: 19C8
Signing time: Mon 27 Jul 2026 00:01:53 +0000
Manifest this update: Mon 27 Jul 2026 00:01:53 +0000
Manifest next update: Tue 28 Jul 2026 00:01:53 +0000
Files and hashes: 1: 9UXsLKG5ISnWSEO-TCG0hlAjiEY.roa (hash: SyhzNR0OFmBqX9d1/jz00jh2vv/1QKU6100ZrfZ9Ouk=)
2: LNQbzDzXPg3H9-lbXQ3KbWhXvtw.crl (hash: RxeQGUI9M1mDV6d5FWO9PI2Fen8+mAqxdCoIrGT1NZo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/1ad9bf-0322-4534-b009-e6e91bf052fe/1/LNQbzDzXPg3H9-lbXQ3KbWhXvtw.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/1ad9bf-0322-4534-b009-e6e91bf052fe/1/LNQbzDzXPg3H9-lbXQ3KbWhXvtw.mft
rsync://rpki.ripe.net/repository/DEFAULT/LNQbzDzXPg3H9-lbXQ3KbWhXvtw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a0:e0:c7:8d:20:fb:91:8a:f7:58:d5:3c:3c:a6:cb:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2cd41bcc3cd73e0dc7f7e95b5d0dca6d6857bedc
Validity
Not Before: Jul 27 00:01:53 2026 GMT
Not After : Jul 28 00:01:53 2026 GMT
Subject: CN=6fcc5bc65461e39bedff2b1e9fdc0d0e809bf242
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:fc:8f:83:4e:d7:96:6d:3f:01:d3:f9:16:89:
74:6c:92:cd:7c:6f:d7:ce:b5:46:a9:60:1a:5a:26:
45:2d:5e:ca:51:35:6e:db:af:4f:b8:0d:72:fa:bf:
9c:6c:ee:d2:28:a6:fa:47:35:82:2a:18:d1:c6:4b:
90:53:26:03:a0:48:31:98:fe:98:d9:58:50:6d:18:
66:b6:99:6a:79:b4:a9:5d:5a:f2:68:44:ea:12:7e:
f9:17:45:ed:74:de:4e:d9:22:0c:d9:4b:ef:72:d2:
0c:67:19:19:db:e7:37:e6:bd:47:5a:e4:fe:51:fc:
39:cc:3a:03:69:25:9d:15:c7:36:bd:6e:c6:da:9e:
a6:ff:b1:78:5a:f6:64:fd:63:5b:32:d2:1e:30:31:
0d:6d:2b:8c:64:5f:10:62:7d:2e:3a:4e:e3:eb:22:
46:48:64:40:5b:87:0e:56:ea:07:c9:31:75:80:60:
12:97:28:4e:eb:bd:9e:82:18:f7:f8:4e:7c:b4:aa:
c9:84:40:32:b7:72:ef:d2:2a:41:87:8c:b4:34:9c:
2e:c9:a1:b7:1f:6a:fe:53:ba:e2:e9:1a:15:6b:22:
11:16:bf:e4:b3:51:df:bc:50:04:51:fd:2d:6f:2b:
09:f8:62:49:7b:c6:c1:1a:99:ce:b8:28:21:98:d4:
e0:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:CC:5B:C6:54:61:E3:9B:ED:FF:2B:1E:9F:DC:0D:0E:80:9B:F2:42
X509v3 Authority Key Identifier:
keyid:2C:D4:1B:CC:3C:D7:3E:0D:C7:F7:E9:5B:5D:0D:CA:6D:68:57:BE:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LNQbzDzXPg3H9-lbXQ3KbWhXvtw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/1ad9bf-0322-4534-b009-e6e91bf052fe/1/LNQbzDzXPg3H9-lbXQ3KbWhXvtw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/1ad9bf-0322-4534-b009-e6e91bf052fe/1/LNQbzDzXPg3H9-lbXQ3KbWhXvtw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cd:6f:82:8c:cc:89:5f:98:32:bc:f4:65:fb:bf:4b:c9:9e:c3:
4c:67:33:ae:49:b8:f0:0b:71:aa:41:03:99:a0:45:f2:a1:c7:
fb:76:59:29:b7:78:2c:1c:ae:e2:5c:35:ff:e6:75:f1:e8:ab:
e7:39:07:98:ef:49:dd:f1:e2:5a:4f:d0:99:52:85:61:74:2d:
17:72:f6:e8:67:76:6e:4c:21:1d:f5:27:85:0c:86:83:7f:d1:
44:78:b2:90:dc:f8:2b:b3:75:12:ad:4a:60:8a:c3:d3:2f:ed:
98:ce:aa:78:da:5e:40:3f:2f:27:a3:f9:50:6d:26:50:c2:d7:
b4:cf:d9:ff:3a:f4:3b:d0:02:a4:9c:0f:3e:82:f4:ed:5e:4c:
61:6b:4d:e8:3e:26:21:a6:19:c7:e8:76:10:ae:17:e5:ae:04:
ad:e3:01:33:aa:2e:89:dd:01:47:77:9d:3b:0e:a2:87:3e:37:
f7:ec:8a:b7:44:8a:18:b2:0a:ac:c2:c2:20:a4:1d:13:34:38:
98:39:5c:c6:ba:44:a7:c5:e5:18:44:d7:fe:20:05:a7:a1:9b:
a1:58:6e:60:72:a0:b5:0e:7b:15:54:59:c4:c1:f9:24:77:8c:
5b:c5:5e:e7:6d:20:96:c9:4b:98:d7:e9:de:9f:5c:89:1e:7b:
60:ee:ad:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 04:48:37 2026 by rpki-client