Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/96b597-ca2b-4a9c-bb82-5bbe7b20f3fc/1/lnL-hxW2OhIO19Bn61Jf5LbekPc.mft
File: lnL-hxW2OhIO19Bn61Jf5LbekPc.mft (raw, json)
Hash identifier: zuHPBcTjt5snm0KpUAHHzXNWs4T0XjntTsO/mFpzIkc=
Subject key identifier: 15:95:9C:C9:64:E7:55:69:20:D3:2F:DB:95:92:E5:59:CD:78:19:1D
Authority key identifier: 96:72:FE:87:15:B6:3A:12:0E:D7:D0:67:EB:52:5F:E4:B6:DE:90:F7
Certificate issuer: /CN=9672fe8715b63a120ed7d067eb525fe4b6de90f7
Certificate serial: 019D38D29E50210BDDF3D8B649853FE9CCB5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lnL-hxW2OhIO19Bn61Jf5LbekPc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/96b597-ca2b-4a9c-bb82-5bbe7b20f3fc/1/lnL-hxW2OhIO19Bn61Jf5LbekPc.mft
Manifest number: 184A
Signing time: Sun 29 Mar 2026 09:00:20 +0000
Manifest this update: Sun 29 Mar 2026 09:00:20 +0000
Manifest next update: Mon 30 Mar 2026 09:00:20 +0000
Files and hashes: 1: lnL-hxW2OhIO19Bn61Jf5LbekPc.crl (hash: Bpv3OuL2tcWq/HG4AFRMYOhnrkscw6J3ZEa+SbwtoQQ=)
2: zUjhpvzG-Lc2pgcOBOyUOhZ_jQc.roa (hash: hHpsqIho1J3apISkIRQoEpNvpz7x6zawHtlFWWSFpsI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/96b597-ca2b-4a9c-bb82-5bbe7b20f3fc/1/lnL-hxW2OhIO19Bn61Jf5LbekPc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/96b597-ca2b-4a9c-bb82-5bbe7b20f3fc/1/lnL-hxW2OhIO19Bn61Jf5LbekPc.mft
rsync://rpki.ripe.net/repository/DEFAULT/lnL-hxW2OhIO19Bn61Jf5LbekPc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d2:9e:50:21:0b:dd:f3:d8:b6:49:85:3f:e9:cc:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9672fe8715b63a120ed7d067eb525fe4b6de90f7
Validity
Not Before: Mar 29 09:00:20 2026 GMT
Not After : Mar 30 09:00:20 2026 GMT
Subject: CN=15959cc964e7556920d32fdb9592e559cd78191d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:48:9d:be:ad:60:bb:dc:d8:90:f9:53:5d:3d:
c6:88:d9:09:4b:cf:8c:53:b2:4b:cd:f2:b9:a4:2c:
a7:cf:f6:c0:0f:8d:b9:21:c8:4e:fa:cf:ba:e1:c1:
90:c3:12:41:6c:f3:4f:e4:bc:98:63:dd:e8:83:19:
d0:92:0c:bf:ee:44:19:17:f1:1b:5c:c3:21:e8:f1:
fe:02:ad:6b:d2:d8:7c:34:d6:3c:c7:2a:81:4f:20:
3d:32:65:6d:db:54:d3:67:a2:f4:c7:e2:9c:96:d8:
cb:15:ff:94:f8:d5:8e:2a:38:21:64:cc:8a:31:e9:
74:65:48:ec:ca:6e:4d:90:15:54:25:be:51:04:b3:
61:74:87:02:dd:cd:35:45:41:04:7d:76:bd:f2:8b:
4b:1a:9d:a9:00:25:ca:1d:9e:3c:b5:2b:e8:94:3a:
7c:1d:77:ce:e9:5c:93:77:ec:3a:db:df:ac:b6:61:
27:17:1c:19:4c:6b:09:82:54:90:92:9f:93:e8:21:
a6:05:3c:2f:2c:d9:d6:da:86:dd:13:c0:9c:52:bd:
ae:98:ae:e5:7d:a9:bb:0e:31:6d:74:85:b7:b7:6f:
55:c6:a3:f4:44:a6:c4:29:b0:bc:38:a6:0f:82:e7:
62:01:4c:8c:db:54:57:2c:3e:a5:78:df:9f:c2:ea:
10:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:95:9C:C9:64:E7:55:69:20:D3:2F:DB:95:92:E5:59:CD:78:19:1D
X509v3 Authority Key Identifier:
keyid:96:72:FE:87:15:B6:3A:12:0E:D7:D0:67:EB:52:5F:E4:B6:DE:90:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lnL-hxW2OhIO19Bn61Jf5LbekPc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/96b597-ca2b-4a9c-bb82-5bbe7b20f3fc/1/lnL-hxW2OhIO19Bn61Jf5LbekPc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/96b597-ca2b-4a9c-bb82-5bbe7b20f3fc/1/lnL-hxW2OhIO19Bn61Jf5LbekPc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e0:e9:d7:8e:ec:17:72:d8:1b:3c:d3:b9:c1:68:78:8f:fb:c1:
3c:15:44:e9:d0:70:78:42:7d:82:2e:e0:5b:f7:17:dd:57:60:
15:f2:fc:74:8e:87:58:be:83:32:ea:d5:02:0d:fc:65:ec:66:
98:b7:f4:00:bf:2d:74:44:88:0e:4d:12:b0:97:1c:9f:19:79:
24:7b:dd:a1:02:f4:2b:c6:fd:99:c4:ad:d1:48:44:5d:9f:e9:
ae:99:06:fc:87:70:e6:98:ed:71:e0:5b:7c:5b:5c:ba:de:cc:
c3:df:dd:e6:2c:43:62:5f:15:88:7e:92:dc:17:ee:17:a6:75:
62:57:ca:27:ac:91:af:72:39:f8:f8:45:ef:6a:63:5a:75:8e:
ea:6c:c4:df:78:63:eb:de:30:d8:e1:bb:38:2e:2e:ee:dd:5f:
96:f7:a2:66:dc:63:a9:ea:ae:6a:02:69:a7:61:e6:73:91:9b:
f5:d7:15:5d:9b:30:bd:34:e0:e0:eb:24:e1:dd:ad:1c:1a:44:
82:be:a8:9b:8f:d4:3d:9f:31:fb:43:3e:3d:75:f5:47:a1:70:
30:57:f0:50:18:fb:c0:24:ba:6a:49:0b:35:58:49:88:24:75:
57:7a:46:6f:c4:92:03:dd:e3:c7:06:36:09:b9:24:3e:ea:00:
15:e9:df:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:42:13 2026 by rpki-client