Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/c637de-bef7-4da3-803f-84e5f1af6e92/1/LMNcIJCZlCHTPGNZybbmgYKg8nM.mft
File: LMNcIJCZlCHTPGNZybbmgYKg8nM.mft (raw, json)
Hash identifier: pcy5pQZu5FKDFd/Y2JUAUlE71ZpGhxZ7NkLXHXULeo4=
Subject key identifier: 43:E8:4E:5B:11:99:2E:F0:8D:46:1B:E4:03:2F:8D:DC:D5:E0:21:A3
Authority key identifier: 2C:C3:5C:20:90:99:94:21:D3:3C:63:59:C9:B6:E6:81:82:A0:F2:73
Certificate issuer: /CN=2cc35c2090999421d33c6359c9b6e68182a0f273
Certificate serial: 019D386649C0FE8741E007FA0CCD2FB2E0FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LMNcIJCZlCHTPGNZybbmgYKg8nM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/c637de-bef7-4da3-803f-84e5f1af6e92/1/LMNcIJCZlCHTPGNZybbmgYKg8nM.mft
Manifest number: 181E
Signing time: Sun 29 Mar 2026 07:02:00 +0000
Manifest this update: Sun 29 Mar 2026 07:02:00 +0000
Manifest next update: Mon 30 Mar 2026 07:02:00 +0000
Files and hashes: 1: LMNcIJCZlCHTPGNZybbmgYKg8nM.crl (hash: nGrYJyuXAiZ/1eCXRNP9INE5mjSly73WdwPXVWKpNWs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/c637de-bef7-4da3-803f-84e5f1af6e92/1/LMNcIJCZlCHTPGNZybbmgYKg8nM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/c637de-bef7-4da3-803f-84e5f1af6e92/1/LMNcIJCZlCHTPGNZybbmgYKg8nM.mft
rsync://rpki.ripe.net/repository/DEFAULT/LMNcIJCZlCHTPGNZybbmgYKg8nM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:49:c0:fe:87:41:e0:07:fa:0c:cd:2f:b2:e0:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2cc35c2090999421d33c6359c9b6e68182a0f273
Validity
Not Before: Mar 29 07:02:00 2026 GMT
Not After : Mar 30 07:02:00 2026 GMT
Subject: CN=43e84e5b11992ef08d461be4032f8ddcd5e021a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:22:48:23:c4:42:69:0f:82:40:ee:90:03:1b:
12:a5:fe:b2:16:7a:d0:d9:5c:35:fd:22:19:50:8d:
a6:b1:73:38:62:78:b6:d1:ec:30:f1:e2:52:0b:9e:
1f:f7:3a:93:48:79:b2:2f:2d:47:68:de:21:35:df:
42:1f:65:13:82:51:23:b2:2e:3c:02:78:54:b9:f7:
c3:0d:3d:ca:ad:02:8d:ef:44:71:e0:6d:d7:4c:fe:
39:59:49:bc:3c:0a:c5:3a:bb:33:3a:83:f1:31:f0:
55:a0:e1:e3:6b:f7:ca:72:4a:89:69:54:38:aa:53:
7d:54:15:c6:39:f9:17:a1:0f:89:16:9c:67:7a:22:
82:19:c1:ac:22:89:4e:0f:7e:48:47:7c:85:5e:b9:
e0:01:a4:0f:00:7a:f5:60:1b:59:42:1e:fe:be:f0:
37:b6:6b:fd:6a:d6:dd:8a:45:38:ee:52:b5:f4:85:
ac:b7:29:b2:28:85:8a:1f:50:0c:15:06:90:f2:f9:
df:99:d5:74:c5:31:ad:02:9f:7b:5f:58:34:2c:fc:
21:de:f6:0f:28:d6:26:6a:11:8c:23:ca:39:4a:bb:
43:57:20:49:a7:f1:a8:8a:5f:b4:42:b8:03:d7:63:
a3:ad:ec:c5:b0:7a:92:6d:16:49:a5:1b:b4:7b:2d:
a0:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:E8:4E:5B:11:99:2E:F0:8D:46:1B:E4:03:2F:8D:DC:D5:E0:21:A3
X509v3 Authority Key Identifier:
keyid:2C:C3:5C:20:90:99:94:21:D3:3C:63:59:C9:B6:E6:81:82:A0:F2:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LMNcIJCZlCHTPGNZybbmgYKg8nM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/c637de-bef7-4da3-803f-84e5f1af6e92/1/LMNcIJCZlCHTPGNZybbmgYKg8nM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/c637de-bef7-4da3-803f-84e5f1af6e92/1/LMNcIJCZlCHTPGNZybbmgYKg8nM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:82:6b:f8:2e:7f:9d:df:d7:7f:85:97:d3:63:a8:f1:d9:29:
38:20:0a:a9:49:97:bf:c3:96:54:85:38:5a:36:7d:73:86:5e:
ab:dd:34:86:2f:94:9f:d1:7f:29:d2:cf:20:d6:00:61:d3:c3:
eb:8f:ae:7a:fc:71:71:0a:3e:86:dd:6b:4f:ea:60:f7:14:77:
b6:66:82:9e:f9:00:57:61:96:b1:d0:73:7d:1c:6f:ee:c1:81:
e8:7a:30:55:90:ab:53:0d:65:b5:8d:29:91:14:15:36:b4:55:
40:e9:3e:65:e9:fd:16:3e:fb:ef:c7:c5:75:21:70:93:4d:40:
e5:c7:31:da:3b:e5:b7:4c:30:9a:be:64:7d:22:5e:68:27:79:
d6:ab:c0:3a:7f:b7:c8:82:50:94:98:9f:e2:bf:d4:34:b5:0c:
14:6b:28:5b:a4:ad:9b:15:81:88:de:81:85:0d:2e:4c:3e:70:
fb:99:16:75:31:18:ad:c8:59:37:aa:b8:3a:1d:c3:26:f1:98:
96:7e:1e:1a:3d:e5:0e:04:27:a1:77:5d:f6:4d:03:13:7e:33:
18:33:79:65:d7:14:37:34:f3:75:b8:f7:9b:93:e0:75:08:d1:
ef:95:08:a6:8f:90:e1:35:6a:86:b0:c9:47:0a:8f:3d:e0:9d:
07:69:c8:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:45:01 2026 by rpki-client