Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/6830f6-f096-4c81-a1f5-8e8138efc41b/1/LnYtP9L7_OEMWPnrdr6Q_MuvsX0.mft
File: LnYtP9L7_OEMWPnrdr6Q_MuvsX0.mft (raw, json)
Hash identifier: FSrW9cVo5iAQ9VuybyXJHhUjZWg6w5cA39UnXD0Qy8s=
Subject key identifier: 4E:B6:39:85:77:E2:70:7D:9C:AA:5C:FE:6E:AA:D3:F9:21:B5:53:8F
Authority key identifier: 2E:76:2D:3F:D2:FB:FC:E1:0C:58:F9:EB:76:BE:90:FC:CB:AF:B1:7D
Certificate issuer: /CN=2e762d3fd2fbfce10c58f9eb76be90fccbafb17d
Certificate serial: 019D322C08E098BD6D5C1F79C50C7E3966C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LnYtP9L7_OEMWPnrdr6Q_MuvsX0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/6830f6-f096-4c81-a1f5-8e8138efc41b/1/LnYtP9L7_OEMWPnrdr6Q_MuvsX0.mft
Manifest number: 0129
Signing time: Sat 28 Mar 2026 02:00:39 +0000
Manifest this update: Sat 28 Mar 2026 02:00:39 +0000
Manifest next update: Sun 29 Mar 2026 02:00:39 +0000
Files and hashes: 1: LnYtP9L7_OEMWPnrdr6Q_MuvsX0.crl (hash: Ut6+Vr+WxhtV0W3wVpVDn8+a2oPs1FRBoELz4+VxuCk=)
2: Yg-h7EYRvK_pApw2pd2xqkKaiVY.roa (hash: WyYT1rW3NAfoNqzlN2CzJQbWLBSI3Y59Gh+h+WbBSgg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/6830f6-f096-4c81-a1f5-8e8138efc41b/1/LnYtP9L7_OEMWPnrdr6Q_MuvsX0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/6830f6-f096-4c81-a1f5-8e8138efc41b/1/LnYtP9L7_OEMWPnrdr6Q_MuvsX0.mft
rsync://rpki.ripe.net/repository/DEFAULT/LnYtP9L7_OEMWPnrdr6Q_MuvsX0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 02:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:32:2c:08:e0:98:bd:6d:5c:1f:79:c5:0c:7e:39:66:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e762d3fd2fbfce10c58f9eb76be90fccbafb17d
Validity
Not Before: Mar 28 02:00:39 2026 GMT
Not After : Mar 29 02:00:39 2026 GMT
Subject: CN=4eb6398577e2707d9caa5cfe6eaad3f921b5538f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:51:ef:db:42:ec:37:88:32:ac:ef:a7:67:17:
6b:b2:c3:83:2a:77:55:6f:00:d5:ba:4e:14:04:26:
87:1f:1e:b5:a4:a8:31:f2:c7:62:e7:c1:ec:91:39:
d3:90:9d:42:63:7d:f2:93:7b:4c:6e:bc:9b:84:4e:
08:03:f6:bd:20:3a:d4:d6:22:b8:d0:54:3c:87:bc:
21:54:64:00:45:d1:7b:00:82:2c:45:e9:42:7b:7a:
34:35:48:56:74:83:ec:c5:10:a1:85:15:21:76:82:
8c:00:0e:cc:54:6d:8f:f3:0e:64:b3:58:d1:35:6f:
b6:fe:62:05:73:b3:bc:f7:88:4a:f2:94:79:c1:3e:
59:9e:c6:2e:00:1f:39:38:3d:a3:80:e6:8c:f9:6d:
f0:f5:46:b8:9e:ac:17:9a:19:f0:db:6f:de:c8:e0:
8e:0c:ca:1a:27:29:ef:9e:e3:df:1c:41:88:93:7b:
9a:bc:26:a9:bb:31:3b:eb:a2:7f:a7:b0:ba:8b:b5:
73:db:53:48:59:a8:10:d8:0e:84:2f:22:0e:da:57:
c5:6f:da:53:bf:d6:37:d9:ed:44:24:5b:ef:e8:16:
00:7d:0d:94:f2:ee:ff:f6:bc:9a:0a:69:41:06:a6:
5b:9e:94:23:b8:62:ca:fa:73:2a:a7:94:91:d2:35:
a4:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:B6:39:85:77:E2:70:7D:9C:AA:5C:FE:6E:AA:D3:F9:21:B5:53:8F
X509v3 Authority Key Identifier:
keyid:2E:76:2D:3F:D2:FB:FC:E1:0C:58:F9:EB:76:BE:90:FC:CB:AF:B1:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LnYtP9L7_OEMWPnrdr6Q_MuvsX0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/6830f6-f096-4c81-a1f5-8e8138efc41b/1/LnYtP9L7_OEMWPnrdr6Q_MuvsX0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/6830f6-f096-4c81-a1f5-8e8138efc41b/1/LnYtP9L7_OEMWPnrdr6Q_MuvsX0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:9c:14:26:15:84:e5:0c:58:98:f0:c3:b3:f2:4d:d4:76:5b:
a1:e8:00:0e:27:31:ef:b5:3a:c6:03:fc:ec:05:63:c0:5b:e8:
c2:e0:c5:86:1d:42:bd:ba:8a:96:91:4b:c7:54:94:dc:08:31:
89:04:3f:15:df:6a:6b:cb:1b:0a:bb:97:b0:a2:8b:b7:fc:e2:
8d:9d:9a:98:17:ac:88:ec:cb:1e:29:55:89:ea:07:64:c4:0b:
87:2d:9d:ea:d4:58:b3:fd:65:76:8e:7d:e1:ef:e1:5d:2a:98:
4f:1a:e8:48:ba:40:45:b6:85:75:72:d7:47:b9:f1:ab:da:75:
5b:5f:5a:43:ba:ee:80:93:db:df:e1:39:4d:2a:ab:0f:4a:39:
2c:98:72:a3:43:28:be:e8:2a:48:43:c5:e0:5a:be:c1:ca:68:
b6:66:14:fd:8b:37:fa:b2:92:cb:a9:d3:db:32:56:a9:91:6b:
f6:d0:82:9d:fa:61:b6:61:2a:82:7f:37:89:2e:de:d0:12:55:
43:51:f7:1f:11:20:ba:fd:a3:70:1d:35:0e:7e:d3:72:93:04:
b1:02:eb:72:48:d9:28:0b:43:dd:07:14:e9:b1:9b:bd:b2:ed:
d3:2f:35:21:a4:1b:b2:91:c0:ff:36:ba:9d:54:72:3c:61:d8:
18:a9:f3:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 12:08:45 2026 by rpki-client