Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/200988-39db-44a3-9e49-5e047433b234/1/LNBBAsGZa1PIjhceXk-NH6ChMIQ.mft
File: LNBBAsGZa1PIjhceXk-NH6ChMIQ.mft (raw, json)
Hash identifier: dG74MjJow10LOsMB+CUTWwLiiGz1s77vz8HEiRIU5P4=
Subject key identifier: 12:2F:23:FC:E2:3B:D3:E9:7D:7E:23:E2:76:B1:D7:49:D8:C3:F4:E2
Authority key identifier: 2C:D0:41:02:C1:99:6B:53:C8:8E:17:1E:5E:4F:8D:1F:A0:A1:30:84
Certificate issuer: /CN=2cd04102c1996b53c88e171e5e4f8d1fa0a13084
Certificate serial: 019D39AF29AD672BEAABAD6C5C4A64272776
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LNBBAsGZa1PIjhceXk-NH6ChMIQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/200988-39db-44a3-9e49-5e047433b234/1/LNBBAsGZa1PIjhceXk-NH6ChMIQ.mft
Manifest number: 1853
Signing time: Sun 29 Mar 2026 13:01:13 +0000
Manifest this update: Sun 29 Mar 2026 13:01:13 +0000
Manifest next update: Mon 30 Mar 2026 13:01:13 +0000
Files and hashes: 1: LNBBAsGZa1PIjhceXk-NH6ChMIQ.crl (hash: 3vxWT6zpjmTUxtGkWTn7b+VPcPnZvrgAUy6vMtIF9P8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/200988-39db-44a3-9e49-5e047433b234/1/LNBBAsGZa1PIjhceXk-NH6ChMIQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/200988-39db-44a3-9e49-5e047433b234/1/LNBBAsGZa1PIjhceXk-NH6ChMIQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/LNBBAsGZa1PIjhceXk-NH6ChMIQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:af:29:ad:67:2b:ea:ab:ad:6c:5c:4a:64:27:27:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2cd04102c1996b53c88e171e5e4f8d1fa0a13084
Validity
Not Before: Mar 29 13:01:13 2026 GMT
Not After : Mar 30 13:01:13 2026 GMT
Subject: CN=122f23fce23bd3e97d7e23e276b1d749d8c3f4e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:ff:48:02:02:77:15:2b:e9:be:45:25:d9:47:
1e:32:76:fe:9b:20:78:c0:62:95:5a:a5:0e:a8:80:
f6:82:a1:cd:97:4f:2d:4d:e3:8d:a8:fe:e0:59:16:
d7:37:c8:4c:62:b1:e3:ff:ff:5e:86:38:65:20:6c:
3e:05:50:0c:e0:3b:60:42:e4:36:49:79:f2:5b:b3:
62:a4:86:2c:4a:2a:ff:a1:0e:04:71:ee:24:c3:8a:
b3:a4:9b:f2:f3:90:0c:af:3c:c3:34:75:32:68:79:
03:b9:0a:91:fd:dc:61:d6:e3:18:6e:0e:1b:07:a9:
41:19:15:19:29:9d:29:0d:8e:33:f9:82:4d:e1:c5:
d7:f9:07:c0:5b:f4:ac:bf:45:cb:de:7e:b9:30:99:
40:da:77:9a:5c:48:bf:94:52:7f:61:30:07:d9:86:
af:75:02:3f:a7:f7:c2:49:41:63:21:ff:99:31:d9:
94:82:3d:60:94:5a:cd:85:79:5e:95:62:a5:1f:97:
e9:24:ad:c1:36:ae:95:e5:a3:16:1e:98:75:00:b1:
db:e2:74:ea:af:c9:f2:b9:30:32:ed:ce:d5:02:a0:
4c:c8:44:57:38:0e:b5:bf:37:7b:90:f3:79:f3:83:
64:1b:d4:6b:e3:72:5e:da:69:84:45:69:e0:d1:8a:
62:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:2F:23:FC:E2:3B:D3:E9:7D:7E:23:E2:76:B1:D7:49:D8:C3:F4:E2
X509v3 Authority Key Identifier:
keyid:2C:D0:41:02:C1:99:6B:53:C8:8E:17:1E:5E:4F:8D:1F:A0:A1:30:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LNBBAsGZa1PIjhceXk-NH6ChMIQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/200988-39db-44a3-9e49-5e047433b234/1/LNBBAsGZa1PIjhceXk-NH6ChMIQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/200988-39db-44a3-9e49-5e047433b234/1/LNBBAsGZa1PIjhceXk-NH6ChMIQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:a8:40:bf:b9:d6:c2:20:18:d5:32:ed:68:5c:11:85:9f:a5:
91:9c:57:a2:bf:22:69:88:e6:d7:0b:11:61:7c:20:95:15:70:
60:27:0b:77:2e:db:79:2c:91:9d:59:3d:b0:95:e9:fb:63:9b:
c5:40:94:23:f1:54:a0:02:12:b6:be:10:57:61:c9:2a:ba:3d:
00:6a:df:96:1c:3f:cf:62:45:9b:38:f3:59:14:cd:5f:56:c8:
da:d6:e6:54:f1:7a:24:05:8d:ec:25:c1:6a:26:a9:be:c1:9c:
73:b3:8e:e8:da:0e:5b:36:f8:fb:7f:1a:3e:0c:2e:81:70:a9:
44:e8:4f:e7:b5:49:a6:84:ee:9b:dd:d8:11:da:21:8e:43:95:
6c:88:a3:63:e9:ae:e6:1e:07:f3:12:a7:f8:4c:19:5e:18:10:
07:d8:de:f6:51:ce:22:a8:81:25:08:c7:cb:6c:ba:4e:0f:ca:
cf:6d:cc:a2:21:be:24:ec:d5:c7:79:18:81:fc:8d:d6:85:d8:
de:6d:1c:c9:54:22:4a:01:7b:96:c7:0b:17:ad:04:e4:37:fc:
33:14:80:7e:8c:b4:08:ab:ba:d0:6d:71:68:1b:be:42:ba:ea:
12:c5:e9:76:f5:d7:31:f7:da:91:b3:a7:69:39:06:7c:a7:f8:
50:6c:fd:b5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ05rymtZyvqq61sXEpkJyd2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJjZDA0MTAyYzE5OTZiNTNjODhlMTcxZTVlNGY4ZDFmYTBh
MTMwODQwHhcNMjYwMzI5MTMwMTEzWhcNMjYwMzMwMTMwMTEzWjAzMTEwLwYDVQQD
EygxMjJmMjNmY2UyM2JkM2U5N2Q3ZTIzZTI3NmIxZDc0OWQ4YzNmNGUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApP9IAgJ3FSvpvkUl2UceMnb+myB4
wGKVWqUOqID2gqHNl08tTeONqP7gWRbXN8hMYrHj//9ehjhlIGw+BVAM4DtgQuQ2
SXnyW7NipIYsSir/oQ4Ece4kw4qzpJvy85AMrzzDNHUyaHkDuQqR/dxh1uMYbg4b
B6lBGRUZKZ0pDY4z+YJN4cXX+QfAW/Ssv0XL3n65MJlA2neaXEi/lFJ/YTAH2Yav
dQI/p/fCSUFjIf+ZMdmUgj1glFrNhXlelWKlH5fpJK3BNq6V5aMWHph1ALHb4nTq
r8nyuTAy7c7VAqBMyERXOA61vzd7kPN584NkG9Rr43Je2mmERWng0YpiNQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBIvI/ziO9PpfX4j4nax10nYw/TiMB8GA1UdIwQY
MBaAFCzQQQLBmWtTyI4XHl5PjR+goTCEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTE5CQkFzR1phMVBJamhjZVhrLU5INkNoTUlRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS8yMDA5ODgtMzlkYi00NGEzLTllNDkt
NWUwNDc0MzNiMjM0LzEvTE5CQkFzR1phMVBJamhjZVhrLU5INkNoTUlRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZS8yMDA5ODgtMzlkYi00NGEzLTllNDktNWUwNDc0MzNiMjM0
LzEvTE5CQkFzR1phMVBJamhjZVhrLU5INkNoTUlRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQahAv7nW
wiAY1TLtaFwRhZ+lkZxXor8iaYjm1wsRYXwglRVwYCcLdy7beSyRnVk9sJXp+2Ob
xUCUI/FUoAIStr4QV2HJKro9AGrflhw/z2JFmzjzWRTNX1bI2tbmVPF6JAWN7CXB
aiapvsGcc7OO6NoOWzb4+38aPgwugXCpROhP57VJpoTum93YEdohjkOVbIijY+mu
5h4H8xKn+EwZXhgQB9je9lHOIqiBJQjHy2y6Tg/Kz23MoiG+JOzVx3kYgfyN1oXY
3m0cyVQiSgF7lscLF60E5Df8MxSAfoy0CKu60G1xaBu+QrrqEsXpdvXXMffakbOn
aTkGfKf4UGz9tQ==
-----END CERTIFICATE-----
Generated at Sun Mar 29 16:27:29 2026 by rpki-client