Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/9120cb-0b06-4861-b657-757838670948/1/lnc-nMl0MBp4t-5tmUUo8fiC5G8.mft
File: lnc-nMl0MBp4t-5tmUUo8fiC5G8.mft (raw, json)
Hash identifier: PaV9KqUX5VZGZ0q0HXsZVH3+8dKmb6iZkZUhUMYitTg=
Subject key identifier: D7:3D:CC:41:36:97:2B:C5:AD:E1:E6:93:E4:CA:21:23:C3:03:3E:0D
Authority key identifier: 96:77:3E:9C:C9:74:30:1A:78:B7:EE:6D:99:45:28:F1:F8:82:E4:6F
Certificate issuer: /CN=96773e9cc974301a78b7ee6d994528f1f882e46f
Certificate serial: 019D29977F7DBDB2911B0163FFBB2C3FA6C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lnc-nMl0MBp4t-5tmUUo8fiC5G8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/9120cb-0b06-4861-b657-757838670948/1/lnc-nMl0MBp4t-5tmUUo8fiC5G8.mft
Manifest number: 1889
Signing time: Thu 26 Mar 2026 10:01:27 +0000
Manifest this update: Thu 26 Mar 2026 10:01:27 +0000
Manifest next update: Fri 27 Mar 2026 10:01:27 +0000
Files and hashes: 1: 9jb7Om6miiOrT_ZooT83lO4qkYk.roa (hash: gjvHmuorLDsWHz05bRfIkR6+1mIVFz/jhg8KpqLFtDA=)
2: RAO_pCNhlBiv40T04NHXU2aXE2U.roa (hash: uo+4uUhKB5sDU8h5KxZgJWoE2h74C7AtuYv/i5HRqbQ=)
3: lnc-nMl0MBp4t-5tmUUo8fiC5G8.crl (hash: zX1D4TUqokGZUY/IZxgHVpojz1t1WpcuZm6Nrsi/H6Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/9120cb-0b06-4861-b657-757838670948/1/lnc-nMl0MBp4t-5tmUUo8fiC5G8.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/9120cb-0b06-4861-b657-757838670948/1/lnc-nMl0MBp4t-5tmUUo8fiC5G8.mft
rsync://rpki.ripe.net/repository/DEFAULT/lnc-nMl0MBp4t-5tmUUo8fiC5G8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 10:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:97:7f:7d:bd:b2:91:1b:01:63:ff:bb:2c:3f:a6:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96773e9cc974301a78b7ee6d994528f1f882e46f
Validity
Not Before: Mar 26 10:01:27 2026 GMT
Not After : Mar 27 10:01:27 2026 GMT
Subject: CN=d73dcc4136972bc5ade1e693e4ca2123c3033e0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:1d:75:03:f2:9b:7e:16:4e:e3:b9:64:7b:94:
0d:45:d5:72:96:5d:98:fc:b5:bd:be:64:f7:5e:1e:
48:f5:71:6a:11:b7:f1:96:9f:73:22:59:af:b3:eb:
22:dd:8a:9e:04:c7:3d:e8:54:b8:51:42:ab:28:63:
aa:53:27:b3:a6:2c:2e:c0:c0:c8:be:5d:e0:d5:c1:
2d:23:00:a7:9d:4a:86:77:92:b3:f4:27:c6:f9:c5:
fe:d1:87:b0:ee:94:d6:60:ab:0d:3f:4c:ce:a1:6f:
4b:c1:ce:ae:47:46:45:f1:77:9f:89:92:21:51:23:
d8:bc:d4:84:1c:0d:62:ca:b0:56:b4:ea:0a:07:b4:
00:4c:4f:b5:e0:5e:bc:81:fd:21:5a:15:57:16:ed:
99:09:0c:a5:4e:5e:ef:13:c8:f2:bc:b1:ba:43:9e:
3a:ed:45:da:37:80:b6:69:d2:65:9f:f0:e0:9f:3c:
ab:68:03:68:3b:80:b2:d2:a1:c8:ac:b2:66:69:3f:
2f:7a:fc:69:f7:ec:6d:f4:92:43:96:8a:f5:8e:6e:
0d:1a:02:54:23:66:68:f1:7c:aa:cd:88:6a:71:3f:
06:de:7a:5d:cd:5c:e0:49:40:d0:3e:8c:b5:4e:33:
c6:74:a7:a5:85:e4:eb:ae:3a:81:28:40:42:ad:49:
64:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:3D:CC:41:36:97:2B:C5:AD:E1:E6:93:E4:CA:21:23:C3:03:3E:0D
X509v3 Authority Key Identifier:
keyid:96:77:3E:9C:C9:74:30:1A:78:B7:EE:6D:99:45:28:F1:F8:82:E4:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lnc-nMl0MBp4t-5tmUUo8fiC5G8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/9120cb-0b06-4861-b657-757838670948/1/lnc-nMl0MBp4t-5tmUUo8fiC5G8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/9120cb-0b06-4861-b657-757838670948/1/lnc-nMl0MBp4t-5tmUUo8fiC5G8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c7:f4:19:4a:bc:17:b7:4d:28:b3:b6:8b:92:1b:43:94:1c:93:
25:f6:ca:41:6d:16:9c:ea:f9:cd:ca:7d:cd:30:36:9f:d5:05:
24:9b:5d:44:a3:de:b7:1e:f2:46:aa:16:19:22:f8:7d:84:88:
e6:41:ab:d1:6a:27:c3:4b:47:29:aa:c9:a4:4e:3e:86:03:93:
74:a5:01:e5:67:75:66:30:4f:71:92:b2:28:52:51:a4:10:ca:
af:18:82:d5:2d:a2:ff:ae:5c:74:8b:88:dd:92:a0:3a:81:89:
c9:af:72:d7:8d:6c:50:43:83:71:61:01:cc:e8:2f:da:d4:be:
dd:1d:80:89:20:73:63:45:7f:5a:74:fc:3e:47:de:57:e8:1b:
39:4d:c7:16:24:40:7b:9d:a3:82:43:78:f7:40:07:d7:1d:2a:
db:69:8d:83:53:6c:51:92:de:62:f9:ad:fc:ba:3d:17:6d:6b:
68:bd:b6:72:8a:2b:a9:a1:0a:5f:95:02:83:99:55:d5:ee:9f:
4c:67:14:dd:c5:a2:57:eb:0f:f2:a8:ee:d8:07:5c:7c:e7:58:
06:e8:f7:00:e1:0f:21:3f:92:ed:03:27:27:86:0f:28:b0:11:
8e:93:85:49:8d:29:88:e6:a5:bb:9a:8d:7b:eb:ab:24:64:53:
0c:73:14:78
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0pl399vbKRGwFj/7ssP6bDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk2NzczZTljYzk3NDMwMWE3OGI3ZWU2ZDk5NDUyOGYxZjg4
MmU0NmYwHhcNMjYwMzI2MTAwMTI3WhcNMjYwMzI3MTAwMTI3WjAzMTEwLwYDVQQD
EyhkNzNkY2M0MTM2OTcyYmM1YWRlMWU2OTNlNGNhMjEyM2MzMDMzZTBkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAux11A/KbfhZO47lke5QNRdVyll2Y
/LW9vmT3Xh5I9XFqEbfxlp9zIlmvs+si3YqeBMc96FS4UUKrKGOqUyezpiwuwMDI
vl3g1cEtIwCnnUqGd5Kz9CfG+cX+0Yew7pTWYKsNP0zOoW9Lwc6uR0ZF8XefiZIh
USPYvNSEHA1iyrBWtOoKB7QATE+14F68gf0hWhVXFu2ZCQylTl7vE8jyvLG6Q546
7UXaN4C2adJln/DgnzyraANoO4Cy0qHIrLJmaT8vevxp9+xt9JJDlor1jm4NGgJU
I2Zo8XyqzYhqcT8G3npdzVzgSUDQPoy1TjPGdKelheTrrjqBKEBCrUlk3wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNc9zEE2lyvFreHmk+TKISPDAz4NMB8GA1UdIwQY
MBaAFJZ3PpzJdDAaeLfubZlFKPH4guRvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbG5jLW5NbDBNQnA0dC01dG1VVW84ZmlDNUc4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS85MTIwY2ItMGIwNi00ODYxLWI2NTct
NzU3ODM4NjcwOTQ4LzEvbG5jLW5NbDBNQnA0dC01dG1VVW84ZmlDNUc4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOS85MTIwY2ItMGIwNi00ODYxLWI2NTctNzU3ODM4NjcwOTQ4
LzEvbG5jLW5NbDBNQnA0dC01dG1VVW84ZmlDNUc4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAx/QZSrwX
t00os7aLkhtDlByTJfbKQW0WnOr5zcp9zTA2n9UFJJtdRKPetx7yRqoWGSL4fYSI
5kGr0Wonw0tHKarJpE4+hgOTdKUB5Wd1ZjBPcZKyKFJRpBDKrxiC1S2i/65cdIuI
3ZKgOoGJya9y141sUEODcWEBzOgv2tS+3R2AiSBzY0V/WnT8PkfeV+gbOU3HFiRA
e52jgkN490AH1x0q22mNg1NsUZLeYvmt/Lo9F21raL22coorqaEKX5UCg5lV1e6f
TGcU3cWiV+sP8qju2AdcfOdYBuj3AOEPIT+S7QMnJ4YPKLARjpOFSY0piOalu5qN
e+urJGRTDHMUeA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 21:06:37 2026 by rpki-client