Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/738188-73ae-4918-bfd7-7788aee1215f/1/LNH_SXJfYzHmO47XZEjXJd16hN4.mft
File: LNH_SXJfYzHmO47XZEjXJd16hN4.mft (raw, json)
Hash identifier: vIUWAZY71spOP7ksReK/NMKbYOXPwVk0Hez0Xi5JROI=
Subject key identifier: 12:7B:87:CB:95:36:55:C6:AA:87:C0:9B:62:D3:32:E4:88:7C:5F:23
Authority key identifier: 2C:D1:FF:49:72:5F:63:31:E6:3B:8E:D7:64:48:D7:25:DD:7A:84:DE
Certificate issuer: /CN=2cd1ff49725f6331e63b8ed76448d725dd7a84de
Certificate serial: 019D2A72EBCC87CAE000E9435D3C4BAE182C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LNH_SXJfYzHmO47XZEjXJd16hN4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/738188-73ae-4918-bfd7-7788aee1215f/1/LNH_SXJfYzHmO47XZEjXJd16hN4.mft
Manifest number: 1887
Signing time: Thu 26 Mar 2026 14:01:07 +0000
Manifest this update: Thu 26 Mar 2026 14:01:07 +0000
Manifest next update: Fri 27 Mar 2026 14:01:07 +0000
Files and hashes: 1: LNH_SXJfYzHmO47XZEjXJd16hN4.crl (hash: k+KkS6xwuiZWxFc0Z7UH5pMgxVaiINThHaynYqdlW2M=)
2: tNQkeJ9EGrMXKYwxBMZfuwZ1oAI.roa (hash: QOlqs8KXOpGS492JR6Z+1it46kTu85+FaSQ+ynVWEh8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/738188-73ae-4918-bfd7-7788aee1215f/1/LNH_SXJfYzHmO47XZEjXJd16hN4.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/738188-73ae-4918-bfd7-7788aee1215f/1/LNH_SXJfYzHmO47XZEjXJd16hN4.mft
rsync://rpki.ripe.net/repository/DEFAULT/LNH_SXJfYzHmO47XZEjXJd16hN4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:72:eb:cc:87:ca:e0:00:e9:43:5d:3c:4b:ae:18:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2cd1ff49725f6331e63b8ed76448d725dd7a84de
Validity
Not Before: Mar 26 14:01:07 2026 GMT
Not After : Mar 27 14:01:07 2026 GMT
Subject: CN=127b87cb953655c6aa87c09b62d332e4887c5f23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:54:5f:3e:98:49:d7:20:d4:d5:3e:72:ab:27:
83:e2:ad:fe:66:65:08:77:15:1a:95:43:0d:20:81:
79:9c:ad:8b:86:bd:ae:9d:d4:2a:27:4e:6a:63:57:
c8:29:89:3a:84:02:c5:c7:eb:11:49:60:9a:6a:a3:
c1:d0:72:4b:03:94:dc:33:e4:6f:3a:20:30:f2:d1:
93:1b:26:29:c9:dd:82:48:3d:16:c2:a5:43:aa:79:
9f:88:77:09:33:73:6a:10:a9:44:78:45:04:7e:fd:
71:ae:f3:1b:ee:30:e8:75:9a:78:66:31:31:0c:45:
d6:b0:c5:9f:cd:00:cc:41:13:91:61:95:f6:84:c9:
b8:57:d2:93:32:02:87:b2:21:ba:46:4a:c5:a4:ee:
c7:aa:3a:5a:a5:41:d5:98:a7:a3:eb:5d:b4:c4:7b:
d4:bd:36:49:cc:63:b5:54:10:bb:d4:58:86:be:66:
b0:a1:d4:ec:47:a6:a4:62:0b:f6:72:98:ac:db:4c:
1d:66:4e:05:37:3e:3b:45:d0:ed:f5:87:e4:b8:ae:
87:86:90:e6:e2:6f:e0:d0:b8:7a:38:c1:7d:f1:b7:
5f:96:41:2e:f1:3f:ef:08:b6:ab:7c:1d:32:20:e0:
ca:99:60:0f:33:9b:2b:b2:0b:30:bf:3b:d4:b1:6f:
6d:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:7B:87:CB:95:36:55:C6:AA:87:C0:9B:62:D3:32:E4:88:7C:5F:23
X509v3 Authority Key Identifier:
keyid:2C:D1:FF:49:72:5F:63:31:E6:3B:8E:D7:64:48:D7:25:DD:7A:84:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LNH_SXJfYzHmO47XZEjXJd16hN4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/738188-73ae-4918-bfd7-7788aee1215f/1/LNH_SXJfYzHmO47XZEjXJd16hN4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/738188-73ae-4918-bfd7-7788aee1215f/1/LNH_SXJfYzHmO47XZEjXJd16hN4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:e7:fc:a5:f2:f1:22:86:2b:74:9f:b1:72:5f:c7:b1:4c:d9:
c6:67:bd:a3:44:38:4b:dd:51:69:2e:29:21:c4:02:d0:94:82:
73:50:59:a2:11:ed:06:97:e4:87:98:2e:79:ce:3b:41:4e:53:
53:d1:b8:23:e2:7a:5e:44:8d:28:20:fb:5d:57:89:b8:ec:13:
8e:8c:01:16:5c:a9:18:8f:d1:67:0a:67:6f:c7:71:87:be:f8:
ff:5e:82:28:e7:9b:b2:b8:de:df:48:48:05:83:54:88:3a:d5:
18:cd:de:7c:d0:f7:bc:07:9c:54:61:cc:d3:b2:56:b9:bc:2e:
af:b7:be:26:21:e2:7b:6c:8b:9a:64:1a:2c:f9:e3:0d:b5:ae:
df:79:42:93:3e:52:3e:c2:15:e8:8f:ae:78:7e:98:0b:2b:97:
98:53:a5:92:c4:67:34:83:f7:f7:69:49:15:ad:70:05:7a:60:
f0:4a:f5:ae:5c:75:eb:5d:f9:37:15:95:7f:33:b7:00:df:f3:
c6:7f:d5:90:cb:3a:21:72:01:32:62:10:54:82:2a:d6:36:f7:
a1:cc:db:c7:f3:bf:36:a2:53:1d:4d:0e:53:aa:d5:9c:32:68:
1b:45:7c:02:ee:f0:d2:ff:ea:2c:ad:37:40:d2:7f:bc:2a:21:
55:11:b5:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:29:23 2026 by rpki-client