Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/f3f2d9-2a8f-4ae6-ba55-f4affc8028f3/1/LnPLOHXZEhkmGzrpAQgTEaWgcas.mft
File: LnPLOHXZEhkmGzrpAQgTEaWgcas.mft (raw, json)
Hash identifier: YnxNskgjwzp+9xNp7Lwo0d2sLEz1sOa+w8TuhLfV9zo=
Subject key identifier: 9E:7C:0B:73:C9:A4:E5:FD:03:9B:C9:47:C0:18:C9:DA:CE:F2:AE:9F
Authority key identifier: 2E:73:CB:38:75:D9:12:19:26:1B:3A:E9:01:08:13:11:A5:A0:71:AB
Certificate issuer: /CN=2e73cb3875d91219261b3ae901081311a5a071ab
Certificate serial: 019D284D41AD130EA38B4F6FE846F6518D99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LnPLOHXZEhkmGzrpAQgTEaWgcas.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/f3f2d9-2a8f-4ae6-ba55-f4affc8028f3/1/LnPLOHXZEhkmGzrpAQgTEaWgcas.mft
Manifest number: 0203
Signing time: Thu 26 Mar 2026 04:00:44 +0000
Manifest this update: Thu 26 Mar 2026 04:00:44 +0000
Manifest next update: Fri 27 Mar 2026 04:00:44 +0000
Files and hashes: 1: LnPLOHXZEhkmGzrpAQgTEaWgcas.crl (hash: woMbg3Wpws+Pm1qurf35EZ8tk6t9RjRobKEnG3haBLo=)
2: d9bKfKc4CWNG5hnKSbTK0Rni9UU.roa (hash: 4jZ3a0Nmi0XTCu3Uai+tAC5QbHyDGtcHMO/I90in7Wg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/f3f2d9-2a8f-4ae6-ba55-f4affc8028f3/1/LnPLOHXZEhkmGzrpAQgTEaWgcas.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/f3f2d9-2a8f-4ae6-ba55-f4affc8028f3/1/LnPLOHXZEhkmGzrpAQgTEaWgcas.mft
rsync://rpki.ripe.net/repository/DEFAULT/LnPLOHXZEhkmGzrpAQgTEaWgcas.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 04:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4d:41:ad:13:0e:a3:8b:4f:6f:e8:46:f6:51:8d:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e73cb3875d91219261b3ae901081311a5a071ab
Validity
Not Before: Mar 26 04:00:44 2026 GMT
Not After : Mar 27 04:00:44 2026 GMT
Subject: CN=9e7c0b73c9a4e5fd039bc947c018c9dacef2ae9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:e1:b0:ee:79:78:19:2b:2d:cb:ba:8d:39:2f:
df:1b:58:f5:93:2a:8e:eb:1a:42:82:70:4e:10:80:
68:19:47:d5:05:04:4a:b7:af:5f:c0:d6:63:47:f0:
11:e8:27:a9:27:f3:54:77:bb:b4:69:7b:cb:50:bd:
3d:5a:f9:a6:de:aa:9e:1b:24:d5:fb:af:7d:9b:1b:
fa:c7:2c:06:37:58:9d:67:24:c0:f3:e9:41:46:ca:
c9:54:74:e0:30:76:b3:37:32:ce:41:5e:33:13:d3:
bf:1f:ef:b6:a4:52:e4:6e:71:c9:67:05:7f:ea:d9:
f3:fa:25:6a:a8:7d:e4:df:b9:b4:ad:66:42:c6:61:
29:0b:96:21:84:ef:36:81:46:67:0c:84:93:46:22:
cf:0c:1d:a9:38:34:91:3a:a4:ea:fc:6d:71:3b:32:
d8:6e:a3:19:dc:77:a8:6b:9b:f7:ad:a6:35:c2:d6:
fa:a9:df:4d:05:f6:2e:94:a3:82:46:00:47:14:25:
d0:a1:1b:fb:09:44:5b:04:30:19:33:57:c9:a3:db:
56:81:ea:95:2f:d4:12:75:e3:5e:a0:2b:a7:dd:e3:
80:4d:d7:97:de:f6:b8:1d:fe:49:a1:ad:70:4a:f9:
68:bb:ec:b3:ce:dc:00:67:9b:fe:0d:ae:8f:02:81:
de:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:7C:0B:73:C9:A4:E5:FD:03:9B:C9:47:C0:18:C9:DA:CE:F2:AE:9F
X509v3 Authority Key Identifier:
keyid:2E:73:CB:38:75:D9:12:19:26:1B:3A:E9:01:08:13:11:A5:A0:71:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LnPLOHXZEhkmGzrpAQgTEaWgcas.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/f3f2d9-2a8f-4ae6-ba55-f4affc8028f3/1/LnPLOHXZEhkmGzrpAQgTEaWgcas.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/f3f2d9-2a8f-4ae6-ba55-f4affc8028f3/1/LnPLOHXZEhkmGzrpAQgTEaWgcas.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:8d:b2:7b:f8:1f:08:28:ea:63:98:2d:5b:5f:63:86:dd:70:
d9:97:1a:80:df:3e:8a:4c:e0:f2:5d:57:c2:95:95:5f:31:9a:
f5:25:88:33:e6:87:d7:e1:48:17:07:77:0a:a4:f2:41:dc:8d:
c2:ad:73:be:68:4e:da:a2:89:84:74:08:cc:22:f0:2b:2d:dd:
1f:87:80:c2:02:ae:dc:19:eb:20:b0:5a:7c:d8:d8:7c:98:f3:
65:01:97:36:16:5f:07:5a:a7:8b:2f:b5:c9:ab:3f:f5:29:91:
b6:2d:76:7e:49:35:19:1e:9f:7c:24:6c:87:6e:e0:21:3d:7e:
2e:55:b3:5e:0f:4c:4b:1f:7d:9d:31:42:9f:e4:24:e4:28:af:
f1:56:45:28:21:c2:1f:7b:f1:69:1f:ba:56:be:45:73:96:ab:
f6:8c:01:4d:e7:95:7a:b5:2e:fc:6c:fc:47:e8:f3:f9:7d:f4:
61:15:56:bc:7f:0c:6d:d8:40:32:c4:2d:3b:02:98:26:35:35:
7c:ff:eb:62:07:6e:8f:de:5a:f5:1d:7e:8b:44:54:8b:ed:c4:
85:b7:6f:83:cb:40:48:36:23:e4:48:d4:57:b3:49:d2:fe:e6:
be:5a:e4:19:95:45:73:53:a1:ff:24:61:d4:58:80:93:ee:05:
c4:7b:1d:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:42:31 2026 by rpki-client