Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/9a60cf-9d94-4585-a25b-5e7f95811562/1/LnOtRfij6-Znq7GWoonWcZvruC0.mft
File: LnOtRfij6-Znq7GWoonWcZvruC0.mft (raw, json)
Hash identifier: 0YHviaEIP6pHNZFSnkfqmxeTBmUHbb7KGFAQNfpqWXs=
Subject key identifier: E5:C9:75:F8:FC:B0:10:18:64:0E:88:12:32:8D:3C:A5:3E:87:84:14
Authority key identifier: 2E:73:AD:45:F8:A3:EB:E6:67:AB:B1:96:A2:89:D6:71:9B:EB:B8:2D
Certificate issuer: /CN=2e73ad45f8a3ebe667abb196a289d6719bebb82d
Certificate serial: 019D28F1F7030A808CD63E6313F9058C0C8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LnOtRfij6-Znq7GWoonWcZvruC0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/9a60cf-9d94-4585-a25b-5e7f95811562/1/LnOtRfij6-Znq7GWoonWcZvruC0.mft
Manifest number: 1888
Signing time: Thu 26 Mar 2026 07:00:39 +0000
Manifest this update: Thu 26 Mar 2026 07:00:39 +0000
Manifest next update: Fri 27 Mar 2026 07:00:39 +0000
Files and hashes: 1: LnOtRfij6-Znq7GWoonWcZvruC0.crl (hash: h2d8hGD2dHwAPgZZPDb94wIXim9WdpPTaI+T4oOwtCM=)
2: Nl65Np2NbEnihFgj_3m0_3bzCWY.roa (hash: 7UhBMBB84iPxUUXErAiMT9ZI08Sl9FFg4+ED0ZMQtcM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/9a60cf-9d94-4585-a25b-5e7f95811562/1/LnOtRfij6-Znq7GWoonWcZvruC0.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/9a60cf-9d94-4585-a25b-5e7f95811562/1/LnOtRfij6-Znq7GWoonWcZvruC0.mft
rsync://rpki.ripe.net/repository/DEFAULT/LnOtRfij6-Znq7GWoonWcZvruC0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 07:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:f1:f7:03:0a:80:8c:d6:3e:63:13:f9:05:8c:0c:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e73ad45f8a3ebe667abb196a289d6719bebb82d
Validity
Not Before: Mar 26 07:00:39 2026 GMT
Not After : Mar 27 07:00:39 2026 GMT
Subject: CN=e5c975f8fcb01018640e8812328d3ca53e878414
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:fa:f5:0d:aa:56:33:85:6e:e6:66:50:56:21:
15:d7:12:e3:2c:19:d3:45:95:82:ef:1c:23:3b:39:
a0:a7:64:dc:30:db:9b:27:56:73:38:15:0b:4b:69:
7c:5b:75:c4:8f:af:98:03:ab:70:69:54:83:23:4c:
cf:d9:45:5d:92:12:cf:f8:97:a6:f2:13:56:fa:74:
cb:2b:ec:ac:67:11:bd:d1:02:e8:3e:7c:de:e3:7d:
d4:50:87:6f:2a:09:a0:e3:04:66:96:74:13:51:f2:
c4:30:9e:e7:19:28:48:63:0b:28:4f:44:5f:52:37:
66:da:c5:77:6a:18:e9:f6:a7:d5:76:3a:87:5a:b5:
e6:4c:27:14:9f:3c:40:30:5d:96:7c:a3:f5:da:02:
c4:a2:22:c9:d3:af:e0:29:9d:07:37:4c:ca:ad:af:
51:bf:b3:e2:87:b6:a0:d0:09:c2:df:88:b3:d1:bc:
a9:d9:b4:e8:4b:83:5d:27:cd:31:24:79:21:08:fb:
13:ab:1a:70:2e:26:0e:19:12:c1:eb:24:e4:51:a7:
a8:83:29:3a:6a:f7:dd:69:9a:3c:30:69:6e:d3:b1:
04:f5:cd:e9:32:f3:f7:8e:7e:15:15:a3:29:c9:3d:
f0:e1:2a:42:16:a8:d3:5a:9b:78:62:e3:4f:75:39:
0e:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:C9:75:F8:FC:B0:10:18:64:0E:88:12:32:8D:3C:A5:3E:87:84:14
X509v3 Authority Key Identifier:
keyid:2E:73:AD:45:F8:A3:EB:E6:67:AB:B1:96:A2:89:D6:71:9B:EB:B8:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LnOtRfij6-Znq7GWoonWcZvruC0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/9a60cf-9d94-4585-a25b-5e7f95811562/1/LnOtRfij6-Znq7GWoonWcZvruC0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/9a60cf-9d94-4585-a25b-5e7f95811562/1/LnOtRfij6-Znq7GWoonWcZvruC0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:00:b5:fd:0d:7d:28:8b:19:e0:58:11:ce:a8:4c:71:a3:76:
09:05:55:d6:c8:60:2d:b1:df:3b:03:cd:c1:74:8e:e9:5e:9d:
a0:7e:e3:32:34:58:ba:1f:a5:2a:25:ad:47:84:08:3b:de:99:
89:28:12:b0:94:76:25:9a:c3:39:a3:3a:a0:59:b8:de:70:6c:
37:e2:dc:0a:ad:91:60:be:26:17:07:8b:7d:12:cc:6d:0a:36:
99:73:9b:5a:7f:6e:b8:60:96:34:2d:5d:15:0c:06:ea:f9:04:
ec:65:93:03:4d:35:e3:04:ec:4b:a8:b1:58:4d:76:98:d5:b6:
c4:47:c7:07:cf:2b:78:36:ae:27:75:79:79:38:b5:36:a9:06:
00:8c:f0:19:bc:00:1f:c9:23:51:bf:c9:a7:57:cc:74:a1:db:
03:94:5c:50:6d:cb:95:87:6a:22:8e:53:3d:17:aa:e4:62:66:
f7:a1:09:bd:25:ce:d1:a7:b0:47:44:f8:3f:a7:e3:6f:23:24:
c9:31:fc:8d:d0:30:72:80:55:ca:13:fd:d4:a7:f8:05:77:c6:
19:92:91:1b:20:25:d2:59:a9:7b:c7:74:38:21:65:6a:ef:02:
d2:0b:75:11:e7:7f:18:c3:0a:9d:0c:37:29:71:ca:7a:5b:23:
7f:7d:ff:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:20:40 2026 by rpki-client