
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a0/d5c45a-8448-47b8-b577-af9d695e940f/1/LnKImCrdg2QvgaPeuo-FbxTgmQo.mft
File: LnKImCrdg2QvgaPeuo-FbxTgmQo.mft (raw, json)
Hash identifier: /UbSQNXhC4vwd+ojVIOD3KFglWLGXFtIehV7HqyduMo=
Subject key identifier: 6D:22:9F:2F:84:BB:6B:0A:0E:0E:D9:04:DC:F8:A3:2B:01:EF:56:61
Authority key identifier: 2E:72:88:98:2A:DD:83:64:2F:81:A3:DE:BA:8F:85:6F:14:E0:99:0A
Certificate issuer: /CN=2e7288982add83642f81a3deba8f856f14e0990a
Certificate serial: 01A1DDCBAAC259D7FD7994B45C7D85DAECA4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LnKImCrdg2QvgaPeuo-FbxTgmQo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/d5c45a-8448-47b8-b577-af9d695e940f/1/LnKImCrdg2QvgaPeuo-FbxTgmQo.mft
Manifest number: 16C8
Signing time: Sun 15 Nov 2026 06:01:14 +0000
Manifest this update: Sun 15 Nov 2026 06:01:14 +0000
Manifest next update: Mon 16 Nov 2026 06:01:14 +0000
Files and hashes: 1: LnKImCrdg2QvgaPeuo-FbxTgmQo.crl (hash: j2BfeS4HFvyBc8lG0J8BVQxW7VdFRgDSJ6Ld8HezdxM=)
2: PdB7yHgtRY5AbRPzGQ7Kal7stk0.roa (hash: ZfhLG4tdAsP3dDzk6eFVvwC/Pe3dDXcwaTLLVzg2Rko=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/d5c45a-8448-47b8-b577-af9d695e940f/1/LnKImCrdg2QvgaPeuo-FbxTgmQo.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/d5c45a-8448-47b8-b577-af9d695e940f/1/LnKImCrdg2QvgaPeuo-FbxTgmQo.mft
rsync://rpki.ripe.net/repository/DEFAULT/LnKImCrdg2QvgaPeuo-FbxTgmQo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:dd:cb:aa:c2:59:d7:fd:79:94:b4:5c:7d:85:da:ec:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e7288982add83642f81a3deba8f856f14e0990a
Validity
Not Before: Nov 15 06:01:14 2026 GMT
Not After : Nov 16 06:01:14 2026 GMT
Subject: CN=6d229f2f84bb6b0a0e0ed904dcf8a32b01ef5661
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:b0:06:80:c2:15:95:a5:24:5d:c1:9a:59:70:
47:33:33:2f:07:a6:39:71:44:a1:11:a9:57:28:70:
c6:af:a2:c3:9e:1b:d8:24:da:da:8a:3b:98:2d:a1:
3a:de:44:c4:f3:31:2d:4d:b3:02:77:cf:0e:f8:c6:
15:88:6f:15:9c:10:05:50:38:19:e5:af:83:a0:c4:
04:c0:dd:2e:87:35:e8:a3:da:21:95:cc:5c:80:f3:
71:83:b6:8b:a8:b0:1c:6a:2a:13:8f:15:5b:5b:2c:
d9:34:35:e1:a8:53:fb:f2:6e:e6:72:d8:0e:fa:36:
d0:90:46:f6:6d:2d:a6:92:36:0a:57:ce:b6:c3:28:
e4:d9:24:cf:04:f4:2b:41:78:45:0e:55:ed:ea:ec:
29:5c:75:fb:de:05:5e:98:9d:db:b0:5a:f1:a3:74:
d5:29:29:93:4a:5c:b6:ca:7e:4e:bf:e0:db:ad:b8:
41:29:23:68:ba:f6:64:05:fc:92:8b:f7:7d:bb:68:
c2:68:49:d2:c9:1f:60:42:3f:2e:6f:ab:d2:3b:66:
00:7f:cd:83:18:87:d8:ba:c8:a0:86:ba:c9:38:31:
e0:f7:71:01:d0:a6:04:47:e0:68:c0:e7:75:a1:a4:
0f:4e:b1:7c:df:96:7c:98:fd:fb:0a:8e:7d:75:5f:
bb:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:22:9F:2F:84:BB:6B:0A:0E:0E:D9:04:DC:F8:A3:2B:01:EF:56:61
X509v3 Authority Key Identifier:
keyid:2E:72:88:98:2A:DD:83:64:2F:81:A3:DE:BA:8F:85:6F:14:E0:99:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LnKImCrdg2QvgaPeuo-FbxTgmQo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/d5c45a-8448-47b8-b577-af9d695e940f/1/LnKImCrdg2QvgaPeuo-FbxTgmQo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/d5c45a-8448-47b8-b577-af9d695e940f/1/LnKImCrdg2QvgaPeuo-FbxTgmQo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:aa:1c:cf:bd:27:46:ed:07:9c:6f:83:98:14:09:f9:ba:04:
82:60:4d:09:eb:03:09:5a:72:1d:c0:82:40:34:d1:c2:2b:32:
ce:e2:9f:db:7d:46:e0:da:a5:6d:bb:4e:16:f5:5a:46:0b:73:
e4:05:0d:79:44:81:6d:89:8f:09:eb:d5:32:1b:c5:22:bc:da:
9f:5a:dd:13:2a:63:b3:dd:72:81:3e:68:94:ee:8c:ef:ef:20:
bc:ea:12:89:3b:1b:19:e9:97:64:fa:b0:3d:72:2d:ce:a7:c5:
fe:81:cf:8a:ac:f4:e8:18:a4:d8:a7:58:5e:53:79:84:be:82:
b5:0f:e2:62:07:e8:e5:14:fc:a0:3e:d0:43:89:fe:66:b4:1b:
22:cf:83:9b:74:9f:a6:66:5e:a1:62:dc:15:f8:22:61:bb:56:
35:b7:06:00:f6:70:38:f8:51:af:48:3e:37:60:34:2d:38:f5:
58:b7:ac:a8:96:8c:9e:ff:19:f7:6b:bb:2e:7d:41:07:ab:9a:
d4:47:dd:83:19:30:9d:4e:79:21:bc:6f:53:8a:f7:7e:7a:7f:
67:87:73:4f:17:50:12:90:04:5a:27:8d:24:cf:fb:ee:f2:84:
a4:62:f7:14:2c:52:89:d4:50:13:de:2b:81:fd:1c:9e:e7:49:
8f:b3:df:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 10:16:03 2026 by rpki-client