Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/3838c4-6e46-49a8-8c14-ae8b8d788700/1/LNpfA-r1E6d_LsIN5bsWcsXSeas.mft
File: LNpfA-r1E6d_LsIN5bsWcsXSeas.mft (raw, json)
Hash identifier: /+iNEfvQ1ggWA4ma+lV6d5ewd/GlT13AoyNfSZlHj9o=
Subject key identifier: 28:49:2A:6F:DB:C9:D1:4A:3D:88:B1:EB:86:02:0F:F8:EF:1B:94:58
Authority key identifier: 2C:DA:5F:03:EA:F5:13:A7:7F:2E:C2:0D:E5:BB:16:72:C5:D2:79:AB
Certificate issuer: /CN=2cda5f03eaf513a77f2ec20de5bb1672c5d279ab
Certificate serial: 019D26CD2563D9F47D030ADD80EB39ADBEC2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LNpfA-r1E6d_LsIN5bsWcsXSeas.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/3838c4-6e46-49a8-8c14-ae8b8d788700/1/LNpfA-r1E6d_LsIN5bsWcsXSeas.mft
Manifest number: 1886
Signing time: Wed 25 Mar 2026 21:01:11 +0000
Manifest this update: Wed 25 Mar 2026 21:01:11 +0000
Manifest next update: Thu 26 Mar 2026 21:01:11 +0000
Files and hashes: 1: LNpfA-r1E6d_LsIN5bsWcsXSeas.crl (hash: bpLZVAeS2Q/pNtDy4b3vCO1M/LP+6cLwqZwBuU7/BzM=)
2: fd8Ev0hcgslfyVKkXYe9Nwx0kyc.roa (hash: ZQjqK7exhVB66BBUdBf2gOZ8d37Zs6sdCNMpDp0YRYQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/3838c4-6e46-49a8-8c14-ae8b8d788700/1/LNpfA-r1E6d_LsIN5bsWcsXSeas.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/3838c4-6e46-49a8-8c14-ae8b8d788700/1/LNpfA-r1E6d_LsIN5bsWcsXSeas.mft
rsync://rpki.ripe.net/repository/DEFAULT/LNpfA-r1E6d_LsIN5bsWcsXSeas.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cd:25:63:d9:f4:7d:03:0a:dd:80:eb:39:ad:be:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2cda5f03eaf513a77f2ec20de5bb1672c5d279ab
Validity
Not Before: Mar 25 21:01:11 2026 GMT
Not After : Mar 26 21:01:11 2026 GMT
Subject: CN=28492a6fdbc9d14a3d88b1eb86020ff8ef1b9458
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:a0:56:2e:76:b2:93:ce:ff:6f:1c:25:87:ed:
ed:e5:e9:21:f4:53:e0:f2:97:1c:0b:09:fc:fc:3c:
c2:cd:f8:b0:33:54:02:05:76:c1:27:8a:0b:c9:51:
e7:ba:1e:d9:21:2b:33:61:b3:f3:4e:48:26:64:b9:
13:c6:b1:be:db:dd:bb:32:7e:bf:62:ba:79:eb:79:
7d:bd:01:a0:a6:03:f4:6a:df:ce:51:9e:3e:4a:65:
a8:f7:9a:19:2a:f4:b9:63:bf:e6:72:48:89:44:56:
32:6f:7a:ad:dd:fd:20:75:cc:af:e3:42:6f:1f:99:
a4:f3:07:71:0a:39:23:01:65:8c:38:f9:7f:b5:b4:
60:e3:6b:e2:c5:12:fd:d0:5d:33:2f:97:70:f9:ae:
14:51:aa:7e:4a:b7:c2:0d:bf:d1:19:cc:69:74:e7:
75:2b:8f:d4:4b:1c:f6:a5:16:68:dc:6c:eb:e2:b9:
51:61:35:30:a0:ae:a6:37:59:50:81:83:6e:0b:b7:
bc:48:21:0e:6f:e3:b9:99:cf:9b:89:64:8f:7f:88:
b3:f3:50:ca:9a:22:e1:f1:8d:87:fc:7a:93:8d:b6:
6d:c1:90:b8:25:c3:91:54:e6:4d:fe:b0:ea:57:23:
bd:c6:05:05:80:99:a5:6e:92:ab:69:ce:bc:54:24:
85:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:49:2A:6F:DB:C9:D1:4A:3D:88:B1:EB:86:02:0F:F8:EF:1B:94:58
X509v3 Authority Key Identifier:
keyid:2C:DA:5F:03:EA:F5:13:A7:7F:2E:C2:0D:E5:BB:16:72:C5:D2:79:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LNpfA-r1E6d_LsIN5bsWcsXSeas.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/3838c4-6e46-49a8-8c14-ae8b8d788700/1/LNpfA-r1E6d_LsIN5bsWcsXSeas.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/3838c4-6e46-49a8-8c14-ae8b8d788700/1/LNpfA-r1E6d_LsIN5bsWcsXSeas.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:eb:d1:ad:43:d6:40:99:2c:87:6f:f5:45:5b:82:38:2c:44:
9b:fa:f7:a5:d6:05:6f:c0:2e:65:b3:28:64:b1:18:e6:fb:65:
c2:8c:4c:0d:a6:36:ec:cd:a3:fe:f3:28:f1:67:1c:08:4b:a9:
a2:c0:93:43:8b:8c:86:83:f1:a0:da:bf:14:c2:fe:d7:f9:84:
96:2b:89:9b:0a:2a:b8:e1:60:06:df:6a:3b:b4:eb:d1:b3:f7:
06:81:46:30:9c:68:63:bd:89:67:cd:46:6e:cd:ab:56:2a:b3:
7e:2d:f6:d8:2c:2c:01:3f:cb:de:9c:fd:89:31:19:7e:c0:3c:
71:31:6a:94:be:71:d5:d2:3a:cc:96:5d:fe:76:88:e5:e3:1a:
eb:65:24:22:81:f9:3b:99:12:39:57:b3:ad:27:09:2c:fa:de:
11:f8:75:d2:58:90:93:99:d3:08:ba:5e:40:59:ec:a5:8e:64:
d3:d1:bf:5b:bf:ac:70:7e:f6:f1:9f:14:3f:0d:b2:c0:ff:e0:
b5:97:7c:37:c3:15:6c:25:4b:a9:66:8e:e5:3e:15:75:94:e8:
76:ee:7f:99:57:3a:65:37:bd:0c:63:c7:43:4c:ea:c2:06:3d:
c7:3b:c7:61:3e:1e:55:9d:a7:b7:96:7a:cf:b9:10:41:7a:0f:
3d:00:62:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:36:17 2026 by rpki-client