Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/1ad9bf-0322-4534-b009-e6e91bf052fe/1/LNQbzDzXPg3H9-lbXQ3KbWhXvtw.mft
File: LNQbzDzXPg3H9-lbXQ3KbWhXvtw.mft (raw, json)
Hash identifier: WrjOFpZmlFYtFiFaNja8bE/QQ3Vs6PZwwYjfAF7hvyg=
Subject key identifier: E9:D3:A1:94:45:96:B8:3E:BB:41:DB:C3:E0:D0:3F:BF:D1:38:BA:2D
Authority key identifier: 2C:D4:1B:CC:3C:D7:3E:0D:C7:F7:E9:5B:5D:0D:CA:6D:68:57:BE:DC
Certificate issuer: /CN=2cd41bcc3cd73e0dc7f7e95b5d0dca6d6857bedc
Certificate serial: 019D2D3C66597F4DF3A482B00AD1EB8EF187
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LNQbzDzXPg3H9-lbXQ3KbWhXvtw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/1ad9bf-0322-4534-b009-e6e91bf052fe/1/LNQbzDzXPg3H9-lbXQ3KbWhXvtw.mft
Manifest number: 1883
Signing time: Fri 27 Mar 2026 03:00:26 +0000
Manifest this update: Fri 27 Mar 2026 03:00:26 +0000
Manifest next update: Sat 28 Mar 2026 03:00:26 +0000
Files and hashes: 1: 9UXsLKG5ISnWSEO-TCG0hlAjiEY.roa (hash: SyhzNR0OFmBqX9d1/jz00jh2vv/1QKU6100ZrfZ9Ouk=)
2: LNQbzDzXPg3H9-lbXQ3KbWhXvtw.crl (hash: g2CZUL1MYXvz5irCr1VCo5IOcFWYuDxusXjKF/YYz/0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/1ad9bf-0322-4534-b009-e6e91bf052fe/1/LNQbzDzXPg3H9-lbXQ3KbWhXvtw.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/1ad9bf-0322-4534-b009-e6e91bf052fe/1/LNQbzDzXPg3H9-lbXQ3KbWhXvtw.mft
rsync://rpki.ripe.net/repository/DEFAULT/LNQbzDzXPg3H9-lbXQ3KbWhXvtw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 28 Mar 2026 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2d:3c:66:59:7f:4d:f3:a4:82:b0:0a:d1:eb:8e:f1:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2cd41bcc3cd73e0dc7f7e95b5d0dca6d6857bedc
Validity
Not Before: Mar 27 03:00:26 2026 GMT
Not After : Mar 28 03:00:26 2026 GMT
Subject: CN=e9d3a1944596b83ebb41dbc3e0d03fbfd138ba2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:a1:ec:36:04:ff:17:b3:4d:70:2a:27:e3:b2:
41:fa:04:08:7b:7f:12:81:1c:2a:88:0a:93:ad:08:
a5:5c:c8:b8:56:0d:2d:27:26:b3:3c:bb:0b:01:a8:
ea:06:11:c5:59:31:7a:fa:f4:d1:c7:ed:b7:c5:e2:
11:ce:f4:dc:a9:6d:de:63:33:f1:ff:71:cb:37:a6:
a3:b1:94:63:ff:fa:de:22:b6:ae:fa:5d:45:74:c3:
0b:df:d3:36:87:62:d1:c8:2f:8b:73:92:f4:e4:d3:
f9:7b:c1:3f:c4:e5:64:0b:ae:97:ab:0c:58:e6:34:
4f:3f:de:97:a9:da:de:56:02:c5:31:67:1a:91:40:
8a:52:e4:9c:f0:23:d4:62:e7:5a:06:26:1a:c5:10:
09:83:38:41:18:92:5a:95:fc:93:9c:de:54:50:91:
e2:17:c9:38:42:a3:d1:54:58:e9:02:ed:a7:a4:3e:
9b:c8:c5:62:6c:7f:46:35:77:42:f6:70:d8:7b:6a:
c1:b5:88:12:f2:0f:ae:3d:f4:5a:ea:eb:c5:63:c7:
b0:3c:c2:b9:8d:39:bd:5f:b5:a6:ef:22:15:a4:21:
7c:df:2b:28:bf:89:75:95:3e:44:b1:5f:e0:12:6e:
30:86:af:bb:68:30:21:e7:3f:90:90:3b:e2:fe:0a:
5a:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:D3:A1:94:45:96:B8:3E:BB:41:DB:C3:E0:D0:3F:BF:D1:38:BA:2D
X509v3 Authority Key Identifier:
keyid:2C:D4:1B:CC:3C:D7:3E:0D:C7:F7:E9:5B:5D:0D:CA:6D:68:57:BE:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LNQbzDzXPg3H9-lbXQ3KbWhXvtw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/1ad9bf-0322-4534-b009-e6e91bf052fe/1/LNQbzDzXPg3H9-lbXQ3KbWhXvtw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/1ad9bf-0322-4534-b009-e6e91bf052fe/1/LNQbzDzXPg3H9-lbXQ3KbWhXvtw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:3e:49:f2:20:42:c1:1c:85:a5:a4:20:25:91:2d:a9:20:79:
84:be:de:ad:48:d5:e8:88:b9:4b:2a:71:a9:f6:bd:3b:a7:f0:
13:71:b5:f4:24:38:a1:0c:6b:a4:e8:84:a8:e2:e4:9e:ed:ec:
2e:18:fb:d9:a3:d1:9b:d0:57:06:a6:58:66:4f:36:fe:5a:1d:
69:d0:0b:c7:ad:bb:8a:3f:ca:70:9a:6b:aa:25:27:35:e4:fc:
a0:37:a2:d1:c4:84:20:2b:d5:e5:f3:3b:1c:72:72:e1:ff:76:
0a:3c:61:88:51:1e:59:7c:1d:bc:63:55:7a:72:34:a3:04:0a:
45:f9:bb:ba:84:e5:fc:0a:3e:bf:f5:aa:1a:d9:ae:4a:b9:91:
51:8d:27:80:b5:35:9f:56:50:c4:df:74:34:8a:0a:fa:88:a5:
d9:bd:c9:87:c2:48:e9:09:96:cb:99:9c:40:6d:6d:c1:17:72:
00:1e:ec:22:d6:c2:e3:1e:90:d3:a6:c2:06:d5:e3:b0:a0:d4:
83:ea:ec:dc:50:e5:4a:94:db:a4:1e:32:b4:48:fa:38:ed:7a:
af:b3:ca:c4:60:3c:88:75:a6:84:97:f8:74:8d:e7:d0:f6:2b:
4c:82:a0:b9:e1:72:90:ef:84:5a:79:43:a9:8f:cf:92:76:54:
2b:41:14:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 07:09:21 2026 by rpki-client