Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/dd/1ad9bf-0322-4534-b009-e6e91bf052fe/1/LNQbzDzXPg3H9-lbXQ3KbWhXvtw.mft
File: LNQbzDzXPg3H9-lbXQ3KbWhXvtw.mft (raw, json)
Hash identifier: VwNCOxG7oDKfkWjCDsJpQRvEVp2n0Y/9s/ZpZzbjsHM=
Subject key identifier: 65:B8:2A:45:88:6A:3F:53:64:3B:56:4C:CB:BE:A2:F9:9B:98:BF:F0
Authority key identifier: 2C:D4:1B:CC:3C:D7:3E:0D:C7:F7:E9:5B:5D:0D:CA:6D:68:57:BE:DC
Certificate issuer: /CN=2cd41bcc3cd73e0dc7f7e95b5d0dca6d6857bedc
Certificate serial: 01A0E17448165BC706105F1BA74796F47B95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LNQbzDzXPg3H9-lbXQ3KbWhXvtw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/1ad9bf-0322-4534-b009-e6e91bf052fe/1/LNQbzDzXPg3H9-lbXQ3KbWhXvtw.mft
Manifest number: 1A6E
Signing time: Sun 27 Sep 2026 06:01:29 +0000
Manifest this update: Sun 27 Sep 2026 06:01:29 +0000
Manifest next update: Mon 28 Sep 2026 06:01:29 +0000
Files and hashes: 1: 9UXsLKG5ISnWSEO-TCG0hlAjiEY.roa (hash: SyhzNR0OFmBqX9d1/jz00jh2vv/1QKU6100ZrfZ9Ouk=)
2: LNQbzDzXPg3H9-lbXQ3KbWhXvtw.crl (hash: Y1mM3/UdX17SJeUYWrhNah/JzKS7bWENcGkwUUMGFpw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/1ad9bf-0322-4534-b009-e6e91bf052fe/1/LNQbzDzXPg3H9-lbXQ3KbWhXvtw.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/1ad9bf-0322-4534-b009-e6e91bf052fe/1/LNQbzDzXPg3H9-lbXQ3KbWhXvtw.mft
rsync://rpki.ripe.net/repository/DEFAULT/LNQbzDzXPg3H9-lbXQ3KbWhXvtw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 04:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e1:74:48:16:5b:c7:06:10:5f:1b:a7:47:96:f4:7b:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2cd41bcc3cd73e0dc7f7e95b5d0dca6d6857bedc
Validity
Not Before: Sep 27 06:01:29 2026 GMT
Not After : Sep 28 06:01:29 2026 GMT
Subject: CN=65b82a45886a3f53643b564ccbbea2f99b98bff0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:68:ac:60:1b:46:7a:01:3d:f4:53:ff:eb:87:
13:11:cc:56:e3:64:33:a0:23:e2:96:58:12:2e:16:
30:cd:5a:ec:14:02:e3:ca:86:73:e6:bd:e3:d0:cf:
db:2e:a4:e6:5c:e6:80:6f:b9:8e:e0:0c:1c:74:ad:
92:d1:0c:c4:50:5e:09:68:ae:fb:fe:f9:ab:48:50:
17:a3:b4:fb:da:a2:ea:e0:79:77:f8:2e:5e:00:fe:
35:0f:9f:47:28:45:34:c2:50:9e:fb:f7:3e:ba:df:
16:5e:e9:b5:61:47:4f:50:9e:ce:e6:c8:76:0b:6b:
e8:3c:95:e1:56:be:e3:37:d1:8e:ca:5e:a4:a7:58:
8a:fd:7c:a2:06:60:42:68:29:69:07:b7:79:25:d8:
a3:dd:6a:fd:4b:75:f3:98:e4:5e:c3:49:98:44:1b:
2d:82:b2:61:11:46:aa:ff:8c:b2:87:22:97:27:e5:
cb:f1:5b:0c:fb:7b:05:8f:21:f6:bc:76:78:a9:bd:
4c:62:84:1b:b4:67:1b:73:16:e2:e0:13:c6:e9:81:
1e:ae:96:c8:0c:01:0e:f7:83:96:76:96:06:70:a7:
8e:56:9b:ea:0c:9c:65:db:54:a8:4a:d8:c6:13:62:
4e:7f:25:72:ce:6f:6b:08:2b:1a:e7:50:07:e4:f7:
5e:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:B8:2A:45:88:6A:3F:53:64:3B:56:4C:CB:BE:A2:F9:9B:98:BF:F0
X509v3 Authority Key Identifier:
keyid:2C:D4:1B:CC:3C:D7:3E:0D:C7:F7:E9:5B:5D:0D:CA:6D:68:57:BE:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LNQbzDzXPg3H9-lbXQ3KbWhXvtw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/1ad9bf-0322-4534-b009-e6e91bf052fe/1/LNQbzDzXPg3H9-lbXQ3KbWhXvtw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/1ad9bf-0322-4534-b009-e6e91bf052fe/1/LNQbzDzXPg3H9-lbXQ3KbWhXvtw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:68:ad:5f:0b:6c:99:24:c3:73:50:aa:a8:b3:f9:b2:cd:52:
fd:65:3a:90:f6:87:ae:d7:0f:88:c4:e2:7d:6c:7e:b5:29:9f:
8c:cc:94:88:43:18:bd:51:48:65:89:2e:cf:bf:33:8a:10:f6:
25:4e:23:86:3d:8c:61:6e:f5:de:dc:b6:a8:76:23:27:83:e1:
72:2e:f9:27:4d:83:81:e9:f0:14:a8:0e:1a:13:57:06:e1:dd:
cd:8c:8f:52:dc:b4:dc:a4:71:95:8d:50:2d:c4:d6:a8:7c:86:
1b:88:47:bf:2c:c7:f1:66:c6:14:f5:33:98:a2:ec:60:8d:d7:
25:5d:77:48:80:61:35:b8:1c:75:7f:a4:7c:13:dc:18:1e:11:
1b:84:21:cb:8e:fd:97:b2:23:f5:38:c9:7b:9e:65:61:56:59:
33:45:be:2f:12:1d:1d:f5:4e:ee:3e:52:d7:88:76:14:e0:63:
88:85:65:ad:18:46:4a:a8:67:c9:a0:1d:43:36:e2:70:d1:65:
9b:bd:b4:e2:62:8f:9c:4f:77:f3:27:ec:f8:58:39:74:56:51:
bc:c8:69:0c:bd:30:ee:3d:a7:d1:b3:4f:22:77:29:4f:c8:81:
da:82:86:5a:ce:87:f6:4f:29:9b:b6:3a:c2:e6:fc:1a:e6:76:
d8:f1:b0:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 08:44:16 2026 by rpki-client