Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/1ad9bf-0322-4534-b009-e6e91bf052fe/1/LNQbzDzXPg3H9-lbXQ3KbWhXvtw.mft
File: LNQbzDzXPg3H9-lbXQ3KbWhXvtw.mft (raw, json)
Hash identifier: Uwyt44KuFsxcYbDCM6VF4jP22vs0WPel3KIk4JOWsEQ=
Subject key identifier: 44:94:F8:34:B1:46:AB:A7:4E:64:DA:8D:68:A4:E9:2E:58:09:BC:05
Authority key identifier: 2C:D4:1B:CC:3C:D7:3E:0D:C7:F7:E9:5B:5D:0D:CA:6D:68:57:BE:DC
Certificate issuer: /CN=2cd41bcc3cd73e0dc7f7e95b5d0dca6d6857bedc
Certificate serial: 019D2B4E782BC8A60EF4F93A055C25231A4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LNQbzDzXPg3H9-lbXQ3KbWhXvtw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/1ad9bf-0322-4534-b009-e6e91bf052fe/1/LNQbzDzXPg3H9-lbXQ3KbWhXvtw.mft
Manifest number: 1882
Signing time: Thu 26 Mar 2026 18:00:55 +0000
Manifest this update: Thu 26 Mar 2026 18:00:55 +0000
Manifest next update: Fri 27 Mar 2026 18:00:55 +0000
Files and hashes: 1: 9UXsLKG5ISnWSEO-TCG0hlAjiEY.roa (hash: SyhzNR0OFmBqX9d1/jz00jh2vv/1QKU6100ZrfZ9Ouk=)
2: LNQbzDzXPg3H9-lbXQ3KbWhXvtw.crl (hash: 7+PkheAZDFZDibC9R+su8YzR5Y/v2o+RSpFvuN3I6ZI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/1ad9bf-0322-4534-b009-e6e91bf052fe/1/LNQbzDzXPg3H9-lbXQ3KbWhXvtw.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/1ad9bf-0322-4534-b009-e6e91bf052fe/1/LNQbzDzXPg3H9-lbXQ3KbWhXvtw.mft
rsync://rpki.ripe.net/repository/DEFAULT/LNQbzDzXPg3H9-lbXQ3KbWhXvtw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 18:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2b:4e:78:2b:c8:a6:0e:f4:f9:3a:05:5c:25:23:1a:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2cd41bcc3cd73e0dc7f7e95b5d0dca6d6857bedc
Validity
Not Before: Mar 26 18:00:55 2026 GMT
Not After : Mar 27 18:00:55 2026 GMT
Subject: CN=4494f834b146aba74e64da8d68a4e92e5809bc05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:21:b6:59:e0:1f:bc:e2:03:4e:4f:fc:45:19:
07:72:89:db:fb:28:28:92:f5:e8:ed:d8:99:10:62:
d8:ea:c4:c0:ae:50:83:bc:7f:04:31:7f:e0:41:17:
f8:bb:20:08:31:14:40:a2:ec:fe:dd:4b:0d:b7:36:
24:a7:ef:5e:da:1c:6d:42:88:82:ed:45:f9:e6:57:
10:20:4f:d9:86:6c:04:06:29:c7:39:5f:31:1e:71:
25:f8:e3:5b:4d:73:4b:cf:65:98:c6:ea:d0:36:3e:
57:d4:7a:ae:4a:c1:12:fa:f6:d5:bb:40:06:73:72:
8f:70:66:cb:c4:79:7c:1f:f1:f5:35:9d:98:5e:5b:
ad:a2:a8:42:9a:4e:80:85:93:87:22:45:b7:1c:c6:
20:d1:c2:43:51:99:f7:d5:96:0b:c0:ff:4c:ea:38:
af:aa:81:65:48:29:96:2d:34:7d:51:7a:94:cc:22:
22:2b:5e:de:9b:0b:47:43:ef:ca:d1:09:85:72:b3:
51:6b:c7:27:bb:43:3d:ac:d4:21:71:83:90:c4:0a:
5f:6b:6d:27:42:db:40:0a:63:01:d3:8c:4b:1b:06:
e2:d2:37:a0:3b:5e:2f:a8:35:0d:fe:a7:97:57:2c:
6d:7d:32:3a:1c:a7:2d:be:76:f7:26:4d:d3:f2:a8:
aa:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:94:F8:34:B1:46:AB:A7:4E:64:DA:8D:68:A4:E9:2E:58:09:BC:05
X509v3 Authority Key Identifier:
keyid:2C:D4:1B:CC:3C:D7:3E:0D:C7:F7:E9:5B:5D:0D:CA:6D:68:57:BE:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LNQbzDzXPg3H9-lbXQ3KbWhXvtw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/1ad9bf-0322-4534-b009-e6e91bf052fe/1/LNQbzDzXPg3H9-lbXQ3KbWhXvtw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/1ad9bf-0322-4534-b009-e6e91bf052fe/1/LNQbzDzXPg3H9-lbXQ3KbWhXvtw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:06:1f:4c:a8:df:66:9c:f3:90:3a:93:52:ec:98:f7:02:b5:
48:87:4f:fe:9e:bc:66:63:d8:77:dc:89:7b:6a:4a:d5:e1:e2:
71:68:cb:c9:a1:54:45:65:f2:09:b8:64:ab:f2:bc:6b:9d:b6:
d1:c6:55:1a:ff:58:9f:39:3c:35:31:3e:1d:13:75:ea:71:d9:
af:78:42:95:b5:65:ce:8e:0a:16:01:30:d0:1b:c0:c3:1b:01:
75:e5:d8:bf:13:db:a6:ec:a1:20:1a:b3:13:0e:6e:50:d6:5b:
de:7f:10:7c:de:d0:da:fe:0f:53:66:97:9b:46:31:d5:66:6d:
37:42:a8:5f:7c:df:cb:2e:87:0f:cb:5d:2a:77:e5:91:f6:83:
29:7e:a9:ad:2a:ba:d8:c3:0d:3a:40:71:5a:ef:ef:5e:6b:03:
80:ba:97:f7:c4:84:90:be:c5:91:cc:22:30:c2:52:34:27:80:
53:e5:ec:6f:19:5d:2c:ac:f5:a4:42:4c:cf:5a:b7:fd:38:3a:
d1:8b:f5:94:d0:19:b5:13:42:3b:f6:46:c5:27:f3:97:eb:91:
68:b7:1d:58:af:e2:d0:14:7a:99:07:56:1b:4f:86:fe:81:9c:
95:b0:f3:52:ec:f6:99:4d:cd:d4:cd:cd:6a:1a:08:4d:b5:3a:
50:60:e0:f4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0rTngryKYO9Pk6BVwlIxpLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJjZDQxYmNjM2NkNzNlMGRjN2Y3ZTk1YjVkMGRjYTZkNjg1
N2JlZGMwHhcNMjYwMzI2MTgwMDU1WhcNMjYwMzI3MTgwMDU1WjAzMTEwLwYDVQQD
Eyg0NDk0ZjgzNGIxNDZhYmE3NGU2NGRhOGQ2OGE0ZTkyZTU4MDliYzA1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvCG2WeAfvOIDTk/8RRkHconb+ygo
kvXo7diZEGLY6sTArlCDvH8EMX/gQRf4uyAIMRRAouz+3UsNtzYkp+9e2hxtQoiC
7UX55lcQIE/ZhmwEBinHOV8xHnEl+ONbTXNLz2WYxurQNj5X1HquSsES+vbVu0AG
c3KPcGbLxHl8H/H1NZ2YXlutoqhCmk6AhZOHIkW3HMYg0cJDUZn31ZYLwP9M6jiv
qoFlSCmWLTR9UXqUzCIiK17emwtHQ+/K0QmFcrNRa8cnu0M9rNQhcYOQxApfa20n
QttACmMB04xLGwbi0jegO14vqDUN/qeXVyxtfTI6HKctvnb3Jk3T8qiqAwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFESU+DSxRqunTmTajWik6S5YCbwFMB8GA1UdIwQY
MBaAFCzUG8w81z4Nx/fpW10Nym1oV77cMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTE5RYnpEelhQZzNIOS1sYlhRM0tiV2hYdnR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC8xYWQ5YmYtMDMyMi00NTM0LWIwMDkt
ZTZlOTFiZjA1MmZlLzEvTE5RYnpEelhQZzNIOS1sYlhRM0tiV2hYdnR3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZC8xYWQ5YmYtMDMyMi00NTM0LWIwMDktZTZlOTFiZjA1MmZl
LzEvTE5RYnpEelhQZzNIOS1sYlhRM0tiV2hYdnR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABgYfTKjf
ZpzzkDqTUuyY9wK1SIdP/p68ZmPYd9yJe2pK1eHicWjLyaFURWXyCbhkq/K8a522
0cZVGv9Ynzk8NTE+HRN16nHZr3hClbVlzo4KFgEw0BvAwxsBdeXYvxPbpuyhIBqz
Ew5uUNZb3n8QfN7Q2v4PU2aXm0Yx1WZtN0KoX3zfyy6HD8tdKnflkfaDKX6prSq6
2MMNOkBxWu/vXmsDgLqX98SEkL7FkcwiMMJSNCeAU+XsbxldLKz1pEJMz1q3/Tg6
0Yv1lNAZtRNCO/ZGxSfzl+uRaLcdWK/i0BR6mQdWG0+G/oGclbDzUuz2mU3N1M3N
ahoITbU6UGDg9A==
-----END CERTIFICATE-----
Generated at Fri Mar 27 05:20:52 2026 by rpki-client