Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/c637de-bef7-4da3-803f-84e5f1af6e92/1/LMNcIJCZlCHTPGNZybbmgYKg8nM.mft
File: LMNcIJCZlCHTPGNZybbmgYKg8nM.mft (raw, json)
Hash identifier: /4RtBG8HVeMNHUrbvt9Fh8j1c1yDbmEXfOc1CWL3rD4=
Subject key identifier: 86:BA:E8:5C:44:7D:1F:A8:68:D3:BA:86:9B:22:2A:F7:4C:B9:AF:8F
Authority key identifier: 2C:C3:5C:20:90:99:94:21:D3:3C:63:59:C9:B6:E6:81:82:A0:F2:73
Certificate issuer: /CN=2cc35c2090999421d33c6359c9b6e68182a0f273
Certificate serial: 019D27041B7335AAA66A7E4E706CC483F179
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LMNcIJCZlCHTPGNZybbmgYKg8nM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/c637de-bef7-4da3-803f-84e5f1af6e92/1/LMNcIJCZlCHTPGNZybbmgYKg8nM.mft
Manifest number: 1815
Signing time: Wed 25 Mar 2026 22:01:13 +0000
Manifest this update: Wed 25 Mar 2026 22:01:13 +0000
Manifest next update: Thu 26 Mar 2026 22:01:13 +0000
Files and hashes: 1: LMNcIJCZlCHTPGNZybbmgYKg8nM.crl (hash: dgyNDdPW/g+WixVqw/OX5CVKqm+/r1Os/mLmVPGaKPg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/c637de-bef7-4da3-803f-84e5f1af6e92/1/LMNcIJCZlCHTPGNZybbmgYKg8nM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/c637de-bef7-4da3-803f-84e5f1af6e92/1/LMNcIJCZlCHTPGNZybbmgYKg8nM.mft
rsync://rpki.ripe.net/repository/DEFAULT/LMNcIJCZlCHTPGNZybbmgYKg8nM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:1b:73:35:aa:a6:6a:7e:4e:70:6c:c4:83:f1:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2cc35c2090999421d33c6359c9b6e68182a0f273
Validity
Not Before: Mar 25 22:01:13 2026 GMT
Not After : Mar 26 22:01:13 2026 GMT
Subject: CN=86bae85c447d1fa868d3ba869b222af74cb9af8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:39:47:bf:3b:2a:7c:9d:2e:fc:e7:7c:bd:bc:
20:c7:16:d9:70:a3:a5:2d:63:ce:cf:e8:46:35:46:
b8:18:7d:cb:e7:39:f1:30:7a:bd:51:2a:f8:d9:f6:
72:86:95:ea:f3:50:c5:a4:55:0a:c3:8a:0a:5d:cf:
48:f5:f8:3f:2b:d2:ac:db:ea:5f:8b:d6:32:b1:91:
a8:36:ce:13:5c:2f:3d:19:ad:10:f0:d5:69:88:22:
d9:56:3e:d8:4f:7a:3d:fc:0b:7a:39:18:75:3d:be:
46:ad:f0:68:96:ad:de:52:99:dd:3b:46:ed:f8:fa:
e8:b1:72:95:b9:b3:c2:6c:0f:00:5c:30:ea:76:fb:
cf:84:6f:65:01:98:c9:1b:ee:b3:57:c7:c2:7e:ec:
9e:5d:f0:95:ef:64:32:6e:f6:75:39:d2:c3:32:bb:
6e:63:86:58:22:99:0c:1e:93:38:a6:b6:e1:56:f4:
1a:9c:8f:71:f5:d7:66:a5:4e:7b:07:66:40:ea:02:
1e:83:93:6d:6d:36:05:4c:39:20:ac:2f:04:7a:40:
39:57:1a:6a:da:5a:2b:9b:c8:42:1f:e9:7e:16:46:
8f:79:ea:b5:ad:82:b5:fc:08:c9:f4:bf:a0:8d:0a:
03:ca:ea:23:7d:48:08:04:c2:6c:09:f3:55:8f:5c:
74:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:BA:E8:5C:44:7D:1F:A8:68:D3:BA:86:9B:22:2A:F7:4C:B9:AF:8F
X509v3 Authority Key Identifier:
keyid:2C:C3:5C:20:90:99:94:21:D3:3C:63:59:C9:B6:E6:81:82:A0:F2:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LMNcIJCZlCHTPGNZybbmgYKg8nM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/c637de-bef7-4da3-803f-84e5f1af6e92/1/LMNcIJCZlCHTPGNZybbmgYKg8nM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/c637de-bef7-4da3-803f-84e5f1af6e92/1/LMNcIJCZlCHTPGNZybbmgYKg8nM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:a9:fa:1b:13:14:b3:e7:bf:a7:e4:53:d0:e7:73:20:90:56:
55:84:51:48:ad:67:4d:80:48:be:00:74:de:69:e5:f1:45:f1:
33:d9:56:be:9c:5b:08:9c:81:c2:f9:67:f2:fd:bf:d7:22:d5:
24:de:a4:22:9c:c6:e4:37:eb:64:8a:34:f5:61:29:2e:ef:14:
0b:61:77:8e:77:3a:b6:12:5e:cf:73:81:d6:f1:a5:60:36:aa:
bf:d8:40:f6:96:be:52:a3:bc:20:65:02:b8:a0:93:7f:86:96:
4d:0f:88:d3:ed:90:fb:7b:6d:0c:a4:22:88:f3:21:21:a0:60:
cd:23:2e:46:ca:fb:7d:1d:db:52:fe:6c:3e:c1:5f:ee:96:1e:
85:69:7f:56:aa:09:44:c3:bc:3c:b9:c3:79:14:65:03:5e:e0:
7f:df:2e:f1:58:ac:e3:bb:25:f7:24:f1:05:03:b2:f3:8a:49:
98:23:49:bc:a9:e8:65:bc:a6:95:54:9f:6d:fd:4b:b1:9b:3b:
54:c9:ad:97:eb:54:5e:4e:57:36:1d:fc:fa:04:7e:2d:f2:7a:
e7:12:27:f6:26:4d:83:37:c0:84:81:1e:33:e8:98:91:47:87:
5b:8f:5f:06:a6:ca:58:b0:24:d6:cb:37:64:96:60:e4:45:80:
44:b7:9c:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:58:20 2026 by rpki-client