Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/6830f6-f096-4c81-a1f5-8e8138efc41b/1/LnYtP9L7_OEMWPnrdr6Q_MuvsX0.mft
File: LnYtP9L7_OEMWPnrdr6Q_MuvsX0.mft (raw, json)
Hash identifier: FF0wSM58F9MhJXTgRgwtR2YfIPXAXfLVYKQdoF1KMM8=
Subject key identifier: A4:BA:F7:FC:A8:B3:FE:C2:01:78:CE:D7:79:77:84:BA:25:71:AC:40
Authority key identifier: 2E:76:2D:3F:D2:FB:FC:E1:0C:58:F9:EB:76:BE:90:FC:CB:AF:B1:7D
Certificate issuer: /CN=2e762d3fd2fbfce10c58f9eb76be90fccbafb17d
Certificate serial: 019D2A724FB9BD40AFEF1A0303376AFDE66F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LnYtP9L7_OEMWPnrdr6Q_MuvsX0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/6830f6-f096-4c81-a1f5-8e8138efc41b/1/LnYtP9L7_OEMWPnrdr6Q_MuvsX0.mft
Manifest number: 0125
Signing time: Thu 26 Mar 2026 14:00:27 +0000
Manifest this update: Thu 26 Mar 2026 14:00:27 +0000
Manifest next update: Fri 27 Mar 2026 14:00:27 +0000
Files and hashes: 1: LnYtP9L7_OEMWPnrdr6Q_MuvsX0.crl (hash: Pcqmsq+998OC/TtYm9o8abrasPSOwJdxrNPuOANMJio=)
2: Yg-h7EYRvK_pApw2pd2xqkKaiVY.roa (hash: WyYT1rW3NAfoNqzlN2CzJQbWLBSI3Y59Gh+h+WbBSgg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/6830f6-f096-4c81-a1f5-8e8138efc41b/1/LnYtP9L7_OEMWPnrdr6Q_MuvsX0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/6830f6-f096-4c81-a1f5-8e8138efc41b/1/LnYtP9L7_OEMWPnrdr6Q_MuvsX0.mft
rsync://rpki.ripe.net/repository/DEFAULT/LnYtP9L7_OEMWPnrdr6Q_MuvsX0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 14:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:72:4f:b9:bd:40:af:ef:1a:03:03:37:6a:fd:e6:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e762d3fd2fbfce10c58f9eb76be90fccbafb17d
Validity
Not Before: Mar 26 14:00:27 2026 GMT
Not After : Mar 27 14:00:27 2026 GMT
Subject: CN=a4baf7fca8b3fec20178ced7797784ba2571ac40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:05:4d:09:8c:c6:31:7f:bd:22:a0:78:8c:47:
93:f9:e9:d2:26:b1:81:2e:d4:04:d0:c2:d8:2c:36:
a0:a0:6c:60:10:0c:05:2c:e4:c6:dc:f1:94:1d:4b:
ef:4f:69:b2:0b:2f:ff:fb:86:78:87:9f:9d:91:46:
a1:85:e4:c7:73:71:32:94:fa:b5:44:c5:f4:77:db:
0d:3b:22:f6:ea:b2:31:ae:4b:a6:bd:9d:98:07:9d:
e9:82:f1:ac:d9:7f:fb:a8:21:2e:96:a6:c1:59:38:
c8:ee:eb:cc:de:a3:ee:5b:6b:7f:4c:d6:ed:16:b8:
81:9f:ee:1c:8f:ad:be:ce:6e:7d:de:05:55:3f:13:
b7:35:0b:08:2b:76:3c:6d:ac:9e:c7:e5:7a:c8:c9:
84:f6:65:1f:10:85:9e:ba:31:34:bf:c0:57:cc:21:
9d:ee:1c:7a:56:e0:4b:cc:aa:bf:c7:ce:36:b0:b1:
a2:e0:9f:0b:56:b0:86:e9:bd:f0:7c:b2:21:0e:98:
62:74:bd:68:80:26:c7:41:2b:bc:9d:86:39:1d:34:
93:38:53:58:ef:4d:8b:71:fc:07:32:f4:da:c2:2e:
aa:8b:da:8f:bc:7c:52:7d:70:19:5c:21:60:e1:9f:
d7:d3:d5:92:af:b8:ea:f0:2c:dc:3f:20:b9:10:8a:
04:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:BA:F7:FC:A8:B3:FE:C2:01:78:CE:D7:79:77:84:BA:25:71:AC:40
X509v3 Authority Key Identifier:
keyid:2E:76:2D:3F:D2:FB:FC:E1:0C:58:F9:EB:76:BE:90:FC:CB:AF:B1:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LnYtP9L7_OEMWPnrdr6Q_MuvsX0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/6830f6-f096-4c81-a1f5-8e8138efc41b/1/LnYtP9L7_OEMWPnrdr6Q_MuvsX0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/6830f6-f096-4c81-a1f5-8e8138efc41b/1/LnYtP9L7_OEMWPnrdr6Q_MuvsX0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:98:3a:68:6a:78:ae:43:5c:d0:a2:aa:1f:26:d3:ef:da:44:
b4:1e:65:65:4c:00:01:03:84:d6:da:5b:a4:bc:dc:e0:60:f1:
74:51:80:40:7d:36:88:bf:aa:23:7b:a1:23:03:4c:9f:b8:98:
9f:4c:d8:06:f5:50:a8:a9:18:c8:de:e6:c4:16:05:19:1f:8a:
00:70:a3:ae:af:bc:78:12:3a:82:14:ef:63:bf:be:ee:69:57:
ca:05:9a:c9:cb:c6:a1:56:7d:65:9a:0d:75:53:62:d4:6c:b9:
e6:f4:48:56:c5:26:a4:2d:25:5c:16:d3:67:b5:0c:13:c5:ec:
b8:de:40:6e:e3:97:db:e6:fe:02:0e:1d:2a:e1:6b:a9:e3:38:
63:21:48:08:43:49:03:7d:f3:10:2f:af:af:9b:fd:3c:2d:c2:
37:67:eb:a0:43:de:a6:cf:5b:1e:f6:f9:d5:cf:b5:9d:3c:55:
e7:f7:ab:65:89:aa:88:cc:c3:65:cb:28:c4:18:77:05:18:86:
e4:d0:bc:e2:49:51:e6:50:9d:8f:b1:82:43:cd:bc:d0:d1:42:
e4:84:fa:ff:72:13:22:e8:07:99:54:d2:75:53:bb:2c:fb:e1:
88:08:c8:7d:be:c6:a9:b5:ef:de:c6:cf:34:66:73:ce:2d:7d:
7d:6e:ce:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 22:16:36 2026 by rpki-client