Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/ccc808-14bb-494d-99c8-2f11a651962b/1/LcnLUwLY0T_pHoD1y9H7rLwBSCc.mft
File: LcnLUwLY0T_pHoD1y9H7rLwBSCc.mft (raw, json)
Hash identifier: IsaD6UTwZUvJb1ShxGZkw3JPC46tXs2GxuWHx/4FstM=
Subject key identifier: D9:32:A6:AD:D1:83:0A:DE:68:40:3F:EE:94:C0:EE:15:ED:60:95:0C
Authority key identifier: 2D:C9:CB:53:02:D8:D1:3F:E9:1E:80:F5:CB:D1:FB:AC:BC:01:48:27
Certificate issuer: /CN=2dc9cb5302d8d13fe91e80f5cbd1fbacbc014827
Certificate serial: 019CACB4A0D45BD113726910F2BB9B26F666
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LcnLUwLY0T_pHoD1y9H7rLwBSCc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/ccc808-14bb-494d-99c8-2f11a651962b/1/LcnLUwLY0T_pHoD1y9H7rLwBSCc.mft
Manifest number: 1848
Signing time: Mon 02 Mar 2026 04:00:44 +0000
Manifest this update: Mon 02 Mar 2026 04:00:44 +0000
Manifest next update: Tue 03 Mar 2026 04:00:44 +0000
Files and hashes: 1: H7ajP4k-tqBkc1AdtIseOiAFeNw.roa (hash: XfKJzAL0fK4z62zRzcfP/LqBvxxrItwe2ueGA3MJylY=)
2: LcnLUwLY0T_pHoD1y9H7rLwBSCc.crl (hash: +ebuiG91gh8+mSR0lugg4gAGC+M67AVWM3uv9Ss27IA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/ccc808-14bb-494d-99c8-2f11a651962b/1/LcnLUwLY0T_pHoD1y9H7rLwBSCc.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/ccc808-14bb-494d-99c8-2f11a651962b/1/LcnLUwLY0T_pHoD1y9H7rLwBSCc.mft
rsync://rpki.ripe.net/repository/DEFAULT/LcnLUwLY0T_pHoD1y9H7rLwBSCc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:b4:a0:d4:5b:d1:13:72:69:10:f2:bb:9b:26:f6:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2dc9cb5302d8d13fe91e80f5cbd1fbacbc014827
Validity
Not Before: Mar 2 04:00:44 2026 GMT
Not After : Mar 3 04:00:44 2026 GMT
Subject: CN=d932a6add1830ade68403fee94c0ee15ed60950c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:b9:00:5b:c8:8c:05:75:b6:52:ae:fe:e9:f5:
4f:7a:95:4b:ea:41:69:07:33:03:bc:07:c9:f5:3e:
0f:85:06:49:7a:36:55:3c:fc:64:07:b0:d5:7a:43:
98:91:4d:8a:93:f9:ca:4b:53:a8:65:52:80:db:d4:
c1:b3:89:dc:0b:a4:8c:00:57:02:2d:7f:f5:cd:4a:
29:87:ac:af:c9:94:e8:98:33:dc:bd:46:cc:be:73:
9d:cd:bc:18:03:18:18:c7:fc:19:63:bf:02:aa:37:
98:d2:dc:7c:c4:88:8a:4c:c3:cb:95:81:14:1b:e9:
d2:d9:6a:79:a4:7d:d4:35:a6:5d:1e:dd:fb:35:f5:
f6:8b:f3:e3:b2:35:61:e0:8e:93:61:20:c8:5e:17:
fa:c2:03:b8:80:5b:5a:d0:5c:56:d4:7a:b6:c6:57:
12:eb:8b:d3:e1:b5:75:5a:d7:09:c6:04:9d:ef:53:
da:9a:a4:62:6b:a9:cc:3e:ce:58:dd:61:34:43:18:
43:f1:d0:26:ff:32:5e:6b:9b:b0:47:e8:38:2b:3d:
3a:39:34:44:e4:a8:64:1f:e4:84:f4:72:1b:57:13:
85:2d:c5:49:df:f9:bc:0d:8b:c8:a7:1d:9b:c8:9e:
2d:de:16:7b:57:ae:f8:da:06:bc:01:1e:c8:bd:1b:
83:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:32:A6:AD:D1:83:0A:DE:68:40:3F:EE:94:C0:EE:15:ED:60:95:0C
X509v3 Authority Key Identifier:
keyid:2D:C9:CB:53:02:D8:D1:3F:E9:1E:80:F5:CB:D1:FB:AC:BC:01:48:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LcnLUwLY0T_pHoD1y9H7rLwBSCc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/ccc808-14bb-494d-99c8-2f11a651962b/1/LcnLUwLY0T_pHoD1y9H7rLwBSCc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/ccc808-14bb-494d-99c8-2f11a651962b/1/LcnLUwLY0T_pHoD1y9H7rLwBSCc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:3e:5d:ec:93:be:0d:e7:2b:fe:88:86:f0:7b:21:96:b7:cb:
01:ea:35:93:60:8b:59:6d:29:21:ec:33:e3:87:d4:ea:31:5c:
e9:fe:1b:14:fe:2c:c1:3d:55:00:12:8a:6d:96:03:8f:4a:43:
1d:6c:35:d9:3f:41:da:5f:5e:ea:e0:a4:c3:78:1c:9a:68:56:
f0:b5:db:e3:1e:47:e3:af:f3:29:a0:85:8a:fb:fc:9a:7b:5d:
9d:23:d9:d8:80:5a:88:53:64:30:ea:88:ec:dd:2c:0e:11:b6:
fd:c3:59:71:f3:d4:b8:b0:bc:6e:f8:52:a0:4c:d9:dd:01:28:
77:80:4b:65:bc:34:c5:e6:af:47:04:69:95:54:a0:0f:87:36:
b1:32:da:59:ac:ba:64:af:90:ca:e9:5a:6a:33:b2:cd:c1:f0:
4b:cb:60:69:a6:02:77:97:0a:a8:f5:e6:fc:03:ea:40:c3:6d:
e3:66:9d:a3:f3:f9:bc:38:54:3e:bf:28:3f:d6:43:ac:b4:0f:
11:2a:91:b7:93:70:b3:e8:3e:35:bc:c4:e9:1a:f5:e1:4d:65:
5a:82:8a:a3:8a:29:e5:e3:cf:d0:8c:b8:69:b5:13:a9:97:1a:
82:a8:db:93:9a:f9:0a:30:fc:91:1b:f8:7b:0c:14:48:90:99:
fd:fb:4a:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:38:35 2026 by rpki-client