Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/9120cb-0b06-4861-b657-757838670948/1/lnc-nMl0MBp4t-5tmUUo8fiC5G8.mft
File: lnc-nMl0MBp4t-5tmUUo8fiC5G8.mft (raw, json)
Hash identifier: JsXu2e1FjXPDJKTr8BTvObuAwb25yfEFuOTCmCXa+44=
Subject key identifier: B4:33:1B:0D:56:4C:9F:93:67:CF:C9:50:74:2F:C0:C6:2D:DE:33:5B
Authority key identifier: 96:77:3E:9C:C9:74:30:1A:78:B7:EE:6D:99:45:28:F1:F8:82:E4:6F
Certificate issuer: /CN=96773e9cc974301a78b7ee6d994528f1f882e46f
Certificate serial: 019CADFEB83688C4EDE0AE1F587050024AA0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lnc-nMl0MBp4t-5tmUUo8fiC5G8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/9120cb-0b06-4861-b657-757838670948/1/lnc-nMl0MBp4t-5tmUUo8fiC5G8.mft
Manifest number: 1849
Signing time: Mon 02 Mar 2026 10:01:17 +0000
Manifest this update: Mon 02 Mar 2026 10:01:17 +0000
Manifest next update: Tue 03 Mar 2026 10:01:17 +0000
Files and hashes: 1: 9jb7Om6miiOrT_ZooT83lO4qkYk.roa (hash: gjvHmuorLDsWHz05bRfIkR6+1mIVFz/jhg8KpqLFtDA=)
2: RAO_pCNhlBiv40T04NHXU2aXE2U.roa (hash: uo+4uUhKB5sDU8h5KxZgJWoE2h74C7AtuYv/i5HRqbQ=)
3: lnc-nMl0MBp4t-5tmUUo8fiC5G8.crl (hash: ZNdNBKITjjfituoQdgaAFrf5aNwHyVJN/S9iZJXLlEw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/9120cb-0b06-4861-b657-757838670948/1/lnc-nMl0MBp4t-5tmUUo8fiC5G8.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/9120cb-0b06-4861-b657-757838670948/1/lnc-nMl0MBp4t-5tmUUo8fiC5G8.mft
rsync://rpki.ripe.net/repository/DEFAULT/lnc-nMl0MBp4t-5tmUUo8fiC5G8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 10:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:fe:b8:36:88:c4:ed:e0:ae:1f:58:70:50:02:4a:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96773e9cc974301a78b7ee6d994528f1f882e46f
Validity
Not Before: Mar 2 10:01:17 2026 GMT
Not After : Mar 3 10:01:17 2026 GMT
Subject: CN=b4331b0d564c9f9367cfc950742fc0c62dde335b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:78:e8:6d:7f:04:8b:86:f4:2d:85:2c:59:1f:
75:4c:4f:36:5a:1b:4d:2b:93:c1:7b:54:9d:51:db:
80:e9:0a:8d:d1:22:7e:43:bc:09:0a:bc:64:87:9c:
9f:83:36:64:d3:c2:f8:5f:d8:2c:b9:2c:e7:85:26:
9e:9d:20:71:1a:ea:09:a1:d1:bc:78:bb:ec:bb:cd:
9d:4e:7f:6a:1d:c7:a8:d2:f6:31:0b:be:89:86:01:
e1:79:9e:47:f7:f5:c4:dc:dc:6c:8e:41:d9:5e:ed:
2f:88:5a:2f:67:ca:7e:e5:7b:9c:da:5b:01:ab:70:
69:cf:37:4b:cd:de:69:9f:72:a8:9e:27:9f:47:f6:
80:a6:3e:b3:c2:d1:d5:f2:3c:eb:96:50:a2:b8:1b:
58:28:d5:18:8f:64:77:14:87:6c:06:71:85:ff:a1:
ed:17:cd:8e:18:fc:42:a8:b9:dc:e8:43:57:e4:1c:
87:6b:de:80:ac:d5:0a:e1:03:ca:fe:21:5f:1d:d7:
1c:15:75:54:b9:69:4c:a6:2b:6e:7b:5a:c7:b0:6c:
c8:3e:fb:3f:3f:a6:04:3f:77:c6:20:b2:cc:b9:68:
9d:32:72:29:88:24:37:2f:ef:38:f0:f6:3d:6e:a3:
00:f7:b2:44:40:96:94:78:bf:17:fc:d8:e0:be:a1:
0b:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:33:1B:0D:56:4C:9F:93:67:CF:C9:50:74:2F:C0:C6:2D:DE:33:5B
X509v3 Authority Key Identifier:
keyid:96:77:3E:9C:C9:74:30:1A:78:B7:EE:6D:99:45:28:F1:F8:82:E4:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lnc-nMl0MBp4t-5tmUUo8fiC5G8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/9120cb-0b06-4861-b657-757838670948/1/lnc-nMl0MBp4t-5tmUUo8fiC5G8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/9120cb-0b06-4861-b657-757838670948/1/lnc-nMl0MBp4t-5tmUUo8fiC5G8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:fa:e7:c1:c2:db:25:cc:ab:42:14:1f:1f:e3:7b:c9:2d:c7:
53:aa:2c:d6:4b:ce:df:cf:d0:b0:bb:4b:89:76:c4:f9:30:38:
d5:1c:6b:86:a8:9c:6d:a3:ce:89:77:84:70:4d:90:7d:7d:d0:
7b:99:01:ac:86:2a:da:2b:b7:47:44:d0:f4:d9:f8:84:3b:5f:
f3:1f:31:42:36:5a:a4:dd:3e:ca:47:9b:1b:57:3b:a8:97:cd:
3c:30:c1:cb:5a:30:3e:ac:1c:b6:f9:e1:ac:02:e6:ea:1f:a1:
48:c2:5a:53:10:1e:b4:0c:83:36:93:6a:11:22:66:3c:43:bf:
1d:c3:be:79:d2:60:5c:f1:cc:0b:2b:31:af:e6:df:2e:5f:53:
7f:ad:01:79:2a:c0:f6:f1:39:5a:e7:77:2d:a9:65:45:90:71:
35:f6:38:09:16:ff:2b:43:e9:69:72:08:1e:fc:b6:34:23:bc:
79:90:c2:ec:52:b4:bf:d7:7d:9b:9c:86:a1:92:9e:e9:20:b1:
7a:e1:69:c8:72:8c:c6:8f:e0:72:12:1f:bc:26:6a:d5:74:9c:
43:1d:a8:35:74:9c:9c:27:62:91:c0:0e:38:8f:82:81:0d:fc:
05:27:d2:26:41:fc:1d:28:1e:c3:81:34:7a:5c:af:11:38:f2:
50:38:8d:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 18:10:20 2026 by rpki-client