Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/f3f2d9-2a8f-4ae6-ba55-f4affc8028f3/1/LnPLOHXZEhkmGzrpAQgTEaWgcas.mft
File: LnPLOHXZEhkmGzrpAQgTEaWgcas.mft (raw, json)
Hash identifier: 0WCKbtcASRkl01ThsDLVzHrYNbxB5Y6RKgEvh3j9PO0=
Subject key identifier: 43:FD:F0:0C:1C:C4:6E:AF:EA:AA:23:F7:E2:FB:3C:1F:7A:01:D3:DA
Authority key identifier: 2E:73:CB:38:75:D9:12:19:26:1B:3A:E9:01:08:13:11:A5:A0:71:AB
Certificate issuer: /CN=2e73cb3875d91219261b3ae901081311a5a071ab
Certificate serial: 019CB0924C287DF5DD6F0A5019B6B2C5E08B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LnPLOHXZEhkmGzrpAQgTEaWgcas.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/f3f2d9-2a8f-4ae6-ba55-f4affc8028f3/1/LnPLOHXZEhkmGzrpAQgTEaWgcas.mft
Manifest number: 01C5
Signing time: Mon 02 Mar 2026 22:01:43 +0000
Manifest this update: Mon 02 Mar 2026 22:01:43 +0000
Manifest next update: Tue 03 Mar 2026 22:01:43 +0000
Files and hashes: 1: LnPLOHXZEhkmGzrpAQgTEaWgcas.crl (hash: 3+YySzKsdihDgC25UXW7v/LmIPw9SFdP66d2JrB3FCA=)
2: d9bKfKc4CWNG5hnKSbTK0Rni9UU.roa (hash: 4jZ3a0Nmi0XTCu3Uai+tAC5QbHyDGtcHMO/I90in7Wg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/f3f2d9-2a8f-4ae6-ba55-f4affc8028f3/1/LnPLOHXZEhkmGzrpAQgTEaWgcas.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/f3f2d9-2a8f-4ae6-ba55-f4affc8028f3/1/LnPLOHXZEhkmGzrpAQgTEaWgcas.mft
rsync://rpki.ripe.net/repository/DEFAULT/LnPLOHXZEhkmGzrpAQgTEaWgcas.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 21:16:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:b0:92:4c:28:7d:f5:dd:6f:0a:50:19:b6:b2:c5:e0:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e73cb3875d91219261b3ae901081311a5a071ab
Validity
Not Before: Mar 2 22:01:43 2026 GMT
Not After : Mar 3 22:01:43 2026 GMT
Subject: CN=43fdf00c1cc46eafeaaa23f7e2fb3c1f7a01d3da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:85:a4:18:87:35:70:e7:63:74:a2:54:1c:f7:
9a:49:9c:b2:70:a4:27:d5:e1:a7:9a:7c:ee:3e:2f:
f8:46:91:fd:b7:19:50:b0:d9:31:6e:74:ed:37:13:
f5:e3:5c:d9:2c:21:4c:af:26:06:60:65:77:35:e0:
9c:0d:60:2a:9a:84:9a:1f:7c:16:59:82:da:f9:c9:
c8:7e:40:39:dd:ad:78:95:5e:e4:ba:af:46:bf:79:
f0:cb:65:15:e5:ce:11:61:7f:1f:33:49:57:18:12:
f9:90:c9:45:42:f3:f8:7b:40:d8:f9:2b:9a:de:51:
70:07:a1:9f:ee:b4:7c:42:28:0a:dc:b7:92:90:d5:
3a:3f:67:f7:a4:58:b5:09:cc:67:29:43:7f:e6:51:
1d:31:a2:61:fb:30:bc:4d:d0:fc:af:76:1d:e6:d3:
91:fb:cb:0f:4e:e6:ec:99:d1:6b:da:9b:cd:41:9f:
16:46:d3:90:01:87:80:34:d9:a9:13:8b:cc:23:75:
05:31:e3:0e:a6:26:b0:4f:e8:b4:a3:ce:20:7c:e4:
02:5c:d2:3d:21:88:f6:88:b4:dd:5e:0a:76:51:df:
35:bf:2b:cb:68:20:c2:80:a8:2b:c9:db:ba:27:5b:
fc:1a:43:3f:99:ca:9f:fa:ae:f8:f3:51:4c:41:7f:
8f:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:FD:F0:0C:1C:C4:6E:AF:EA:AA:23:F7:E2:FB:3C:1F:7A:01:D3:DA
X509v3 Authority Key Identifier:
keyid:2E:73:CB:38:75:D9:12:19:26:1B:3A:E9:01:08:13:11:A5:A0:71:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LnPLOHXZEhkmGzrpAQgTEaWgcas.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/f3f2d9-2a8f-4ae6-ba55-f4affc8028f3/1/LnPLOHXZEhkmGzrpAQgTEaWgcas.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/f3f2d9-2a8f-4ae6-ba55-f4affc8028f3/1/LnPLOHXZEhkmGzrpAQgTEaWgcas.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:3e:e2:26:14:6a:19:4c:56:c9:9e:7a:1d:f7:e0:97:d2:ce:
f4:16:3f:19:b4:42:26:9a:50:f1:48:86:cf:ae:07:6e:b0:a1:
39:63:24:17:90:80:41:59:f3:9e:38:76:04:3f:96:f8:12:bb:
32:d8:02:6f:1e:d6:d9:99:16:73:13:fc:f5:ba:cb:95:bd:80:
72:8c:19:5b:df:04:37:c3:a5:d8:fc:ae:68:b6:9e:41:05:bb:
a9:ee:0d:cb:37:5c:9d:61:f1:50:0d:df:cf:39:0d:9a:87:88:
2d:0d:76:65:09:ed:27:83:b3:e8:a1:66:e3:f4:ae:0b:d2:f0:
a9:28:44:57:9d:b3:86:bd:be:e0:99:18:61:a0:25:95:22:b7:
4b:b3:f4:1d:df:13:7f:86:80:0a:45:3e:8b:34:ce:a1:51:07:
b7:45:66:06:de:81:0f:c7:69:82:65:17:95:3d:d3:f4:fb:d4:
69:30:b6:6a:35:c9:46:d8:f3:69:61:18:e2:1d:ad:81:03:5c:
5a:4e:a2:b5:03:98:dd:bd:d4:ab:f1:78:de:ff:52:5e:78:ca:
27:fe:22:b3:85:e4:fa:d6:86:79:3b:61:a8:6b:3a:c9:6c:cb:
30:5a:9d:bb:e5:06:b3:7d:d0:fa:12:d5:77:ff:b1:72:eb:93:
ef:2b:bd:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 04:18:37 2026 by rpki-client