Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/f3f2d9-2a8f-4ae6-ba55-f4affc8028f3/1/LnPLOHXZEhkmGzrpAQgTEaWgcas.mft
File: LnPLOHXZEhkmGzrpAQgTEaWgcas.mft (raw, json)
Hash identifier: z5E4pOIy+F790mHi9uUcMjfyIAsyh6gkLdFkc7lcTwg=
Subject key identifier: B4:92:1A:D1:A9:B9:0A:1B:0D:E5:25:05:CD:AF:52:07:E1:71:1D:2B
Authority key identifier: 2E:73:CB:38:75:D9:12:19:26:1B:3A:E9:01:08:13:11:A5:A0:71:AB
Certificate issuer: /CN=2e73cb3875d91219261b3ae901081311a5a071ab
Certificate serial: 019D9A3E8FC7535DEDE9AF947376767879CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LnPLOHXZEhkmGzrpAQgTEaWgcas.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/f3f2d9-2a8f-4ae6-ba55-f4affc8028f3/1/LnPLOHXZEhkmGzrpAQgTEaWgcas.mft
Manifest number: 023E
Signing time: Fri 17 Apr 2026 07:01:24 +0000
Manifest this update: Fri 17 Apr 2026 07:01:24 +0000
Manifest next update: Sat 18 Apr 2026 07:01:24 +0000
Files and hashes: 1: LnPLOHXZEhkmGzrpAQgTEaWgcas.crl (hash: FELJJgQfKP8dwTEhMc0vz5zFw+8I0g8RM4LVBSrfSws=)
2: d9bKfKc4CWNG5hnKSbTK0Rni9UU.roa (hash: 4jZ3a0Nmi0XTCu3Uai+tAC5QbHyDGtcHMO/I90in7Wg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/f3f2d9-2a8f-4ae6-ba55-f4affc8028f3/1/LnPLOHXZEhkmGzrpAQgTEaWgcas.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/f3f2d9-2a8f-4ae6-ba55-f4affc8028f3/1/LnPLOHXZEhkmGzrpAQgTEaWgcas.mft
rsync://rpki.ripe.net/repository/DEFAULT/LnPLOHXZEhkmGzrpAQgTEaWgcas.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3e:8f:c7:53:5d:ed:e9:af:94:73:76:76:78:79:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e73cb3875d91219261b3ae901081311a5a071ab
Validity
Not Before: Apr 17 07:01:24 2026 GMT
Not After : Apr 18 07:01:24 2026 GMT
Subject: CN=b4921ad1a9b90a1b0de52505cdaf5207e1711d2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:b9:3a:dd:8e:b3:8e:29:15:8c:9b:db:c5:4d:
e1:3a:37:e8:0d:16:9b:15:fb:3b:84:8b:08:e4:88:
41:44:98:0d:71:0b:4d:23:a2:0e:7d:29:f7:23:c9:
7e:10:69:eb:34:ef:45:bd:df:88:0b:45:b6:51:5d:
30:e9:28:25:58:7d:cf:43:85:68:22:9d:2a:ec:9e:
a8:4c:f7:0e:b2:43:ff:7c:84:dc:6f:94:06:f2:f9:
38:d3:ea:26:ae:05:5b:be:a6:74:3d:c3:a5:2b:f4:
26:80:35:f4:b6:94:df:b1:1e:29:40:e0:f4:a6:03:
2c:96:fa:88:08:92:8f:63:82:cf:dc:ca:45:8e:cb:
ca:1f:22:cc:2b:c8:19:ec:5e:aa:6e:0b:0a:ab:c1:
d0:fd:1f:91:c3:ec:8a:ea:65:76:1c:a7:ee:1c:36:
70:d9:53:d1:ec:c5:37:7d:48:dd:cd:ca:5c:c0:78:
b2:63:26:61:5a:16:44:59:7a:f2:c0:4f:2c:ff:b4:
8a:83:43:e8:65:c5:18:8c:16:0d:ec:89:da:e4:e1:
4f:dd:89:16:ea:88:a5:58:45:13:f5:5f:d9:14:9b:
75:c6:3c:84:f6:c5:3a:5c:ff:1b:a4:81:ca:57:32:
7c:ca:53:3b:10:f0:89:3b:4a:07:61:6c:98:99:05:
cc:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:92:1A:D1:A9:B9:0A:1B:0D:E5:25:05:CD:AF:52:07:E1:71:1D:2B
X509v3 Authority Key Identifier:
keyid:2E:73:CB:38:75:D9:12:19:26:1B:3A:E9:01:08:13:11:A5:A0:71:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LnPLOHXZEhkmGzrpAQgTEaWgcas.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/f3f2d9-2a8f-4ae6-ba55-f4affc8028f3/1/LnPLOHXZEhkmGzrpAQgTEaWgcas.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/f3f2d9-2a8f-4ae6-ba55-f4affc8028f3/1/LnPLOHXZEhkmGzrpAQgTEaWgcas.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:01:99:26:a9:bb:fc:a6:ef:75:36:df:4c:21:4c:2b:f1:61:
f0:9c:47:47:c1:68:91:cc:13:04:b1:b6:ee:af:4a:7c:f2:36:
dd:45:36:a4:84:81:26:6b:ce:1d:3a:e5:68:44:d2:e9:14:fa:
02:15:7e:28:c1:bb:c0:1e:62:0e:e5:58:92:3c:6e:84:75:85:
c1:9f:78:2c:0e:10:13:0b:74:e1:76:cc:eb:00:0c:f6:ba:bd:
81:66:24:43:a3:ea:ab:bd:2b:b2:39:f5:91:7c:88:b0:9d:1f:
22:23:70:0f:f8:17:3d:76:bc:84:a6:d6:e1:47:39:c8:be:9d:
a1:de:83:73:af:b8:73:ca:9d:18:94:9a:59:3d:44:10:38:d6:
2b:ec:2d:86:82:03:f4:62:1d:fb:ed:f6:04:6b:8b:33:0f:3d:
54:07:0d:fd:95:37:b0:3b:d6:d2:1f:a0:41:47:1f:a9:11:ed:
bc:d6:0b:09:38:94:b4:64:81:72:7e:d1:47:c6:4a:5a:e5:75:
af:09:b4:ee:06:90:b8:90:77:4f:0d:e4:0a:46:3b:03:8d:73:
58:36:66:b3:5a:cd:7c:2c:b9:a1:32:c1:32:a9:89:bd:e1:21:
dd:f6:75:18:fa:be:ee:27:8d:00:1c:c9:e2:9c:f1:eb:53:32:
4d:57:cb:25
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2aPo/HU13t6a+Uc3Z2eHnOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJlNzNjYjM4NzVkOTEyMTkyNjFiM2FlOTAxMDgxMzExYTVh
MDcxYWIwHhcNMjYwNDE3MDcwMTI0WhcNMjYwNDE4MDcwMTI0WjAzMTEwLwYDVQQD
EyhiNDkyMWFkMWE5YjkwYTFiMGRlNTI1MDVjZGFmNTIwN2UxNzExZDJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA97k63Y6zjikVjJvbxU3hOjfoDRab
Ffs7hIsI5IhBRJgNcQtNI6IOfSn3I8l+EGnrNO9Fvd+IC0W2UV0w6SglWH3PQ4Vo
Ip0q7J6oTPcOskP/fITcb5QG8vk40+omrgVbvqZ0PcOlK/QmgDX0tpTfsR4pQOD0
pgMslvqICJKPY4LP3MpFjsvKHyLMK8gZ7F6qbgsKq8HQ/R+Rw+yK6mV2HKfuHDZw
2VPR7MU3fUjdzcpcwHiyYyZhWhZEWXrywE8s/7SKg0PoZcUYjBYN7Ina5OFP3YkW
6oilWEUT9V/ZFJt1xjyE9sU6XP8bpIHKVzJ8ylM7EPCJO0oHYWyYmQXMowIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLSSGtGpuQobDeUlBc2vUgfhcR0rMB8GA1UdIwQY
MBaAFC5zyzh12RIZJhs66QEIExGloHGrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTG5QTE9IWFpFaGttR3pycEFRZ1RFYVdnY2FzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy9mM2YyZDktMmE4Zi00YWU2LWJhNTUt
ZjRhZmZjODAyOGYzLzEvTG5QTE9IWFpFaGttR3pycEFRZ1RFYVdnY2FzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yy9mM2YyZDktMmE4Zi00YWU2LWJhNTUtZjRhZmZjODAyOGYz
LzEvTG5QTE9IWFpFaGttR3pycEFRZ1RFYVdnY2FzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeQGZJqm7
/KbvdTbfTCFMK/Fh8JxHR8FokcwTBLG27q9KfPI23UU2pISBJmvOHTrlaETS6RT6
AhV+KMG7wB5iDuVYkjxuhHWFwZ94LA4QEwt04XbM6wAM9rq9gWYkQ6Pqq70rsjn1
kXyIsJ0fIiNwD/gXPXa8hKbW4Uc5yL6dod6Dc6+4c8qdGJSaWT1EEDjWK+wthoID
9GId++32BGuLMw89VAcN/ZU3sDvW0h+gQUcfqRHtvNYLCTiUtGSBcn7RR8ZKWuV1
rwm07gaQuJB3Tw3kCkY7A41zWDZms1rNfCy5oTLBMqmJveEh3fZ1GPq+7ieNABzJ
4pzx61MyTVfLJQ==
-----END CERTIFICATE-----
Generated at Fri Apr 17 12:43:59 2026 by rpki-client