Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7c/f3f2d9-2a8f-4ae6-ba55-f4affc8028f3/1/LnPLOHXZEhkmGzrpAQgTEaWgcas.mft
File: LnPLOHXZEhkmGzrpAQgTEaWgcas.mft (raw, json)
Hash identifier: yF+SGYPLnjawSRBa6+xjFS+i/ZLYBpkTHkQrvYifk5Y=
Subject key identifier: FA:BD:C5:20:3C:3B:04:76:09:2E:37:0B:70:8F:97:6F:02:DF:20:BA
Authority key identifier: 2E:73:CB:38:75:D9:12:19:26:1B:3A:E9:01:08:13:11:A5:A0:71:AB
Certificate issuer: /CN=2e73cb3875d91219261b3ae901081311a5a071ab
Certificate serial: 01A110A941CF8AC1939C147FACE860341216
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LnPLOHXZEhkmGzrpAQgTEaWgcas.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/f3f2d9-2a8f-4ae6-ba55-f4affc8028f3/1/LnPLOHXZEhkmGzrpAQgTEaWgcas.mft
Manifest number: 0409
Signing time: Tue 06 Oct 2026 10:01:29 +0000
Manifest this update: Tue 06 Oct 2026 10:01:29 +0000
Manifest next update: Wed 07 Oct 2026 10:01:29 +0000
Files and hashes: 1: LnPLOHXZEhkmGzrpAQgTEaWgcas.crl (hash: ISGuDq8iLirJbQm/McuwAE+wN/aD8UVfNoEtCjDOyEQ=)
2: d9bKfKc4CWNG5hnKSbTK0Rni9UU.roa (hash: 4jZ3a0Nmi0XTCu3Uai+tAC5QbHyDGtcHMO/I90in7Wg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/f3f2d9-2a8f-4ae6-ba55-f4affc8028f3/1/LnPLOHXZEhkmGzrpAQgTEaWgcas.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/f3f2d9-2a8f-4ae6-ba55-f4affc8028f3/1/LnPLOHXZEhkmGzrpAQgTEaWgcas.mft
rsync://rpki.ripe.net/repository/DEFAULT/LnPLOHXZEhkmGzrpAQgTEaWgcas.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 Oct 2026 10:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:10:a9:41:cf:8a:c1:93:9c:14:7f:ac:e8:60:34:12:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e73cb3875d91219261b3ae901081311a5a071ab
Validity
Not Before: Oct 6 10:01:29 2026 GMT
Not After : Oct 7 10:01:29 2026 GMT
Subject: CN=fabdc5203c3b0476092e370b708f976f02df20ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:5c:c2:bf:cc:e4:09:c8:06:ce:93:3d:fd:91:
21:32:35:77:8d:c7:c7:2f:c4:42:21:9a:f5:13:1d:
ae:87:bc:27:e1:15:e3:ea:0f:6a:26:59:af:ea:ac:
a4:6e:dc:05:ee:10:ba:f4:8c:98:88:62:b8:0b:78:
37:4d:ab:5d:4b:d6:3f:47:49:23:03:7a:2a:73:49:
af:25:ff:34:df:cd:1e:e3:57:c7:39:21:f9:1c:a5:
68:e7:be:d7:39:a5:7f:6c:b3:ec:e7:ca:68:19:06:
07:b2:af:9a:08:0a:e6:5d:2a:32:92:e6:42:66:6d:
25:2f:a5:8e:bf:3b:c7:a7:31:19:b4:f1:48:ad:b2:
21:52:9f:ba:72:f0:13:bb:35:3c:56:74:97:49:ab:
71:90:c5:20:c7:c1:ac:59:4f:81:ce:a3:71:a3:94:
d9:36:9b:05:a4:af:59:b8:56:70:69:d1:9b:09:a1:
ed:1f:82:e1:5b:82:31:53:78:19:44:5a:41:44:09:
8e:2c:98:e7:fe:66:f4:57:8e:55:89:e6:99:d4:24:
8c:40:a9:ec:5a:0d:7c:77:8c:a0:ec:06:22:e3:5a:
16:30:b8:71:3b:47:fc:04:e0:e7:04:e3:68:03:71:
eb:87:21:3d:0f:55:2f:9c:44:40:e5:4f:f4:1f:8e:
95:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:BD:C5:20:3C:3B:04:76:09:2E:37:0B:70:8F:97:6F:02:DF:20:BA
X509v3 Authority Key Identifier:
keyid:2E:73:CB:38:75:D9:12:19:26:1B:3A:E9:01:08:13:11:A5:A0:71:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LnPLOHXZEhkmGzrpAQgTEaWgcas.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/f3f2d9-2a8f-4ae6-ba55-f4affc8028f3/1/LnPLOHXZEhkmGzrpAQgTEaWgcas.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/f3f2d9-2a8f-4ae6-ba55-f4affc8028f3/1/LnPLOHXZEhkmGzrpAQgTEaWgcas.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:6d:85:38:ed:1f:f7:9c:11:7d:ba:5e:48:6c:b7:29:4e:90:
31:f9:84:27:14:1c:d8:00:bf:7f:5c:3c:49:43:62:79:ef:07:
2d:32:61:be:4c:7a:b2:af:74:68:9f:36:f4:fa:43:e7:7d:3d:
af:4f:62:7e:ab:a8:59:ec:01:1e:e6:0e:44:f5:71:91:62:69:
2e:61:32:f6:9a:9c:20:09:bb:ea:c0:74:b3:92:e1:14:d8:42:
d0:60:d8:80:9b:41:06:f6:1b:c7:3a:c6:3d:b5:ad:88:f3:9c:
ce:eb:71:47:f1:48:0d:26:7f:ba:82:05:42:96:0a:b7:b4:27:
d6:cd:a3:68:51:98:b9:ee:c7:e6:48:86:8e:dc:25:b4:05:e1:
f0:0b:d0:ac:92:80:c5:a1:7e:1a:52:4f:ab:9b:da:37:00:ae:
4b:e0:d9:48:c8:6a:17:68:e1:bd:1c:a6:c0:fc:fc:b1:e7:f4:
e9:40:b7:d0:52:7f:73:f0:0b:31:12:f7:0e:9e:78:b6:81:b3:
83:90:2f:73:f1:af:d1:48:6a:3f:92:5f:18:c0:fe:c5:e2:8f:
40:fb:fd:2d:50:0c:89:ed:ab:1e:8b:33:ce:8d:e8:b5:ea:09:
bd:55:a3:a1:7a:42:fe:1a:04:ae:cf:23:f9:57:f5:b8:98:eb:
69:88:03:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 20:22:59 2026 by rpki-client