Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/f3f2d9-2a8f-4ae6-ba55-f4affc8028f3/1/LnPLOHXZEhkmGzrpAQgTEaWgcas.mft
File: LnPLOHXZEhkmGzrpAQgTEaWgcas.mft (raw, json)
Hash identifier: Hd7nuEJCkWXNYqsb9Goz40qzlSGgcZ1OtdeiRg6BCYw=
Subject key identifier: 7A:F9:48:94:DC:D6:84:2E:A2:C9:53:AB:70:C9:0A:7F:07:36:D9:D2
Authority key identifier: 2E:73:CB:38:75:D9:12:19:26:1B:3A:E9:01:08:13:11:A5:A0:71:AB
Certificate issuer: /CN=2e73cb3875d91219261b3ae901081311a5a071ab
Certificate serial: 019ED506CF127355A289E80D78E7423BA57D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LnPLOHXZEhkmGzrpAQgTEaWgcas.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/f3f2d9-2a8f-4ae6-ba55-f4affc8028f3/1/LnPLOHXZEhkmGzrpAQgTEaWgcas.mft
Manifest number: 02E1
Signing time: Wed 17 Jun 2026 10:00:53 +0000
Manifest this update: Wed 17 Jun 2026 10:00:53 +0000
Manifest next update: Thu 18 Jun 2026 10:00:53 +0000
Files and hashes: 1: LnPLOHXZEhkmGzrpAQgTEaWgcas.crl (hash: IF49+XIjrZ0qExboVeCL8Zakj08JwsJzm4PSlw+d0Co=)
2: d9bKfKc4CWNG5hnKSbTK0Rni9UU.roa (hash: 4jZ3a0Nmi0XTCu3Uai+tAC5QbHyDGtcHMO/I90in7Wg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/f3f2d9-2a8f-4ae6-ba55-f4affc8028f3/1/LnPLOHXZEhkmGzrpAQgTEaWgcas.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/f3f2d9-2a8f-4ae6-ba55-f4affc8028f3/1/LnPLOHXZEhkmGzrpAQgTEaWgcas.mft
rsync://rpki.ripe.net/repository/DEFAULT/LnPLOHXZEhkmGzrpAQgTEaWgcas.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 18 Jun 2026 08:33:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:d5:06:cf:12:73:55:a2:89:e8:0d:78:e7:42:3b:a5:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e73cb3875d91219261b3ae901081311a5a071ab
Validity
Not Before: Jun 17 10:00:53 2026 GMT
Not After : Jun 18 10:00:53 2026 GMT
Subject: CN=7af94894dcd6842ea2c953ab70c90a7f0736d9d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:d8:a9:cc:52:48:ac:7c:7f:ef:1d:c0:dd:66:
3f:40:1e:8f:f5:b8:43:40:54:c1:81:3e:4c:1a:ed:
ac:26:18:ef:64:d9:a3:e8:e7:a3:e2:e0:9d:6c:9a:
2f:69:7b:63:35:91:8b:23:a8:71:51:f4:70:a6:ae:
26:06:33:4a:5d:12:20:30:50:31:b5:04:b3:11:8d:
da:2f:8b:65:0a:28:8e:73:5f:49:45:54:54:97:06:
f0:3e:55:f8:f4:c6:eb:96:e3:a6:39:02:5e:79:24:
9d:7a:2b:66:18:2e:b3:84:4b:59:6e:7a:22:d7:9a:
5d:08:48:de:d4:38:e1:3c:81:a7:71:c3:8c:99:99:
45:9a:2c:ab:0f:c3:a0:1c:66:2e:bc:e9:e3:7a:08:
33:64:7b:f4:c6:9d:f1:53:ec:b7:a3:8b:ec:e5:a8:
3b:33:f7:cf:d1:ac:29:17:59:35:05:e2:f7:49:b3:
bc:03:61:d1:e7:fa:55:be:db:e5:26:72:0a:6d:d3:
c7:b8:ea:c8:0f:0e:44:42:b6:e9:09:29:d4:e7:05:
d1:88:ee:8c:56:49:58:0b:9b:05:8b:ac:9a:2c:da:
90:94:d2:a0:f9:e7:a1:01:ec:91:82:68:4f:04:de:
ac:f5:02:9f:72:5f:df:6a:08:97:20:cd:1a:5b:94:
8a:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:F9:48:94:DC:D6:84:2E:A2:C9:53:AB:70:C9:0A:7F:07:36:D9:D2
X509v3 Authority Key Identifier:
keyid:2E:73:CB:38:75:D9:12:19:26:1B:3A:E9:01:08:13:11:A5:A0:71:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LnPLOHXZEhkmGzrpAQgTEaWgcas.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/f3f2d9-2a8f-4ae6-ba55-f4affc8028f3/1/LnPLOHXZEhkmGzrpAQgTEaWgcas.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/f3f2d9-2a8f-4ae6-ba55-f4affc8028f3/1/LnPLOHXZEhkmGzrpAQgTEaWgcas.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:5f:db:84:09:66:d8:63:ab:4e:0b:53:5a:70:97:83:58:0d:
2c:91:11:5a:0a:7a:49:7c:b6:34:ac:91:75:2d:1c:10:0a:ce:
59:b7:e2:0c:33:34:9d:02:9b:f0:01:3d:28:2c:43:24:3f:d4:
08:28:47:3e:81:c4:14:26:27:db:3d:b4:3b:27:bb:50:a8:85:
e4:e5:eb:ab:14:6e:27:58:19:48:de:27:1a:5a:95:74:11:f0:
c2:5d:f5:3e:ac:a6:41:2d:4d:f0:cf:59:9c:d3:ef:df:7f:87:
01:20:fe:0b:26:5f:0e:06:e6:bb:47:c8:75:f1:4f:aa:b9:01:
e1:42:b7:90:88:9a:e7:af:f1:8c:bf:20:2c:19:0f:9c:d1:ab:
0e:6d:c8:3d:60:35:7c:67:cc:fb:d4:3f:ae:cf:7e:02:f8:8e:
fa:ca:44:44:4b:a5:4d:01:df:19:20:46:fc:bc:5c:b2:99:6b:
32:c8:ae:9b:33:3f:48:8c:85:9d:05:0e:b0:5a:14:40:f9:8b:
15:60:1c:fe:bc:9c:c6:59:1d:6b:f3:d1:da:7a:42:10:71:4f:
fa:ce:f8:7f:c0:db:96:2a:9d:1a:14:db:ac:70:a4:7b:97:95:
c7:96:0f:55:e9:f9:3b:a3:e8:93:e1:99:69:5e:5f:c6:94:9e:
99:1a:2c:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 14:10:29 2026 by rpki-client