Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/d5c45a-8448-47b8-b577-af9d695e940f/1/LnKImCrdg2QvgaPeuo-FbxTgmQo.mft
File: LnKImCrdg2QvgaPeuo-FbxTgmQo.mft (raw, json)
Hash identifier: a7Zc4ZYGJS6t2iUCfLBl+a4nCNUFOJRqt5BZx+kuTe4=
Subject key identifier: 35:59:CE:13:EB:F6:27:61:DC:4E:7A:95:F6:F3:F1:5F:0B:49:8E:F2
Authority key identifier: 2E:72:88:98:2A:DD:83:64:2F:81:A3:DE:BA:8F:85:6F:14:E0:99:0A
Certificate issuer: /CN=2e7288982add83642f81a3deba8f856f14e0990a
Certificate serial: 019FA9E2C1C5F662AD17F419FFD48CCC2E87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LnKImCrdg2QvgaPeuo-FbxTgmQo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/d5c45a-8448-47b8-b577-af9d695e940f/1/LnKImCrdg2QvgaPeuo-FbxTgmQo.mft
Manifest number: 15A4
Signing time: Tue 28 Jul 2026 18:00:37 +0000
Manifest this update: Tue 28 Jul 2026 18:00:37 +0000
Manifest next update: Wed 29 Jul 2026 18:00:37 +0000
Files and hashes: 1: LnKImCrdg2QvgaPeuo-FbxTgmQo.crl (hash: JZevfuMle19Kn20jT6JbCvfA/rXZW9lLs8pq81Iw5RQ=)
2: PdB7yHgtRY5AbRPzGQ7Kal7stk0.roa (hash: ZfhLG4tdAsP3dDzk6eFVvwC/Pe3dDXcwaTLLVzg2Rko=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/d5c45a-8448-47b8-b577-af9d695e940f/1/LnKImCrdg2QvgaPeuo-FbxTgmQo.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/d5c45a-8448-47b8-b577-af9d695e940f/1/LnKImCrdg2QvgaPeuo-FbxTgmQo.mft
rsync://rpki.ripe.net/repository/DEFAULT/LnKImCrdg2QvgaPeuo-FbxTgmQo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:e2:c1:c5:f6:62:ad:17:f4:19:ff:d4:8c:cc:2e:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e7288982add83642f81a3deba8f856f14e0990a
Validity
Not Before: Jul 28 18:00:37 2026 GMT
Not After : Jul 29 18:00:37 2026 GMT
Subject: CN=3559ce13ebf62761dc4e7a95f6f3f15f0b498ef2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:dd:5b:6c:72:c9:be:b1:03:1d:c3:f9:1d:16:
c9:33:d9:43:87:2d:79:b9:d0:da:7d:74:b0:53:0c:
d8:ee:78:03:b1:64:ec:db:cc:dc:1a:75:85:f9:bb:
93:2b:75:95:55:45:22:b1:12:e6:92:79:9e:3b:f3:
51:2a:6d:d2:a4:07:e0:1d:09:d0:ec:cd:00:cc:d1:
14:5f:00:a6:6c:89:20:e3:9a:00:d2:6b:34:45:7f:
59:0a:61:e8:76:59:48:09:dc:49:3a:13:85:e7:44:
77:1a:8a:51:85:9e:7d:32:75:56:dc:72:ec:22:d1:
b5:f7:37:29:eb:b1:75:96:51:b5:df:43:69:3d:c5:
19:88:18:71:d0:cd:33:bf:73:23:9d:3c:64:ab:b6:
de:00:b6:c4:4e:64:6f:d8:c3:d5:8e:fa:0e:58:4c:
62:76:04:36:45:64:3c:5f:9e:3f:8c:e3:a1:30:e4:
9e:6b:c4:9b:64:35:32:d7:83:6e:68:3e:f0:1c:83:
6d:b9:60:df:98:e4:b6:eb:77:a8:12:5a:a5:43:24:
0b:45:8e:d9:86:ea:2b:40:ae:85:b4:8e:21:1c:d2:
9a:13:1a:c9:08:d4:12:f7:8e:3a:93:0d:7b:7f:18:
c0:dc:f3:a8:78:f1:1e:ad:99:cd:64:95:c5:52:a1:
49:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:59:CE:13:EB:F6:27:61:DC:4E:7A:95:F6:F3:F1:5F:0B:49:8E:F2
X509v3 Authority Key Identifier:
keyid:2E:72:88:98:2A:DD:83:64:2F:81:A3:DE:BA:8F:85:6F:14:E0:99:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LnKImCrdg2QvgaPeuo-FbxTgmQo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/d5c45a-8448-47b8-b577-af9d695e940f/1/LnKImCrdg2QvgaPeuo-FbxTgmQo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/d5c45a-8448-47b8-b577-af9d695e940f/1/LnKImCrdg2QvgaPeuo-FbxTgmQo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:1a:db:8b:40:e5:33:dc:15:36:6f:c6:21:74:e3:b1:3e:8f:
11:9a:e6:70:0c:cf:2d:7b:ed:c9:b5:4c:11:c7:53:37:ce:7e:
c7:83:a7:d8:60:d2:56:6b:93:2c:34:b0:58:a6:b6:ac:76:08:
21:0f:0b:22:a0:d9:f8:31:ae:ca:f6:b6:3d:ac:5d:92:b2:d8:
7c:3d:94:1f:85:f5:59:28:dd:29:cf:a3:51:de:e5:59:3e:ba:
12:82:47:43:c2:d0:30:d6:ea:45:f2:f5:88:50:db:eb:29:97:
9d:fc:c8:66:f2:a4:c1:3a:0c:2b:79:81:0a:6f:77:34:48:4f:
9b:3e:cd:0b:7a:c1:88:a8:69:4c:18:9d:30:99:ac:fa:17:6e:
a5:9c:02:ee:4c:d9:ed:c5:d3:c1:fd:28:a2:8a:71:85:c9:8d:
74:e7:49:8a:03:77:bc:d0:6b:4a:ca:f1:fe:4e:90:f7:51:e5:
8f:d4:5d:f8:b9:b0:c8:41:9f:1a:c4:57:9b:2b:94:7d:dd:c7:
79:a0:7a:44:d2:78:2f:62:5e:37:fa:e3:2f:ec:6c:95:e0:fe:
99:92:5a:11:80:9a:9b:9d:5a:3b:3c:9f:3f:94:40:2a:40:cd:
0e:46:88:53:da:1a:dc:08:a9:7c:8b:57:22:89:9f:6d:68:3f:
93:1c:01:c3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+p4sHF9mKtF/QZ/9SMzC6HMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJlNzI4ODk4MmFkZDgzNjQyZjgxYTNkZWJhOGY4NTZmMTRl
MDk5MGEwHhcNMjYwNzI4MTgwMDM3WhcNMjYwNzI5MTgwMDM3WjAzMTEwLwYDVQQD
EygzNTU5Y2UxM2ViZjYyNzYxZGM0ZTdhOTVmNmYzZjE1ZjBiNDk4ZWYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA891bbHLJvrEDHcP5HRbJM9lDhy15
udDafXSwUwzY7ngDsWTs28zcGnWF+buTK3WVVUUisRLmknmeO/NRKm3SpAfgHQnQ
7M0AzNEUXwCmbIkg45oA0ms0RX9ZCmHodllICdxJOhOF50R3GopRhZ59MnVW3HLs
ItG19zcp67F1llG130NpPcUZiBhx0M0zv3MjnTxkq7beALbETmRv2MPVjvoOWExi
dgQ2RWQ8X54/jOOhMOSea8SbZDUy14NuaD7wHINtuWDfmOS263eoElqlQyQLRY7Z
huorQK6FtI4hHNKaExrJCNQS9446kw17fxjA3POoePEerZnNZJXFUqFJXQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDVZzhPr9idh3E56lfbz8V8LSY7yMB8GA1UdIwQY
MBaAFC5yiJgq3YNkL4Gj3rqPhW8U4JkKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTG5LSW1DcmRnMlF2Z2FQZXVvLUZieFRnbVFvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC9kNWM0NWEtODQ0OC00N2I4LWI1Nzct
YWY5ZDY5NWU5NDBmLzEvTG5LSW1DcmRnMlF2Z2FQZXVvLUZieFRnbVFvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMC9kNWM0NWEtODQ0OC00N2I4LWI1NzctYWY5ZDY5NWU5NDBm
LzEvTG5LSW1DcmRnMlF2Z2FQZXVvLUZieFRnbVFvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHxrbi0Dl
M9wVNm/GIXTjsT6PEZrmcAzPLXvtybVMEcdTN85+x4On2GDSVmuTLDSwWKa2rHYI
IQ8LIqDZ+DGuyva2PaxdkrLYfD2UH4X1WSjdKc+jUd7lWT66EoJHQ8LQMNbqRfL1
iFDb6ymXnfzIZvKkwToMK3mBCm93NEhPmz7NC3rBiKhpTBidMJms+hdupZwC7kzZ
7cXTwf0ooopxhcmNdOdJigN3vNBrSsrx/k6Q91Hlj9Rd+LmwyEGfGsRXmyuUfd3H
eaB6RNJ4L2JeN/rjL+xsleD+mZJaEYCam51aOzyfP5RAKkDNDkaIU9oa3AipfItX
IomfbWg/kxwBww==
-----END CERTIFICATE-----
Generated at Tue Jul 28 23:09:27 2026 by rpki-client