Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/3838c4-6e46-49a8-8c14-ae8b8d788700/1/LNpfA-r1E6d_LsIN5bsWcsXSeas.mft
File: LNpfA-r1E6d_LsIN5bsWcsXSeas.mft (raw, json)
Hash identifier: 4r76aI+Iy9qof/HZljlRn3kGpwkpGHojuaGiUQxAYRA=
Subject key identifier: DF:0F:0A:95:03:20:5E:77:0A:91:E7:84:42:69:FA:93:98:78:60:C7
Authority key identifier: 2C:DA:5F:03:EA:F5:13:A7:7F:2E:C2:0D:E5:BB:16:72:C5:D2:79:AB
Certificate issuer: /CN=2cda5f03eaf513a77f2ec20de5bb1672c5d279ab
Certificate serial: 019D9AAC3860130ACDA05C0D233A01C58FE1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LNpfA-r1E6d_LsIN5bsWcsXSeas.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/3838c4-6e46-49a8-8c14-ae8b8d788700/1/LNpfA-r1E6d_LsIN5bsWcsXSeas.mft
Manifest number: 18C2
Signing time: Fri 17 Apr 2026 09:01:10 +0000
Manifest this update: Fri 17 Apr 2026 09:01:10 +0000
Manifest next update: Sat 18 Apr 2026 09:01:10 +0000
Files and hashes: 1: LNpfA-r1E6d_LsIN5bsWcsXSeas.crl (hash: myPOspOj2M7OdgXq8jtBFqJUr4lTkwx/ziNTWf8Y/kU=)
2: fd8Ev0hcgslfyVKkXYe9Nwx0kyc.roa (hash: ZQjqK7exhVB66BBUdBf2gOZ8d37Zs6sdCNMpDp0YRYQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/3838c4-6e46-49a8-8c14-ae8b8d788700/1/LNpfA-r1E6d_LsIN5bsWcsXSeas.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/3838c4-6e46-49a8-8c14-ae8b8d788700/1/LNpfA-r1E6d_LsIN5bsWcsXSeas.mft
rsync://rpki.ripe.net/repository/DEFAULT/LNpfA-r1E6d_LsIN5bsWcsXSeas.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:ac:38:60:13:0a:cd:a0:5c:0d:23:3a:01:c5:8f:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2cda5f03eaf513a77f2ec20de5bb1672c5d279ab
Validity
Not Before: Apr 17 09:01:10 2026 GMT
Not After : Apr 18 09:01:10 2026 GMT
Subject: CN=df0f0a9503205e770a91e7844269fa93987860c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:b9:8f:62:d0:85:18:50:13:35:a5:df:c8:a3:
36:cc:48:3b:91:cd:67:69:82:d1:17:fd:59:cb:43:
1d:62:75:bd:69:13:cf:df:37:57:13:c1:37:ae:93:
66:09:27:6d:af:26:72:4b:c1:c0:07:36:01:26:76:
23:82:b5:bf:2f:8d:04:f3:0e:d0:52:7c:b7:d4:cc:
85:19:db:73:0c:01:03:20:3c:a1:4e:21:3a:44:c0:
11:71:35:da:ac:62:f4:1b:a8:6b:3c:a2:28:6e:c6:
68:be:84:a6:db:c1:00:59:77:13:95:02:09:d5:cc:
6c:c1:6a:0b:a4:5d:76:20:5e:e8:25:fb:f7:c6:a3:
04:37:c8:c0:43:9b:85:1e:38:97:95:00:f3:25:c5:
f7:73:fb:8f:3d:74:25:b3:42:eb:3c:2f:fc:99:9e:
bf:dd:ec:0f:90:ff:fd:bc:88:48:bc:78:9d:8f:24:
f7:3e:e2:1f:94:7c:f7:d7:fc:58:de:98:26:3b:68:
d8:41:c3:8c:56:25:b9:95:b5:9a:bc:cb:a2:69:25:
46:a4:ce:44:c2:43:0a:47:cf:1f:ac:94:f3:5b:e2:
e7:1e:07:0c:40:32:dc:60:5f:92:fe:c3:5d:bc:6d:
c5:b0:50:21:1e:f3:48:06:f5:22:27:68:c5:c4:56:
0e:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:0F:0A:95:03:20:5E:77:0A:91:E7:84:42:69:FA:93:98:78:60:C7
X509v3 Authority Key Identifier:
keyid:2C:DA:5F:03:EA:F5:13:A7:7F:2E:C2:0D:E5:BB:16:72:C5:D2:79:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LNpfA-r1E6d_LsIN5bsWcsXSeas.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/3838c4-6e46-49a8-8c14-ae8b8d788700/1/LNpfA-r1E6d_LsIN5bsWcsXSeas.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/3838c4-6e46-49a8-8c14-ae8b8d788700/1/LNpfA-r1E6d_LsIN5bsWcsXSeas.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:7d:96:d2:ef:78:da:d5:e0:61:36:f9:bf:21:0d:60:6d:21:
e5:a6:ce:2a:64:29:46:cc:87:cd:f6:a7:8f:18:12:dc:32:6d:
16:9e:33:42:e6:90:4a:45:f7:35:83:65:54:7b:6c:09:2e:2d:
8e:ed:0d:46:06:53:42:8f:6e:01:b6:3c:5b:b6:ff:fe:34:5f:
09:0a:5a:bf:35:fd:2f:eb:ca:1f:e8:4f:64:44:95:d1:4c:19:
c7:4b:72:2c:cb:42:62:2f:51:40:dd:4d:f8:0f:89:2b:2d:7f:
4a:b9:2b:88:3b:c3:f7:ac:7e:fc:10:b4:29:f1:58:35:27:e8:
56:43:69:8d:5d:01:9a:9f:88:4d:c9:0d:35:35:69:f9:3d:94:
3d:48:04:6f:0e:48:9a:29:0e:09:ea:eb:4e:2e:21:6d:81:c2:
85:b1:79:a6:2d:14:45:41:6b:6d:43:63:64:51:66:50:a6:2a:
9f:7e:7e:82:dd:b0:62:61:1b:3e:96:a5:d9:3e:9e:2b:9f:0d:
51:58:53:08:84:67:6c:f8:15:30:56:da:7d:9b:d0:41:14:7b:
39:51:53:f6:7a:49:d2:93:7b:ea:2d:04:11:c7:54:2c:a5:d6:
52:f1:c3:ae:7d:4d:63:47:e3:93:92:3b:61:0f:81:bb:f6:88:
df:aa:54:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:14:29 2026 by rpki-client