Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/e17e9a-d3e9-43b1-a2c7-5f65103e6f70/1/LnOM8y5uT5QCIPO4KPB7d-gT0JY.mft
File: LnOM8y5uT5QCIPO4KPB7d-gT0JY.mft (raw, json)
Hash identifier: YX/OgopnhIk5LPVO8LE+zESEJlJOr6JrOK8BTE2SzfY=
Subject key identifier: 55:83:FF:27:C9:DB:17:96:D7:AF:62:D1:24:49:F3:20:33:1C:BB:D3
Authority key identifier: 2E:73:8C:F3:2E:6E:4F:94:02:20:F3:B8:28:F0:7B:77:E8:13:D0:96
Certificate issuer: /CN=2e738cf32e6e4f940220f3b828f07b77e813d096
Certificate serial: 019CAE352F32A5662D280B862A28ED754401
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LnOM8y5uT5QCIPO4KPB7d-gT0JY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/e17e9a-d3e9-43b1-a2c7-5f65103e6f70/1/LnOM8y5uT5QCIPO4KPB7d-gT0JY.mft
Manifest number: 0796
Signing time: Mon 02 Mar 2026 11:00:46 +0000
Manifest this update: Mon 02 Mar 2026 11:00:46 +0000
Manifest next update: Tue 03 Mar 2026 11:00:46 +0000
Files and hashes: 1: LnOM8y5uT5QCIPO4KPB7d-gT0JY.crl (hash: 5nhiVeuhCtmVrVNpwF7TIJjFOFSO2QK1Y3Lg4vr/nSk=)
2: SLoD8WlsE6Q2x9w7dRO-_5Gjieg.roa (hash: AakEz/uG7k8VdhJpZPmGVxjxcBRrnDPnuAQSdndF1BM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/e17e9a-d3e9-43b1-a2c7-5f65103e6f70/1/LnOM8y5uT5QCIPO4KPB7d-gT0JY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/e17e9a-d3e9-43b1-a2c7-5f65103e6f70/1/LnOM8y5uT5QCIPO4KPB7d-gT0JY.mft
rsync://rpki.ripe.net/repository/DEFAULT/LnOM8y5uT5QCIPO4KPB7d-gT0JY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 11:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:35:2f:32:a5:66:2d:28:0b:86:2a:28:ed:75:44:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e738cf32e6e4f940220f3b828f07b77e813d096
Validity
Not Before: Mar 2 11:00:46 2026 GMT
Not After : Mar 3 11:00:46 2026 GMT
Subject: CN=5583ff27c9db1796d7af62d12449f320331cbbd3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:8f:97:f1:a4:e0:27:2c:8f:07:aa:c6:9a:68:
48:34:c4:37:91:f0:ba:20:01:58:dc:6b:c8:b5:14:
a9:b0:fe:c2:ac:01:dc:8f:60:3d:2c:66:fa:1c:2f:
8b:6f:5f:79:34:54:ae:49:a5:01:eb:cf:1c:6b:00:
64:d8:ca:d5:62:4a:59:b5:db:ac:ca:dc:c2:14:13:
52:81:41:57:53:91:ad:2c:9a:4c:8d:14:e3:f1:86:
20:e4:ab:bc:4b:42:b8:8b:45:8d:9a:9e:aa:bd:b5:
ff:94:f6:b3:ad:6c:73:32:77:75:ca:bb:f1:0e:a4:
93:d8:37:ce:7c:3c:5b:11:fc:cc:18:7c:00:81:85:
18:9e:65:fc:c6:4e:08:44:f1:53:eb:ab:0a:bc:04:
41:98:03:70:7c:4f:95:7b:4d:e3:c5:55:31:74:0d:
7e:f5:ab:01:02:32:c2:27:c7:63:fb:ab:ed:16:2a:
da:f2:28:63:8f:c8:8a:8e:d1:24:5e:56:81:ff:30:
ba:47:81:fb:be:75:31:54:68:78:c5:3f:46:b8:0a:
0d:5e:1a:8f:74:5f:9a:c7:a9:a6:91:f9:c4:7a:27:
d5:57:cc:a6:ff:43:e5:94:bd:ec:e6:53:74:1c:e1:
a9:96:88:60:fc:fd:d6:2b:81:16:95:8b:bd:23:ee:
98:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:83:FF:27:C9:DB:17:96:D7:AF:62:D1:24:49:F3:20:33:1C:BB:D3
X509v3 Authority Key Identifier:
keyid:2E:73:8C:F3:2E:6E:4F:94:02:20:F3:B8:28:F0:7B:77:E8:13:D0:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LnOM8y5uT5QCIPO4KPB7d-gT0JY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/e17e9a-d3e9-43b1-a2c7-5f65103e6f70/1/LnOM8y5uT5QCIPO4KPB7d-gT0JY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/e17e9a-d3e9-43b1-a2c7-5f65103e6f70/1/LnOM8y5uT5QCIPO4KPB7d-gT0JY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:67:b0:47:fd:59:f1:37:83:76:96:1f:7e:f8:a6:c7:91:03:
1e:89:d3:99:cc:22:3b:57:a5:6c:aa:24:99:5b:80:43:39:8b:
6a:34:1b:3b:04:5b:ae:60:33:57:a4:c3:dd:16:13:a3:e8:91:
5b:44:3c:a3:dd:db:6b:28:2b:c4:06:e0:3c:66:dd:7d:60:ef:
3c:3f:d6:5a:f6:2f:9d:42:e2:0c:aa:0a:70:4a:4f:f2:af:56:
c9:f9:37:7d:43:23:32:9b:7b:fd:5a:8b:95:f6:4b:80:2a:ae:
ea:2c:28:f2:97:94:dd:fc:d4:08:9c:22:22:b7:8d:e1:79:68:
2c:25:1d:35:e9:9a:99:2d:98:e7:55:d6:66:f7:ec:47:d4:67:
04:db:ed:3c:5f:79:0c:57:99:98:6c:6a:45:5a:d2:86:43:a9:
a6:06:a8:4d:18:92:41:fa:4c:ac:2c:a1:f3:a3:12:8d:c8:23:
a8:44:46:7f:18:2d:35:45:a7:c7:96:ce:89:c2:b2:88:be:42:
0b:4a:59:8e:01:8c:50:5d:f4:46:b3:1f:74:b9:d6:9a:82:b0:
51:a8:da:ca:e4:6a:5f:b2:f5:cf:72:4f:67:70:dc:81:d6:1c:
50:bc:28:e6:d3:f6:3a:37:ba:98:cb:e6:61:82:39:8e:09:52:
87:e3:bf:43
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyuNS8ypWYtKAuGKijtdUQBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJlNzM4Y2YzMmU2ZTRmOTQwMjIwZjNiODI4ZjA3Yjc3ZTgx
M2QwOTYwHhcNMjYwMzAyMTEwMDQ2WhcNMjYwMzAzMTEwMDQ2WjAzMTEwLwYDVQQD
Eyg1NTgzZmYyN2M5ZGIxNzk2ZDdhZjYyZDEyNDQ5ZjMyMDMzMWNiYmQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2I+X8aTgJyyPB6rGmmhINMQ3kfC6
IAFY3GvItRSpsP7CrAHcj2A9LGb6HC+Lb195NFSuSaUB688cawBk2MrVYkpZtdus
ytzCFBNSgUFXU5GtLJpMjRTj8YYg5Ku8S0K4i0WNmp6qvbX/lPazrWxzMnd1yrvx
DqST2DfOfDxbEfzMGHwAgYUYnmX8xk4IRPFT66sKvARBmANwfE+Ve03jxVUxdA1+
9asBAjLCJ8dj+6vtFira8ihjj8iKjtEkXlaB/zC6R4H7vnUxVGh4xT9GuAoNXhqP
dF+ax6mmkfnEeifVV8ym/0PllL3s5lN0HOGplohg/P3WK4EWlYu9I+6YQQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFWD/yfJ2xeW169i0SRJ8yAzHLvTMB8GA1UdIwQY
MBaAFC5zjPMubk+UAiDzuCjwe3foE9CWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTG5PTTh5NXVUNVFDSVBPNEtQQjdkLWdUMEpZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS9lMTdlOWEtZDNlOS00M2IxLWEyYzct
NWY2NTEwM2U2ZjcwLzEvTG5PTTh5NXVUNVFDSVBPNEtQQjdkLWdUMEpZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNS9lMTdlOWEtZDNlOS00M2IxLWEyYzctNWY2NTEwM2U2Zjcw
LzEvTG5PTTh5NXVUNVFDSVBPNEtQQjdkLWdUMEpZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADmewR/1Z
8TeDdpYffvimx5EDHonTmcwiO1elbKokmVuAQzmLajQbOwRbrmAzV6TD3RYTo+iR
W0Q8o93baygrxAbgPGbdfWDvPD/WWvYvnULiDKoKcEpP8q9Wyfk3fUMjMpt7/VqL
lfZLgCqu6iwo8peU3fzUCJwiIreN4XloLCUdNemamS2Y51XWZvfsR9RnBNvtPF95
DFeZmGxqRVrShkOppgaoTRiSQfpMrCyh86MSjcgjqERGfxgtNUWnx5bOicKyiL5C
C0pZjgGMUF30RrMfdLnWmoKwUajayuRqX7L1z3JPZ3DcgdYcULwo5tP2Oje6mMvm
YYI5jglSh+O/Qw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 20:56:41 2026 by rpki-client