Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/1ad9bf-0322-4534-b009-e6e91bf052fe/1/LNQbzDzXPg3H9-lbXQ3KbWhXvtw.mft
File: LNQbzDzXPg3H9-lbXQ3KbWhXvtw.mft (raw, json)
Hash identifier: Z13GhlkQaL7Zc25AmoE7hj/BQKRvMPbp+9SAYzmZa5M=
Subject key identifier: D7:A2:2B:28:5B:EA:D0:E5:0C:B8:59:F8:EF:78:BA:E0:EF:BC:4F:5F
Authority key identifier: 2C:D4:1B:CC:3C:D7:3E:0D:C7:F7:E9:5B:5D:0D:CA:6D:68:57:BE:DC
Certificate issuer: /CN=2cd41bcc3cd73e0dc7f7e95b5d0dca6d6857bedc
Certificate serial: 019FAC7675B6706F54BEB52D2DBF01789839
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LNQbzDzXPg3H9-lbXQ3KbWhXvtw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/1ad9bf-0322-4534-b009-e6e91bf052fe/1/LNQbzDzXPg3H9-lbXQ3KbWhXvtw.mft
Manifest number: 19CE
Signing time: Wed 29 Jul 2026 06:01:12 +0000
Manifest this update: Wed 29 Jul 2026 06:01:12 +0000
Manifest next update: Thu 30 Jul 2026 06:01:12 +0000
Files and hashes: 1: 9UXsLKG5ISnWSEO-TCG0hlAjiEY.roa (hash: SyhzNR0OFmBqX9d1/jz00jh2vv/1QKU6100ZrfZ9Ouk=)
2: LNQbzDzXPg3H9-lbXQ3KbWhXvtw.crl (hash: Zl7Jc6qAJbh09lUHWFoPKOdIHKs1DRoC+mOpMUjOzeM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/1ad9bf-0322-4534-b009-e6e91bf052fe/1/LNQbzDzXPg3H9-lbXQ3KbWhXvtw.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/1ad9bf-0322-4534-b009-e6e91bf052fe/1/LNQbzDzXPg3H9-lbXQ3KbWhXvtw.mft
rsync://rpki.ripe.net/repository/DEFAULT/LNQbzDzXPg3H9-lbXQ3KbWhXvtw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:76:75:b6:70:6f:54:be:b5:2d:2d:bf:01:78:98:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2cd41bcc3cd73e0dc7f7e95b5d0dca6d6857bedc
Validity
Not Before: Jul 29 06:01:12 2026 GMT
Not After : Jul 30 06:01:12 2026 GMT
Subject: CN=d7a22b285bead0e50cb859f8ef78bae0efbc4f5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:64:88:fa:a3:6b:87:bd:91:1b:91:95:e5:05:
99:3c:17:c1:01:78:40:32:42:e6:df:52:52:d4:1b:
8b:51:be:e4:93:11:29:d1:1a:da:3f:8e:e6:41:d8:
bd:cb:7f:03:28:f9:3d:87:aa:c7:e3:44:39:5a:f7:
f5:4a:df:38:4f:e8:ba:fd:d8:11:3c:82:87:15:31:
a5:0b:a1:55:4c:cf:63:53:80:1d:2b:5e:3c:72:7e:
53:0d:59:04:a0:da:ce:f0:ab:3e:06:04:d7:23:54:
d5:82:95:e2:28:1d:9c:ca:cb:fa:a0:a5:39:a7:7f:
62:25:81:af:98:92:ab:4b:91:1e:92:ab:d5:de:73:
65:72:a8:58:52:72:9d:ba:52:e4:35:21:e8:b3:99:
a3:b8:da:92:3b:1a:98:f1:fc:68:20:23:d7:df:57:
bc:63:ff:72:31:c5:6e:57:9a:12:09:5d:b2:39:fb:
a9:34:82:af:ce:dc:b6:cc:1a:f5:50:2b:32:f0:6b:
9b:57:15:b9:fd:fc:44:f8:50:08:09:1f:0d:80:34:
83:73:5a:1d:f0:51:9b:dd:99:b6:72:69:f3:ac:b1:
fc:87:00:69:0c:a3:32:f5:d6:18:6b:29:bc:ed:da:
83:d8:bb:37:51:56:98:5d:c2:8b:1d:6b:31:bb:05:
22:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:A2:2B:28:5B:EA:D0:E5:0C:B8:59:F8:EF:78:BA:E0:EF:BC:4F:5F
X509v3 Authority Key Identifier:
keyid:2C:D4:1B:CC:3C:D7:3E:0D:C7:F7:E9:5B:5D:0D:CA:6D:68:57:BE:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LNQbzDzXPg3H9-lbXQ3KbWhXvtw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/1ad9bf-0322-4534-b009-e6e91bf052fe/1/LNQbzDzXPg3H9-lbXQ3KbWhXvtw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/1ad9bf-0322-4534-b009-e6e91bf052fe/1/LNQbzDzXPg3H9-lbXQ3KbWhXvtw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:c2:c6:15:0e:51:67:52:ba:40:92:cc:72:1f:e6:37:9a:98:
6a:de:48:bf:26:e4:10:1d:b2:86:09:61:4c:66:53:6f:4b:06:
6f:f2:ab:5c:a9:22:54:e6:81:5a:30:34:9a:91:ae:f9:5d:56:
9b:3b:00:7c:f5:4d:ec:48:40:61:63:9d:ec:2b:43:f0:e1:cb:
18:bc:0a:32:60:5e:fc:19:58:52:13:ad:3b:1d:b1:cd:65:b9:
cb:d7:73:6e:3a:a0:be:9e:08:38:57:cc:79:02:fe:7d:1a:99:
51:14:36:e2:84:72:e2:ee:1c:3a:13:34:28:ae:28:03:65:66:
b9:f3:24:40:6e:d0:af:de:a4:0b:6d:c4:88:7c:16:96:bd:a4:
74:43:a1:aa:f1:4b:5f:f3:3b:d4:5d:dc:6a:1b:cd:92:62:b6:
80:02:28:de:ca:0b:c1:40:b3:6b:20:10:a5:17:17:be:fa:43:
0e:2f:c4:71:be:94:b1:09:7f:48:5f:ea:59:59:a7:92:1a:10:
84:56:26:52:78:10:a5:d2:1f:ca:b4:73:07:fd:ba:36:12:fb:
e2:f5:09:77:74:fb:8e:d1:6f:c9:3c:0b:0c:ed:15:65:e9:1b:
94:33:32:f9:8f:4f:6c:a7:be:81:6e:87:98:90:bc:3a:2f:37:
db:dc:1a:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 08:47:52 2026 by rpki-client