
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/1ad9bf-0322-4534-b009-e6e91bf052fe/1/LNQbzDzXPg3H9-lbXQ3KbWhXvtw.mft
File: LNQbzDzXPg3H9-lbXQ3KbWhXvtw.mft (raw, json)
Hash identifier: rl7Fls4E+9fI5TNimJXwKpEq5mSEgXExs//WdjgVu3A=
Subject key identifier: C0:01:CA:FE:42:19:F2:D2:56:54:F7:CE:C1:C0:88:BC:B1:DD:F2:7F
Authority key identifier: 2C:D4:1B:CC:3C:D7:3E:0D:C7:F7:E9:5B:5D:0D:CA:6D:68:57:BE:DC
Certificate issuer: /CN=2cd41bcc3cd73e0dc7f7e95b5d0dca6d6857bedc
Certificate serial: 019EC0DB2351CA6BA21BF8A439AA9225518B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LNQbzDzXPg3H9-lbXQ3KbWhXvtw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/1ad9bf-0322-4534-b009-e6e91bf052fe/1/LNQbzDzXPg3H9-lbXQ3KbWhXvtw.mft
Manifest number: 1954
Signing time: Sat 13 Jun 2026 12:00:47 +0000
Manifest this update: Sat 13 Jun 2026 12:00:47 +0000
Manifest next update: Sun 14 Jun 2026 12:00:47 +0000
Files and hashes: 1: 9UXsLKG5ISnWSEO-TCG0hlAjiEY.roa (hash: SyhzNR0OFmBqX9d1/jz00jh2vv/1QKU6100ZrfZ9Ouk=)
2: LNQbzDzXPg3H9-lbXQ3KbWhXvtw.crl (hash: O2rFzsZf7g6L/WwB3u7jbTHOy+GfI+90DdP0nvaFApY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/1ad9bf-0322-4534-b009-e6e91bf052fe/1/LNQbzDzXPg3H9-lbXQ3KbWhXvtw.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/1ad9bf-0322-4534-b009-e6e91bf052fe/1/LNQbzDzXPg3H9-lbXQ3KbWhXvtw.mft
rsync://rpki.ripe.net/repository/DEFAULT/LNQbzDzXPg3H9-lbXQ3KbWhXvtw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c0:db:23:51:ca:6b:a2:1b:f8:a4:39:aa:92:25:51:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2cd41bcc3cd73e0dc7f7e95b5d0dca6d6857bedc
Validity
Not Before: Jun 13 12:00:47 2026 GMT
Not After : Jun 14 12:00:47 2026 GMT
Subject: CN=c001cafe4219f2d25654f7cec1c088bcb1ddf27f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:3a:10:83:cd:6b:a6:70:76:54:af:77:1e:f5:
35:d7:e7:cf:1a:6c:8d:b7:54:00:c8:11:b9:4c:dd:
90:20:eb:34:0e:86:d2:d0:2a:12:c9:cf:fc:9a:7c:
61:58:ef:c2:72:f7:5b:0a:39:a2:0d:1c:1e:db:3b:
c4:10:4b:01:48:36:44:e0:cd:8f:26:70:b9:62:99:
67:8f:7f:49:cc:33:fe:52:e0:23:66:97:99:36:11:
ca:15:18:21:2d:d5:38:e3:fe:a9:bb:d3:68:4a:61:
6a:e1:5d:28:cc:5c:c1:43:64:6a:99:6a:3c:5c:7e:
86:fa:07:18:d2:2b:2a:ae:90:7f:ea:b5:71:94:79:
77:69:65:81:d4:e7:39:c7:68:73:fe:f8:d9:8f:cd:
49:a1:28:a0:fc:3d:c9:d5:95:83:60:ff:8c:2e:a8:
4d:12:17:da:47:f2:8c:1a:a1:81:72:ea:91:84:05:
f0:64:c5:f6:86:cb:e9:3e:4c:21:82:89:4a:14:f2:
2b:2f:9a:bc:d1:2e:07:b3:e8:6a:6e:8d:76:8e:c2:
f1:41:8b:7c:7e:1f:4a:71:fb:db:1c:6a:e0:95:64:
40:9e:c3:c3:6f:9b:b5:b4:66:e3:26:fa:37:65:1c:
82:28:44:c1:27:cc:ac:51:af:c3:ba:19:ca:fb:b5:
bb:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:01:CA:FE:42:19:F2:D2:56:54:F7:CE:C1:C0:88:BC:B1:DD:F2:7F
X509v3 Authority Key Identifier:
keyid:2C:D4:1B:CC:3C:D7:3E:0D:C7:F7:E9:5B:5D:0D:CA:6D:68:57:BE:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LNQbzDzXPg3H9-lbXQ3KbWhXvtw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/1ad9bf-0322-4534-b009-e6e91bf052fe/1/LNQbzDzXPg3H9-lbXQ3KbWhXvtw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/1ad9bf-0322-4534-b009-e6e91bf052fe/1/LNQbzDzXPg3H9-lbXQ3KbWhXvtw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:c6:5a:de:e9:fb:99:96:1f:6c:b3:0b:35:ea:d5:86:5b:3f:
6a:76:09:e8:ec:c9:22:57:4b:92:17:ad:36:fa:18:d1:6e:53:
3e:86:38:9c:d6:ca:ea:9a:de:81:6c:cc:8d:a1:22:76:0f:7c:
79:ce:a7:fb:a3:f8:7d:b9:f2:24:e3:4c:76:9a:13:55:e3:13:
1e:16:69:c0:ea:86:55:ef:e9:c4:b5:c1:6f:e1:dc:bf:0b:45:
e8:2d:fd:0d:c4:06:01:80:db:91:62:1d:48:bb:96:62:4f:94:
bc:70:d2:8e:14:05:1a:73:a6:fb:92:22:e5:01:c5:8a:84:6b:
1f:41:f4:b2:75:6b:a0:d2:36:b7:e7:65:c9:d7:27:31:10:69:
57:6b:cc:58:1f:e4:39:59:05:76:8a:93:6a:35:21:30:7b:ab:
e7:7d:b3:c2:dd:ba:4f:da:7d:0f:ec:f9:0f:96:ec:a4:2a:f6:
d4:63:e6:d4:55:c3:c1:c1:3c:44:20:d9:39:15:4b:56:72:26:
8c:61:2a:69:d4:ae:21:f7:dc:c8:bf:1f:af:4a:a7:37:cc:0b:
45:de:68:a5:7f:ae:89:98:7c:15:6c:18:1a:b9:c6:28:24:a8:
ea:2f:b1:5b:67:d5:30:de:32:ad:d8:e7:de:45:28:b4:3f:88:
93:44:2b:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 19:23:53 2026 by rpki-client