Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/1ad9bf-0322-4534-b009-e6e91bf052fe/1/LNQbzDzXPg3H9-lbXQ3KbWhXvtw.mft
File: LNQbzDzXPg3H9-lbXQ3KbWhXvtw.mft (raw, json)
Hash identifier: V/p80gDLdxZ1w2hmxeN8OIxmE++nLm4kyIVyU3CS6Zk=
Subject key identifier: 2D:00:E6:6C:EF:CD:2B:4B:E1:A7:DA:06:03:AE:C6:77:9A:19:CE:29
Authority key identifier: 2C:D4:1B:CC:3C:D7:3E:0D:C7:F7:E9:5B:5D:0D:CA:6D:68:57:BE:DC
Certificate issuer: /CN=2cd41bcc3cd73e0dc7f7e95b5d0dca6d6857bedc
Certificate serial: 019DA30AB4C88DAB30190717310F56352BD1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LNQbzDzXPg3H9-lbXQ3KbWhXvtw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/1ad9bf-0322-4534-b009-e6e91bf052fe/1/LNQbzDzXPg3H9-lbXQ3KbWhXvtw.mft
Manifest number: 18C0
Signing time: Sun 19 Apr 2026 00:01:20 +0000
Manifest this update: Sun 19 Apr 2026 00:01:20 +0000
Manifest next update: Mon 20 Apr 2026 00:01:20 +0000
Files and hashes: 1: 9UXsLKG5ISnWSEO-TCG0hlAjiEY.roa (hash: SyhzNR0OFmBqX9d1/jz00jh2vv/1QKU6100ZrfZ9Ouk=)
2: LNQbzDzXPg3H9-lbXQ3KbWhXvtw.crl (hash: sEKCaaZ/pD9uytBcgvxKebb0xCtwWxlx17/bnSR0S+o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/1ad9bf-0322-4534-b009-e6e91bf052fe/1/LNQbzDzXPg3H9-lbXQ3KbWhXvtw.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/1ad9bf-0322-4534-b009-e6e91bf052fe/1/LNQbzDzXPg3H9-lbXQ3KbWhXvtw.mft
rsync://rpki.ripe.net/repository/DEFAULT/LNQbzDzXPg3H9-lbXQ3KbWhXvtw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 00:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:0a:b4:c8:8d:ab:30:19:07:17:31:0f:56:35:2b:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2cd41bcc3cd73e0dc7f7e95b5d0dca6d6857bedc
Validity
Not Before: Apr 19 00:01:20 2026 GMT
Not After : Apr 20 00:01:20 2026 GMT
Subject: CN=2d00e66cefcd2b4be1a7da0603aec6779a19ce29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:e1:b3:01:29:a2:31:fc:d0:aa:45:8b:17:0d:
c9:d8:60:25:89:80:e5:9a:ce:ef:0a:35:e8:df:bb:
88:0e:bf:89:ce:de:cf:70:ce:46:ea:50:22:3c:38:
52:75:54:8f:aa:3e:09:00:e7:58:47:7d:28:96:ff:
a7:99:bf:fd:0f:64:48:9b:20:24:32:c2:7d:11:47:
88:0f:fb:79:23:cb:0e:a6:6f:6b:bb:f1:49:cd:ca:
61:7a:e1:64:2a:97:49:49:18:c8:5c:95:48:5c:90:
65:7c:97:92:c5:fd:e4:a3:d6:36:cd:74:8e:08:3c:
21:1d:f1:48:b9:dc:85:dd:b1:c5:c1:28:e2:1b:fe:
7d:10:13:ca:15:88:74:0d:45:7d:7c:60:49:6c:71:
40:98:9e:dc:a9:71:b6:fd:27:cf:67:3e:a2:5c:84:
cb:4c:81:f6:f3:f1:e5:6d:6a:b2:af:6c:c0:32:1b:
68:9e:39:76:fa:3a:f0:df:cf:a7:7c:77:73:ef:12:
cd:0e:05:07:4d:e8:78:3e:2f:e5:2c:e9:1b:62:89:
c3:ca:d2:92:c7:15:15:57:c2:09:9e:11:fe:3b:8e:
98:46:74:59:fe:33:a1:9e:ca:a9:bb:27:9b:91:27:
dc:d2:31:fa:7d:cc:f2:1b:fd:f4:25:9b:50:ec:8f:
0f:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:00:E6:6C:EF:CD:2B:4B:E1:A7:DA:06:03:AE:C6:77:9A:19:CE:29
X509v3 Authority Key Identifier:
keyid:2C:D4:1B:CC:3C:D7:3E:0D:C7:F7:E9:5B:5D:0D:CA:6D:68:57:BE:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LNQbzDzXPg3H9-lbXQ3KbWhXvtw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/1ad9bf-0322-4534-b009-e6e91bf052fe/1/LNQbzDzXPg3H9-lbXQ3KbWhXvtw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/1ad9bf-0322-4534-b009-e6e91bf052fe/1/LNQbzDzXPg3H9-lbXQ3KbWhXvtw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:df:9f:b0:a7:93:93:9d:f8:2b:83:86:21:85:30:9c:a7:6a:
7f:42:54:57:14:a7:38:b2:b7:be:bf:5e:c9:2d:68:79:04:fe:
a6:66:8e:2a:0c:ab:de:af:3f:8b:1d:59:3c:82:df:e5:b8:b8:
43:1e:a1:b9:5e:71:1f:d1:50:84:4e:64:d5:71:ed:8b:46:79:
d4:89:41:97:50:5b:8f:e1:08:41:58:1f:18:55:35:1e:14:87:
3e:4f:fe:fb:b3:ba:85:c9:c1:14:8a:1c:1b:d9:97:f4:e7:af:
41:de:f3:20:98:b6:6e:cc:16:fb:13:9b:40:d9:38:84:24:f4:
76:9c:68:54:38:cb:94:30:64:42:5e:98:70:2b:a1:4a:17:c5:
e9:a9:60:c3:6c:5d:65:f5:a1:cd:0c:8b:b8:99:d1:f8:f5:ea:
47:dc:61:4f:70:28:49:3e:58:31:38:da:46:59:e6:10:79:fa:
ef:af:71:aa:7c:52:fe:d5:90:72:1d:43:4d:20:fd:3c:1f:96:
90:11:51:a2:a9:91:23:c5:db:90:da:6c:b3:8a:f3:8c:24:81:
21:a8:1f:b7:15:9c:37:62:cc:d3:de:c4:29:62:fe:a3:73:87:
75:4b:09:52:b4:c7:f8:36:22:aa:7b:a6:4d:80:4e:3a:17:83:
91:68:2d:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:55:21 2026 by rpki-client