Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/96b597-ca2b-4a9c-bb82-5bbe7b20f3fc/1/lnL-hxW2OhIO19Bn61Jf5LbekPc.mft
File: lnL-hxW2OhIO19Bn61Jf5LbekPc.mft (raw, json)
Hash identifier: xyn6pZuGpizW0EmI0sGCabJ5YwoQOGQGr6YT7LGtz04=
Subject key identifier: 9A:18:9F:CC:94:36:7E:8C:2E:75:F5:30:AF:54:4B:DF:03:5C:4B:D6
Authority key identifier: 96:72:FE:87:15:B6:3A:12:0E:D7:D0:67:EB:52:5F:E4:B6:DE:90:F7
Certificate issuer: /CN=9672fe8715b63a120ed7d067eb525fe4b6de90f7
Certificate serial: 019CABD99C53DA3F941252B856E498C3230B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lnL-hxW2OhIO19Bn61Jf5LbekPc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/96b597-ca2b-4a9c-bb82-5bbe7b20f3fc/1/lnL-hxW2OhIO19Bn61Jf5LbekPc.mft
Manifest number: 1801
Signing time: Mon 02 Mar 2026 00:01:31 +0000
Manifest this update: Mon 02 Mar 2026 00:01:31 +0000
Manifest next update: Tue 03 Mar 2026 00:01:31 +0000
Files and hashes: 1: lnL-hxW2OhIO19Bn61Jf5LbekPc.crl (hash: ncERp4dyz1OEF/FegvKvlyvPLdTnMe6I5JPp8nH5fwo=)
2: zUjhpvzG-Lc2pgcOBOyUOhZ_jQc.roa (hash: hHpsqIho1J3apISkIRQoEpNvpz7x6zawHtlFWWSFpsI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/96b597-ca2b-4a9c-bb82-5bbe7b20f3fc/1/lnL-hxW2OhIO19Bn61Jf5LbekPc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/96b597-ca2b-4a9c-bb82-5bbe7b20f3fc/1/lnL-hxW2OhIO19Bn61Jf5LbekPc.mft
rsync://rpki.ripe.net/repository/DEFAULT/lnL-hxW2OhIO19Bn61Jf5LbekPc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:9c:53:da:3f:94:12:52:b8:56:e4:98:c3:23:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9672fe8715b63a120ed7d067eb525fe4b6de90f7
Validity
Not Before: Mar 2 00:01:31 2026 GMT
Not After : Mar 3 00:01:31 2026 GMT
Subject: CN=9a189fcc94367e8c2e75f530af544bdf035c4bd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:63:99:05:1a:3b:8a:54:d4:3f:3c:ff:be:33:
1c:86:3b:5a:3a:34:46:51:5e:5e:10:c5:04:17:25:
9a:45:0f:80:1d:2d:46:8c:40:1f:04:1e:57:5c:88:
be:70:95:a4:b8:af:61:f9:e8:64:9c:71:47:66:75:
b3:d9:89:e5:8c:66:4a:21:f0:ba:12:6e:63:67:2f:
04:a0:b4:30:86:8f:4f:c7:69:9f:7d:e1:ac:c8:94:
f2:a3:97:a9:69:34:af:08:b4:1e:2e:fd:60:60:b2:
b5:c5:49:c2:b4:4f:c1:e1:c3:cc:8f:5b:aa:02:96:
d6:d6:fe:c8:d7:cc:1e:d6:f8:b2:0e:66:3e:85:08:
da:87:54:70:d4:f7:d4:45:80:19:40:12:6a:45:24:
fa:ba:26:e0:54:1d:64:49:8c:e5:b3:e0:0f:f5:bf:
98:7e:e9:15:68:9d:5c:95:3e:c7:fc:c2:bb:dc:cd:
c0:40:5f:af:0b:32:82:a2:e7:68:ce:00:92:6e:cf:
e1:2e:0c:4c:13:41:26:d3:08:c8:d8:6a:ef:43:a2:
5c:e1:06:e7:96:a5:4f:07:a9:26:65:0d:8b:a2:8f:
01:cd:54:dd:14:c1:03:55:f4:52:0c:a2:cd:34:c9:
1c:a4:59:ef:e2:43:2e:b7:ea:cb:7c:f5:82:1b:00:
9e:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:18:9F:CC:94:36:7E:8C:2E:75:F5:30:AF:54:4B:DF:03:5C:4B:D6
X509v3 Authority Key Identifier:
keyid:96:72:FE:87:15:B6:3A:12:0E:D7:D0:67:EB:52:5F:E4:B6:DE:90:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lnL-hxW2OhIO19Bn61Jf5LbekPc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/96b597-ca2b-4a9c-bb82-5bbe7b20f3fc/1/lnL-hxW2OhIO19Bn61Jf5LbekPc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/96b597-ca2b-4a9c-bb82-5bbe7b20f3fc/1/lnL-hxW2OhIO19Bn61Jf5LbekPc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c5:9b:ef:ff:cc:b7:3d:03:d6:03:41:4f:ea:d2:b4:f3:2c:a6:
a9:ff:22:ea:24:ee:65:9d:fb:92:db:3b:04:28:a2:fa:d0:1d:
3a:6c:61:ae:2e:87:fd:dd:61:de:be:86:e9:fc:c8:68:a8:ae:
00:cf:7e:d0:52:03:cd:36:5c:65:b7:e9:68:48:73:97:b9:25:
6c:b6:34:ad:89:dc:0b:d3:2f:bc:12:fd:7f:c3:f8:c2:bb:5e:
0e:c3:b2:37:d3:7c:eb:42:0c:79:68:7e:33:b1:69:fc:11:c4:
b4:f2:72:58:1c:0d:38:8d:d1:38:ff:b0:3f:0e:93:8a:3d:5e:
2b:6e:b7:bc:7d:dc:24:bf:97:37:7a:c1:79:03:91:c1:ad:60:
0f:00:f3:64:1b:89:3a:db:a5:be:cf:15:f5:99:df:7f:8d:f3:
fe:04:53:b5:eb:96:71:f1:1e:5c:ed:52:ed:2e:97:77:2e:2c:
d2:17:87:7f:43:bd:a5:9d:62:ee:2b:fb:ee:c8:b0:b2:1a:92:
1f:44:06:af:83:61:a7:75:a7:bd:ed:03:ec:ef:14:42:72:ce:
7a:de:84:ee:b0:b2:31:d7:4e:c9:3c:fc:7b:61:dc:9a:f2:c3:
b3:b7:fb:23:09:68:33:a6:5a:c7:d2:63:0f:0e:fe:f9:63:af:
d0:79:b4:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:34:46 2026 by rpki-client