Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/c637de-bef7-4da3-803f-84e5f1af6e92/1/LMNcIJCZlCHTPGNZybbmgYKg8nM.mft
File: LMNcIJCZlCHTPGNZybbmgYKg8nM.mft (raw, json)
Hash identifier: SXuw+pGsld4mKucklDsfcWUD7oW/dP/JmxksV17l3cg=
Subject key identifier: E3:72:41:1C:5F:18:E8:8E:B5:81:54:70:E1:4C:74:5B:4F:08:9A:D4
Authority key identifier: 2C:C3:5C:20:90:99:94:21:D3:3C:63:59:C9:B6:E6:81:82:A0:F2:73
Certificate issuer: /CN=2cc35c2090999421d33c6359c9b6e68182a0f273
Certificate serial: 019D98F4CDD9F8D083F728736BB349D7EC32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LMNcIJCZlCHTPGNZybbmgYKg8nM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/c637de-bef7-4da3-803f-84e5f1af6e92/1/LMNcIJCZlCHTPGNZybbmgYKg8nM.mft
Manifest number: 1850
Signing time: Fri 17 Apr 2026 01:01:13 +0000
Manifest this update: Fri 17 Apr 2026 01:01:13 +0000
Manifest next update: Sat 18 Apr 2026 01:01:13 +0000
Files and hashes: 1: LMNcIJCZlCHTPGNZybbmgYKg8nM.crl (hash: Onz6KS5mj+Ovg23rpkRGV88bKIGRiPskaFJO9BDuVSU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/c637de-bef7-4da3-803f-84e5f1af6e92/1/LMNcIJCZlCHTPGNZybbmgYKg8nM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/c637de-bef7-4da3-803f-84e5f1af6e92/1/LMNcIJCZlCHTPGNZybbmgYKg8nM.mft
rsync://rpki.ripe.net/repository/DEFAULT/LMNcIJCZlCHTPGNZybbmgYKg8nM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f4:cd:d9:f8:d0:83:f7:28:73:6b:b3:49:d7:ec:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2cc35c2090999421d33c6359c9b6e68182a0f273
Validity
Not Before: Apr 17 01:01:13 2026 GMT
Not After : Apr 18 01:01:13 2026 GMT
Subject: CN=e372411c5f18e88eb5815470e14c745b4f089ad4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:ab:59:8e:9b:77:c6:f4:2b:c6:f6:c1:3a:e8:
c2:8c:87:61:70:81:f3:31:01:bf:18:4c:95:9b:4c:
b4:1b:00:6c:e6:6b:d9:10:8c:11:c4:37:86:48:67:
e9:e3:93:be:71:7f:71:a0:c6:75:58:41:24:b8:93:
25:f4:52:27:fe:d0:f0:8d:ba:fe:92:5e:d8:85:6d:
91:09:c2:42:0d:a0:e8:77:90:79:c4:2e:0c:a6:5d:
58:93:ab:9f:3b:5e:4a:8a:1a:12:02:3f:75:3b:9c:
06:c5:78:d4:45:a5:31:20:f3:f3:51:ef:26:78:fc:
0c:f1:be:72:18:af:a7:87:3f:2e:07:54:29:61:71:
5b:98:d1:f9:5a:75:f9:6b:47:27:cf:b0:2d:f0:85:
47:63:6e:55:02:68:2d:28:fc:8b:da:fb:99:ca:a9:
e7:1b:f9:ef:bf:83:52:2c:a2:be:ed:2d:b8:1d:b7:
8b:e2:4e:d7:3a:95:11:8d:ae:f2:d5:90:db:54:fb:
3f:80:9f:90:6f:7e:11:bf:cd:f9:53:e5:cb:86:42:
79:43:17:b5:7d:6c:d6:d4:07:c9:5a:aa:b3:fe:57:
2e:c7:1f:00:52:a8:39:1c:f1:e5:76:80:3d:db:1c:
79:b7:59:9d:60:0d:3a:eb:ca:de:14:56:7f:3c:82:
7e:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:72:41:1C:5F:18:E8:8E:B5:81:54:70:E1:4C:74:5B:4F:08:9A:D4
X509v3 Authority Key Identifier:
keyid:2C:C3:5C:20:90:99:94:21:D3:3C:63:59:C9:B6:E6:81:82:A0:F2:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LMNcIJCZlCHTPGNZybbmgYKg8nM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/c637de-bef7-4da3-803f-84e5f1af6e92/1/LMNcIJCZlCHTPGNZybbmgYKg8nM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/c637de-bef7-4da3-803f-84e5f1af6e92/1/LMNcIJCZlCHTPGNZybbmgYKg8nM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:6f:af:f6:4e:1f:5b:c3:f3:26:99:b0:70:c4:0f:77:b3:86:
5e:49:f9:84:26:47:26:c8:4d:86:83:72:68:05:15:21:2b:27:
5e:fd:71:1e:3c:6d:fe:ed:d9:c3:f2:29:d5:84:e4:6b:e0:60:
1c:60:e4:6b:6a:91:04:fe:6c:f4:6e:82:4e:b4:11:51:84:2d:
6a:d5:1a:8a:63:27:54:74:6f:31:a5:4a:b7:9c:8d:33:83:8b:
c9:71:9b:ce:48:67:d2:9d:b4:3f:77:79:2c:2a:17:46:92:4a:
9e:f9:3a:3b:64:e3:99:2a:07:48:bd:87:54:5f:19:cb:11:47:
f7:df:20:8d:ec:f1:30:ac:3e:18:60:4e:68:62:c6:57:61:31:
7a:e7:be:b7:8f:1d:01:9b:74:a1:a1:e3:48:34:9d:ee:ba:8a:
d0:ea:da:e3:21:b7:55:50:22:0d:e4:ea:9f:c5:4b:11:f2:e2:
0a:41:df:b3:14:e9:77:8e:9d:41:ce:c7:d6:bd:e3:c1:b1:b1:
a1:5a:be:75:55:26:ba:0b:1b:9c:ef:ce:db:5c:c0:04:6a:b8:
3c:47:61:b2:8b:55:78:9b:2a:f8:d5:10:0a:6e:99:49:4b:fc:
ba:36:22:75:4f:aa:c9:53:50:22:2a:21:d2:1f:d4:95:66:c1:
34:c0:7b:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 03:45:13 2026 by rpki-client