Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/200988-39db-44a3-9e49-5e047433b234/1/LNBBAsGZa1PIjhceXk-NH6ChMIQ.mft
File: LNBBAsGZa1PIjhceXk-NH6ChMIQ.mft (raw, json)
Hash identifier: J5zg+i1R4tAp920gY73NpTr4YOkapfT+J3c5YtHou1A=
Subject key identifier: FD:41:60:76:37:60:54:0C:4A:C5:29:99:DE:59:BD:69:C6:6B:93:2E
Authority key identifier: 2C:D0:41:02:C1:99:6B:53:C8:8E:17:1E:5E:4F:8D:1F:A0:A1:30:84
Certificate issuer: /CN=2cd04102c1996b53c88e171e5e4f8d1fa0a13084
Certificate serial: 019CAAC645914B5E66641DA0C91876131BF9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LNBBAsGZa1PIjhceXk-NH6ChMIQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/200988-39db-44a3-9e49-5e047433b234/1/LNBBAsGZa1PIjhceXk-NH6ChMIQ.mft
Manifest number: 1809
Signing time: Sun 01 Mar 2026 19:00:46 +0000
Manifest this update: Sun 01 Mar 2026 19:00:46 +0000
Manifest next update: Mon 02 Mar 2026 19:00:46 +0000
Files and hashes: 1: LNBBAsGZa1PIjhceXk-NH6ChMIQ.crl (hash: eepAbvGYm9A51OXVdBdwzSSoFr7FvV05jk1RRmQzeSg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/200988-39db-44a3-9e49-5e047433b234/1/LNBBAsGZa1PIjhceXk-NH6ChMIQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/200988-39db-44a3-9e49-5e047433b234/1/LNBBAsGZa1PIjhceXk-NH6ChMIQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/LNBBAsGZa1PIjhceXk-NH6ChMIQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:45:91:4b:5e:66:64:1d:a0:c9:18:76:13:1b:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2cd04102c1996b53c88e171e5e4f8d1fa0a13084
Validity
Not Before: Mar 1 19:00:46 2026 GMT
Not After : Mar 2 19:00:46 2026 GMT
Subject: CN=fd4160763760540c4ac52999de59bd69c66b932e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:54:b2:26:3c:9a:17:7d:4a:af:a7:9b:fd:82:
cc:a5:ac:f2:59:39:5c:95:7e:ae:83:13:8d:f2:ec:
23:05:dd:fa:50:2d:cd:5c:0b:da:0e:b6:49:2a:70:
68:2a:f8:c1:9f:a8:64:7d:b8:6a:26:23:3b:f9:a0:
63:24:88:18:2a:42:a5:64:95:e2:6a:16:6e:d4:8e:
17:26:05:8c:f2:a3:0e:e8:87:cd:e4:7f:b9:68:9b:
f9:4c:47:13:89:9e:28:02:58:f9:2f:1d:13:68:48:
20:d4:36:31:08:f9:4e:81:d2:9f:40:b5:44:63:a2:
08:19:76:88:fe:c8:6a:35:f2:70:32:2d:20:fe:14:
23:76:5b:95:6b:78:7a:dc:48:a8:ae:ae:b0:36:fc:
3d:d9:30:58:80:81:fb:4e:e7:65:2d:db:48:f8:ee:
03:92:17:d6:db:f5:89:60:7b:73:8c:ea:17:5b:c5:
07:61:81:4f:c8:90:db:c9:2a:4e:ee:e6:2b:aa:5f:
d2:44:28:c6:55:26:8b:f4:52:a3:eb:f1:fc:de:73:
fb:7a:76:c5:b6:7c:52:65:52:b1:d9:a6:6e:85:c2:
83:d1:a8:78:4e:bd:e1:a5:2b:90:32:32:c1:a1:26:
1e:e1:8e:0d:d4:1c:a7:d2:fa:24:b9:7b:a0:3e:ce:
8f:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:41:60:76:37:60:54:0C:4A:C5:29:99:DE:59:BD:69:C6:6B:93:2E
X509v3 Authority Key Identifier:
keyid:2C:D0:41:02:C1:99:6B:53:C8:8E:17:1E:5E:4F:8D:1F:A0:A1:30:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LNBBAsGZa1PIjhceXk-NH6ChMIQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/200988-39db-44a3-9e49-5e047433b234/1/LNBBAsGZa1PIjhceXk-NH6ChMIQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/200988-39db-44a3-9e49-5e047433b234/1/LNBBAsGZa1PIjhceXk-NH6ChMIQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:21:05:53:a2:d8:4f:19:6b:a7:78:0c:6d:e1:43:60:8a:f3:
ea:d2:65:fd:a9:cf:3a:b1:45:67:9a:68:d3:d2:27:3e:36:ea:
92:1f:44:c3:d7:c8:48:15:b3:7d:f7:04:ae:83:2d:33:7f:42:
a0:e7:2b:85:4c:c5:25:0e:a1:84:56:af:76:78:fa:6f:ad:6a:
ed:75:7d:a7:52:d3:6c:08:aa:9b:b6:60:6c:d8:c1:0f:46:11:
ff:24:0d:b8:ec:cd:04:97:56:0a:81:12:f3:23:92:05:b2:49:
f0:e7:f4:0f:6f:94:47:db:2a:69:aa:fe:81:f5:fa:0a:8e:4f:
99:3c:40:c6:af:91:b2:cd:c7:23:cc:95:32:e8:b1:de:b0:71:
26:3a:aa:22:65:85:f8:5c:1e:8f:8d:09:b7:77:3b:2a:fc:26:
1b:fe:31:cc:38:09:f7:fa:fb:f0:90:50:77:6b:42:11:9a:26:
6e:84:53:75:0f:e9:97:dc:70:53:f9:55:4b:0a:ad:b8:75:f0:
61:d5:15:a8:ce:05:63:0b:1c:f6:a2:d4:a8:48:f9:83:0d:a9:
5e:3c:5b:a6:68:23:71:a9:1f:3b:8c:cf:3b:84:d6:fb:20:a7:
76:a9:59:4b:5e:80:f7:7d:07:c9:b9:82:09:08:5b:c3:93:f5:
c8:f5:90:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:25:26 2026 by rpki-client