Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/420c14-cb2c-4e3e-87b9-3fc39487807c/1/LIPfskYpwWd5NQtKd3tbKA_FnUQ.mft
File: LIPfskYpwWd5NQtKd3tbKA_FnUQ.mft (raw, json)
Hash identifier: 5omFld7WarPrQXCxXwoliW2lNA88joRnmtv0vvy8Ohk=
Subject key identifier: 67:ED:81:11:80:FB:C6:C1:64:C6:07:25:E3:02:28:7F:9C:33:EE:BD
Authority key identifier: 2C:83:DF:B2:46:29:C1:67:79:35:0B:4A:77:7B:5B:28:0F:C5:9D:44
Certificate issuer: /CN=2c83dfb24629c16779350b4a777b5b280fc59d44
Certificate serial: 019FA373089413E3F22F5BF0DE7771366A67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LIPfskYpwWd5NQtKd3tbKA_FnUQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/420c14-cb2c-4e3e-87b9-3fc39487807c/1/LIPfskYpwWd5NQtKd3tbKA_FnUQ.mft
Manifest number: 19D1
Signing time: Mon 27 Jul 2026 12:00:52 +0000
Manifest this update: Mon 27 Jul 2026 12:00:52 +0000
Manifest next update: Tue 28 Jul 2026 12:00:52 +0000
Files and hashes: 1: LIPfskYpwWd5NQtKd3tbKA_FnUQ.crl (hash: qFrbETnmby6vK7D5dggMcojFVwg9yt7GgGvOK6voNds=)
2: SizhTkIG2sATNsv1VQNzH4wHchc.roa (hash: 2PYBEpDEAGt3SnEGmQvvCFiLA489Fe6L2n4/O/hryFQ=)
3: cMMwTPV9hTcR-LW3CCNoNNI7ghU.roa (hash: D27oXJgFuXlMx0AdNp5xIFlLxsheQv6fczl4XU0D9Lc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/420c14-cb2c-4e3e-87b9-3fc39487807c/1/LIPfskYpwWd5NQtKd3tbKA_FnUQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/420c14-cb2c-4e3e-87b9-3fc39487807c/1/LIPfskYpwWd5NQtKd3tbKA_FnUQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/LIPfskYpwWd5NQtKd3tbKA_FnUQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 12:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a3:73:08:94:13:e3:f2:2f:5b:f0:de:77:71:36:6a:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c83dfb24629c16779350b4a777b5b280fc59d44
Validity
Not Before: Jul 27 12:00:52 2026 GMT
Not After : Jul 28 12:00:52 2026 GMT
Subject: CN=67ed811180fbc6c164c60725e302287f9c33eebd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:5b:6a:4f:c8:c2:5d:b9:b5:f8:80:3c:82:9b:
51:e9:e2:4c:b9:ac:5f:c1:82:f1:71:17:83:ff:17:
88:f7:62:d5:84:1f:8f:19:f5:18:73:da:c2:7c:7b:
6f:2e:4b:7a:3f:4b:ee:8a:5b:a8:84:9c:fe:07:39:
9b:67:73:f7:7d:94:b7:bd:8c:cb:25:eb:89:cf:72:
04:9a:e1:0a:ab:10:cc:4e:71:5f:45:5c:08:0b:83:
3f:ef:72:f8:a7:f7:05:98:27:4b:f7:bb:19:a8:b6:
b4:a2:3c:dd:17:e7:7d:a6:7c:d4:5f:16:2a:d5:61:
7b:fb:4d:f0:d0:6d:af:a8:d1:d9:54:03:97:24:84:
3d:57:eb:10:cc:32:a6:07:60:4b:9a:50:b7:bb:1c:
47:00:13:bb:f6:cb:59:60:09:1c:cf:7e:3f:0c:5a:
30:c0:11:15:b6:d8:38:c6:ab:96:dd:54:0f:73:e2:
cb:03:0d:8c:ca:c0:b0:9c:88:68:bf:73:73:6a:a0:
84:d5:0a:42:b1:45:e4:82:88:13:4f:6c:3f:96:f6:
3e:8e:5c:63:de:6e:ce:8a:a0:63:bb:30:fa:3e:b0:
74:f7:50:5e:1a:c9:8f:38:80:bb:ea:de:0f:47:b1:
fa:f8:eb:03:6c:29:81:18:65:f0:8d:01:60:57:1d:
57:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:ED:81:11:80:FB:C6:C1:64:C6:07:25:E3:02:28:7F:9C:33:EE:BD
X509v3 Authority Key Identifier:
keyid:2C:83:DF:B2:46:29:C1:67:79:35:0B:4A:77:7B:5B:28:0F:C5:9D:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LIPfskYpwWd5NQtKd3tbKA_FnUQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/420c14-cb2c-4e3e-87b9-3fc39487807c/1/LIPfskYpwWd5NQtKd3tbKA_FnUQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/420c14-cb2c-4e3e-87b9-3fc39487807c/1/LIPfskYpwWd5NQtKd3tbKA_FnUQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:6f:2d:e6:7a:de:24:91:16:7a:81:1e:73:4d:2a:7c:24:7c:
9c:2a:c6:ec:9c:9a:d4:ff:79:0f:54:18:44:29:d5:71:03:bb:
21:73:a3:63:ea:e3:ea:d9:70:a9:d5:0e:d8:ae:94:0b:b3:0c:
d1:cd:38:8b:0e:79:e4:68:1b:15:3a:58:3e:ef:1c:5f:24:52:
e5:43:c1:65:89:68:97:a0:5e:4a:b4:39:f6:e3:7f:86:47:3b:
b9:83:a9:c9:e0:d7:14:4a:54:94:67:56:02:12:27:35:3c:65:
f3:fd:6c:15:b9:cb:aa:61:a4:b4:ad:9b:a9:56:07:b8:a3:00:
6a:83:97:e2:f6:b5:cc:79:a0:19:c8:a9:3e:83:08:77:56:9b:
52:26:d4:66:61:67:98:ca:0d:c9:9c:cb:27:b8:40:c2:14:93:
a1:4a:35:6f:c1:c8:f9:85:c8:23:56:e6:1d:8f:7c:87:c8:3d:
85:58:8a:f1:03:16:46:21:61:30:8a:06:ee:88:41:ab:98:b3:
d8:39:d9:53:5c:af:31:65:04:d4:c3:76:31:a5:b9:ff:a4:cf:
dc:1d:5a:74:d2:c1:45:99:f7:1f:60:72:b5:07:89:ff:e2:4f:
09:6b:94:40:99:2b:d0:ad:1e:1a:20:34:ad:71:c1:5e:d7:67:
60:ce:1f:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 16:04:34 2026 by rpki-client