Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0a/420c14-cb2c-4e3e-87b9-3fc39487807c/1/LIPfskYpwWd5NQtKd3tbKA_FnUQ.mft
File: LIPfskYpwWd5NQtKd3tbKA_FnUQ.mft (raw, json)
Hash identifier: i3nD/Hm28WUwKTMwnMIwYJ6KkcDvrZC+NBGZw1mD3f4=
Subject key identifier: 40:08:BF:8E:9D:AC:47:3B:8F:3A:B2:75:BE:BE:F4:7D:29:63:40:45
Authority key identifier: 2C:83:DF:B2:46:29:C1:67:79:35:0B:4A:77:7B:5B:28:0F:C5:9D:44
Certificate issuer: /CN=2c83dfb24629c16779350b4a777b5b280fc59d44
Certificate serial: 01A174DDC4998144A525ED999D8176FC9A6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LIPfskYpwWd5NQtKd3tbKA_FnUQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/420c14-cb2c-4e3e-87b9-3fc39487807c/1/LIPfskYpwWd5NQtKd3tbKA_FnUQ.mft
Manifest number: 1AC2
Signing time: Sun 25 Oct 2026 21:00:53 +0000
Manifest this update: Sun 25 Oct 2026 21:00:53 +0000
Manifest next update: Mon 26 Oct 2026 21:00:53 +0000
Files and hashes: 1: LIPfskYpwWd5NQtKd3tbKA_FnUQ.crl (hash: jfHfs5rKMoKXH3azPKwkRsRYU/+v2T+hyMAfJwCf7J8=)
2: SizhTkIG2sATNsv1VQNzH4wHchc.roa (hash: 2PYBEpDEAGt3SnEGmQvvCFiLA489Fe6L2n4/O/hryFQ=)
3: cMMwTPV9hTcR-LW3CCNoNNI7ghU.roa (hash: D27oXJgFuXlMx0AdNp5xIFlLxsheQv6fczl4XU0D9Lc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/420c14-cb2c-4e3e-87b9-3fc39487807c/1/LIPfskYpwWd5NQtKd3tbKA_FnUQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/420c14-cb2c-4e3e-87b9-3fc39487807c/1/LIPfskYpwWd5NQtKd3tbKA_FnUQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/LIPfskYpwWd5NQtKd3tbKA_FnUQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 21:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:74:dd:c4:99:81:44:a5:25:ed:99:9d:81:76:fc:9a:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c83dfb24629c16779350b4a777b5b280fc59d44
Validity
Not Before: Oct 25 21:00:53 2026 GMT
Not After : Oct 26 21:00:53 2026 GMT
Subject: CN=4008bf8e9dac473b8f3ab275bebef47d29634045
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:7c:94:b5:0e:48:c9:a0:85:2d:80:60:b2:1b:
a2:b0:00:9c:d3:f1:e8:8c:c0:51:8c:6c:84:6b:62:
56:1f:77:02:d8:df:c9:d6:ff:95:17:10:9a:26:27:
03:97:bb:c6:f5:5f:fd:13:a3:73:85:07:da:38:d0:
86:d0:08:a2:15:a5:5c:7e:96:df:99:26:67:32:5c:
cf:2d:e0:31:74:34:8b:0f:c7:f6:ab:fd:fd:e0:49:
2e:dc:c9:c3:82:7c:14:99:d9:a6:03:99:ae:0b:37:
4a:d3:d7:53:5d:b9:2a:34:37:95:86:57:ba:27:96:
cd:c6:13:59:ad:f3:1c:5b:34:cb:87:d2:56:0b:6d:
62:f7:5a:a2:e4:05:22:75:0a:a9:0b:03:be:fb:6a:
bf:2c:ee:bd:42:8e:c5:a3:ec:24:af:ff:4f:76:1f:
f8:59:21:bc:38:57:d9:25:3c:fa:41:d8:1a:61:d9:
53:df:3c:74:37:aa:d0:15:e5:be:a4:a4:a5:f4:6f:
b9:fb:0d:77:41:56:e1:e9:97:26:ab:0e:64:e4:d1:
0a:0e:bb:c1:67:e6:29:82:f1:40:53:d6:60:a3:37:
27:8c:24:0d:e1:cb:20:d7:e0:e3:b2:f4:33:c1:23:
53:7e:bb:bc:90:32:ce:3d:39:a1:d5:60:d4:84:1e:
4a:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:08:BF:8E:9D:AC:47:3B:8F:3A:B2:75:BE:BE:F4:7D:29:63:40:45
X509v3 Authority Key Identifier:
keyid:2C:83:DF:B2:46:29:C1:67:79:35:0B:4A:77:7B:5B:28:0F:C5:9D:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LIPfskYpwWd5NQtKd3tbKA_FnUQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/420c14-cb2c-4e3e-87b9-3fc39487807c/1/LIPfskYpwWd5NQtKd3tbKA_FnUQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/420c14-cb2c-4e3e-87b9-3fc39487807c/1/LIPfskYpwWd5NQtKd3tbKA_FnUQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:cc:d6:7a:d1:46:48:dc:14:f9:53:3a:05:0b:c5:d9:cd:d1:
ea:42:83:18:f5:39:73:ee:d2:c2:29:2a:16:88:73:d4:43:8a:
50:66:87:03:bc:77:b6:86:50:de:5e:5e:b4:ac:4c:32:39:72:
64:5e:53:7c:30:a5:9b:e8:8a:f8:13:96:a6:43:ea:49:da:e5:
95:92:66:ca:28:e1:1c:92:ed:23:80:05:45:19:b6:70:c7:7a:
e1:e9:f6:34:cc:fc:a9:ce:5f:06:1e:c3:ef:80:71:94:7e:e8:
69:e6:30:f4:bf:c5:d1:fd:ca:7a:c7:64:2d:67:c8:a5:cd:08:
ed:eb:66:8c:16:83:df:4b:22:72:1c:8e:1a:d8:d2:1c:c3:72:
23:e9:3d:b4:78:88:0d:0f:a8:5c:c0:3c:61:bf:14:34:3d:20:
5c:f6:31:e0:9b:ed:4b:c8:6b:0a:c9:d6:fa:63:e5:a2:3d:f6:
d1:2f:f1:0b:ed:b6:8c:71:0d:c7:6b:b0:4c:4b:b2:9e:4e:ef:
c9:7a:aa:de:7e:5c:ae:ad:66:88:53:dc:57:4e:b9:ab:c9:8e:
83:90:ea:ea:b1:4d:db:21:5d:db:7d:40:f7:ba:02:72:27:e9:
4f:31:68:92:7c:05:d9:1d:de:a9:a3:93:46:69:0f:9e:99:2c:
36:dd:0e:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 05:48:37 2026 by rpki-client