Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0a/420c14-cb2c-4e3e-87b9-3fc39487807c/1/LIPfskYpwWd5NQtKd3tbKA_FnUQ.mft
File: LIPfskYpwWd5NQtKd3tbKA_FnUQ.mft (raw, json)
Hash identifier: ND3+bIOEsxUEhQyQBjHFilqqZd+thEaidQ7tmn6g3po=
Subject key identifier: C8:44:27:8C:60:23:B5:87:E4:81:21:2B:6C:C8:19:8E:2E:4F:62:B4
Authority key identifier: 2C:83:DF:B2:46:29:C1:67:79:35:0B:4A:77:7B:5B:28:0F:C5:9D:44
Certificate issuer: /CN=2c83dfb24629c16779350b4a777b5b280fc59d44
Certificate serial: 01A08B3189CC60AA530639599E7FE51BE67F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LIPfskYpwWd5NQtKd3tbKA_FnUQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/420c14-cb2c-4e3e-87b9-3fc39487807c/1/LIPfskYpwWd5NQtKd3tbKA_FnUQ.mft
Manifest number: 1A49
Signing time: Thu 10 Sep 2026 12:01:14 +0000
Manifest this update: Thu 10 Sep 2026 12:01:14 +0000
Manifest next update: Fri 11 Sep 2026 12:01:14 +0000
Files and hashes: 1: LIPfskYpwWd5NQtKd3tbKA_FnUQ.crl (hash: kZ7dRN/kfjsCvhjXT0XDXvgryztbix+hFmZHb4UraYw=)
2: SizhTkIG2sATNsv1VQNzH4wHchc.roa (hash: 2PYBEpDEAGt3SnEGmQvvCFiLA489Fe6L2n4/O/hryFQ=)
3: cMMwTPV9hTcR-LW3CCNoNNI7ghU.roa (hash: D27oXJgFuXlMx0AdNp5xIFlLxsheQv6fczl4XU0D9Lc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/420c14-cb2c-4e3e-87b9-3fc39487807c/1/LIPfskYpwWd5NQtKd3tbKA_FnUQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/420c14-cb2c-4e3e-87b9-3fc39487807c/1/LIPfskYpwWd5NQtKd3tbKA_FnUQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/LIPfskYpwWd5NQtKd3tbKA_FnUQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 12:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8b:31:89:cc:60:aa:53:06:39:59:9e:7f:e5:1b:e6:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c83dfb24629c16779350b4a777b5b280fc59d44
Validity
Not Before: Sep 10 12:01:14 2026 GMT
Not After : Sep 11 12:01:14 2026 GMT
Subject: CN=c844278c6023b587e481212b6cc8198e2e4f62b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:44:5c:cb:54:18:8d:8f:01:05:a2:29:87:ca:
c8:a5:49:79:8d:68:ed:d6:2c:6a:f5:dc:b3:65:cf:
a4:ae:4a:2a:34:c9:0d:93:f3:b9:4a:c1:4d:dd:cb:
5f:ae:cf:ea:f6:24:fe:09:38:c2:2f:d4:c9:c8:7f:
a7:a6:98:9f:16:47:e5:35:e7:52:75:ff:ec:79:e5:
e5:f8:38:cd:c1:b0:1d:d8:6d:66:4e:ea:c7:1d:93:
a9:5f:43:6f:0c:0b:fe:23:db:d8:7a:d3:3d:7b:1a:
9c:14:39:25:d7:50:85:0f:36:c5:aa:e1:78:36:26:
e7:3f:d9:46:8a:d1:80:d8:bf:b7:e0:d7:81:2c:0a:
4e:2e:7a:7f:22:71:95:1c:30:01:2b:b2:4b:e1:80:
3b:3e:4b:f9:76:df:c8:34:b0:c8:c6:9c:0e:d3:59:
1a:7e:3e:4a:c9:5d:fb:63:9b:c3:af:a7:b0:33:76:
2d:d5:d9:f7:2c:2b:4d:49:66:f0:a0:2f:2d:59:0b:
6c:4e:ef:4a:4b:c1:ca:b2:73:ca:e1:d3:fa:1a:8d:
ee:f8:84:06:47:23:08:50:39:7c:da:7c:fc:cc:14:
a9:fa:96:78:9a:0b:56:67:d1:4a:e3:a3:79:03:ea:
8b:14:0d:da:5f:09:7d:7e:75:29:f4:cf:c0:c4:21:
75:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:44:27:8C:60:23:B5:87:E4:81:21:2B:6C:C8:19:8E:2E:4F:62:B4
X509v3 Authority Key Identifier:
keyid:2C:83:DF:B2:46:29:C1:67:79:35:0B:4A:77:7B:5B:28:0F:C5:9D:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LIPfskYpwWd5NQtKd3tbKA_FnUQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/420c14-cb2c-4e3e-87b9-3fc39487807c/1/LIPfskYpwWd5NQtKd3tbKA_FnUQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/420c14-cb2c-4e3e-87b9-3fc39487807c/1/LIPfskYpwWd5NQtKd3tbKA_FnUQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:d7:3f:b1:b7:24:0a:33:0b:65:ee:98:5a:5f:c2:a2:86:2d:
ad:df:05:48:26:7f:da:eb:fb:ec:1e:a0:74:40:6f:d5:f7:16:
30:42:1d:84:75:6f:4e:fd:85:f7:07:8a:93:5e:6d:1e:32:e8:
2d:77:57:c6:1f:cd:84:b5:fb:e7:ed:f7:00:6f:96:12:d1:1e:
af:53:64:4c:ca:ab:09:d8:3e:96:b3:c9:0e:a1:d9:a8:08:63:
d2:ad:35:2a:39:b8:34:aa:72:83:09:b8:ed:22:f6:b3:58:7d:
1d:13:db:30:fb:49:0f:06:b0:26:c5:47:44:06:db:df:07:f6:
9a:10:82:5a:47:75:b3:a6:13:cf:67:28:77:66:7d:65:4d:fa:
fd:33:2a:20:a6:29:24:a3:8f:6f:8b:dc:2b:e1:6d:be:0c:8d:
2b:ae:2b:43:d9:28:22:62:da:09:27:8c:fe:db:16:80:46:29:
b2:d3:df:ea:97:13:a1:23:62:44:2c:25:ea:4b:4d:78:0e:4f:
76:d5:bb:37:12:72:40:24:6d:91:99:66:3e:d4:fe:0d:dc:e4:
fc:9f:67:6f:a5:d8:1a:2e:ce:ed:1d:c1:77:28:61:ef:35:6c:
45:b2:c2:ca:16:e6:f0:2e:6b:45:d5:ef:00:61:cc:f1:52:2a:
0b:95:80:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 20:30:58 2026 by rpki-client