Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/420c14-cb2c-4e3e-87b9-3fc39487807c/1/LIPfskYpwWd5NQtKd3tbKA_FnUQ.mft
File: LIPfskYpwWd5NQtKd3tbKA_FnUQ.mft (raw, json)
Hash identifier: ly7KuLzfrtAWVU98zZM9gxYorEbl+8dSdTM01gxG9FI=
Subject key identifier: E3:2C:06:FF:B0:B6:8F:60:9A:6C:1B:21:F6:01:12:D1:95:9F:41:38
Authority key identifier: 2C:83:DF:B2:46:29:C1:67:79:35:0B:4A:77:7B:5B:28:0F:C5:9D:44
Certificate issuer: /CN=2c83dfb24629c16779350b4a777b5b280fc59d44
Certificate serial: 019DD019AED9376459F37B6630E97EE8AA31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LIPfskYpwWd5NQtKd3tbKA_FnUQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/420c14-cb2c-4e3e-87b9-3fc39487807c/1/LIPfskYpwWd5NQtKd3tbKA_FnUQ.mft
Manifest number: 18DF
Signing time: Mon 27 Apr 2026 18:00:37 +0000
Manifest this update: Mon 27 Apr 2026 18:00:37 +0000
Manifest next update: Tue 28 Apr 2026 18:00:37 +0000
Files and hashes: 1: LIPfskYpwWd5NQtKd3tbKA_FnUQ.crl (hash: IQIy3YejBMF/P9w5Y246aP0kP1cNWSEz3O57F6it2tA=)
2: SizhTkIG2sATNsv1VQNzH4wHchc.roa (hash: 2PYBEpDEAGt3SnEGmQvvCFiLA489Fe6L2n4/O/hryFQ=)
3: cMMwTPV9hTcR-LW3CCNoNNI7ghU.roa (hash: D27oXJgFuXlMx0AdNp5xIFlLxsheQv6fczl4XU0D9Lc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/420c14-cb2c-4e3e-87b9-3fc39487807c/1/LIPfskYpwWd5NQtKd3tbKA_FnUQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/420c14-cb2c-4e3e-87b9-3fc39487807c/1/LIPfskYpwWd5NQtKd3tbKA_FnUQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/LIPfskYpwWd5NQtKd3tbKA_FnUQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 17:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:d0:19:ae:d9:37:64:59:f3:7b:66:30:e9:7e:e8:aa:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c83dfb24629c16779350b4a777b5b280fc59d44
Validity
Not Before: Apr 27 18:00:37 2026 GMT
Not After : Apr 28 18:00:37 2026 GMT
Subject: CN=e32c06ffb0b68f609a6c1b21f60112d1959f4138
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:99:c7:a3:ab:5c:b0:ec:45:78:eb:c2:50:ad:
97:75:8d:87:c4:8f:b4:d7:74:23:66:ee:38:3f:91:
fc:ba:49:6c:92:83:d3:90:76:ab:66:13:41:f1:ce:
4e:2c:d7:d8:38:c3:c8:b2:8d:8e:f5:35:06:54:47:
7f:3a:f6:13:8a:78:c0:89:33:76:48:0c:85:ce:47:
0e:f6:c4:8a:9a:fc:29:76:98:e4:76:8a:b1:80:5b:
0e:75:f2:43:a4:4a:e5:e5:5a:ff:e5:fe:d7:4b:a6:
7c:f3:8e:7d:da:b5:f2:81:2a:cc:c5:45:87:f0:f3:
1f:b1:3f:43:94:c9:96:ec:b6:30:9e:65:86:b8:63:
97:8c:2e:4b:07:6e:e5:8b:b1:53:e5:76:ef:0e:4a:
61:68:6a:d4:56:1b:20:28:47:19:81:7d:59:ef:12:
f9:15:b7:41:d7:2b:a9:33:0c:92:0f:df:2f:57:89:
02:9d:e3:58:ae:13:ef:32:9b:2c:f4:5a:13:79:23:
73:b6:a1:85:13:cc:07:64:ff:0e:89:a0:ab:02:09:
4c:7e:42:ad:84:ae:90:8d:08:3c:96:14:02:e2:e4:
3b:e7:66:7e:cf:c1:43:07:72:cb:48:20:5c:fb:25:
5a:a2:ce:f1:4b:ed:ec:56:85:8c:84:b8:c5:e1:d7:
b7:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:2C:06:FF:B0:B6:8F:60:9A:6C:1B:21:F6:01:12:D1:95:9F:41:38
X509v3 Authority Key Identifier:
keyid:2C:83:DF:B2:46:29:C1:67:79:35:0B:4A:77:7B:5B:28:0F:C5:9D:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LIPfskYpwWd5NQtKd3tbKA_FnUQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/420c14-cb2c-4e3e-87b9-3fc39487807c/1/LIPfskYpwWd5NQtKd3tbKA_FnUQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/420c14-cb2c-4e3e-87b9-3fc39487807c/1/LIPfskYpwWd5NQtKd3tbKA_FnUQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:a5:d4:5b:1a:ed:b6:14:1b:a1:f4:97:43:e9:fb:59:3f:cb:
e1:13:86:66:cf:ac:f3:5d:e8:30:6a:27:17:02:45:11:32:3f:
7d:6d:d7:bf:b5:39:5c:25:3b:ce:8f:e8:37:6c:c6:68:51:fc:
35:cf:a7:8b:d3:cd:3c:a5:5e:54:8d:08:d6:75:6d:39:63:6a:
75:7f:0d:67:9a:ec:4e:28:41:be:46:75:4c:f3:65:ce:5f:bc:
05:9e:da:b0:28:a8:93:1a:b1:29:10:cb:e8:4e:cd:0c:05:ba:
12:65:05:c2:36:d6:b3:ed:b3:d7:d2:5b:6b:0b:7d:02:3b:ba:
00:c2:47:4e:70:6b:39:05:11:79:2e:51:cf:5e:cf:42:22:8a:
40:ae:c0:e7:6a:4d:bd:3b:68:55:c2:3b:42:3b:ef:3b:ca:a9:
f6:49:72:24:20:50:53:6e:b8:12:64:dc:eb:09:d6:9c:c0:fd:
05:c2:df:45:85:6a:49:dc:e8:c3:b4:92:85:8e:68:33:b0:a1:
11:cf:f8:e1:fd:87:8d:65:42:20:75:c5:04:ef:0c:f4:49:68:
b6:c4:99:cc:12:4d:4d:6e:47:65:84:d4:b5:66:15:c4:92:13:
7f:04:be:39:51:b6:ee:66:48:98:4d:68:07:9b:54:b1:ae:88:
64:2d:56:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 22:29:20 2026 by rpki-client