Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/420c14-cb2c-4e3e-87b9-3fc39487807c/1/LIPfskYpwWd5NQtKd3tbKA_FnUQ.mft
File: LIPfskYpwWd5NQtKd3tbKA_FnUQ.mft (raw, json)
Hash identifier: 5cl2J3BA/YlL1d8wchLPd6NnmNlGyvHk3eDVIzPSXLc=
Subject key identifier: 1F:98:CC:D1:35:58:48:18:15:70:C5:DA:31:21:8A:D5:F7:D6:3F:FE
Authority key identifier: 2C:83:DF:B2:46:29:C1:67:79:35:0B:4A:77:7B:5B:28:0F:C5:9D:44
Certificate issuer: /CN=2c83dfb24629c16779350b4a777b5b280fc59d44
Certificate serial: 019EB9C5FD1A1283D42012D260B402096FFC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LIPfskYpwWd5NQtKd3tbKA_FnUQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/420c14-cb2c-4e3e-87b9-3fc39487807c/1/LIPfskYpwWd5NQtKd3tbKA_FnUQ.mft
Manifest number: 1958
Signing time: Fri 12 Jun 2026 03:00:20 +0000
Manifest this update: Fri 12 Jun 2026 03:00:20 +0000
Manifest next update: Sat 13 Jun 2026 03:00:20 +0000
Files and hashes: 1: LIPfskYpwWd5NQtKd3tbKA_FnUQ.crl (hash: zVjE/6GL3EBCOA/3V0Lh9LWGwOfcYOmsa2P1sV/3i0U=)
2: SizhTkIG2sATNsv1VQNzH4wHchc.roa (hash: 2PYBEpDEAGt3SnEGmQvvCFiLA489Fe6L2n4/O/hryFQ=)
3: cMMwTPV9hTcR-LW3CCNoNNI7ghU.roa (hash: D27oXJgFuXlMx0AdNp5xIFlLxsheQv6fczl4XU0D9Lc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/420c14-cb2c-4e3e-87b9-3fc39487807c/1/LIPfskYpwWd5NQtKd3tbKA_FnUQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/420c14-cb2c-4e3e-87b9-3fc39487807c/1/LIPfskYpwWd5NQtKd3tbKA_FnUQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/LIPfskYpwWd5NQtKd3tbKA_FnUQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 03:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b9:c5:fd:1a:12:83:d4:20:12:d2:60:b4:02:09:6f:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c83dfb24629c16779350b4a777b5b280fc59d44
Validity
Not Before: Jun 12 03:00:20 2026 GMT
Not After : Jun 13 03:00:20 2026 GMT
Subject: CN=1f98ccd1355848181570c5da31218ad5f7d63ffe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:ff:62:4a:69:c1:0e:1a:23:46:a5:0e:36:7b:
cc:e0:73:6a:bd:65:8e:33:a9:59:47:c6:9a:b1:3f:
26:e0:f3:8f:1b:00:06:9a:1d:93:85:4d:9c:4a:9e:
73:0a:fd:83:31:3b:e1:a3:7c:0a:6e:93:1b:18:be:
66:3d:91:e1:28:78:05:99:7e:2b:41:32:2d:3c:56:
21:3e:f3:a8:99:ea:fe:c7:c6:53:d2:d1:a0:b8:25:
db:9f:a8:7d:6c:d6:e2:f3:1e:8d:5e:de:77:a1:18:
aa:57:20:fb:9f:4a:fc:a2:73:cb:27:8c:66:46:23:
83:4d:e5:52:aa:12:c5:fd:b1:88:5e:8a:67:1d:59:
7d:2a:12:66:1a:d3:99:37:3b:9d:54:65:4e:79:d0:
88:e3:d0:15:18:90:27:9e:6a:77:d6:0e:ea:dd:a1:
24:48:4b:f4:5a:fa:59:ac:3b:f2:2c:fb:65:bf:88:
0e:b1:ef:c7:1e:4b:87:61:e2:ee:b7:1f:14:9f:91:
c5:73:ba:97:dd:b9:de:66:73:27:97:24:cf:48:e6:
d9:52:19:77:b6:50:77:9b:e6:28:f9:d9:ca:ef:2c:
35:5c:e6:68:49:99:43:2d:cf:a1:fc:f2:fe:c6:c6:
56:73:e8:e7:fc:76:cf:dd:19:55:97:4b:cb:89:70:
a0:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:98:CC:D1:35:58:48:18:15:70:C5:DA:31:21:8A:D5:F7:D6:3F:FE
X509v3 Authority Key Identifier:
keyid:2C:83:DF:B2:46:29:C1:67:79:35:0B:4A:77:7B:5B:28:0F:C5:9D:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LIPfskYpwWd5NQtKd3tbKA_FnUQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/420c14-cb2c-4e3e-87b9-3fc39487807c/1/LIPfskYpwWd5NQtKd3tbKA_FnUQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/420c14-cb2c-4e3e-87b9-3fc39487807c/1/LIPfskYpwWd5NQtKd3tbKA_FnUQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:d3:f2:f7:cd:71:d2:8d:5a:d3:6f:80:cb:05:16:7e:c9:90:
58:97:03:8f:14:77:ef:be:c9:72:67:2b:00:1c:65:3f:59:a5:
25:57:e2:4b:86:dc:ac:56:5e:c2:35:a4:84:d1:8a:99:d8:ce:
bf:ef:c5:c7:d9:aa:71:62:76:98:1c:b7:4b:24:17:2e:59:85:
0f:97:d3:7e:4c:fd:86:eb:78:c0:91:2d:fd:a4:47:9f:17:ba:
3c:af:6c:a9:3f:24:64:25:aa:de:00:0f:90:c0:64:ee:0a:8c:
9d:6f:b7:b1:da:a7:f4:61:12:f4:af:d9:b6:1f:ec:90:35:48:
24:9d:f2:f0:5d:b0:fd:07:f6:56:82:5f:ce:ba:62:3a:40:9b:
11:19:0b:86:0b:11:63:c4:9e:2e:98:84:62:da:3d:f4:57:61:
34:37:c9:eb:c1:8e:bc:8d:13:59:6e:b8:4d:06:6c:9c:a0:d2:
f3:05:0e:2a:1a:86:9a:4f:1c:45:06:45:26:a1:cc:5f:9e:17:
5b:01:07:42:be:3d:67:f7:23:bc:cb:4d:f2:ff:21:32:f5:a4:
0f:db:2f:23:9a:70:7c:08:28:56:d2:eb:47:ab:be:18:be:c4:
aa:fc:84:c3:e9:5b:fc:02:be:9f:e8:21:46:07:88:59:7d:f4:
84:f7:44:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 08:28:29 2026 by rpki-client