Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/420c14-cb2c-4e3e-87b9-3fc39487807c/1/LIPfskYpwWd5NQtKd3tbKA_FnUQ.mft
File: LIPfskYpwWd5NQtKd3tbKA_FnUQ.mft (raw, json)
Hash identifier: +2a0kn470N9DGW8mhG0bFv5qWZaW9PdH1dxhL+VtMZ4=
Subject key identifier: 96:7D:F0:24:86:C2:5B:91:76:76:61:A1:EF:7A:9C:62:93:C9:8D:BE
Authority key identifier: 2C:83:DF:B2:46:29:C1:67:79:35:0B:4A:77:7B:5B:28:0F:C5:9D:44
Certificate issuer: /CN=2c83dfb24629c16779350b4a777b5b280fc59d44
Certificate serial: 019CE66D85343786172632B7E9A5BC8DBA75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LIPfskYpwWd5NQtKd3tbKA_FnUQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/420c14-cb2c-4e3e-87b9-3fc39487807c/1/LIPfskYpwWd5NQtKd3tbKA_FnUQ.mft
Manifest number: 1866
Signing time: Fri 13 Mar 2026 09:01:02 +0000
Manifest this update: Fri 13 Mar 2026 09:01:02 +0000
Manifest next update: Sat 14 Mar 2026 09:01:02 +0000
Files and hashes: 1: LIPfskYpwWd5NQtKd3tbKA_FnUQ.crl (hash: 0tepxRn139XRdtNGtVJhLSYOWYYaxX3dc3qVx992M2U=)
2: SizhTkIG2sATNsv1VQNzH4wHchc.roa (hash: 2PYBEpDEAGt3SnEGmQvvCFiLA489Fe6L2n4/O/hryFQ=)
3: cMMwTPV9hTcR-LW3CCNoNNI7ghU.roa (hash: D27oXJgFuXlMx0AdNp5xIFlLxsheQv6fczl4XU0D9Lc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/420c14-cb2c-4e3e-87b9-3fc39487807c/1/LIPfskYpwWd5NQtKd3tbKA_FnUQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/420c14-cb2c-4e3e-87b9-3fc39487807c/1/LIPfskYpwWd5NQtKd3tbKA_FnUQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/LIPfskYpwWd5NQtKd3tbKA_FnUQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 09:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e6:6d:85:34:37:86:17:26:32:b7:e9:a5:bc:8d:ba:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c83dfb24629c16779350b4a777b5b280fc59d44
Validity
Not Before: Mar 13 09:01:02 2026 GMT
Not After : Mar 14 09:01:02 2026 GMT
Subject: CN=967df02486c25b91767661a1ef7a9c6293c98dbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:67:e2:9c:c1:4c:f4:aa:47:85:8a:31:e2:6a:
53:cb:d2:79:4d:be:d3:b1:38:b8:2c:70:fe:71:a8:
30:3f:7f:59:b1:df:37:a9:4b:1c:84:ef:d4:ea:67:
88:29:44:c5:c6:61:a8:4e:98:7f:f4:4b:fb:05:fb:
71:69:31:40:ff:9e:00:b9:0d:ed:2a:06:7a:62:2b:
41:b3:98:34:7a:01:ee:91:75:49:26:f2:78:60:67:
4b:3a:c0:22:93:d4:62:b0:6c:fa:8b:ce:48:0e:ec:
12:9e:2e:ed:f9:61:88:90:06:ff:f9:fe:23:cd:81:
29:a6:c2:57:ac:f0:e9:35:f3:b2:de:d8:8b:54:a1:
31:50:f1:11:59:29:5e:55:15:10:1f:0b:a5:9d:cb:
e3:4d:77:a8:ea:9b:cb:00:29:d7:b6:73:66:e4:ee:
aa:6b:d8:9a:64:e2:db:dc:9a:67:48:67:2e:90:5f:
28:33:ec:84:48:27:9e:e2:fd:05:98:f7:89:ea:1f:
b3:66:06:ad:15:58:d0:97:09:8d:e4:3b:21:11:01:
fb:7d:ac:79:1a:6e:0f:c1:7c:03:5c:1a:1d:28:d9:
ac:b3:a9:9f:0c:c1:87:8b:2b:00:50:d4:f3:54:09:
90:d7:65:d8:2d:60:d3:ac:a2:e9:38:31:84:3c:3e:
62:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:7D:F0:24:86:C2:5B:91:76:76:61:A1:EF:7A:9C:62:93:C9:8D:BE
X509v3 Authority Key Identifier:
keyid:2C:83:DF:B2:46:29:C1:67:79:35:0B:4A:77:7B:5B:28:0F:C5:9D:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LIPfskYpwWd5NQtKd3tbKA_FnUQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/420c14-cb2c-4e3e-87b9-3fc39487807c/1/LIPfskYpwWd5NQtKd3tbKA_FnUQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/420c14-cb2c-4e3e-87b9-3fc39487807c/1/LIPfskYpwWd5NQtKd3tbKA_FnUQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:0b:d9:9b:25:fc:57:55:71:3b:bd:e8:be:a7:e6:c9:f0:eb:
59:61:0e:5f:e8:b4:22:7f:b0:15:ed:83:9c:fb:ee:14:da:7a:
7c:1b:66:56:4f:3c:d4:16:42:52:9b:b8:58:50:01:4a:19:68:
45:e4:a2:0f:62:38:f0:8c:56:dd:c2:25:06:d1:b4:a9:66:4c:
40:9a:e3:07:49:34:a1:14:3d:f7:63:9e:21:f1:d2:72:c0:45:
f4:38:a7:39:f4:1b:a4:98:23:8e:ec:50:fe:34:b3:bc:9b:4e:
28:26:90:2b:11:44:d5:ea:ab:7d:29:d4:59:59:d0:70:6a:15:
d8:22:35:fc:92:9d:a5:f5:83:53:ea:22:02:a7:a4:b0:e9:c0:
69:4d:a3:6f:1d:4e:8d:c9:d0:08:0a:35:f3:8a:9a:a4:30:82:
6c:f3:59:c4:fc:c6:0f:bc:76:c3:13:11:d1:64:62:7d:73:a3:
9a:7b:f2:b5:77:da:76:4d:76:a1:b3:97:c5:1d:e2:bc:95:64:
14:f5:e9:9d:23:da:4c:37:ef:10:be:7a:cd:76:2d:65:00:27:
6b:7b:cf:18:15:d7:19:2e:fe:2f:62:ce:fd:39:7c:f2:23:19:
e1:80:01:2c:7c:b4:18:b0:5b:3c:eb:21:6e:ae:d0:8c:4d:cd:
e8:0f:47:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 14:30:00 2026 by rpki-client