Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/ca2213-e5a1-4ad2-8a22-768d3fb08e70/1/LPYTYxWlLVJHEkt882mq-4MSIn4.mft
File: LPYTYxWlLVJHEkt882mq-4MSIn4.mft (raw, json)
Hash identifier: m8+ux9TtVMFVAV0erjmq4mF8YY7XFTVMkyGSTFgF/GU=
Subject key identifier: DA:86:5C:60:97:6C:B1:B9:20:CE:2E:12:4B:82:CD:4F:21:01:F2:CC
Authority key identifier: 2C:F6:13:63:15:A5:2D:52:47:12:4B:7C:F3:69:AA:FB:83:12:22:7E
Certificate issuer: /CN=2cf6136315a52d5247124b7cf369aafb8312227e
Certificate serial: 019DD49BE1FA235314C2B1727871674896AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LPYTYxWlLVJHEkt882mq-4MSIn4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/ca2213-e5a1-4ad2-8a22-768d3fb08e70/1/LPYTYxWlLVJHEkt882mq-4MSIn4.mft
Manifest number: 0EE5
Signing time: Tue 28 Apr 2026 15:01:18 +0000
Manifest this update: Tue 28 Apr 2026 15:01:18 +0000
Manifest next update: Wed 29 Apr 2026 15:01:18 +0000
Files and hashes: 1: LPYTYxWlLVJHEkt882mq-4MSIn4.crl (hash: RQQzluIo8JV1EnGAbhhkReV3Zhga2/qEhJq5zgN2HhQ=)
2: r45G67-96LJpADDZJVJ0gLKO_X4.roa (hash: xLucZhj5eosliNF0R5ZBpKqpdmf4rFaViGwVRkuYRmo=)
3: u7gow9KmygGFJud8Kbx8Q5bXl10.roa (hash: zOMjeXXBLvQlEvulfQkHinq9NE+I+uXsiNr8CDWlugI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/ca2213-e5a1-4ad2-8a22-768d3fb08e70/1/LPYTYxWlLVJHEkt882mq-4MSIn4.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/ca2213-e5a1-4ad2-8a22-768d3fb08e70/1/LPYTYxWlLVJHEkt882mq-4MSIn4.mft
rsync://rpki.ripe.net/repository/DEFAULT/LPYTYxWlLVJHEkt882mq-4MSIn4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Apr 2026 14:21:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:d4:9b:e1:fa:23:53:14:c2:b1:72:78:71:67:48:96:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2cf6136315a52d5247124b7cf369aafb8312227e
Validity
Not Before: Apr 28 15:01:18 2026 GMT
Not After : Apr 29 15:01:18 2026 GMT
Subject: CN=da865c60976cb1b920ce2e124b82cd4f2101f2cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:14:eb:3d:b0:b9:1b:6e:05:4e:d6:72:cc:f2:
b3:77:72:91:c0:ed:db:14:ff:4c:e5:46:1a:d6:6d:
04:a7:97:0f:36:84:65:d0:9e:f2:36:e3:d8:ac:7f:
43:0b:70:e1:9b:e7:4d:bf:d6:fd:30:cc:3b:9d:76:
fd:18:9b:8d:3f:7a:c8:ce:15:20:6f:48:29:67:9d:
e6:d6:24:31:60:14:0b:41:e0:cd:c7:8e:97:cb:24:
ca:a7:fc:ad:09:68:13:65:37:1c:17:de:be:e9:3f:
88:0c:d7:d8:47:dd:e6:f2:e9:67:55:bb:f4:91:2e:
41:d1:78:47:ec:0e:36:e7:55:90:7c:61:32:e7:b9:
6a:a5:b9:f1:cb:5b:8b:8c:30:10:5f:22:9a:85:39:
d4:6e:82:29:d2:1b:e4:b9:f9:e3:fd:b7:1e:2e:a7:
e2:fc:3e:eb:2a:fe:4a:37:2b:f5:e0:b7:1b:ae:12:
f9:5c:2e:c2:5f:b6:fe:e8:22:7c:2a:2b:71:f7:d9:
31:b1:29:dc:05:a2:15:88:e5:36:46:b4:32:fe:31:
4b:2a:8b:00:b0:c7:de:5b:da:8f:19:54:e0:eb:f1:
cd:b1:ab:83:22:3d:e7:48:e5:ee:c6:8d:07:3a:05:
96:99:06:07:37:3f:fa:85:3d:b2:4c:fb:c3:68:f6:
b7:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:86:5C:60:97:6C:B1:B9:20:CE:2E:12:4B:82:CD:4F:21:01:F2:CC
X509v3 Authority Key Identifier:
keyid:2C:F6:13:63:15:A5:2D:52:47:12:4B:7C:F3:69:AA:FB:83:12:22:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LPYTYxWlLVJHEkt882mq-4MSIn4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/ca2213-e5a1-4ad2-8a22-768d3fb08e70/1/LPYTYxWlLVJHEkt882mq-4MSIn4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/ca2213-e5a1-4ad2-8a22-768d3fb08e70/1/LPYTYxWlLVJHEkt882mq-4MSIn4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:7e:94:d5:e0:cc:d3:15:bc:d9:a7:ef:12:fb:6d:81:a8:a1:
f5:f4:44:14:b8:b8:e1:05:92:0a:a6:d8:66:6f:cf:32:45:17:
fb:4b:86:2a:c6:da:4e:e3:3c:f3:96:98:b1:dc:a5:01:6b:ac:
3d:ac:c5:b9:53:bc:19:f6:2f:64:94:74:36:f1:56:5c:c5:cd:
92:63:14:cc:07:02:a7:f3:61:81:f7:46:d2:01:80:b7:c4:bf:
f6:c7:87:8a:bf:55:3d:d8:24:91:ea:09:b1:f5:8e:f4:16:b7:
fb:13:c9:e1:69:8a:f7:46:07:d2:cb:83:0a:c8:ab:db:73:8d:
d6:2b:7c:4f:f6:51:67:5f:ca:7e:6d:49:dc:99:bd:08:eb:01:
df:42:68:c2:e3:4e:f5:0e:98:8d:e7:a7:cf:88:57:73:c8:6a:
1f:36:ad:57:fc:c9:01:d8:7f:18:59:35:b6:76:6a:55:7a:62:
35:ed:67:41:62:4b:58:a9:bc:20:13:ff:4e:70:21:d0:c1:da:
95:c7:d3:47:d7:67:87:8d:78:2f:c6:7f:e9:35:80:e0:ec:03:
4b:6e:a1:bd:c4:b7:67:95:d6:1a:aa:5c:23:a9:7b:f6:84:87:
28:2e:11:8f:79:b3:70:91:fa:e4:10:61:30:e9:31:5e:31:ea:
df:78:98:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 28 23:59:17 2026 by rpki-client