Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0f/ca2213-e5a1-4ad2-8a22-768d3fb08e70/1/LPYTYxWlLVJHEkt882mq-4MSIn4.mft
File: LPYTYxWlLVJHEkt882mq-4MSIn4.mft (raw, json)
Hash identifier: xucNl7RIFNhaR1JAo7zRi8g58RWGxBZfNkwt+2VkT0c=
Subject key identifier: 92:1E:7B:C8:50:B9:89:BA:90:0C:34:F6:68:09:42:5B:B0:87:6B:EA
Authority key identifier: 2C:F6:13:63:15:A5:2D:52:47:12:4B:7C:F3:69:AA:FB:83:12:22:7E
Certificate issuer: /CN=2cf6136315a52d5247124b7cf369aafb8312227e
Certificate serial: 01A15E558E534C58E308806453C1F0EE2880
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LPYTYxWlLVJHEkt882mq-4MSIn4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/ca2213-e5a1-4ad2-8a22-768d3fb08e70/1/LPYTYxWlLVJHEkt882mq-4MSIn4.mft
Manifest number: 10BA
Signing time: Wed 21 Oct 2026 12:00:27 +0000
Manifest this update: Wed 21 Oct 2026 12:00:27 +0000
Manifest next update: Thu 22 Oct 2026 12:00:27 +0000
Files and hashes: 1: LPYTYxWlLVJHEkt882mq-4MSIn4.crl (hash: 9f1zoGpdjO6vvaglpSVpEVRGRImYOcFSsUadXyedOHc=)
2: r45G67-96LJpADDZJVJ0gLKO_X4.roa (hash: xLucZhj5eosliNF0R5ZBpKqpdmf4rFaViGwVRkuYRmo=)
3: u7gow9KmygGFJud8Kbx8Q5bXl10.roa (hash: zOMjeXXBLvQlEvulfQkHinq9NE+I+uXsiNr8CDWlugI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/ca2213-e5a1-4ad2-8a22-768d3fb08e70/1/LPYTYxWlLVJHEkt882mq-4MSIn4.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/ca2213-e5a1-4ad2-8a22-768d3fb08e70/1/LPYTYxWlLVJHEkt882mq-4MSIn4.mft
rsync://rpki.ripe.net/repository/DEFAULT/LPYTYxWlLVJHEkt882mq-4MSIn4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 22 Oct 2026 12:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:5e:55:8e:53:4c:58:e3:08:80:64:53:c1:f0:ee:28:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2cf6136315a52d5247124b7cf369aafb8312227e
Validity
Not Before: Oct 21 12:00:27 2026 GMT
Not After : Oct 22 12:00:27 2026 GMT
Subject: CN=921e7bc850b989ba900c34f66809425bb0876bea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:21:ce:90:8f:ba:9f:b0:6c:45:53:20:59:22:
b6:61:52:5d:97:5f:7e:ef:5c:c1:7b:9f:fb:7d:b3:
93:94:d0:66:b1:11:7b:06:9d:9a:a4:ae:81:bb:c7:
9d:0e:96:a0:82:d6:f4:ed:5b:f5:9b:41:1a:98:9d:
47:ec:87:79:72:15:70:25:d5:bf:32:7d:d0:99:39:
2d:96:33:60:a5:0a:2b:e0:12:03:e5:b4:a9:9d:e8:
98:a3:ee:5e:23:05:e9:bc:a9:a3:c4:f7:10:31:e6:
f0:2f:d9:b9:62:82:6b:f8:18:e7:7c:78:08:9b:de:
7c:d5:db:8b:db:94:a7:2a:d7:3c:a3:75:92:62:c6:
5c:e6:97:fc:ef:7e:c5:b2:d1:39:b6:98:d8:77:4f:
11:31:0e:9e:92:86:58:a7:d1:bf:ee:c4:0d:81:07:
15:c3:12:07:85:8b:78:2d:12:71:09:07:51:99:86:
c6:be:7e:e7:3f:23:23:32:c5:35:01:59:32:1a:ad:
30:27:9b:56:8a:c4:ec:12:9c:55:c5:bc:21:13:c0:
4d:06:06:8f:53:e2:e2:44:d1:85:d2:df:4a:f9:90:
02:28:07:6f:44:82:c6:31:20:e9:9f:42:84:6d:b8:
76:71:3e:a6:f0:24:ea:b0:95:4d:37:9d:e6:3b:47:
a3:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:1E:7B:C8:50:B9:89:BA:90:0C:34:F6:68:09:42:5B:B0:87:6B:EA
X509v3 Authority Key Identifier:
keyid:2C:F6:13:63:15:A5:2D:52:47:12:4B:7C:F3:69:AA:FB:83:12:22:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LPYTYxWlLVJHEkt882mq-4MSIn4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/ca2213-e5a1-4ad2-8a22-768d3fb08e70/1/LPYTYxWlLVJHEkt882mq-4MSIn4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/ca2213-e5a1-4ad2-8a22-768d3fb08e70/1/LPYTYxWlLVJHEkt882mq-4MSIn4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:07:6d:4a:fa:9f:da:63:4c:d6:77:ba:8a:17:68:74:f2:99:
ea:04:d6:0f:2f:c4:5a:0d:c3:7f:f1:9d:49:d2:9d:46:76:42:
e1:9c:47:56:5b:fb:63:5a:3a:48:8d:13:e4:b7:cf:c4:f8:b0:
c6:e9:2c:08:16:39:49:dc:bf:17:c6:a7:3b:23:09:93:d5:04:
54:32:c9:78:0e:f8:7f:83:74:df:50:44:63:23:07:a3:92:cd:
86:0e:a0:28:7d:a1:ee:e6:a2:ec:94:f3:41:8f:e4:38:c6:d8:
a2:81:67:fa:26:e5:92:7a:0f:a7:ce:9d:7b:16:ee:f5:86:67:
65:4b:c4:d4:5a:8d:bf:3e:8c:10:98:b0:c5:b7:50:af:1c:9c:
fa:a4:38:62:9f:db:1c:2d:66:8e:e2:de:e9:9c:23:3d:ad:fb:
62:11:b4:24:b6:1e:01:b5:2f:42:e9:37:f3:b4:f3:1e:d1:fe:
c5:ce:f8:53:67:e1:2f:06:96:3e:05:e6:a2:7a:c2:4d:ca:fd:
b9:88:c4:93:8e:12:5a:cf:c5:41:b6:bc:5e:61:6a:c3:8b:70:
31:1c:ec:58:24:39:b6:11:c5:64:e5:54:0d:ba:12:68:7d:1c:
ee:09:a9:56:80:8b:56:38:9c:ee:fd:7b:70:65:39:74:53:39:
71:88:c6:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 21 21:09:02 2026 by rpki-client