Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0f/ca2213-e5a1-4ad2-8a22-768d3fb08e70/1/LPYTYxWlLVJHEkt882mq-4MSIn4.mft
File: LPYTYxWlLVJHEkt882mq-4MSIn4.mft (raw, json)
Hash identifier: qxsVs/FJ+uFQjPLMTMMRwrixLQvsSweX8/B4BgOTcpA=
Subject key identifier: FF:0D:C4:F1:A3:FC:ED:B5:21:99:21:9F:71:29:08:95:43:71:76:09
Authority key identifier: 2C:F6:13:63:15:A5:2D:52:47:12:4B:7C:F3:69:AA:FB:83:12:22:7E
Certificate issuer: /CN=2cf6136315a52d5247124b7cf369aafb8312227e
Certificate serial: 01A15C6758BADC4DB8C5F376E7B03CA0ECA1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LPYTYxWlLVJHEkt882mq-4MSIn4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/ca2213-e5a1-4ad2-8a22-768d3fb08e70/1/LPYTYxWlLVJHEkt882mq-4MSIn4.mft
Manifest number: 10B9
Signing time: Wed 21 Oct 2026 03:00:39 +0000
Manifest this update: Wed 21 Oct 2026 03:00:39 +0000
Manifest next update: Thu 22 Oct 2026 03:00:39 +0000
Files and hashes: 1: LPYTYxWlLVJHEkt882mq-4MSIn4.crl (hash: lkrrK0Mt/q6U3ss0urZRE98KSz5FM6frMgKwRWXGJg4=)
2: r45G67-96LJpADDZJVJ0gLKO_X4.roa (hash: xLucZhj5eosliNF0R5ZBpKqpdmf4rFaViGwVRkuYRmo=)
3: u7gow9KmygGFJud8Kbx8Q5bXl10.roa (hash: zOMjeXXBLvQlEvulfQkHinq9NE+I+uXsiNr8CDWlugI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/ca2213-e5a1-4ad2-8a22-768d3fb08e70/1/LPYTYxWlLVJHEkt882mq-4MSIn4.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/ca2213-e5a1-4ad2-8a22-768d3fb08e70/1/LPYTYxWlLVJHEkt882mq-4MSIn4.mft
rsync://rpki.ripe.net/repository/DEFAULT/LPYTYxWlLVJHEkt882mq-4MSIn4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 22 Oct 2026 02:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:5c:67:58:ba:dc:4d:b8:c5:f3:76:e7:b0:3c:a0:ec:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2cf6136315a52d5247124b7cf369aafb8312227e
Validity
Not Before: Oct 21 03:00:39 2026 GMT
Not After : Oct 22 03:00:39 2026 GMT
Subject: CN=ff0dc4f1a3fcedb52199219f7129089543717609
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:23:cc:ed:cc:57:43:b1:ca:a4:26:5b:b9:fa:
6e:4d:e9:85:20:a1:9d:a6:1a:64:18:d0:a4:9f:88:
81:43:48:b8:c8:78:73:da:09:26:d0:9e:d1:52:a6:
b1:c9:15:ae:1f:fc:c0:78:5f:a4:f4:9a:2c:c0:34:
f7:f0:db:93:49:42:7b:56:97:36:53:81:51:37:fd:
7a:38:44:2d:b7:38:f2:51:f5:f0:74:c7:46:52:1a:
52:4b:f0:e9:22:86:5d:c7:e5:f6:9a:37:f0:a2:e1:
27:58:1d:02:e5:5c:03:91:6f:5c:0b:07:84:d3:4b:
d7:f0:21:d7:40:3d:01:ba:0d:e1:4c:52:d2:ce:b0:
34:a4:f9:c8:ea:7c:79:fc:35:a0:e1:68:d2:3a:e1:
fc:91:bd:13:cd:0c:b8:c8:22:34:e7:f6:0e:2f:20:
bc:47:f0:69:29:d0:d9:71:f6:b5:48:87:63:31:e1:
c2:aa:1f:8a:10:ec:5d:78:4b:2d:9d:25:a6:01:26:
2f:fa:cf:48:f2:02:6f:55:ad:43:8b:78:0f:31:7f:
d7:6e:f8:cf:f8:6d:13:ed:4e:9b:7e:67:eb:bd:ad:
91:58:78:17:06:1e:54:20:75:ff:17:2d:39:7a:d3:
0d:71:93:14:44:aa:df:40:d7:5c:d9:58:d0:d2:f2:
95:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:0D:C4:F1:A3:FC:ED:B5:21:99:21:9F:71:29:08:95:43:71:76:09
X509v3 Authority Key Identifier:
keyid:2C:F6:13:63:15:A5:2D:52:47:12:4B:7C:F3:69:AA:FB:83:12:22:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LPYTYxWlLVJHEkt882mq-4MSIn4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/ca2213-e5a1-4ad2-8a22-768d3fb08e70/1/LPYTYxWlLVJHEkt882mq-4MSIn4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/ca2213-e5a1-4ad2-8a22-768d3fb08e70/1/LPYTYxWlLVJHEkt882mq-4MSIn4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:f6:3f:39:a5:2c:13:dd:11:02:69:66:51:72:11:4f:f7:4b:
42:0b:5d:9c:7d:6c:45:93:39:85:fa:20:a4:54:21:8a:e2:ee:
34:20:1f:b1:24:f7:07:2a:49:e4:84:4a:c0:9c:c1:d2:de:2a:
58:aa:16:64:8c:f3:31:81:b4:8e:4a:a8:9b:e4:19:e8:ea:f2:
de:1f:ba:a5:c5:d3:dc:79:b2:82:8b:af:a9:04:2c:38:f8:b4:
47:25:54:47:a8:8f:8a:97:7d:c5:74:0c:30:0d:9a:33:8e:de:
0c:71:20:3b:9b:43:f4:1d:0a:22:24:48:4a:16:8e:10:ec:d2:
42:fa:68:6d:cc:17:62:cc:32:be:f1:66:29:88:02:f1:27:ea:
92:7e:51:0e:14:66:d1:21:8f:91:26:79:10:50:1f:ae:61:3c:
83:e9:5f:22:c7:42:4a:29:51:e6:ec:92:61:ae:1d:55:10:8d:
19:d0:a4:72:8f:65:35:7f:3e:01:ea:1c:0c:42:a3:e9:b5:6e:
4f:d8:f1:54:c3:5f:ae:d5:98:4c:3f:e7:2b:a9:08:21:7f:16:
af:b8:6f:e7:5a:09:5a:4e:ab:a7:35:70:b2:40:4e:fb:7c:81:
2e:a2:b0:c0:0d:37:d6:80:ea:c7:3a:b7:57:3c:81:90:a8:64:
0e:15:0e:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 21 11:30:48 2026 by rpki-client