Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/22/811b1b-3a72-4402-b4fd-fa4dd21ae3dc/1/LPtHb88xPP8pXeDRcJFWrwJT188.mft
File: LPtHb88xPP8pXeDRcJFWrwJT188.mft (raw, json)
Hash identifier: LekdV3M0Kby40hSWOJBl7trn+UDVrGV7hOr28GJeGxk=
Subject key identifier: 0F:24:B2:43:6A:39:76:1C:58:41:FE:93:A2:A7:1F:54:E8:A2:C2:45
Authority key identifier: 2C:FB:47:6F:CF:31:3C:FF:29:5D:E0:D1:70:91:56:AF:02:53:D7:CF
Certificate issuer: /CN=2cfb476fcf313cff295de0d1709156af0253d7cf
Certificate serial: 01A08CB1A263D6244DDD732AB1827D664060
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LPtHb88xPP8pXeDRcJFWrwJT188.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/811b1b-3a72-4402-b4fd-fa4dd21ae3dc/1/LPtHb88xPP8pXeDRcJFWrwJT188.mft
Manifest number: 1A49
Signing time: Thu 10 Sep 2026 19:00:46 +0000
Manifest this update: Thu 10 Sep 2026 19:00:46 +0000
Manifest next update: Fri 11 Sep 2026 19:00:46 +0000
Files and hashes: 1: LPtHb88xPP8pXeDRcJFWrwJT188.crl (hash: gmpCtXqigk9AX1DMkHiwTzyuKjqXy+a0ml2COQ87KiE=)
2: NgV_sHGbNkW-4Wz6vHYFvSOe7VQ.roa (hash: 4t65GeCqspIJ7i8BhQoAjY6xatOQordkuTZDORD2YyM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/811b1b-3a72-4402-b4fd-fa4dd21ae3dc/1/LPtHb88xPP8pXeDRcJFWrwJT188.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/811b1b-3a72-4402-b4fd-fa4dd21ae3dc/1/LPtHb88xPP8pXeDRcJFWrwJT188.mft
rsync://rpki.ripe.net/repository/DEFAULT/LPtHb88xPP8pXeDRcJFWrwJT188.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8c:b1:a2:63:d6:24:4d:dd:73:2a:b1:82:7d:66:40:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2cfb476fcf313cff295de0d1709156af0253d7cf
Validity
Not Before: Sep 10 19:00:46 2026 GMT
Not After : Sep 11 19:00:46 2026 GMT
Subject: CN=0f24b2436a39761c5841fe93a2a71f54e8a2c245
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:85:50:69:02:de:2c:29:2b:f5:6f:83:0e:13:
b9:3e:b7:ee:22:c9:95:46:9e:94:30:02:5d:29:e1:
06:f6:c3:74:74:50:39:17:e6:a9:5c:de:8a:96:7d:
70:d4:4b:6f:69:84:6c:4f:15:a3:ce:3f:81:44:9f:
59:73:21:9f:6a:ea:ac:26:51:ad:c3:8e:01:f7:a8:
8f:f8:0c:6f:f1:73:13:86:80:e5:1b:1a:f0:95:4f:
18:7b:e9:e9:25:05:74:94:12:4d:c0:bc:53:8b:13:
53:8d:0f:26:55:02:1f:a0:d0:19:a2:ef:ed:fe:fc:
19:94:b1:01:45:96:26:83:7f:09:e7:cb:3a:1e:07:
13:c3:59:a3:70:ab:0e:4f:b9:34:92:42:8f:92:d1:
3e:c3:dc:c6:d6:eb:5b:06:9d:45:29:55:a8:18:90:
b5:c3:fb:90:5f:15:88:6d:79:c7:33:73:ce:3d:32:
81:46:09:8e:c3:d9:43:0f:e3:3c:25:8b:3e:6d:46:
23:8c:39:49:9b:84:88:85:a5:9d:ee:d3:98:f5:ef:
f5:36:e6:f7:f7:09:9f:6d:c3:8c:d0:e8:a7:22:80:
f6:01:15:84:27:b2:24:74:76:c2:9a:8d:05:62:d0:
ec:1f:4d:1d:55:ba:e4:89:d4:bd:2e:d4:ab:08:9f:
64:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:24:B2:43:6A:39:76:1C:58:41:FE:93:A2:A7:1F:54:E8:A2:C2:45
X509v3 Authority Key Identifier:
keyid:2C:FB:47:6F:CF:31:3C:FF:29:5D:E0:D1:70:91:56:AF:02:53:D7:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LPtHb88xPP8pXeDRcJFWrwJT188.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/811b1b-3a72-4402-b4fd-fa4dd21ae3dc/1/LPtHb88xPP8pXeDRcJFWrwJT188.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/811b1b-3a72-4402-b4fd-fa4dd21ae3dc/1/LPtHb88xPP8pXeDRcJFWrwJT188.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:5f:2d:cf:ca:c4:d2:8e:2a:21:d1:13:d7:3e:26:28:86:52:
b8:f3:f8:8e:34:4c:9a:6d:fe:21:92:31:68:52:ad:7c:5c:24:
e7:a5:79:a0:04:3a:b3:f8:3e:46:78:a6:b3:61:88:cc:df:02:
2c:ca:92:cf:0b:34:2f:78:6c:86:23:aa:f1:9e:ff:02:af:27:
56:85:da:6b:ba:7e:3e:30:b0:c0:e4:f9:67:e2:ed:7a:83:68:
92:63:44:62:e6:04:ba:c5:e5:7e:bd:f7:60:31:ed:34:58:3d:
b0:15:b4:08:07:c5:49:d1:18:84:88:f3:3d:a4:81:74:0f:68:
2c:13:fd:52:b5:d5:d4:39:b1:ff:5d:97:3a:29:d8:9b:48:67:
f5:82:16:4e:4c:ba:92:b7:26:ce:21:44:b7:36:9d:91:c7:0c:
14:e4:2e:b1:80:c9:3e:9b:5b:90:7a:70:99:97:5d:e0:68:31:
b8:de:e7:04:09:b6:8b:9c:ed:f3:81:5f:74:22:5e:ad:5a:75:
c6:5e:05:e7:16:ef:08:8f:38:54:19:e8:41:09:ed:2d:b4:32:
71:31:c0:be:f6:df:9d:fe:b1:51:3f:df:c9:fa:97:40:4f:28:
e8:3c:49:b3:8b:0b:03:bf:9f:61:28:a4:b8:af:fd:06:8e:72:
7c:e5:72:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 22:42:03 2026 by rpki-client