Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/1a2fa2-eeb3-4312-9130-53cc5daf52cf/1/lplI0P5Nf5nVS6i__NmaGmCK4NM.mft
File: lplI0P5Nf5nVS6i__NmaGmCK4NM.mft (raw, json)
Hash identifier: iIPUm67N+XbTQvIuVCIu8NPvTY7Jg96lxXK/agCzWUc=
Subject key identifier: F5:76:2F:81:67:E1:77:F4:F2:8A:48:0E:B7:2F:A6:36:90:9F:B2:11
Authority key identifier: 96:99:48:D0:FE:4D:7F:99:D5:4B:A8:BF:FC:D9:9A:1A:60:8A:E0:D3
Certificate issuer: /CN=969948d0fe4d7f99d54ba8bffcd99a1a608ae0d3
Certificate serial: 019E49568038C4A295264F854F5478669088
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lplI0P5Nf5nVS6i__NmaGmCK4NM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/1a2fa2-eeb3-4312-9130-53cc5daf52cf/1/lplI0P5Nf5nVS6i__NmaGmCK4NM.mft
Manifest number: 1920
Signing time: Thu 21 May 2026 07:01:06 +0000
Manifest this update: Thu 21 May 2026 07:01:06 +0000
Manifest next update: Fri 22 May 2026 07:01:06 +0000
Files and hashes: 1: 4o62SYHgVowFhQpkpPWvhwVLD9Q.roa (hash: vK6TVfic8lSalHyDGwJA9KbxcHNJxy5XQ0Dw+O5/4ds=)
2: 9ZWmW7O-KUcnYms6KVGgedV7Spc.roa (hash: bmb6Wj5ZVAMQDodHsUEWFxaagxJI3FYmAMxoZWG5qPE=)
3: _ATH2LaUcsFsbm3ZfMvMi0XWcbY.roa (hash: Ot7Mpd5Sngu+BgXvflikN22yePv0fhYUQRspiY3WG70=)
4: erQKZk8l1sfGy2j4oWBOZugKqRw.roa (hash: VoUoWf07vKDS1/XZDrCXHR2by3KCcT90k8/LCxTvKsc=)
5: lplI0P5Nf5nVS6i__NmaGmCK4NM.crl (hash: h9zkkulnkAN5jEyWudK6tQvbjPPSeRPq7nnrnAXglxA=)
6: nxSiffZukE6mQ7e460Rx5V-1a1Q.roa (hash: pzrYDt10/X+WJpToSelFVj9O1wyuTbaQZr2egEcvKq4=)
7: pbGUP3y4RpyVSLG7eXeil8rY1ME.roa (hash: SysyRMZRJZakF6FXhRynobKTSkCFH7tLqdsJUw3S05A=)
8: q3gUzU97j2RVDtM4CbuTr5ACAD4.roa (hash: rYA240BhPQIfAoHPOn9xxzmH9ldKEiVQ7iO6HZORQtw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/1a2fa2-eeb3-4312-9130-53cc5daf52cf/1/lplI0P5Nf5nVS6i__NmaGmCK4NM.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/1a2fa2-eeb3-4312-9130-53cc5daf52cf/1/lplI0P5Nf5nVS6i__NmaGmCK4NM.mft
rsync://rpki.ripe.net/repository/DEFAULT/lplI0P5Nf5nVS6i__NmaGmCK4NM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 May 2026 07:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:49:56:80:38:c4:a2:95:26:4f:85:4f:54:78:66:90:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=969948d0fe4d7f99d54ba8bffcd99a1a608ae0d3
Validity
Not Before: May 21 07:01:06 2026 GMT
Not After : May 22 07:01:06 2026 GMT
Subject: CN=f5762f8167e177f4f28a480eb72fa636909fb211
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:9c:c7:0e:a7:49:dd:9a:11:ce:0d:d4:da:26:
16:dc:25:9a:66:c8:2f:58:4e:1a:59:23:8b:b4:e2:
de:93:76:52:4b:dd:fd:27:58:f1:4c:c2:52:e1:02:
08:aa:eb:01:e4:91:a2:55:12:d6:74:3d:10:ea:3b:
7a:67:b4:9c:4e:c8:1c:c6:c1:06:68:29:ab:27:20:
61:e6:15:35:50:d0:a9:7a:65:9f:9b:49:82:00:fb:
58:72:e2:be:5f:be:7d:75:39:03:e4:7c:dc:56:dd:
3d:3c:04:c5:e9:8c:ca:2c:c2:c0:8a:a7:8f:ec:96:
82:79:7b:ba:2c:9e:15:92:47:f5:3f:85:84:36:4c:
f8:73:bd:ad:78:62:45:74:72:40:e5:e1:a9:5e:77:
54:63:d7:76:14:cc:b6:9e:fd:de:76:49:5d:ab:08:
51:c5:33:be:e2:22:a3:cf:fc:b0:12:7a:96:5a:38:
95:86:94:58:14:1b:f1:08:a6:a7:ca:09:7d:c4:0e:
35:f7:63:bb:5d:e6:41:09:66:bf:34:fb:41:9a:55:
d2:11:96:76:cf:f1:48:6c:34:e9:5c:00:ae:30:17:
f4:12:95:59:5c:18:1e:32:57:4c:af:bf:b5:d2:12:
bb:c7:c8:61:e3:a1:06:da:85:e3:e5:ac:a5:01:37:
0f:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:76:2F:81:67:E1:77:F4:F2:8A:48:0E:B7:2F:A6:36:90:9F:B2:11
X509v3 Authority Key Identifier:
keyid:96:99:48:D0:FE:4D:7F:99:D5:4B:A8:BF:FC:D9:9A:1A:60:8A:E0:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lplI0P5Nf5nVS6i__NmaGmCK4NM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/1a2fa2-eeb3-4312-9130-53cc5daf52cf/1/lplI0P5Nf5nVS6i__NmaGmCK4NM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/1a2fa2-eeb3-4312-9130-53cc5daf52cf/1/lplI0P5Nf5nVS6i__NmaGmCK4NM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:6f:ad:73:53:1b:d0:16:ca:63:88:ec:f6:80:0f:92:d8:14:
81:96:17:eb:c9:cc:c8:08:b2:c3:5e:5a:18:0b:e4:d5:b3:9a:
02:c1:64:d1:c5:58:c0:7a:0f:ca:41:d6:4c:c3:eb:79:e2:31:
02:b7:7c:48:2c:bd:56:70:83:b7:60:3d:2b:0e:8f:90:ad:17:
03:25:d4:89:2a:a2:3b:a7:67:f0:9d:7a:1f:26:b7:37:fc:73:
a1:99:22:ad:39:06:28:79:c2:e9:8e:cc:af:3f:8f:5a:5b:66:
e0:74:68:f6:bc:38:a2:aa:0d:17:25:1b:b0:cf:66:db:8d:bd:
0c:e6:7e:83:6e:0e:36:cc:a3:b4:da:1b:30:c3:ec:b6:69:c9:
20:cc:92:48:37:a5:42:5f:14:07:9c:1b:f6:71:fd:fb:57:3e:
b8:22:d1:9c:5f:d6:c1:d9:8e:b8:71:2e:9a:9f:a8:d1:d2:2e:
23:0f:de:5b:c9:10:e0:1f:39:1f:1c:2b:10:dc:5c:40:f2:dc:
2a:db:fa:cf:e1:82:05:34:8d:53:1e:f5:89:ad:4e:5d:f0:e0:
3e:1f:ab:7d:7d:e1:63:b2:27:b1:11:9f:32:45:62:c4:6b:b8:
30:75:7b:9f:a6:f1:6a:2d:4a:f5:31:8e:2d:25:17:67:32:c2:
a5:25:60:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 12:36:45 2026 by rpki-client