Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/1a2fa2-eeb3-4312-9130-53cc5daf52cf/1/lplI0P5Nf5nVS6i__NmaGmCK4NM.mft
File: lplI0P5Nf5nVS6i__NmaGmCK4NM.mft (raw, json)
Hash identifier: GWVPDjIDFgbTgiwYb48aDpmF/UhCL0MvGi1MJzCFWoQ=
Subject key identifier: AA:56:10:35:1D:C9:66:4A:82:5F:58:73:AF:06:B2:BC:EE:0E:48:C4
Authority key identifier: 96:99:48:D0:FE:4D:7F:99:D5:4B:A8:BF:FC:D9:9A:1A:60:8A:E0:D3
Certificate issuer: /CN=969948d0fe4d7f99d54ba8bffcd99a1a608ae0d3
Certificate serial: 01A020FA42FE84CCBB021FBB0C663E5F50FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lplI0P5Nf5nVS6i__NmaGmCK4NM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/1a2fa2-eeb3-4312-9130-53cc5daf52cf/1/lplI0P5Nf5nVS6i__NmaGmCK4NM.mft
Manifest number: 1A16
Signing time: Thu 20 Aug 2026 21:01:07 +0000
Manifest this update: Thu 20 Aug 2026 21:01:07 +0000
Manifest next update: Fri 21 Aug 2026 21:01:07 +0000
Files and hashes: 1: 4o62SYHgVowFhQpkpPWvhwVLD9Q.roa (hash: vK6TVfic8lSalHyDGwJA9KbxcHNJxy5XQ0Dw+O5/4ds=)
2: 9ZWmW7O-KUcnYms6KVGgedV7Spc.roa (hash: bmb6Wj5ZVAMQDodHsUEWFxaagxJI3FYmAMxoZWG5qPE=)
3: erQKZk8l1sfGy2j4oWBOZugKqRw.roa (hash: VoUoWf07vKDS1/XZDrCXHR2by3KCcT90k8/LCxTvKsc=)
4: ikMa9MqXV9fTt-fpeOTMdH_rGjk.roa (hash: IZXIhlBJHXlW68AogpmsrwZKXAwk0TGWgKDJGc8gaFU=)
5: lplI0P5Nf5nVS6i__NmaGmCK4NM.crl (hash: yMtrvItRMxO8E96Xb78gVk37xGV9S8th1H1SfflVSIs=)
6: pbGUP3y4RpyVSLG7eXeil8rY1ME.roa (hash: SysyRMZRJZakF6FXhRynobKTSkCFH7tLqdsJUw3S05A=)
7: q3gUzU97j2RVDtM4CbuTr5ACAD4.roa (hash: rYA240BhPQIfAoHPOn9xxzmH9ldKEiVQ7iO6HZORQtw=)
8: sHCmUOZD8zEHvWgjLXqNkjroi6o.roa (hash: OK6PF/BL3eupkhpURtyslk38x0wzZU1I+gsKKO7VPtU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/1a2fa2-eeb3-4312-9130-53cc5daf52cf/1/lplI0P5Nf5nVS6i__NmaGmCK4NM.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/1a2fa2-eeb3-4312-9130-53cc5daf52cf/1/lplI0P5Nf5nVS6i__NmaGmCK4NM.mft
rsync://rpki.ripe.net/repository/DEFAULT/lplI0P5Nf5nVS6i__NmaGmCK4NM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 21 Aug 2026 20:07:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:20:fa:42:fe:84:cc:bb:02:1f:bb:0c:66:3e:5f:50:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=969948d0fe4d7f99d54ba8bffcd99a1a608ae0d3
Validity
Not Before: Aug 20 21:01:07 2026 GMT
Not After : Aug 21 21:01:07 2026 GMT
Subject: CN=aa5610351dc9664a825f5873af06b2bcee0e48c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:2c:fe:66:2c:11:03:ac:da:90:5c:20:5e:4c:
fe:da:84:f5:aa:ba:7d:7c:db:37:5e:82:85:6a:26:
ef:a6:70:40:65:95:19:c6:61:33:99:46:30:ec:9b:
9a:0c:10:ea:13:5d:9c:bc:cd:84:ee:63:67:19:4f:
db:b9:0f:71:c1:ce:77:51:70:74:9d:99:13:25:2b:
5f:8f:e9:00:12:55:35:01:2e:b4:9b:1f:81:8e:5b:
26:89:42:f2:7a:a7:e1:e3:66:89:af:4a:62:7e:b9:
18:aa:a3:16:0b:c0:18:89:78:09:e2:8a:aa:73:21:
74:5f:3a:5f:c5:b9:ca:45:09:a0:fb:ed:c4:26:47:
cd:35:4e:f1:89:89:96:c9:e1:55:34:07:dc:63:c2:
97:f2:18:cc:59:18:d7:2d:c9:fd:40:55:dc:c9:73:
55:5e:c8:b9:ef:b8:3d:0f:86:3d:04:9e:46:24:e9:
b7:40:bf:3d:e1:d3:4b:88:cc:b9:cd:a6:54:33:02:
21:08:62:32:02:c3:e4:e1:30:99:9b:61:e1:aa:ad:
e6:e1:3a:54:18:f9:56:18:70:5f:4a:ed:cd:ed:d8:
21:c4:97:15:86:dc:4d:45:12:7e:d1:75:44:98:49:
c0:05:9e:7c:9d:89:ac:fb:fe:90:22:11:e2:dd:ca:
2a:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:56:10:35:1D:C9:66:4A:82:5F:58:73:AF:06:B2:BC:EE:0E:48:C4
X509v3 Authority Key Identifier:
keyid:96:99:48:D0:FE:4D:7F:99:D5:4B:A8:BF:FC:D9:9A:1A:60:8A:E0:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lplI0P5Nf5nVS6i__NmaGmCK4NM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/1a2fa2-eeb3-4312-9130-53cc5daf52cf/1/lplI0P5Nf5nVS6i__NmaGmCK4NM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/1a2fa2-eeb3-4312-9130-53cc5daf52cf/1/lplI0P5Nf5nVS6i__NmaGmCK4NM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:02:43:e7:02:70:e7:a5:97:4e:a2:20:bd:9d:f7:18:57:93:
a2:b5:82:17:40:84:98:f4:3f:0a:55:23:b7:6a:3d:a1:0e:76:
8c:37:3a:45:2e:e1:00:d4:23:dc:49:5a:d2:08:d2:aa:6c:73:
95:af:50:df:a5:d8:6d:7f:4a:13:3b:3a:3e:84:80:43:90:cf:
29:d9:b7:5a:3e:a4:1c:97:b6:ea:75:66:f2:b9:f2:3d:8c:12:
ad:ab:0f:7a:7f:66:04:cb:53:75:c1:48:b1:92:70:bf:17:98:
64:d4:d6:1b:91:94:2a:70:3f:c1:61:e6:c8:75:80:c1:2d:17:
5e:b6:d3:f6:3e:60:61:58:ce:a9:bf:3e:b3:cf:ec:00:16:b2:
d4:59:4a:9d:38:f9:5e:c6:f7:48:c9:be:8f:13:23:90:65:33:
cd:24:29:db:ab:f5:be:e6:07:47:96:c8:b8:6b:cf:5c:11:a4:
ba:98:dd:6e:39:64:75:d4:c5:67:b9:0e:ac:37:36:52:5d:b5:
a5:4b:88:76:5d:b5:5c:38:c9:23:db:bc:26:7b:ad:21:2f:66:
cd:f4:bf:75:42:89:c2:3f:96:d3:de:9f:18:d2:94:ec:b3:e9:
5f:59:e7:ba:5f:51:22:bf:6d:d5:3e:b5:77:e1:ea:fb:57:1e:
34:29:e6:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 02:24:23 2026 by rpki-client