Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/1a2fa2-eeb3-4312-9130-53cc5daf52cf/1/lplI0P5Nf5nVS6i__NmaGmCK4NM.mft
File: lplI0P5Nf5nVS6i__NmaGmCK4NM.mft (raw, json)
Hash identifier: f0QfTuyD56ld0TkYz36mcw+uJxsmM291q11ypES5B18=
Subject key identifier: AC:EA:FB:FE:98:A4:8D:80:D9:D4:84:F4:06:1D:8F:D9:2E:9A:B1:90
Authority key identifier: 96:99:48:D0:FE:4D:7F:99:D5:4B:A8:BF:FC:D9:9A:1A:60:8A:E0:D3
Certificate issuer: /CN=969948d0fe4d7f99d54ba8bffcd99a1a608ae0d3
Certificate serial: 019D3909D361645E5DAF09D46F66B10D858A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lplI0P5Nf5nVS6i__NmaGmCK4NM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/1a2fa2-eeb3-4312-9130-53cc5daf52cf/1/lplI0P5Nf5nVS6i__NmaGmCK4NM.mft
Manifest number: 1893
Signing time: Sun 29 Mar 2026 10:00:38 +0000
Manifest this update: Sun 29 Mar 2026 10:00:38 +0000
Manifest next update: Mon 30 Mar 2026 10:00:38 +0000
Files and hashes: 1: 4o62SYHgVowFhQpkpPWvhwVLD9Q.roa (hash: vK6TVfic8lSalHyDGwJA9KbxcHNJxy5XQ0Dw+O5/4ds=)
2: 9ZWmW7O-KUcnYms6KVGgedV7Spc.roa (hash: bmb6Wj5ZVAMQDodHsUEWFxaagxJI3FYmAMxoZWG5qPE=)
3: _ATH2LaUcsFsbm3ZfMvMi0XWcbY.roa (hash: Ot7Mpd5Sngu+BgXvflikN22yePv0fhYUQRspiY3WG70=)
4: erQKZk8l1sfGy2j4oWBOZugKqRw.roa (hash: VoUoWf07vKDS1/XZDrCXHR2by3KCcT90k8/LCxTvKsc=)
5: lplI0P5Nf5nVS6i__NmaGmCK4NM.crl (hash: aByOMrxu5JezAFS4BzX1fFIiW2YeRpyn3re5KR4Xkuc=)
6: nxSiffZukE6mQ7e460Rx5V-1a1Q.roa (hash: pzrYDt10/X+WJpToSelFVj9O1wyuTbaQZr2egEcvKq4=)
7: pbGUP3y4RpyVSLG7eXeil8rY1ME.roa (hash: SysyRMZRJZakF6FXhRynobKTSkCFH7tLqdsJUw3S05A=)
8: q3gUzU97j2RVDtM4CbuTr5ACAD4.roa (hash: rYA240BhPQIfAoHPOn9xxzmH9ldKEiVQ7iO6HZORQtw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/1a2fa2-eeb3-4312-9130-53cc5daf52cf/1/lplI0P5Nf5nVS6i__NmaGmCK4NM.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/1a2fa2-eeb3-4312-9130-53cc5daf52cf/1/lplI0P5Nf5nVS6i__NmaGmCK4NM.mft
rsync://rpki.ripe.net/repository/DEFAULT/lplI0P5Nf5nVS6i__NmaGmCK4NM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:09:d3:61:64:5e:5d:af:09:d4:6f:66:b1:0d:85:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=969948d0fe4d7f99d54ba8bffcd99a1a608ae0d3
Validity
Not Before: Mar 29 10:00:38 2026 GMT
Not After : Mar 30 10:00:38 2026 GMT
Subject: CN=aceafbfe98a48d80d9d484f4061d8fd92e9ab190
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:2c:be:1f:8d:ae:47:0d:d1:d5:5d:79:c2:91:
2b:82:a1:70:b1:f0:f3:1d:dd:1c:78:cb:a6:4e:d5:
44:13:96:da:89:eb:ac:12:c1:c7:f5:cc:0f:c3:ad:
3e:e2:9b:42:63:58:b4:32:74:c0:b3:fc:d7:38:84:
9c:1d:68:8c:9d:0e:5a:05:e6:a6:0c:24:04:6e:67:
16:ff:8c:2f:54:94:f6:cc:4e:32:2b:af:e9:71:d8:
3f:f1:61:62:40:87:e7:d9:e1:66:2e:fe:d9:81:6b:
92:a6:9d:aa:2b:74:35:56:3e:f8:fb:1a:64:7f:c1:
fb:2f:84:5f:ba:63:a0:ff:d8:aa:4f:d6:2d:3e:9e:
83:8e:c6:ee:41:a0:0a:81:ab:2b:8f:fa:78:1d:e7:
d9:0a:4f:a0:fc:2c:3a:f2:97:72:43:36:2b:37:2c:
fd:4d:6c:dc:15:bc:f4:bf:9a:61:bf:5c:b9:f3:4d:
14:67:b1:08:d3:be:b6:9c:58:d1:94:8c:48:bb:45:
5b:42:a4:ab:a6:1a:9c:6f:2a:e4:6b:b5:d8:73:18:
db:ad:f5:b4:23:60:12:f1:9e:4a:66:f7:d4:5c:e4:
3b:d0:08:b5:1c:b8:6e:4d:6b:ed:00:ff:ff:ae:dc:
ea:3e:d5:7f:98:8b:b9:16:0e:f4:90:ec:44:a1:ce:
7b:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:EA:FB:FE:98:A4:8D:80:D9:D4:84:F4:06:1D:8F:D9:2E:9A:B1:90
X509v3 Authority Key Identifier:
keyid:96:99:48:D0:FE:4D:7F:99:D5:4B:A8:BF:FC:D9:9A:1A:60:8A:E0:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lplI0P5Nf5nVS6i__NmaGmCK4NM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/1a2fa2-eeb3-4312-9130-53cc5daf52cf/1/lplI0P5Nf5nVS6i__NmaGmCK4NM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/1a2fa2-eeb3-4312-9130-53cc5daf52cf/1/lplI0P5Nf5nVS6i__NmaGmCK4NM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:d9:11:9b:32:7e:09:a8:bc:53:01:68:bc:75:ec:9d:84:3e:
42:e1:c7:ea:07:d5:15:a4:f1:57:a4:1e:cf:ef:10:50:ea:1c:
2f:9f:a5:69:f4:ea:b4:50:3f:24:a4:5f:7a:45:84:a4:3d:6e:
97:93:36:16:01:18:8e:31:82:d9:a6:46:f0:bd:04:e5:c2:fb:
0e:9a:8a:c5:11:fa:df:ec:fa:39:3a:a1:9a:3c:e3:9e:96:a5:
ec:08:1e:a5:46:ab:88:f3:f5:1b:17:b7:6c:9d:8e:f3:d0:1d:
c4:33:06:6f:91:91:76:ae:06:b4:70:6e:21:58:4c:21:a2:14:
83:f2:15:71:02:85:4d:57:c0:0b:84:d2:62:f9:70:27:8d:14:
89:a9:09:20:b1:c8:1b:73:f1:3d:8a:36:af:9a:f1:7a:a1:e1:
0e:2b:9f:da:2f:82:8d:80:84:12:ad:f4:79:52:a2:1e:ed:bd:
f6:51:3d:89:78:a7:aa:ff:d9:65:d7:e0:0e:1b:62:41:ef:37:
fa:d5:9e:63:57:74:05:12:46:a5:30:d2:5f:ab:83:b9:3e:c1:
8a:1f:ee:d9:7c:4e:da:ab:d3:dd:50:cb:8f:a8:f8:27:6c:68:
93:98:d3:82:be:4e:54:7a:0a:f4:ac:bb:b1:2c:90:a1:75:61:
b4:9b:57:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:12:01 2026 by rpki-client