Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2f/1a2fa2-eeb3-4312-9130-53cc5daf52cf/1/lplI0P5Nf5nVS6i__NmaGmCK4NM.mft
File: lplI0P5Nf5nVS6i__NmaGmCK4NM.mft (raw, json)
Hash identifier: uEKBJFQVGuXJU9RsHbfBICn8iwmdf5cD4igxBFRGBC0=
Subject key identifier: 51:73:B7:B1:60:71:D5:FB:6B:E8:D3:7A:45:41:B5:BF:8A:56:40:04
Authority key identifier: 96:99:48:D0:FE:4D:7F:99:D5:4B:A8:BF:FC:D9:9A:1A:60:8A:E0:D3
Certificate issuer: /CN=969948d0fe4d7f99d54ba8bffcd99a1a608ae0d3
Certificate serial: 01A1298D27B47143FA315B98DB87B766CA8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lplI0P5Nf5nVS6i__NmaGmCK4NM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/1a2fa2-eeb3-4312-9130-53cc5daf52cf/1/lplI0P5Nf5nVS6i__NmaGmCK4NM.mft
Manifest number: 1A9F
Signing time: Sun 11 Oct 2026 06:01:18 +0000
Manifest this update: Sun 11 Oct 2026 06:01:18 +0000
Manifest next update: Mon 12 Oct 2026 06:01:18 +0000
Files and hashes: 1: 4o62SYHgVowFhQpkpPWvhwVLD9Q.roa (hash: vK6TVfic8lSalHyDGwJA9KbxcHNJxy5XQ0Dw+O5/4ds=)
2: 9ZWmW7O-KUcnYms6KVGgedV7Spc.roa (hash: bmb6Wj5ZVAMQDodHsUEWFxaagxJI3FYmAMxoZWG5qPE=)
3: erQKZk8l1sfGy2j4oWBOZugKqRw.roa (hash: VoUoWf07vKDS1/XZDrCXHR2by3KCcT90k8/LCxTvKsc=)
4: ikMa9MqXV9fTt-fpeOTMdH_rGjk.roa (hash: IZXIhlBJHXlW68AogpmsrwZKXAwk0TGWgKDJGc8gaFU=)
5: lplI0P5Nf5nVS6i__NmaGmCK4NM.crl (hash: zfiYYLIacWN2LPxJEopSEbhYGsrh1m1wLoeIy47wEYc=)
6: pbGUP3y4RpyVSLG7eXeil8rY1ME.roa (hash: SysyRMZRJZakF6FXhRynobKTSkCFH7tLqdsJUw3S05A=)
7: q3gUzU97j2RVDtM4CbuTr5ACAD4.roa (hash: rYA240BhPQIfAoHPOn9xxzmH9ldKEiVQ7iO6HZORQtw=)
8: sHCmUOZD8zEHvWgjLXqNkjroi6o.roa (hash: OK6PF/BL3eupkhpURtyslk38x0wzZU1I+gsKKO7VPtU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/1a2fa2-eeb3-4312-9130-53cc5daf52cf/1/lplI0P5Nf5nVS6i__NmaGmCK4NM.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/1a2fa2-eeb3-4312-9130-53cc5daf52cf/1/lplI0P5Nf5nVS6i__NmaGmCK4NM.mft
rsync://rpki.ripe.net/repository/DEFAULT/lplI0P5Nf5nVS6i__NmaGmCK4NM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 05:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:29:8d:27:b4:71:43:fa:31:5b:98:db:87:b7:66:ca:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=969948d0fe4d7f99d54ba8bffcd99a1a608ae0d3
Validity
Not Before: Oct 11 06:01:18 2026 GMT
Not After : Oct 12 06:01:18 2026 GMT
Subject: CN=5173b7b16071d5fb6be8d37a4541b5bf8a564004
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:71:45:cd:1e:8b:5c:37:34:38:b1:05:a9:f8:
20:b4:5f:be:48:35:5e:53:33:ce:ad:2a:46:de:b6:
25:34:3b:21:9e:e4:62:3a:87:5c:88:bf:aa:14:98:
91:b8:68:83:70:94:a4:38:76:56:f1:cb:b7:82:c1:
34:4e:e1:6a:9e:40:53:ef:99:38:3a:47:c3:35:6b:
4d:4a:37:1c:31:a4:68:53:c9:55:4f:aa:27:07:84:
18:f1:ab:f6:7b:9b:1e:6e:89:06:7a:e9:3e:3a:0b:
37:29:55:c9:b0:af:91:ec:ed:8a:c2:c8:97:9d:6d:
0e:cc:b1:44:e1:43:59:c6:1f:45:16:16:91:ac:7b:
23:73:41:2a:18:74:79:63:5d:80:ac:8c:39:15:83:
7b:12:56:28:3a:ce:32:a0:9c:c9:a8:6b:ba:d1:95:
18:a7:32:ff:24:02:68:a5:aa:e1:ba:78:cd:c0:7a:
a8:67:09:59:b2:3a:9c:68:07:80:df:ad:9f:a0:4a:
46:92:c0:63:31:80:30:0d:6d:2a:8b:15:08:bd:b2:
91:0f:3a:f4:e0:c1:a7:62:e3:ca:fe:9c:ea:52:3c:
0d:88:45:d8:03:54:50:e8:db:4c:58:d8:c9:08:e6:
ee:ec:56:44:01:74:98:f7:e9:d1:8a:a7:fc:32:e2:
c3:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:73:B7:B1:60:71:D5:FB:6B:E8:D3:7A:45:41:B5:BF:8A:56:40:04
X509v3 Authority Key Identifier:
keyid:96:99:48:D0:FE:4D:7F:99:D5:4B:A8:BF:FC:D9:9A:1A:60:8A:E0:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lplI0P5Nf5nVS6i__NmaGmCK4NM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/1a2fa2-eeb3-4312-9130-53cc5daf52cf/1/lplI0P5Nf5nVS6i__NmaGmCK4NM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/1a2fa2-eeb3-4312-9130-53cc5daf52cf/1/lplI0P5Nf5nVS6i__NmaGmCK4NM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:7e:c3:2e:54:ac:33:c0:60:07:99:c5:0b:60:41:02:54:a4:
8c:3e:44:4d:5f:38:2c:0a:23:f7:e3:72:61:be:43:e3:ec:a1:
16:17:a2:f6:4d:a5:75:c3:55:23:11:04:e0:bc:10:38:1f:82:
9e:98:55:c8:53:6a:b0:03:1e:1e:06:d7:b6:23:63:31:49:1a:
10:0f:f4:47:f2:c0:a8:b5:b9:21:0a:7e:07:f4:11:14:98:8b:
ab:44:85:c2:c4:34:f2:be:06:4a:7b:5b:81:e4:da:4e:58:e2:
1b:95:36:48:20:be:b1:ea:94:c1:1f:ed:9d:5c:40:81:08:00:
c9:24:42:03:f5:0f:92:d7:e7:96:f6:43:df:54:54:27:be:ba:
c4:a5:0c:e6:2d:00:d8:7f:3e:fd:cf:bc:8d:9d:c4:6b:f5:f8:
c1:f2:e1:be:e3:de:0c:39:4c:8a:76:e0:37:d2:0e:e3:17:96:
0a:a0:a1:60:ac:3a:22:ac:4a:9e:53:c0:67:50:8d:f4:13:bc:
af:4e:41:b2:a0:7d:db:00:98:62:ec:45:b4:8e:7e:26:26:7f:
bc:3c:a1:ab:f6:e3:42:bb:63:8d:21:6a:33:18:9a:aa:c0:75:
30:b2:53:1b:0e:ce:19:43:06:c6:14:ec:47:b9:43:1a:2f:bd:
b8:34:88:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 16:52:38 2026 by rpki-client