Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/42/45a04c-cb0d-4c0c-8bf1-48f39fde0eea/1/lpgLSK1WOfc5gTVuMxYNFidxC7c.mft
File: lpgLSK1WOfc5gTVuMxYNFidxC7c.mft (raw, json)
Hash identifier: YimZ79X7MnA1wxuMCo29AZTeiWExfuvwc3aCa4zsvh8=
Subject key identifier: 0C:15:43:77:58:B8:EC:CE:95:EB:61:08:D8:B5:20:06:81:DC:8F:2B
Authority key identifier: 96:98:0B:48:AD:56:39:F7:39:81:35:6E:33:16:0D:16:27:71:0B:B7
Certificate issuer: /CN=96980b48ad5639f73981356e33160d1627710bb7
Certificate serial: 01A149BCE5162108F3331D6DB3C0F028BD08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lpgLSK1WOfc5gTVuMxYNFidxC7c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/45a04c-cb0d-4c0c-8bf1-48f39fde0eea/1/lpgLSK1WOfc5gTVuMxYNFidxC7c.mft
Manifest number: 0124
Signing time: Sat 17 Oct 2026 12:01:18 +0000
Manifest this update: Sat 17 Oct 2026 12:01:18 +0000
Manifest next update: Sun 18 Oct 2026 12:01:18 +0000
Files and hashes: 1: 6L5y2MFmXfcIFX62MUBPkBCCJX0.roa (hash: KLV777+LOvda3GCIEhi/yJJMh/XCyc6E446aDRA4Mv4=)
2: ikcdv1QOBoSzDWfjCCDZg9ycDHc.roa (hash: jlthj0+9YMBV47DV2aS3JMaKaQi7V78MQtgW3wynm/g=)
3: lpgLSK1WOfc5gTVuMxYNFidxC7c.crl (hash: k8InkCJiNORJmiIJaba6EmJ/PLPIW93R2wWtdOtSM9c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/45a04c-cb0d-4c0c-8bf1-48f39fde0eea/1/lpgLSK1WOfc5gTVuMxYNFidxC7c.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/45a04c-cb0d-4c0c-8bf1-48f39fde0eea/1/lpgLSK1WOfc5gTVuMxYNFidxC7c.mft
rsync://rpki.ripe.net/repository/DEFAULT/lpgLSK1WOfc5gTVuMxYNFidxC7c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 18 Oct 2026 12:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:49:bc:e5:16:21:08:f3:33:1d:6d:b3:c0:f0:28:bd:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96980b48ad5639f73981356e33160d1627710bb7
Validity
Not Before: Oct 17 12:01:18 2026 GMT
Not After : Oct 18 12:01:18 2026 GMT
Subject: CN=0c15437758b8ecce95eb6108d8b5200681dc8f2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:27:3e:28:0a:bc:e7:fe:07:ad:ee:7c:ba:90:
87:1f:2e:90:1b:8a:5a:e6:77:c9:34:fc:99:b8:54:
99:58:a5:45:96:4e:a9:02:ea:e4:9a:14:f8:34:b1:
f5:0a:fd:05:b8:9d:6e:3c:5e:40:94:02:c8:3c:16:
6e:d2:26:cb:fb:62:81:24:c9:25:61:ac:93:97:80:
58:cd:af:d8:d7:39:9b:39:73:83:66:91:0b:af:73:
57:a6:05:eb:f0:a5:80:e9:1c:04:c6:da:87:01:03:
62:79:c9:0c:16:ce:0a:6a:0f:f0:00:94:64:af:15:
44:ac:af:fc:6e:78:c7:f8:40:f1:ef:d1:27:de:f1:
0d:b7:d5:91:8c:d9:11:98:b4:a5:b9:08:bd:36:54:
c5:1f:51:9e:4c:fd:47:b4:d9:70:95:56:44:d8:0b:
1a:31:57:9a:47:e8:a7:f5:34:68:ae:82:4a:fb:74:
cc:4e:7d:cb:a4:a0:11:e6:e6:e5:88:33:2b:c0:69:
70:dd:79:29:dd:1d:c4:78:d0:6a:82:ea:bf:11:0d:
3c:7e:1b:04:ef:84:27:b9:c2:66:d7:95:02:fb:56:
3f:3b:2c:d7:57:43:e1:ce:61:df:28:d6:d6:14:7c:
64:f5:f8:ae:c3:06:19:11:02:f0:df:d6:20:d6:cd:
80:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:15:43:77:58:B8:EC:CE:95:EB:61:08:D8:B5:20:06:81:DC:8F:2B
X509v3 Authority Key Identifier:
keyid:96:98:0B:48:AD:56:39:F7:39:81:35:6E:33:16:0D:16:27:71:0B:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lpgLSK1WOfc5gTVuMxYNFidxC7c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/45a04c-cb0d-4c0c-8bf1-48f39fde0eea/1/lpgLSK1WOfc5gTVuMxYNFidxC7c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/45a04c-cb0d-4c0c-8bf1-48f39fde0eea/1/lpgLSK1WOfc5gTVuMxYNFidxC7c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:1b:24:7f:2b:34:04:d0:43:fb:15:54:a2:88:ba:4e:4c:de:
d5:90:d3:9e:a8:91:49:16:37:b6:0b:8a:e0:cf:60:53:08:ce:
60:f6:e7:2b:b3:40:38:a4:fe:c1:49:43:b4:d5:f8:f2:97:4d:
fa:4b:98:14:95:82:0c:0d:c5:80:55:4b:11:4b:70:0a:2d:fc:
0a:e1:ab:62:b2:3e:88:74:00:b3:e9:1f:9d:b3:44:9c:02:43:
77:bc:51:8d:2d:9a:ab:d2:5c:7d:d0:e7:44:91:49:b0:5a:98:
4a:db:91:fe:b8:77:11:74:d6:f4:26:8b:0c:01:89:83:86:52:
ab:60:9f:07:dc:cb:5f:88:3a:13:90:c6:c5:62:25:24:f6:18:
55:bc:d1:e4:87:3d:54:de:26:cf:22:2d:d8:2a:6f:a4:89:ea:
b8:ba:f5:cf:c8:ed:56:ba:28:30:97:41:b7:e8:f9:66:48:e1:
43:48:f1:02:69:68:6e:c1:35:7c:09:1f:2a:ab:55:14:53:52:
6c:d4:cd:7f:0d:b2:9b:8d:d3:44:2d:ac:09:38:7b:1e:01:bb:
ea:17:8e:4a:4f:cd:74:eb:ba:68:90:b5:41:48:72:32:4f:6c:
c6:05:c9:8b:c2:07:7d:ad:ff:98:5b:c8:73:ce:1c:3a:53:b6:
22:e0:85:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 17 19:27:23 2026 by rpki-client