Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/5be44c-a4f2-4bd0-b5a7-b468838c7fdf/1/LPqiK9ZcrIKFjqCRaG1bO0vjvTk.mft
File: LPqiK9ZcrIKFjqCRaG1bO0vjvTk.mft (raw, json)
Hash identifier: c/SxenL8liu9RhxPYVwnyiDTwGrEp2R4fo1aT0hc4/M=
Subject key identifier: 16:54:3E:ED:EF:7B:49:10:A7:A6:48:92:19:AE:08:90:21:D8:E4:E9
Authority key identifier: 2C:FA:A2:2B:D6:5C:AC:82:85:8E:A0:91:68:6D:5B:3B:4B:E3:BD:39
Certificate issuer: /CN=2cfaa22bd65cac82858ea091686d5b3b4be3bd39
Certificate serial: 019D38D3195E42BA6F758835CB97B8BDD358
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LPqiK9ZcrIKFjqCRaG1bO0vjvTk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/5be44c-a4f2-4bd0-b5a7-b468838c7fdf/1/LPqiK9ZcrIKFjqCRaG1bO0vjvTk.mft
Manifest number: 138D
Signing time: Sun 29 Mar 2026 09:00:51 +0000
Manifest this update: Sun 29 Mar 2026 09:00:51 +0000
Manifest next update: Mon 30 Mar 2026 09:00:51 +0000
Files and hashes: 1: LPqiK9ZcrIKFjqCRaG1bO0vjvTk.crl (hash: NdJW/U5Ym/oW0RDbLrVpOrer2X4LtD8Nd1onL7LQyg4=)
2: ao8cSCiGJ7ClPx10CHs-9lIIGq8.roa (hash: P9VwufsfbDvR02msSd4m6J1kCxDfxah00sWQYJJy8SE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/5be44c-a4f2-4bd0-b5a7-b468838c7fdf/1/LPqiK9ZcrIKFjqCRaG1bO0vjvTk.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/5be44c-a4f2-4bd0-b5a7-b468838c7fdf/1/LPqiK9ZcrIKFjqCRaG1bO0vjvTk.mft
rsync://rpki.ripe.net/repository/DEFAULT/LPqiK9ZcrIKFjqCRaG1bO0vjvTk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:19:5e:42:ba:6f:75:88:35:cb:97:b8:bd:d3:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2cfaa22bd65cac82858ea091686d5b3b4be3bd39
Validity
Not Before: Mar 29 09:00:51 2026 GMT
Not After : Mar 30 09:00:51 2026 GMT
Subject: CN=16543eedef7b4910a7a6489219ae089021d8e4e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:2b:18:ab:90:4c:de:91:c5:74:6e:74:f1:ed:
29:6c:99:4e:fa:93:56:bd:e6:b5:9a:6b:b7:9b:84:
78:9d:63:6e:cf:df:f5:a8:8e:f3:df:5c:b9:37:57:
ee:2d:87:63:7a:07:06:dd:85:07:78:d3:92:ee:79:
33:79:38:70:24:e1:e4:54:36:fd:04:24:25:69:bd:
5e:fc:48:7e:61:51:14:8f:f3:a0:d2:b9:ae:11:ed:
84:50:c3:b8:0a:b7:56:53:85:0f:a5:1c:6c:a5:98:
31:40:7c:4f:ce:24:c2:b4:1b:be:e6:79:59:4e:3f:
f4:98:df:b8:bb:10:94:6e:a1:a6:22:01:19:86:49:
44:65:87:a0:73:82:ab:ef:6a:a7:03:73:67:1a:44:
0f:e8:3c:0a:90:f1:b4:58:e6:64:21:db:61:7e:71:
57:1f:34:5c:3e:cc:86:d1:61:d8:8b:9a:74:25:96:
ef:76:dc:a7:25:21:bd:2c:12:84:ef:21:07:b6:93:
9c:49:71:08:b7:26:34:86:20:ae:3a:b2:d0:a9:5e:
17:58:1c:46:5d:65:98:7e:c9:d3:93:90:bd:bd:9d:
7b:58:16:b8:34:9f:c1:c9:9e:43:c6:5a:92:e0:50:
40:36:a8:78:7f:37:c1:3b:83:47:15:b2:ac:20:8a:
a3:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:54:3E:ED:EF:7B:49:10:A7:A6:48:92:19:AE:08:90:21:D8:E4:E9
X509v3 Authority Key Identifier:
keyid:2C:FA:A2:2B:D6:5C:AC:82:85:8E:A0:91:68:6D:5B:3B:4B:E3:BD:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LPqiK9ZcrIKFjqCRaG1bO0vjvTk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/5be44c-a4f2-4bd0-b5a7-b468838c7fdf/1/LPqiK9ZcrIKFjqCRaG1bO0vjvTk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/5be44c-a4f2-4bd0-b5a7-b468838c7fdf/1/LPqiK9ZcrIKFjqCRaG1bO0vjvTk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:8a:88:bf:ea:4e:cc:db:68:c7:e7:71:1c:71:71:b8:8c:4f:
a1:63:21:00:c6:94:94:fb:ff:ff:c7:5f:3e:12:74:51:9d:22:
ec:49:67:a0:9e:6d:d3:f3:f8:1a:f3:1a:07:77:61:03:fd:b2:
9f:66:d5:2a:bc:35:a4:d6:41:f6:ee:df:32:33:36:ba:0c:c6:
6e:24:2e:b9:76:40:0f:6c:e4:6d:95:e8:d8:03:96:a2:fc:49:
3b:08:8d:41:57:c1:12:5d:72:78:be:13:13:dd:81:c5:ff:1e:
a9:79:4f:d2:5a:e6:46:c8:83:aa:3a:cf:9d:f9:48:da:58:6c:
93:4f:71:83:ec:ba:91:d2:1c:ea:6b:b7:a3:43:df:64:05:e4:
c8:ec:96:ac:6f:a8:9f:57:c3:1d:3c:05:42:7d:76:a8:59:f0:
08:85:e2:03:cb:5a:6f:1e:e7:1c:06:74:3e:04:c8:31:c3:a4:
f0:75:af:e2:f1:e6:35:f5:2f:89:d2:72:de:58:a5:bb:a4:e0:
20:9b:da:0f:80:b6:e0:7a:27:c3:6f:c7:e2:34:31:bf:83:cc:
9f:8b:2f:87:2d:06:3c:8b:aa:ad:24:db:b6:29:e3:ed:1e:66:
cf:48:56:b2:c5:71:d4:af:3a:1c:b8:5c:f8:d3:0c:2e:92:18:
7f:9c:6b:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:28:20 2026 by rpki-client