Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/5cffd2-b568-4d55-a124-21fc9afc8ac1/1/lpztpb83kB_p5E9ztb-CtoezRXI.mft
File: lpztpb83kB_p5E9ztb-CtoezRXI.mft (raw, json)
Hash identifier: JRhheKJkN6PY07NhWqBjnNi5uCeI8v1SutmYjf6zXlM=
Subject key identifier: 64:47:A8:04:99:65:53:90:96:59:47:A3:F8:BB:4E:6B:20:67:74:F1
Authority key identifier: 96:9C:ED:A5:BF:37:90:1F:E9:E4:4F:73:B5:BF:82:B6:87:B3:45:72
Certificate issuer: /CN=969ceda5bf37901fe9e44f73b5bf82b687b34572
Certificate serial: 019CCB2CD65354C31F34E95A7B73693A08CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lpztpb83kB_p5E9ztb-CtoezRXI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/5cffd2-b568-4d55-a124-21fc9afc8ac1/1/lpztpb83kB_p5E9ztb-CtoezRXI.mft
Manifest number: 0CFC
Signing time: Sun 08 Mar 2026 02:00:39 +0000
Manifest this update: Sun 08 Mar 2026 02:00:39 +0000
Manifest next update: Mon 09 Mar 2026 02:00:39 +0000
Files and hashes: 1: 5tq-dphgnapNG8uID0bzWyuSiiI.roa (hash: Geh8HxvdWtRdjQA8GTRZhRKQeMt/TQkbrTaKQX7hwuM=)
2: SNXaMmatRq7Y2yZacERGh_Byx3c.roa (hash: 1VfAG/PWe9ADh3l7lJxuP3CaKheNhNOZc9+mMKVHmsc=)
3: aeJRC_Zrs1Xdsza3m-Bp94bJ1dk.roa (hash: 31o9/oasTnGfM4n9yp1biNvrc9x/A8EYFBmDcG491Fg=)
4: lpztpb83kB_p5E9ztb-CtoezRXI.crl (hash: 1s/zqc9aE0gEw3jZYLvpxZZaU4I8wouJypLbZ6vvBpY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/5cffd2-b568-4d55-a124-21fc9afc8ac1/1/lpztpb83kB_p5E9ztb-CtoezRXI.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/5cffd2-b568-4d55-a124-21fc9afc8ac1/1/lpztpb83kB_p5E9ztb-CtoezRXI.mft
rsync://rpki.ripe.net/repository/DEFAULT/lpztpb83kB_p5E9ztb-CtoezRXI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Mar 2026 20:09:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:cb:2c:d6:53:54:c3:1f:34:e9:5a:7b:73:69:3a:08:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=969ceda5bf37901fe9e44f73b5bf82b687b34572
Validity
Not Before: Mar 8 02:00:39 2026 GMT
Not After : Mar 9 02:00:39 2026 GMT
Subject: CN=6447a80499655390965947a3f8bb4e6b206774f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:3f:cd:e2:80:ca:1b:22:aa:f9:3c:dd:7a:aa:
07:6f:12:ad:22:7c:11:39:9f:38:94:3c:18:0b:bb:
81:89:08:94:c4:e6:2f:1d:13:b5:e1:ca:5f:e4:20:
bd:49:ee:95:0e:de:d0:c0:97:73:c5:9e:83:75:06:
6d:bb:76:29:aa:42:ad:3f:25:68:d9:68:a0:b6:1f:
27:87:4b:55:a8:e2:f4:7d:46:96:5f:31:db:f6:c1:
4c:64:fe:ec:1f:18:5f:4f:88:76:91:f7:64:e6:91:
4c:b0:e5:76:e1:4c:72:b7:a3:11:5d:b0:15:bd:fd:
4e:96:2e:8d:56:ec:a5:3c:b1:8a:0a:78:28:75:aa:
4e:f7:96:d8:f4:fd:49:05:02:85:50:e4:15:79:eb:
d3:8a:b7:d6:6d:cd:45:39:ac:21:1f:19:01:20:1c:
b3:e6:56:76:91:c9:bf:b7:16:b3:e4:f7:10:c7:92:
77:60:cf:aa:c9:ad:b8:a9:e6:51:41:b1:b8:4a:f7:
22:cb:fe:65:c4:6a:0d:3b:3e:72:b7:89:db:bc:f7:
b1:4b:1d:a9:b9:69:c4:15:81:48:8e:9f:04:c9:01:
78:90:a4:5e:e5:e2:02:02:88:46:9d:af:e6:7d:2f:
c1:92:0c:73:3c:c2:6a:50:4b:99:24:3c:96:51:23:
4b:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:47:A8:04:99:65:53:90:96:59:47:A3:F8:BB:4E:6B:20:67:74:F1
X509v3 Authority Key Identifier:
keyid:96:9C:ED:A5:BF:37:90:1F:E9:E4:4F:73:B5:BF:82:B6:87:B3:45:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lpztpb83kB_p5E9ztb-CtoezRXI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/5cffd2-b568-4d55-a124-21fc9afc8ac1/1/lpztpb83kB_p5E9ztb-CtoezRXI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/5cffd2-b568-4d55-a124-21fc9afc8ac1/1/lpztpb83kB_p5E9ztb-CtoezRXI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:9d:bd:5a:a1:11:61:a4:7a:61:f0:8f:7c:b9:e4:4c:ea:39:
c7:c9:01:7b:bb:d8:f3:31:c6:85:52:09:eb:74:fb:a7:5d:30:
7a:ba:3d:59:d4:96:fc:0e:d3:8c:ea:a0:2d:e4:2e:af:ab:af:
a7:88:f8:94:e0:b4:ed:42:7a:b1:65:29:00:11:0a:0c:d9:48:
20:94:48:1e:22:83:75:7e:3a:49:f3:2a:06:6d:45:3c:bf:82:
d5:cd:ba:83:5f:7a:97:66:b9:c5:e2:4b:74:19:83:ee:94:0e:
54:5b:47:17:00:b9:4b:2b:99:b5:24:30:ef:36:59:59:55:39:
2c:f6:c6:d8:c7:21:05:a6:18:c0:d5:f9:1e:ca:b4:c3:66:06:
a3:c4:49:92:7d:58:8b:7c:4d:38:f6:76:d5:a6:b3:d1:26:b9:
22:f0:a8:05:b2:53:18:d0:12:04:c6:f5:90:aa:82:92:e8:bc:
23:a1:df:45:80:41:23:c0:af:16:90:01:41:95:15:1a:74:63:
ec:ce:39:14:e8:47:80:e3:65:c9:bc:61:6c:f2:71:45:5f:49:
c5:c8:e2:16:45:ee:d1:8b:ee:77:87:2f:d9:5c:04:dd:13:cb:
e2:21:de:21:44:64:15:68:d3:f5:15:3d:de:5c:72:1d:16:b9:
2f:de:77:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 8 03:50:49 2026 by rpki-client