Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/5cffd2-b568-4d55-a124-21fc9afc8ac1/1/lpztpb83kB_p5E9ztb-CtoezRXI.mft
File: lpztpb83kB_p5E9ztb-CtoezRXI.mft (raw, json)
Hash identifier: +xEiGobbKgPlvZ2d0TTcBPk9PPfiJf2C8cDNlTo0G+Q=
Subject key identifier: 1A:3B:C5:D3:22:EF:DC:D3:00:6E:ED:DA:2F:87:F9:2C:C9:8C:9E:03
Authority key identifier: 96:9C:ED:A5:BF:37:90:1F:E9:E4:4F:73:B5:BF:82:B6:87:B3:45:72
Certificate issuer: /CN=969ceda5bf37901fe9e44f73b5bf82b687b34572
Certificate serial: 019DB2EB01673C675B6398D16F60F1B6FEC5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lpztpb83kB_p5E9ztb-CtoezRXI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/5cffd2-b568-4d55-a124-21fc9afc8ac1/1/lpztpb83kB_p5E9ztb-CtoezRXI.mft
Manifest number: 0D74
Signing time: Wed 22 Apr 2026 02:00:38 +0000
Manifest this update: Wed 22 Apr 2026 02:00:38 +0000
Manifest next update: Thu 23 Apr 2026 02:00:38 +0000
Files and hashes: 1: 5tq-dphgnapNG8uID0bzWyuSiiI.roa (hash: Geh8HxvdWtRdjQA8GTRZhRKQeMt/TQkbrTaKQX7hwuM=)
2: SNXaMmatRq7Y2yZacERGh_Byx3c.roa (hash: 1VfAG/PWe9ADh3l7lJxuP3CaKheNhNOZc9+mMKVHmsc=)
3: aeJRC_Zrs1Xdsza3m-Bp94bJ1dk.roa (hash: 31o9/oasTnGfM4n9yp1biNvrc9x/A8EYFBmDcG491Fg=)
4: lpztpb83kB_p5E9ztb-CtoezRXI.crl (hash: kK832gaioBxrtgsV5kMdIZn/yCiNuw7NiB8o0DACepA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/5cffd2-b568-4d55-a124-21fc9afc8ac1/1/lpztpb83kB_p5E9ztb-CtoezRXI.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/5cffd2-b568-4d55-a124-21fc9afc8ac1/1/lpztpb83kB_p5E9ztb-CtoezRXI.mft
rsync://rpki.ripe.net/repository/DEFAULT/lpztpb83kB_p5E9ztb-CtoezRXI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Apr 2026 21:56:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:b2:eb:01:67:3c:67:5b:63:98:d1:6f:60:f1:b6:fe:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=969ceda5bf37901fe9e44f73b5bf82b687b34572
Validity
Not Before: Apr 22 02:00:38 2026 GMT
Not After : Apr 23 02:00:38 2026 GMT
Subject: CN=1a3bc5d322efdcd3006eedda2f87f92cc98c9e03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:5b:d0:df:a3:f0:05:13:5f:1b:12:ec:35:cf:
ca:c3:f3:53:a3:e9:b0:8d:a1:69:09:a9:de:89:a1:
09:14:96:fe:69:c1:ee:66:31:d8:f2:6c:6d:af:1e:
58:7f:dc:7f:40:0a:a3:46:01:c2:4e:bb:ee:b4:3c:
a6:03:fe:39:84:5c:b9:50:d4:38:44:2f:c3:db:1c:
8e:33:12:d3:f5:d7:a9:59:6c:58:5d:62:84:f9:89:
cc:bd:d4:1b:de:03:b5:9a:d8:f6:08:43:01:2a:31:
55:7b:b3:cd:4d:21:1b:27:ce:2f:75:6f:b2:77:2e:
81:71:2c:58:f9:13:81:35:e2:63:e7:11:8d:c3:ee:
4b:70:fb:86:ef:32:e1:de:b6:c8:7a:17:16:f3:c4:
19:86:1f:11:06:3a:5a:af:a0:91:79:7b:db:a9:52:
fb:e5:5f:e9:86:68:8e:14:de:76:c6:85:21:e7:cb:
a9:21:0c:d0:a3:33:77:c1:46:a4:62:7a:2e:f8:1c:
fb:18:4d:41:93:ae:b5:0b:e6:27:55:b0:6e:89:d2:
20:ba:6b:3e:ce:9d:4f:40:98:e8:a5:d4:7e:43:46:
dd:1c:20:88:78:f8:1e:b0:cc:63:ea:40:1b:15:83:
40:70:6f:e4:8d:01:1e:c5:59:d5:54:7c:69:77:40:
9a:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:3B:C5:D3:22:EF:DC:D3:00:6E:ED:DA:2F:87:F9:2C:C9:8C:9E:03
X509v3 Authority Key Identifier:
keyid:96:9C:ED:A5:BF:37:90:1F:E9:E4:4F:73:B5:BF:82:B6:87:B3:45:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lpztpb83kB_p5E9ztb-CtoezRXI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/5cffd2-b568-4d55-a124-21fc9afc8ac1/1/lpztpb83kB_p5E9ztb-CtoezRXI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/5cffd2-b568-4d55-a124-21fc9afc8ac1/1/lpztpb83kB_p5E9ztb-CtoezRXI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:25:6a:bf:94:16:ca:7e:e6:0d:a8:c6:6d:54:fc:63:0d:69:
d2:a4:52:2d:2e:1a:1b:3e:4e:59:1f:3a:9f:6f:fa:5d:90:95:
b9:37:ad:54:90:ad:5a:8e:73:97:83:6f:48:19:24:1e:ec:fa:
76:ee:97:b4:b4:5d:83:29:42:b5:ee:3f:ce:cf:a3:e4:41:53:
74:cd:1e:db:bc:e2:8e:2b:d8:47:d0:2b:84:96:d1:10:30:89:
73:67:6a:54:35:63:9a:49:b5:6c:2e:70:a6:18:2a:9d:3b:3b:
bc:eb:23:fa:0f:65:68:de:04:1a:d4:b3:d8:c9:f7:5a:dc:9d:
8d:6a:6b:3b:7b:a8:2f:c9:9b:36:f7:21:d2:37:f1:05:2b:35:
04:7b:68:f1:51:f9:b7:36:54:2a:d5:1a:c9:b1:bf:9f:4e:58:
2a:61:88:dc:38:91:0b:f2:91:48:cd:a5:c5:77:d6:d3:2e:21:
24:22:d6:18:03:ef:84:7e:00:55:05:cd:9c:b5:86:52:07:8d:
d4:df:6a:ee:c6:03:d3:dd:13:1f:14:a3:99:e9:52:64:33:be:
da:1c:86:bc:d1:3e:12:95:99:ba:06:76:ba:b9:57:83:4c:f5:
f7:18:28:57:a0:da:72:c1:7c:4b:6c:2c:50:8e:63:06:db:eb:
7a:7c:c6:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 22 07:25:50 2026 by rpki-client