Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/5fbcbb-00fa-4ad7-a801-43600171b8bd/1/lp1GNhtq9yD7mDas7JZbD1L0sJw.mft
File: lp1GNhtq9yD7mDas7JZbD1L0sJw.mft (raw, json)
Hash identifier: lTDqDdcSXFkBElCYjgJgvSvrZ8S1CmtnajI/0rSpDv0=
Subject key identifier: EA:B8:B5:1F:ED:B2:BD:5E:3F:DD:B7:87:30:07:09:C4:6A:68:96:7B
Authority key identifier: 96:9D:46:36:1B:6A:F7:20:FB:98:36:AC:EC:96:5B:0F:52:F4:B0:9C
Certificate issuer: /CN=969d46361b6af720fb9836acec965b0f52f4b09c
Certificate serial: 019E90CA42414C0EB2A3C12AB681CE16C8E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lp1GNhtq9yD7mDas7JZbD1L0sJw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/5fbcbb-00fa-4ad7-a801-43600171b8bd/1/lp1GNhtq9yD7mDas7JZbD1L0sJw.mft
Manifest number: 09FF
Signing time: Thu 04 Jun 2026 04:00:34 +0000
Manifest this update: Thu 04 Jun 2026 04:00:34 +0000
Manifest next update: Fri 05 Jun 2026 04:00:34 +0000
Files and hashes: 1: 7qVO45pVF7TizoyZ3tGtHXhleIo.roa (hash: gATl7peABL1S3wTIKJvI8pKX7Z470X6U51KJ5zpO3XQ=)
2: a-DNVnXzKcyTBpRv7rCFDhEA2Ks.roa (hash: uHevbCCqsNL4Z3mLZg7vrx9rkzYsimXYtM+5KXA7MHE=)
3: lp1GNhtq9yD7mDas7JZbD1L0sJw.crl (hash: lvAvt0DOIqa9QzLb5VH6eBcylUcfOkE4Tj4UeQO9VXY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/5fbcbb-00fa-4ad7-a801-43600171b8bd/1/lp1GNhtq9yD7mDas7JZbD1L0sJw.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/5fbcbb-00fa-4ad7-a801-43600171b8bd/1/lp1GNhtq9yD7mDas7JZbD1L0sJw.mft
rsync://rpki.ripe.net/repository/DEFAULT/lp1GNhtq9yD7mDas7JZbD1L0sJw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 05 Jun 2026 04:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:90:ca:42:41:4c:0e:b2:a3:c1:2a:b6:81:ce:16:c8:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=969d46361b6af720fb9836acec965b0f52f4b09c
Validity
Not Before: Jun 4 04:00:34 2026 GMT
Not After : Jun 5 04:00:34 2026 GMT
Subject: CN=eab8b51fedb2bd5e3fddb787300709c46a68967b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:2d:77:a3:1f:fa:d9:84:ba:e4:67:3f:41:7a:
a9:1e:1c:fe:7a:a2:10:fd:50:83:f8:25:dd:4f:8c:
08:d7:43:19:f3:62:ed:5a:6f:7a:08:53:92:8a:6d:
b7:7b:30:38:26:77:c7:0a:83:78:ca:b8:38:a3:3c:
4c:95:15:5c:e4:df:75:ff:9a:e4:e6:50:5a:95:16:
10:38:1a:b5:75:61:57:7b:7c:1d:39:e2:02:cf:69:
08:b2:34:aa:6c:fe:4e:ab:40:4a:32:aa:0a:44:2d:
36:a8:fc:e5:ba:8f:2c:c0:7e:e9:87:5d:d3:9d:12:
f0:58:47:68:e6:6f:33:14:67:31:bd:85:87:d1:cc:
3f:32:1e:84:73:0b:a8:70:ce:93:c8:d1:27:07:36:
f9:18:c7:92:71:a4:e9:5c:7b:42:28:22:56:4b:31:
c4:13:2b:e1:a3:7e:09:b0:1a:47:83:6e:da:50:b7:
ff:80:f4:96:ff:24:1c:29:77:77:bc:58:64:f4:1f:
41:d1:a4:b7:96:b6:cc:dc:29:d2:ef:78:e2:9e:f8:
c3:2c:2b:d1:6b:84:c6:ea:fa:d0:4d:f6:36:80:ca:
b6:25:a6:d7:51:cd:9a:ca:fe:05:59:d9:8f:8d:cf:
4f:34:ac:26:6f:d8:e2:1b:01:ab:5a:40:b5:db:31:
c1:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:B8:B5:1F:ED:B2:BD:5E:3F:DD:B7:87:30:07:09:C4:6A:68:96:7B
X509v3 Authority Key Identifier:
keyid:96:9D:46:36:1B:6A:F7:20:FB:98:36:AC:EC:96:5B:0F:52:F4:B0:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lp1GNhtq9yD7mDas7JZbD1L0sJw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/5fbcbb-00fa-4ad7-a801-43600171b8bd/1/lp1GNhtq9yD7mDas7JZbD1L0sJw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/5fbcbb-00fa-4ad7-a801-43600171b8bd/1/lp1GNhtq9yD7mDas7JZbD1L0sJw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:a4:0b:01:f7:a6:dc:86:73:5a:8b:dd:db:5e:09:05:2e:f6:
1a:51:51:ee:0a:43:46:13:06:10:12:02:4c:4d:6b:3b:47:82:
f8:1b:74:16:b5:a8:57:63:e3:21:19:4b:cc:c0:96:6b:02:9d:
a7:8b:b0:fb:b0:e9:aa:85:f5:c4:c8:95:94:57:70:f6:80:d4:
c1:63:40:d8:07:f8:3f:f9:79:ac:cd:79:49:c2:21:e3:87:86:
d0:3d:b0:eb:82:11:e6:2a:9a:ff:1f:da:6f:1a:a4:07:73:a2:
77:dd:cd:05:b2:ec:6c:39:0a:f8:9f:9f:03:eb:14:01:7e:59:
5f:51:59:8d:30:6e:f4:2a:91:12:32:02:ce:ac:6b:bd:a1:b9:
0e:9f:bb:1e:93:20:5c:68:1b:a1:36:a6:00:ed:d3:40:5e:a1:
e7:5f:df:30:3e:55:f9:34:1e:43:28:d6:3e:ac:bb:7d:b1:af:
76:d6:50:c4:d8:c5:a7:b7:92:d9:c6:01:f5:ff:09:c5:2a:e7:
b5:d5:00:c7:2f:a2:5e:b8:26:4f:c1:7a:e6:e5:a6:bc:bb:84:
d4:0d:c6:4f:47:95:52:84:c1:67:51:d1:76:df:a6:fc:4a:29:
56:04:57:91:e3:0b:f3:98:70:72:61:5b:f1:1e:d2:0e:12:57:
6d:50:01:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 12:24:36 2026 by rpki-client