Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/febab0-d93a-4704-9a71-3ad52e8b9628/1/LSjPo_0tqcqqZZKEdY3uZwmZNPg.mft
File: LSjPo_0tqcqqZZKEdY3uZwmZNPg.mft (raw, json)
Hash identifier: S/4wWUqogTvgIFonccWdy6+tUPXe8BNz+eeraVx2lh0=
Subject key identifier: 42:34:D2:A2:21:DF:7E:95:2C:E6:B0:A4:BA:FD:D2:18:03:03:EF:76
Authority key identifier: 2D:28:CF:A3:FD:2D:A9:CA:AA:65:92:84:75:8D:EE:67:09:99:34:F8
Certificate issuer: /CN=2d28cfa3fd2da9caaa659284758dee67099934f8
Certificate serial: 01A1803DA0EF00E31D4531D95C59CAF0692D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LSjPo_0tqcqqZZKEdY3uZwmZNPg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/febab0-d93a-4704-9a71-3ad52e8b9628/1/LSjPo_0tqcqqZZKEdY3uZwmZNPg.mft
Manifest number: 16A2
Signing time: Wed 28 Oct 2026 02:01:24 +0000
Manifest this update: Wed 28 Oct 2026 02:01:24 +0000
Manifest next update: Thu 29 Oct 2026 02:01:24 +0000
Files and hashes: 1: LSjPo_0tqcqqZZKEdY3uZwmZNPg.crl (hash: Ithgq6ZNn8eWoonICq8nC7I/LzMDa6Xq50IBW2+n5YM=)
2: Rs82s1GfL_H0ZSEYQ-pjLnSpEg4.roa (hash: CPahuBP/QEjD7/mn+rgujqsn8CmzHunCThRPx25Eyto=)
3: regdGTdqPxSg7ERZs4-zecqOg1c.roa (hash: SO+bb/AT3Es4TWWPCPRUMxbKDZ/Elg/HF32w+RORyPA=)
4: sJ7rRhlozSopUwn3kZQ6qS2Lj3A.roa (hash: 69ARsnQbQaHuHkyGiqTvn8kIeud2aA9Y9jgyLsbYA4k=)
5: uwmHRiIuTJylz9Gdo1W-0ay8bNM.roa (hash: TKuZkBqiGMkGtIq0Yy2Mt/oKfXM7W5PYWJgE3e9qIwo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/febab0-d93a-4704-9a71-3ad52e8b9628/1/LSjPo_0tqcqqZZKEdY3uZwmZNPg.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/febab0-d93a-4704-9a71-3ad52e8b9628/1/LSjPo_0tqcqqZZKEdY3uZwmZNPg.mft
rsync://rpki.ripe.net/repository/DEFAULT/LSjPo_0tqcqqZZKEdY3uZwmZNPg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 22:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:80:3d:a0:ef:00:e3:1d:45:31:d9:5c:59:ca:f0:69:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d28cfa3fd2da9caaa659284758dee67099934f8
Validity
Not Before: Oct 28 02:01:24 2026 GMT
Not After : Oct 29 02:01:24 2026 GMT
Subject: CN=4234d2a221df7e952ce6b0a4bafdd2180303ef76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:34:f6:05:ad:2d:81:ac:00:8d:5d:fe:5f:fa:
bc:02:09:51:6e:bf:31:c8:2a:9d:fa:cc:a7:ab:ab:
41:43:d0:81:f6:e3:55:61:d7:ab:33:a0:40:68:c1:
a2:d9:2d:29:f5:d5:35:78:cb:1c:35:8a:cb:02:b7:
52:5c:30:bb:92:ed:56:65:37:f0:7d:54:55:a2:29:
f5:71:bf:63:0d:6a:c5:f6:20:44:f4:64:bb:02:6e:
7a:88:7f:5b:a6:e5:6e:57:d9:c1:a5:14:73:1c:fb:
58:54:1b:de:3f:b3:3b:ab:52:36:37:6a:1d:42:5b:
42:63:de:06:80:d8:5d:a2:75:87:bc:9e:aa:9b:40:
c5:1f:e3:26:3d:01:1f:c4:53:4c:0f:cf:bd:9e:d0:
76:da:26:0d:cc:d5:16:46:82:f5:9a:ab:d0:4b:08:
3a:d1:a1:b1:00:30:38:69:08:37:55:c1:9e:f2:7e:
00:c5:75:93:90:d4:98:27:d3:0d:9e:af:b1:cd:eb:
23:44:7f:75:cf:b0:f7:ea:48:0e:45:26:c2:c5:d3:
ee:22:24:9f:d7:f5:f4:8c:07:18:41:97:e9:e7:70:
78:61:94:b4:81:07:cf:aa:6f:a1:df:6b:e1:e2:ee:
52:d6:fc:17:3a:11:3c:b2:a2:cd:6b:d5:ab:ba:c0:
29:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:34:D2:A2:21:DF:7E:95:2C:E6:B0:A4:BA:FD:D2:18:03:03:EF:76
X509v3 Authority Key Identifier:
keyid:2D:28:CF:A3:FD:2D:A9:CA:AA:65:92:84:75:8D:EE:67:09:99:34:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LSjPo_0tqcqqZZKEdY3uZwmZNPg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/febab0-d93a-4704-9a71-3ad52e8b9628/1/LSjPo_0tqcqqZZKEdY3uZwmZNPg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/febab0-d93a-4704-9a71-3ad52e8b9628/1/LSjPo_0tqcqqZZKEdY3uZwmZNPg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e1:47:dc:34:87:39:96:bb:22:a0:15:e0:e4:58:14:b4:54:e3:
cc:21:55:f9:ff:c8:84:63:fd:55:e4:5b:9f:6e:14:07:30:c7:
9a:09:cd:48:73:35:99:fc:8f:73:c3:c1:55:35:57:ec:e6:07:
60:7c:cf:ae:db:9b:24:1a:cf:0e:f0:8d:7a:77:1b:97:c5:e3:
87:73:7e:67:7c:be:c2:17:62:81:2f:22:b3:02:10:f7:7c:95:
d1:33:e5:0b:ba:e7:c7:f2:76:99:64:98:11:1c:67:82:c6:e9:
45:0a:f8:8b:40:a9:75:84:50:b7:c3:c9:f4:7d:0e:eb:59:fb:
42:47:bd:96:e2:71:48:ce:f7:23:3a:81:bc:69:3f:03:69:66:
da:c6:6d:5c:8d:5c:95:37:4b:e3:0d:42:f2:60:59:fe:43:3b:
fd:57:c8:a2:5f:43:94:65:80:a9:05:e0:4b:34:7e:c5:ad:e1:
6d:24:a7:51:b0:71:63:49:6f:59:5a:a9:84:a8:84:21:18:ee:
fb:04:3e:fa:3d:f1:c1:0c:5d:f1:1a:84:1c:a4:f6:3e:c5:92:
d2:2e:af:80:2a:d2:52:69:64:d0:ec:f6:38:36:95:3e:87:e9:
ee:07:21:ff:40:a7:b7:ce:ad:05:5d:88:02:1f:af:04:58:a5:
d7:96:67:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 07:22:28 2026 by rpki-client