Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/34d94d-2cc6-409d-95f3-949b91e9f48d/1/lpMmVir3Dnnz1RJIjikOkkMtWgE.mft
File: lpMmVir3Dnnz1RJIjikOkkMtWgE.mft (raw, json)
Hash identifier: 2dT5X5wAZEostcchlZn4yzdSNhgtpEVUrA8eocuAfJs=
Subject key identifier: 97:27:09:18:45:D1:6A:BC:99:57:E4:B5:EB:22:34:69:EF:18:68:3B
Authority key identifier: 96:93:26:56:2A:F7:0E:79:F3:D5:12:48:8E:29:0E:92:43:2D:5A:01
Certificate issuer: /CN=969326562af70e79f3d512488e290e92432d5a01
Certificate serial: 019D3A1CB8EEE3BF151DFFBF1E631DE22AB5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lpMmVir3Dnnz1RJIjikOkkMtWgE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/34d94d-2cc6-409d-95f3-949b91e9f48d/1/lpMmVir3Dnnz1RJIjikOkkMtWgE.mft
Manifest number: 153A
Signing time: Sun 29 Mar 2026 15:00:53 +0000
Manifest this update: Sun 29 Mar 2026 15:00:53 +0000
Manifest next update: Mon 30 Mar 2026 15:00:53 +0000
Files and hashes: 1: Vw02a6yVOC0_9OLMkHUnacovi9A.roa (hash: kApqSWOU193HAJks7pitPfX6Bo18GzOTPZ3hEE/9dhU=)
2: lpMmVir3Dnnz1RJIjikOkkMtWgE.crl (hash: PyuolfoIEUdydzUNaSHXGp9tqHx4YAGOWz7/EehaFls=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/34d94d-2cc6-409d-95f3-949b91e9f48d/1/lpMmVir3Dnnz1RJIjikOkkMtWgE.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/34d94d-2cc6-409d-95f3-949b91e9f48d/1/lpMmVir3Dnnz1RJIjikOkkMtWgE.mft
rsync://rpki.ripe.net/repository/DEFAULT/lpMmVir3Dnnz1RJIjikOkkMtWgE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:1c:b8:ee:e3:bf:15:1d:ff:bf:1e:63:1d:e2:2a:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=969326562af70e79f3d512488e290e92432d5a01
Validity
Not Before: Mar 29 15:00:53 2026 GMT
Not After : Mar 30 15:00:53 2026 GMT
Subject: CN=9727091845d16abc9957e4b5eb223469ef18683b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:4e:fe:56:02:b1:89:13:21:6e:76:18:4b:b9:
99:a2:8f:2e:8d:df:a8:40:d3:7a:04:94:57:9d:fe:
59:85:64:c2:51:7b:f3:01:48:5b:e3:95:54:34:5c:
05:0c:6f:d9:1e:d1:6f:23:d9:f7:4f:c5:84:22:58:
5c:6c:92:be:11:11:72:7c:b5:77:b4:43:36:b3:d1:
48:04:98:eb:4f:d3:1b:f1:36:16:a3:ae:fa:66:96:
19:61:91:13:52:63:27:b1:3f:5c:e6:51:01:89:e2:
60:43:66:18:c9:6d:7c:5f:2f:35:8a:e6:0d:ff:84:
6d:fc:dd:d1:0b:2c:69:a3:c0:25:4f:88:4a:bc:38:
27:59:43:e3:b2:f5:3b:5f:82:20:0d:df:09:20:48:
e0:11:51:c2:fb:63:4f:51:73:8b:35:85:70:f5:08:
10:fb:9f:3d:1c:d6:82:d8:3b:de:3e:46:2a:e8:67:
0a:a6:95:c6:71:9e:6e:5c:b1:79:c7:0c:cd:e9:74:
f6:0a:dc:5f:6b:a5:e8:29:53:64:27:65:b6:5f:87:
bb:7e:45:71:87:de:07:35:c4:8a:4a:be:11:c4:38:
d6:53:bf:38:85:c8:14:36:8c:54:32:35:b8:a7:29:
7b:48:bb:17:26:d4:8a:58:97:bb:79:3d:70:9a:8c:
f4:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:27:09:18:45:D1:6A:BC:99:57:E4:B5:EB:22:34:69:EF:18:68:3B
X509v3 Authority Key Identifier:
keyid:96:93:26:56:2A:F7:0E:79:F3:D5:12:48:8E:29:0E:92:43:2D:5A:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lpMmVir3Dnnz1RJIjikOkkMtWgE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/34d94d-2cc6-409d-95f3-949b91e9f48d/1/lpMmVir3Dnnz1RJIjikOkkMtWgE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/34d94d-2cc6-409d-95f3-949b91e9f48d/1/lpMmVir3Dnnz1RJIjikOkkMtWgE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:cc:58:7f:54:f0:08:a1:25:d4:f2:06:1d:20:f5:cb:37:24:
3e:23:01:11:8d:1b:84:e8:85:45:3b:74:4b:9d:c0:db:5d:86:
cc:ec:74:92:03:4d:3b:65:5b:bb:3f:9b:6a:55:80:95:cd:0b:
1f:b8:e6:b2:94:5a:6a:cc:f6:60:93:91:b4:5d:71:2e:f3:2a:
34:c1:a8:f6:e8:05:d5:c6:76:5b:d1:a7:3b:99:5b:fd:19:40:
5c:81:67:e7:ec:51:78:7c:c3:62:79:a9:74:72:7f:e4:ac:e4:
86:eb:24:e5:65:82:5c:bd:03:30:94:be:bd:3e:a3:c4:1b:7c:
2c:0e:a3:ef:44:62:77:78:91:b8:65:4a:17:9d:68:85:20:14:
f8:69:9b:22:59:5f:c0:3e:12:97:d6:c4:4c:6a:dd:a8:54:f6:
dc:0d:77:f4:3d:e2:f7:f1:df:b5:58:b1:59:53:86:51:60:85:
6a:b7:a5:db:66:59:68:dd:34:78:d4:49:bc:be:b9:1e:bd:42:
23:43:9f:1a:ca:b1:e6:0d:b0:44:6a:6b:d1:60:af:b1:7b:96:
f4:f7:a7:7e:7d:37:4e:a4:18:55:8b:1d:1d:3f:29:15:72:4b:
dd:8a:11:96:5a:f1:56:5a:37:99:02:36:19:fb:7d:5f:ec:c3:
65:bc:4b:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 18:35:57 2026 by rpki-client