
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ff/a6425c-0c7c-4fdf-87b2-6bba7fc31728/1/LpjFBqF0zyytnBpsW4HW6JiGNi0.mft
File: LpjFBqF0zyytnBpsW4HW6JiGNi0.mft (raw, json)
Hash identifier: 7MGekpBlYAgUsgjClsWc3mw8lr7s6hWAXYsgpk1/BkA=
Subject key identifier: CA:9B:00:72:51:64:DE:AB:7C:E7:7F:51:D2:89:DB:05:CB:49:C2:CE
Authority key identifier: 2E:98:C5:06:A1:74:CF:2C:AD:9C:1A:6C:5B:81:D6:E8:98:86:36:2D
Certificate issuer: /CN=2e98c506a174cf2cad9c1a6c5b81d6e89886362d
Certificate serial: 01A0287CDADEDB528D037F866F6B44CC1C4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LpjFBqF0zyytnBpsW4HW6JiGNi0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/a6425c-0c7c-4fdf-87b2-6bba7fc31728/1/LpjFBqF0zyytnBpsW4HW6JiGNi0.mft
Manifest number: 1828
Signing time: Sat 22 Aug 2026 08:01:06 +0000
Manifest this update: Sat 22 Aug 2026 08:01:06 +0000
Manifest next update: Sun 23 Aug 2026 08:01:06 +0000
Files and hashes: 1: Du6kGTRHXI4yfntbUGKdYnjPgko.roa (hash: 1oJFFLp85i5EIPDvvQ2y+xVdVmVO4zl8WcaNvzV96iI=)
2: LpjFBqF0zyytnBpsW4HW6JiGNi0.crl (hash: uzbUDyWqpD3HDa3fPAvCwEq5kW+JXsbBIKLoBlM8t7g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/a6425c-0c7c-4fdf-87b2-6bba7fc31728/1/LpjFBqF0zyytnBpsW4HW6JiGNi0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/a6425c-0c7c-4fdf-87b2-6bba7fc31728/1/LpjFBqF0zyytnBpsW4HW6JiGNi0.mft
rsync://rpki.ripe.net/repository/DEFAULT/LpjFBqF0zyytnBpsW4HW6JiGNi0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 23 Aug 2026 04:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:28:7c:da:de:db:52:8d:03:7f:86:6f:6b:44:cc:1c:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e98c506a174cf2cad9c1a6c5b81d6e89886362d
Validity
Not Before: Aug 22 08:01:06 2026 GMT
Not After : Aug 23 08:01:06 2026 GMT
Subject: CN=ca9b00725164deab7ce77f51d289db05cb49c2ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:78:0f:3b:1e:bc:04:f3:b1:91:1c:50:41:2c:
69:16:bf:29:a0:4e:96:d5:26:cc:20:96:67:3b:4e:
bf:73:b3:b4:e4:90:4b:c8:f6:f1:35:5e:bc:3a:b1:
72:f3:66:95:b6:6d:00:fd:1b:2f:22:f7:5d:cb:33:
b4:c1:ae:a9:07:59:b5:6f:c4:74:fe:e2:48:77:95:
0f:96:69:06:94:f7:58:54:46:7f:83:9e:55:77:58:
37:bc:70:0d:47:66:8b:0a:d1:0d:e9:c1:d9:55:98:
bf:b0:3e:0a:24:4a:2f:d9:c3:74:03:60:16:83:6c:
32:ca:e3:1c:b9:04:2d:29:57:78:0c:bb:87:12:14:
b9:44:29:e3:e6:b3:ff:79:10:8b:5d:34:68:b0:07:
dd:53:ec:a8:f7:10:c4:99:8b:10:4d:21:92:93:56:
ab:a1:10:7e:f5:0a:32:80:fd:4d:3f:6d:64:34:ce:
98:bf:ed:e4:8b:43:f7:c0:75:1e:9c:d8:ea:3d:bd:
5a:f9:66:9e:ba:44:ba:bf:5e:52:1a:05:5f:13:e6:
a6:43:28:0b:ba:56:66:97:3b:3a:97:aa:07:d6:b3:
4b:11:dc:fb:b2:13:27:36:6a:16:9c:37:24:00:61:
ad:07:fd:f3:02:56:fd:86:7c:99:64:21:73:3f:df:
44:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:9B:00:72:51:64:DE:AB:7C:E7:7F:51:D2:89:DB:05:CB:49:C2:CE
X509v3 Authority Key Identifier:
keyid:2E:98:C5:06:A1:74:CF:2C:AD:9C:1A:6C:5B:81:D6:E8:98:86:36:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LpjFBqF0zyytnBpsW4HW6JiGNi0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/a6425c-0c7c-4fdf-87b2-6bba7fc31728/1/LpjFBqF0zyytnBpsW4HW6JiGNi0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/a6425c-0c7c-4fdf-87b2-6bba7fc31728/1/LpjFBqF0zyytnBpsW4HW6JiGNi0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:fa:45:fb:bc:a5:4e:88:8b:86:c4:6a:49:83:a9:08:e1:b2:
69:fa:b8:a0:ed:0b:7e:9b:45:12:8d:e2:6e:fe:55:b8:ad:b2:
9e:9e:2e:37:14:a4:59:32:2e:4c:24:79:0c:0f:8d:95:41:7c:
50:8f:ea:1b:bf:20:c3:81:36:1a:ec:96:70:04:9f:92:8f:9c:
3e:2d:a3:a2:f1:49:34:f2:ea:ce:81:f4:fd:d3:43:8a:df:02:
50:08:f9:1f:4d:6c:15:51:e7:96:51:41:2c:4f:5b:9b:58:38:
24:a7:b7:2d:48:6e:d1:c6:76:ae:23:b2:f5:00:5e:5d:1e:b7:
da:54:2b:d9:d3:ce:4c:09:69:6a:69:3c:c3:c6:5e:d0:59:f0:
58:33:3c:ef:bf:36:e9:c4:a3:17:81:a2:ff:01:f1:f0:e2:5a:
1c:c0:09:87:75:78:22:74:8c:59:cf:73:f5:64:bd:fd:0a:b7:
69:4a:2d:0d:1e:30:69:ef:0e:ca:e9:5a:5d:bd:f0:c4:05:c2:
41:0a:0c:87:37:90:ad:c1:f0:60:f2:a7:19:24:1c:a4:67:02:
c4:c6:99:15:81:c8:7c:67:0d:51:8b:b3:0f:b5:36:3c:3d:b7:
ab:f7:9b:f0:aa:a6:f2:b4:e9:36:3e:5e:8d:eb:23:a6:fd:3e:
3c:52:e2:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 12:30:15 2026 by rpki-client