Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/a6425c-0c7c-4fdf-87b2-6bba7fc31728/1/LpjFBqF0zyytnBpsW4HW6JiGNi0.mft
File: LpjFBqF0zyytnBpsW4HW6JiGNi0.mft (raw, json)
Hash identifier: ml4P3a5x24NXf/ipKm8PPeuwLqYqr8IMe5hDgAU1n8Q=
Subject key identifier: 6E:8E:98:E6:D8:A3:C0:07:BA:4C:FF:9A:F6:E1:E3:0B:62:15:44:71
Authority key identifier: 2E:98:C5:06:A1:74:CF:2C:AD:9C:1A:6C:5B:81:D6:E8:98:86:36:2D
Certificate issuer: /CN=2e98c506a174cf2cad9c1a6c5b81d6e89886362d
Certificate serial: 019D394129EFEA6C487BAB9EE9E41100C475
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LpjFBqF0zyytnBpsW4HW6JiGNi0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/a6425c-0c7c-4fdf-87b2-6bba7fc31728/1/LpjFBqF0zyytnBpsW4HW6JiGNi0.mft
Manifest number: 16A3
Signing time: Sun 29 Mar 2026 11:01:04 +0000
Manifest this update: Sun 29 Mar 2026 11:01:04 +0000
Manifest next update: Mon 30 Mar 2026 11:01:04 +0000
Files and hashes: 1: Du6kGTRHXI4yfntbUGKdYnjPgko.roa (hash: 1oJFFLp85i5EIPDvvQ2y+xVdVmVO4zl8WcaNvzV96iI=)
2: LpjFBqF0zyytnBpsW4HW6JiGNi0.crl (hash: 68XV3M6rMh0r+brMluYr9eq5fy7rU8L5pI/cG3GIKXk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/a6425c-0c7c-4fdf-87b2-6bba7fc31728/1/LpjFBqF0zyytnBpsW4HW6JiGNi0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/a6425c-0c7c-4fdf-87b2-6bba7fc31728/1/LpjFBqF0zyytnBpsW4HW6JiGNi0.mft
rsync://rpki.ripe.net/repository/DEFAULT/LpjFBqF0zyytnBpsW4HW6JiGNi0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 11:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:41:29:ef:ea:6c:48:7b:ab:9e:e9:e4:11:00:c4:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e98c506a174cf2cad9c1a6c5b81d6e89886362d
Validity
Not Before: Mar 29 11:01:04 2026 GMT
Not After : Mar 30 11:01:04 2026 GMT
Subject: CN=6e8e98e6d8a3c007ba4cff9af6e1e30b62154471
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:9b:ed:80:51:22:29:8f:b0:be:2f:02:ce:4c:
7a:84:72:44:51:64:9d:5b:18:ec:ba:59:dc:73:07:
61:57:c2:0c:9a:73:a4:82:c8:5c:22:f2:d6:57:34:
e9:9d:c9:d3:49:72:12:97:fb:4b:6f:45:b8:97:82:
c6:ac:57:5e:a3:75:ab:7a:fb:d5:81:fb:ea:62:0c:
30:aa:be:b5:65:1e:2f:88:07:36:f6:a9:f3:7e:24:
e8:19:44:4c:a1:57:c8:ae:8c:10:b6:68:b9:fd:12:
e1:ae:13:df:61:1f:74:18:0a:03:85:7f:9a:13:c4:
54:34:6a:af:b5:45:1e:7b:08:f3:b1:63:6e:23:71:
fa:cd:ac:59:6e:a6:ba:8a:80:32:d7:b4:40:10:8a:
5f:c8:e8:65:b5:88:87:59:83:f4:e8:c9:09:62:d8:
6e:d9:9a:92:4c:03:2f:5d:35:2c:93:a6:1f:0e:d3:
e3:ab:a2:85:44:9f:8e:ba:a7:2e:10:e6:9a:a4:f7:
f3:36:e8:be:05:55:f6:ee:92:17:47:67:3d:fe:4e:
bd:c3:77:00:27:2f:bc:c2:5e:70:23:01:22:0c:6b:
41:f9:1d:df:2e:14:e2:56:fb:59:c0:c7:5b:aa:0e:
fe:df:cb:b1:34:25:4e:bd:00:79:fa:0e:44:79:9a:
6b:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:8E:98:E6:D8:A3:C0:07:BA:4C:FF:9A:F6:E1:E3:0B:62:15:44:71
X509v3 Authority Key Identifier:
keyid:2E:98:C5:06:A1:74:CF:2C:AD:9C:1A:6C:5B:81:D6:E8:98:86:36:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LpjFBqF0zyytnBpsW4HW6JiGNi0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/a6425c-0c7c-4fdf-87b2-6bba7fc31728/1/LpjFBqF0zyytnBpsW4HW6JiGNi0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/a6425c-0c7c-4fdf-87b2-6bba7fc31728/1/LpjFBqF0zyytnBpsW4HW6JiGNi0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:bf:1f:5c:db:bc:8c:fd:27:1b:53:31:b7:b9:03:c3:c8:80:
dc:60:2e:f7:47:47:0e:de:bb:dc:24:77:f8:36:99:d8:55:29:
72:48:5b:f6:83:46:6a:12:d2:93:25:07:0d:2e:2f:ba:7a:c1:
a5:c9:7d:de:86:3c:87:0e:e9:c2:80:ad:de:2e:ee:bb:73:17:
e3:69:3b:66:4c:d2:9e:bf:c3:20:4e:fb:b9:7c:dc:ea:2f:86:
bb:a0:38:5f:96:52:13:34:da:be:97:55:e5:f7:c6:6c:b7:bb:
83:11:1c:42:67:34:76:69:25:e9:91:2f:23:7d:d9:fd:77:72:
65:e4:f5:91:6b:77:60:5f:e9:34:6a:35:45:7f:76:fa:5f:41:
b0:a8:8f:1a:45:84:12:41:2e:d2:b2:17:4c:52:0c:51:79:25:
2c:a9:15:25:b2:76:d8:91:a8:7c:e8:8f:44:c1:bc:b5:ee:f5:
52:eb:16:80:06:33:63:e0:aa:49:16:0c:58:06:4b:b5:89:20:
b5:a6:fe:5e:0c:bb:9d:d1:bf:67:6b:b7:9c:eb:3e:46:66:67:
83:b9:4d:44:b3:8a:10:44:18:f8:2c:5b:64:0a:ed:8b:c7:07:
12:81:09:72:9d:0e:1c:af:55:9c:6a:07:cb:9f:a9:67:62:42:
b7:82:f1:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 20:00:19 2026 by rpki-client