Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0a/420c14-cb2c-4e3e-87b9-3fc39487807c/1/LIPfskYpwWd5NQtKd3tbKA_FnUQ.mft
File: LIPfskYpwWd5NQtKd3tbKA_FnUQ.mft (raw, json)
Hash identifier: q5YBo5Ma5dnnjU4AJAKPprHk2wmGjkCr6p5W+aLpXBk=
Subject key identifier: C3:46:79:E7:8B:B8:22:79:F9:A5:42:E7:F1:89:E0:A4:C4:91:72:5D
Authority key identifier: 2C:83:DF:B2:46:29:C1:67:79:35:0B:4A:77:7B:5B:28:0F:C5:9D:44
Certificate issuer: /CN=2c83dfb24629c16779350b4a777b5b280fc59d44
Certificate serial: 01A106CA282BA4AC0DB3BB302D06BE995065
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LIPfskYpwWd5NQtKd3tbKA_FnUQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/420c14-cb2c-4e3e-87b9-3fc39487807c/1/LIPfskYpwWd5NQtKd3tbKA_FnUQ.mft
Manifest number: 1A89
Signing time: Sun 04 Oct 2026 12:01:13 +0000
Manifest this update: Sun 04 Oct 2026 12:01:13 +0000
Manifest next update: Mon 05 Oct 2026 12:01:13 +0000
Files and hashes: 1: LIPfskYpwWd5NQtKd3tbKA_FnUQ.crl (hash: O5biA3WhDSQjIXx51sILCuVlMQ/k4BJdpowl6JowEfs=)
2: SizhTkIG2sATNsv1VQNzH4wHchc.roa (hash: 2PYBEpDEAGt3SnEGmQvvCFiLA489Fe6L2n4/O/hryFQ=)
3: cMMwTPV9hTcR-LW3CCNoNNI7ghU.roa (hash: D27oXJgFuXlMx0AdNp5xIFlLxsheQv6fczl4XU0D9Lc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/420c14-cb2c-4e3e-87b9-3fc39487807c/1/LIPfskYpwWd5NQtKd3tbKA_FnUQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/420c14-cb2c-4e3e-87b9-3fc39487807c/1/LIPfskYpwWd5NQtKd3tbKA_FnUQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/LIPfskYpwWd5NQtKd3tbKA_FnUQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 12:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:06:ca:28:2b:a4:ac:0d:b3:bb:30:2d:06:be:99:50:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c83dfb24629c16779350b4a777b5b280fc59d44
Validity
Not Before: Oct 4 12:01:13 2026 GMT
Not After : Oct 5 12:01:13 2026 GMT
Subject: CN=c34679e78bb82279f9a542e7f189e0a4c491725d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:eb:ed:8e:91:a5:48:e3:fc:4a:31:66:eb:9f:
26:a0:cb:ff:4e:b3:a0:a5:f6:f4:0e:19:4e:16:99:
93:d1:57:ec:0e:cc:38:8f:72:2c:66:76:8c:73:f8:
0d:85:8e:b3:23:96:20:c0:eb:c7:de:61:ce:60:55:
c3:07:26:8a:5c:4d:c3:f6:9e:c7:cf:7a:62:75:5d:
2c:6f:4c:9d:dd:be:4c:39:57:f6:9d:db:1f:ef:82:
4e:01:c4:74:fd:13:f0:25:57:04:26:2b:29:db:c4:
9a:77:75:79:d6:49:c9:6e:02:36:ef:b7:9a:80:54:
a1:8a:f5:c2:96:9b:7a:83:5b:53:1c:1f:bc:fb:08:
7f:e6:1c:5b:8e:77:bd:37:c7:65:b5:99:7a:b2:5d:
fc:bd:65:6d:05:fc:1b:ef:7e:0d:41:02:30:c0:f4:
52:57:77:3f:ae:6d:07:77:be:00:e5:01:12:49:21:
a8:10:4d:3a:37:fc:13:bd:45:3d:93:66:8d:4e:bf:
c4:b4:f5:2e:f1:f2:31:90:fd:01:38:8e:08:9a:18:
0d:85:55:9b:29:43:42:64:11:c0:0b:28:92:28:88:
d6:ab:4d:78:ed:b1:ba:7a:37:5f:7d:68:63:c4:51:
24:b2:e7:51:5e:43:9d:b7:70:da:d2:21:09:b6:e3:
56:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:46:79:E7:8B:B8:22:79:F9:A5:42:E7:F1:89:E0:A4:C4:91:72:5D
X509v3 Authority Key Identifier:
keyid:2C:83:DF:B2:46:29:C1:67:79:35:0B:4A:77:7B:5B:28:0F:C5:9D:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LIPfskYpwWd5NQtKd3tbKA_FnUQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/420c14-cb2c-4e3e-87b9-3fc39487807c/1/LIPfskYpwWd5NQtKd3tbKA_FnUQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/420c14-cb2c-4e3e-87b9-3fc39487807c/1/LIPfskYpwWd5NQtKd3tbKA_FnUQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:f7:3c:d2:b1:d7:4a:1e:fc:bb:ba:0a:42:3c:d1:97:2a:84:
1a:1d:81:cb:c0:d1:07:2d:2a:8b:e7:dc:2f:12:2f:10:bd:95:
db:8c:ca:79:78:19:cb:60:de:7c:10:c6:f3:97:0e:fb:f1:6c:
c5:b2:7f:20:84:c6:71:bf:2d:6c:84:d8:f3:a0:b6:63:14:42:
93:c9:61:23:9a:d6:71:23:8c:66:d8:13:11:f9:d8:54:df:21:
0d:65:83:1c:f4:c0:87:ae:71:af:b0:35:ca:80:f4:bc:60:ff:
10:7e:73:ca:4b:89:3b:0a:72:5b:12:ae:dc:73:63:07:b1:01:
4d:c7:2f:a3:28:ab:5e:41:9b:24:3a:fd:9a:43:bc:1e:a8:36:
c0:06:db:03:76:06:b9:3d:85:0d:2f:d1:c0:8b:ed:16:bb:8f:
53:56:4e:e5:c5:06:c2:1f:02:e7:1e:98:df:b4:c0:43:c2:7b:
bd:1d:d2:46:74:22:db:1a:7e:46:b9:e3:7d:16:4c:3d:8b:5d:
f2:5e:f6:52:d2:90:4e:2a:7b:c5:2a:36:83:3a:3e:f6:ea:ae:
0a:1e:b8:b1:59:cd:9e:e3:fe:ef:e3:4c:33:38:83:41:8a:f5:
ad:65:e8:b1:b6:44:de:7c:e9:8f:65:7f:75:52:19:02:19:cc:
8e:9d:56:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 20:14:37 2026 by rpki-client