Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/420c14-cb2c-4e3e-87b9-3fc39487807c/1/LIPfskYpwWd5NQtKd3tbKA_FnUQ.mft
File: LIPfskYpwWd5NQtKd3tbKA_FnUQ.mft (raw, json)
Hash identifier: lMUaKIhaKrXeyYRrSIRdwzGHc/zvFj+/BjFMtOYfAqE=
Subject key identifier: 09:E1:59:44:D9:79:2D:A3:8E:86:2D:7A:CB:9C:34:62:C7:9D:7C:6A
Authority key identifier: 2C:83:DF:B2:46:29:C1:67:79:35:0B:4A:77:7B:5B:28:0F:C5:9D:44
Certificate issuer: /CN=2c83dfb24629c16779350b4a777b5b280fc59d44
Certificate serial: 019D2627EA788656C6784F2D228D78F71BB0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LIPfskYpwWd5NQtKd3tbKA_FnUQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/420c14-cb2c-4e3e-87b9-3fc39487807c/1/LIPfskYpwWd5NQtKd3tbKA_FnUQ.mft
Manifest number: 1887
Signing time: Wed 25 Mar 2026 18:00:43 +0000
Manifest this update: Wed 25 Mar 2026 18:00:43 +0000
Manifest next update: Thu 26 Mar 2026 18:00:43 +0000
Files and hashes: 1: LIPfskYpwWd5NQtKd3tbKA_FnUQ.crl (hash: mdoyRqGOrQjMg5s7qMjCu2D9wj6OQ93AWs3UlX9kp0g=)
2: SizhTkIG2sATNsv1VQNzH4wHchc.roa (hash: 2PYBEpDEAGt3SnEGmQvvCFiLA489Fe6L2n4/O/hryFQ=)
3: cMMwTPV9hTcR-LW3CCNoNNI7ghU.roa (hash: D27oXJgFuXlMx0AdNp5xIFlLxsheQv6fczl4XU0D9Lc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/420c14-cb2c-4e3e-87b9-3fc39487807c/1/LIPfskYpwWd5NQtKd3tbKA_FnUQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/420c14-cb2c-4e3e-87b9-3fc39487807c/1/LIPfskYpwWd5NQtKd3tbKA_FnUQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/LIPfskYpwWd5NQtKd3tbKA_FnUQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:27:ea:78:86:56:c6:78:4f:2d:22:8d:78:f7:1b:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c83dfb24629c16779350b4a777b5b280fc59d44
Validity
Not Before: Mar 25 18:00:43 2026 GMT
Not After : Mar 26 18:00:43 2026 GMT
Subject: CN=09e15944d9792da38e862d7acb9c3462c79d7c6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:46:b8:41:35:f9:e4:05:92:73:3d:f2:35:a8:
85:d2:1f:6f:a8:3b:3e:ca:56:df:49:9b:6a:45:a1:
f2:15:4e:03:ec:91:1d:00:b6:7c:de:ac:35:5f:ed:
f3:12:95:f8:97:d3:7b:9e:9b:df:3b:a8:98:34:1e:
89:b6:3a:12:de:92:28:35:fe:cb:3d:33:fe:fa:39:
0f:87:63:ee:83:21:01:37:41:38:ff:4d:4c:d7:de:
20:fc:6c:c9:08:46:8b:28:76:70:9c:13:c4:e0:4e:
65:41:7d:28:ae:1f:18:13:81:e7:2c:bb:89:a9:3c:
5f:83:7f:92:c4:f7:16:62:8f:c7:bc:3e:ab:9d:d5:
9d:29:9b:8e:0d:67:e9:e1:b7:1a:cf:ea:53:92:bd:
94:8c:93:30:eb:71:13:c2:19:86:40:e9:58:12:2b:
67:62:e0:4d:bc:4f:ae:74:5a:21:d4:2c:31:3b:f6:
4e:50:3e:c7:fb:53:6c:88:fc:80:56:c0:1f:10:22:
d1:47:bf:fb:02:d9:07:02:42:f7:32:2c:c7:53:f2:
ff:26:29:e6:7c:be:0b:50:da:43:12:3f:a6:2d:e1:
40:8b:ed:24:0a:c9:68:bd:a3:f8:d3:82:0e:e8:97:
ee:b7:fa:17:7f:1c:df:1a:9d:1c:32:dd:67:80:50:
59:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:E1:59:44:D9:79:2D:A3:8E:86:2D:7A:CB:9C:34:62:C7:9D:7C:6A
X509v3 Authority Key Identifier:
keyid:2C:83:DF:B2:46:29:C1:67:79:35:0B:4A:77:7B:5B:28:0F:C5:9D:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LIPfskYpwWd5NQtKd3tbKA_FnUQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/420c14-cb2c-4e3e-87b9-3fc39487807c/1/LIPfskYpwWd5NQtKd3tbKA_FnUQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/420c14-cb2c-4e3e-87b9-3fc39487807c/1/LIPfskYpwWd5NQtKd3tbKA_FnUQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:cd:bb:54:da:81:95:14:80:d5:a6:f5:1d:a9:11:93:81:33:
9f:c1:df:51:73:09:52:ad:38:3c:7e:01:99:e9:24:94:63:6e:
26:36:b3:4f:2f:6b:8e:e4:b3:b7:a1:ba:00:16:40:17:22:9b:
f6:01:33:09:53:45:f0:36:ac:1b:ef:5a:8d:57:e3:c8:4d:49:
7e:f8:33:2f:03:08:f1:23:c5:f9:c0:6e:d8:dd:4b:2a:1b:a0:
f8:e6:ff:b3:7a:e6:6a:de:4c:70:ab:38:a3:08:d4:ab:36:30:
17:9d:7e:6a:01:88:5a:9c:e9:d7:30:96:6c:b3:f0:ed:0f:cf:
ab:7d:82:b8:94:48:a4:fd:9a:21:d8:ba:90:b5:d9:df:a8:4b:
72:78:05:b5:28:bc:32:55:d9:e8:cd:1b:a5:26:b7:ed:f0:33:
f0:75:19:9a:90:df:80:30:fb:5c:18:62:ed:62:4d:28:ab:9c:
6f:47:a2:91:c2:a7:ad:78:ad:9a:66:df:b2:33:6d:65:8b:a5:
42:4b:e5:1b:b2:75:4f:95:7f:bf:96:7e:f8:bd:73:1f:92:d2:
01:05:2e:47:7c:c1:c4:7c:17:f9:c6:94:f4:a1:58:2c:99:11:
1f:5a:81:83:7b:cd:6d:5f:9f:e7:03:1a:01:84:c7:11:2f:20:
75:5c:af:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:23:39 2026 by rpki-client