Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0f/ca2213-e5a1-4ad2-8a22-768d3fb08e70/1/LPYTYxWlLVJHEkt882mq-4MSIn4.mft
File: LPYTYxWlLVJHEkt882mq-4MSIn4.mft (raw, json)
Hash identifier: XXB22+3jeiUVCEb0pWOb3mi32LnxkidNtvrAbrfqPn0=
Subject key identifier: 36:C7:3E:2C:13:B6:78:6C:FA:8F:C0:20:FA:01:48:E8:D0:BF:15:CB
Authority key identifier: 2C:F6:13:63:15:A5:2D:52:47:12:4B:7C:F3:69:AA:FB:83:12:22:7E
Certificate issuer: /CN=2cf6136315a52d5247124b7cf369aafb8312227e
Certificate serial: 01A0CF6D467DA944C05379E4E863B535FFFE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LPYTYxWlLVJHEkt882mq-4MSIn4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/ca2213-e5a1-4ad2-8a22-768d3fb08e70/1/LPYTYxWlLVJHEkt882mq-4MSIn4.mft
Manifest number: 1070
Signing time: Wed 23 Sep 2026 18:00:40 +0000
Manifest this update: Wed 23 Sep 2026 18:00:40 +0000
Manifest next update: Thu 24 Sep 2026 18:00:40 +0000
Files and hashes: 1: LPYTYxWlLVJHEkt882mq-4MSIn4.crl (hash: itJpLneMpumykEESMFtlLQyy4cTQSQY5qcf8n/s1k4I=)
2: r45G67-96LJpADDZJVJ0gLKO_X4.roa (hash: xLucZhj5eosliNF0R5ZBpKqpdmf4rFaViGwVRkuYRmo=)
3: u7gow9KmygGFJud8Kbx8Q5bXl10.roa (hash: zOMjeXXBLvQlEvulfQkHinq9NE+I+uXsiNr8CDWlugI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/ca2213-e5a1-4ad2-8a22-768d3fb08e70/1/LPYTYxWlLVJHEkt882mq-4MSIn4.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/ca2213-e5a1-4ad2-8a22-768d3fb08e70/1/LPYTYxWlLVJHEkt882mq-4MSIn4.mft
rsync://rpki.ripe.net/repository/DEFAULT/LPYTYxWlLVJHEkt882mq-4MSIn4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cf:6d:46:7d:a9:44:c0:53:79:e4:e8:63:b5:35:ff:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2cf6136315a52d5247124b7cf369aafb8312227e
Validity
Not Before: Sep 23 18:00:40 2026 GMT
Not After : Sep 24 18:00:40 2026 GMT
Subject: CN=36c73e2c13b6786cfa8fc020fa0148e8d0bf15cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:34:ee:64:50:5f:4a:13:61:d2:fb:95:70:ab:
d8:6b:f8:28:4a:e7:15:97:a4:17:70:bb:e8:a6:7e:
86:3d:6e:81:7e:cf:3f:53:84:e5:f4:a9:17:3f:7a:
fb:40:5e:4a:77:9c:fe:47:e6:d1:f0:2e:a8:37:e1:
62:ce:71:79:a2:be:5c:28:8f:f1:10:cf:a8:ac:8d:
de:65:c4:fc:12:b0:16:a3:a2:25:d5:06:9e:7c:5c:
50:26:1e:b0:75:e3:31:38:f6:73:27:cf:5e:ce:6b:
34:62:1c:7f:f1:14:b4:d1:52:f1:ff:d1:bd:6a:b8:
1c:d8:b6:35:13:2d:84:7f:16:d9:be:1b:8b:7f:00:
b0:26:91:3c:e6:4a:e9:b0:e8:0f:e7:ea:9c:9d:84:
ac:99:49:d2:7e:12:b0:ac:54:07:55:d0:e5:c1:04:
82:d3:58:b9:d8:9e:2f:97:94:3b:4f:b1:79:32:2d:
d9:1a:71:a7:9d:96:63:e6:74:17:4d:cb:35:b3:88:
1b:27:09:02:38:44:cf:98:4e:b1:b0:1b:fb:51:eb:
46:01:7d:2a:11:50:1d:4c:59:06:1e:39:8f:3e:e8:
c1:e9:b8:4b:64:8b:59:c8:68:ff:ad:89:3e:bf:3c:
e9:fe:b6:25:aa:86:fc:39:db:fb:3a:2d:c6:cf:ba:
66:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:C7:3E:2C:13:B6:78:6C:FA:8F:C0:20:FA:01:48:E8:D0:BF:15:CB
X509v3 Authority Key Identifier:
keyid:2C:F6:13:63:15:A5:2D:52:47:12:4B:7C:F3:69:AA:FB:83:12:22:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LPYTYxWlLVJHEkt882mq-4MSIn4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/ca2213-e5a1-4ad2-8a22-768d3fb08e70/1/LPYTYxWlLVJHEkt882mq-4MSIn4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/ca2213-e5a1-4ad2-8a22-768d3fb08e70/1/LPYTYxWlLVJHEkt882mq-4MSIn4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:23:7e:07:6f:b3:7f:37:9f:5e:68:7f:ac:a2:2a:90:1a:87:
08:e4:54:0f:cb:f6:7f:b7:6d:3e:8b:6c:a5:18:04:15:4a:0e:
a6:45:ea:70:0f:c7:01:ed:75:3f:23:e3:55:9d:a0:9b:6f:bd:
44:e3:13:4d:c2:e9:0e:ad:f6:77:8f:e2:11:84:ec:d9:92:a9:
c1:a0:ba:8b:73:9c:98:d4:3a:36:a6:d8:c0:ab:cd:d4:06:54:
bf:e9:a5:1b:09:15:dd:0e:1e:ec:90:cb:2f:ac:8a:1c:aa:51:
d4:3e:32:06:4a:39:d4:83:91:dd:2f:7c:e3:71:4e:e1:1e:97:
ea:2f:2a:3d:8b:4e:9a:e1:a8:03:0a:e0:e2:d2:25:c7:94:24:
cf:e1:11:70:f5:a1:4e:7b:2d:9b:71:58:62:c3:5a:3e:1a:56:
f5:c8:3b:eb:ba:bb:37:f7:32:47:18:ce:e9:d3:f3:c0:71:20:
d1:21:c1:a9:6c:0c:60:d4:56:3a:c1:c3:85:16:20:ee:a7:ee:
aa:e2:0a:fe:41:08:1d:4c:3a:b3:c3:3d:14:de:d8:74:74:76:
72:5a:c9:89:26:00:a3:7f:d6:53:9d:c0:9f:6f:5b:f5:41:76:
a8:6f:0c:4b:cc:91:75:db:07:32:05:d7:98:1f:06:28:b7:93:
d9:29:35:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 23:04:47 2026 by rpki-client