Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/ca2213-e5a1-4ad2-8a22-768d3fb08e70/1/LPYTYxWlLVJHEkt882mq-4MSIn4.mft
File: LPYTYxWlLVJHEkt882mq-4MSIn4.mft (raw, json)
Hash identifier: uZVfBetNJOJQLXrC07BDbbaK3NfVmEmgQJRswNp2Y0o=
Subject key identifier: 29:CC:E0:0D:08:7F:32:D3:24:FF:D5:F8:F4:C8:97:29:B5:A8:53:D9
Authority key identifier: 2C:F6:13:63:15:A5:2D:52:47:12:4B:7C:F3:69:AA:FB:83:12:22:7E
Certificate issuer: /CN=2cf6136315a52d5247124b7cf369aafb8312227e
Certificate serial: 019E1DFE5BB472B239CBC924CA9F32AB5B69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LPYTYxWlLVJHEkt882mq-4MSIn4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/ca2213-e5a1-4ad2-8a22-768d3fb08e70/1/LPYTYxWlLVJHEkt882mq-4MSIn4.mft
Manifest number: 0F0B
Signing time: Tue 12 May 2026 21:01:09 +0000
Manifest this update: Tue 12 May 2026 21:01:09 +0000
Manifest next update: Wed 13 May 2026 21:01:09 +0000
Files and hashes: 1: LPYTYxWlLVJHEkt882mq-4MSIn4.crl (hash: m7MTL53TNTQJr4ED59cg/mYvHvt88wndZxyC+/G0Jro=)
2: r45G67-96LJpADDZJVJ0gLKO_X4.roa (hash: xLucZhj5eosliNF0R5ZBpKqpdmf4rFaViGwVRkuYRmo=)
3: u7gow9KmygGFJud8Kbx8Q5bXl10.roa (hash: zOMjeXXBLvQlEvulfQkHinq9NE+I+uXsiNr8CDWlugI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/ca2213-e5a1-4ad2-8a22-768d3fb08e70/1/LPYTYxWlLVJHEkt882mq-4MSIn4.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/ca2213-e5a1-4ad2-8a22-768d3fb08e70/1/LPYTYxWlLVJHEkt882mq-4MSIn4.mft
rsync://rpki.ripe.net/repository/DEFAULT/LPYTYxWlLVJHEkt882mq-4MSIn4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 21:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:fe:5b:b4:72:b2:39:cb:c9:24:ca:9f:32:ab:5b:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2cf6136315a52d5247124b7cf369aafb8312227e
Validity
Not Before: May 12 21:01:09 2026 GMT
Not After : May 13 21:01:09 2026 GMT
Subject: CN=29cce00d087f32d324ffd5f8f4c89729b5a853d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:dc:7a:64:f4:5b:98:bb:6a:c1:d7:f4:3a:4d:
7f:3d:5b:5b:3b:33:63:21:18:2c:91:19:5b:3d:f5:
73:30:04:51:95:30:45:aa:11:6c:b0:85:d8:a4:97:
bd:28:1f:d9:b2:a2:00:04:74:3f:9e:72:3c:71:c7:
2c:3e:0c:76:e8:9f:1e:30:53:19:77:4d:60:00:5e:
64:ee:c8:55:60:ff:3b:b6:b3:7c:51:28:c8:76:61:
31:ce:e6:ef:8b:56:97:78:92:3d:74:0b:21:9b:c6:
d7:97:1b:c6:34:1e:46:c9:f9:b5:02:9d:6a:f1:28:
3d:be:2b:96:f5:83:d3:9f:83:67:40:57:4d:6e:a4:
58:0f:a3:2c:a4:37:2d:27:b7:4c:78:53:58:7e:ce:
08:7c:3b:31:d8:11:e5:76:08:4b:1f:30:76:72:cd:
ea:fb:cf:ef:ca:bb:41:08:b8:08:b0:62:bd:36:be:
a4:9f:6e:98:d8:c3:87:ee:6e:ca:84:a9:e7:81:11:
70:eb:26:35:e3:86:7a:b4:05:49:5a:ac:2e:cd:91:
a4:cd:15:c8:a7:6e:25:f5:37:4f:36:15:fe:fd:16:
a1:75:7c:eb:2a:05:0c:93:bf:f9:a8:59:1a:f5:06:
cd:73:d6:be:a5:07:5b:8d:e7:78:60:41:36:60:62:
db:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:CC:E0:0D:08:7F:32:D3:24:FF:D5:F8:F4:C8:97:29:B5:A8:53:D9
X509v3 Authority Key Identifier:
keyid:2C:F6:13:63:15:A5:2D:52:47:12:4B:7C:F3:69:AA:FB:83:12:22:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LPYTYxWlLVJHEkt882mq-4MSIn4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/ca2213-e5a1-4ad2-8a22-768d3fb08e70/1/LPYTYxWlLVJHEkt882mq-4MSIn4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/ca2213-e5a1-4ad2-8a22-768d3fb08e70/1/LPYTYxWlLVJHEkt882mq-4MSIn4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ea:5a:41:b9:b6:03:59:51:f2:9c:1a:be:1b:45:f8:4b:96:54:
c2:69:01:21:43:39:98:47:e4:fa:b1:b7:95:c0:ef:65:8e:84:
7b:43:c6:52:97:4a:af:bc:7b:93:a4:72:a5:2d:d7:04:e6:eb:
44:f8:20:90:3f:c3:97:d5:7b:83:3c:94:11:9f:9b:b6:3a:91:
88:5e:f9:37:9c:3a:0f:b4:43:6b:47:ca:4e:f3:1f:19:a9:17:
97:5a:69:61:e0:a6:c5:ff:29:62:66:21:22:32:41:67:8c:6f:
60:f3:ed:67:f6:d2:ee:f8:52:e5:10:b8:e5:b4:f7:57:d6:65:
2f:09:9e:a0:2e:8e:4c:4b:e9:f1:09:5d:eb:6e:9e:4e:c6:47:
60:09:c8:d8:d9:e1:01:5d:9a:51:d9:f9:52:91:ca:09:8a:92:
7b:6d:d2:2f:18:50:4c:54:b9:19:94:5f:49:59:0f:f5:26:a4:
84:89:97:fe:1b:58:73:6c:00:9b:c3:37:b2:d8:3f:90:c8:d7:
5d:26:8e:92:20:9a:50:e1:96:37:d3:d4:71:3b:f1:b8:3e:b4:
a5:3e:24:27:ed:9f:46:38:41:ca:a6:c5:b1:4e:5f:ee:c9:04:
70:29:3b:bb:f5:a3:79:db:5f:61:f4:dc:f3:3a:f6:14:e5:94:
06:fb:77:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:58:24 2026 by rpki-client