Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/ca2213-e5a1-4ad2-8a22-768d3fb08e70/1/LPYTYxWlLVJHEkt882mq-4MSIn4.mft
File: LPYTYxWlLVJHEkt882mq-4MSIn4.mft (raw, json)
Hash identifier: uZMy1Ike9VqSv1yeLZgPyCXCoSBbOMbqo+LgZ5W5xfo=
Subject key identifier: 40:82:22:FB:22:72:A2:4A:35:7D:40:1C:46:9A:4F:26:DF:64:79:73
Authority key identifier: 2C:F6:13:63:15:A5:2D:52:47:12:4B:7C:F3:69:AA:FB:83:12:22:7E
Certificate issuer: /CN=2cf6136315a52d5247124b7cf369aafb8312227e
Certificate serial: 019D28BB57A9EAB51DDE2D6FFA3A7FD07058
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LPYTYxWlLVJHEkt882mq-4MSIn4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/ca2213-e5a1-4ad2-8a22-768d3fb08e70/1/LPYTYxWlLVJHEkt882mq-4MSIn4.mft
Manifest number: 0E8C
Signing time: Thu 26 Mar 2026 06:00:59 +0000
Manifest this update: Thu 26 Mar 2026 06:00:59 +0000
Manifest next update: Fri 27 Mar 2026 06:00:59 +0000
Files and hashes: 1: LPYTYxWlLVJHEkt882mq-4MSIn4.crl (hash: 9N5t6BNdxGwwX1DTS976eNnIMxJEUWcapwHeg437L/A=)
2: r45G67-96LJpADDZJVJ0gLKO_X4.roa (hash: xLucZhj5eosliNF0R5ZBpKqpdmf4rFaViGwVRkuYRmo=)
3: u7gow9KmygGFJud8Kbx8Q5bXl10.roa (hash: zOMjeXXBLvQlEvulfQkHinq9NE+I+uXsiNr8CDWlugI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/ca2213-e5a1-4ad2-8a22-768d3fb08e70/1/LPYTYxWlLVJHEkt882mq-4MSIn4.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/ca2213-e5a1-4ad2-8a22-768d3fb08e70/1/LPYTYxWlLVJHEkt882mq-4MSIn4.mft
rsync://rpki.ripe.net/repository/DEFAULT/LPYTYxWlLVJHEkt882mq-4MSIn4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:bb:57:a9:ea:b5:1d:de:2d:6f:fa:3a:7f:d0:70:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2cf6136315a52d5247124b7cf369aafb8312227e
Validity
Not Before: Mar 26 06:00:59 2026 GMT
Not After : Mar 27 06:00:59 2026 GMT
Subject: CN=408222fb2272a24a357d401c469a4f26df647973
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:2f:b1:96:03:e5:0e:04:ab:46:43:f1:eb:07:
c5:4e:1e:e2:4f:82:ed:2a:d3:d5:c4:99:4f:e6:bf:
e4:8f:7a:2f:21:df:09:88:af:08:23:1d:db:46:34:
b5:42:df:c4:6d:d2:78:dc:ea:d1:e5:a2:62:e1:98:
57:ec:55:39:e1:a6:f3:15:85:0d:6f:b8:fc:3b:10:
23:47:04:82:f2:93:84:86:fc:1e:1c:86:0c:59:34:
6c:ef:65:04:a6:3b:35:f4:c0:77:f3:44:74:22:02:
83:60:fc:fe:3e:bb:ab:16:2b:35:8e:42:db:a8:22:
a8:78:e9:d6:4e:30:8f:68:64:26:7a:9f:81:96:60:
89:16:32:1d:eb:4b:d2:26:46:23:27:19:0e:17:91:
73:7b:d6:4f:ee:b4:9b:c5:0a:32:63:12:97:7a:55:
8d:ab:c6:0b:32:00:ed:aa:d0:a6:14:e0:a8:0c:b9:
2a:e3:71:77:31:14:60:3c:4a:96:e8:84:90:ab:07:
5c:31:3e:2e:94:2e:e3:04:07:1c:73:1e:9d:1e:5e:
5e:7e:f5:af:94:db:eb:b2:33:9e:81:67:1c:65:ca:
08:0f:b5:19:75:02:1a:2f:49:34:65:87:c9:55:75:
63:06:a0:f8:b3:fd:9b:4e:a6:a1:6c:a3:03:2e:e5:
65:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:82:22:FB:22:72:A2:4A:35:7D:40:1C:46:9A:4F:26:DF:64:79:73
X509v3 Authority Key Identifier:
keyid:2C:F6:13:63:15:A5:2D:52:47:12:4B:7C:F3:69:AA:FB:83:12:22:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LPYTYxWlLVJHEkt882mq-4MSIn4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/ca2213-e5a1-4ad2-8a22-768d3fb08e70/1/LPYTYxWlLVJHEkt882mq-4MSIn4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/ca2213-e5a1-4ad2-8a22-768d3fb08e70/1/LPYTYxWlLVJHEkt882mq-4MSIn4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:19:d8:4f:56:6e:8c:38:ea:b1:99:5b:c6:d2:47:e6:23:a5:
94:be:a8:35:f8:f6:a1:8c:4f:3c:7a:bd:9f:0b:0d:a5:aa:d5:
51:91:98:c9:15:7d:8f:6b:f8:6b:ce:d9:b7:15:2c:53:e4:b9:
ca:01:8f:8e:67:69:78:38:d1:dc:60:2d:00:ef:83:24:e7:b9:
87:ae:49:ee:95:ec:94:17:f8:4c:73:bf:d7:44:13:a8:42:50:
97:05:88:53:dd:b5:9c:47:25:04:55:e7:78:3f:f6:46:d0:e8:
2f:58:9b:ba:76:f1:b0:6a:18:a8:85:c6:2d:a1:b8:84:38:9d:
09:49:a4:bf:ef:a6:bd:30:71:f6:2e:d1:9b:09:97:bc:95:9a:
e2:62:79:55:cf:75:9d:86:28:4b:ae:29:10:6d:44:0f:54:12:
0e:27:38:60:86:a5:d5:84:04:e8:3c:80:8d:61:ff:a2:e2:e2:
0b:60:c4:ce:49:0d:ea:03:46:25:f8:00:28:33:5b:5a:b1:36:
0b:d9:c8:da:25:8d:11:0b:09:4f:8a:ce:4f:ca:09:35:45:04:
ec:48:ec:9c:0a:cd:82:d5:43:29:37:8e:34:86:99:6d:3d:ec:
96:03:46:50:63:6b:e0:7a:6d:60:d1:8d:6f:db:13:f4:b8:a6:
41:89:cf:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:32:33 2026 by rpki-client