Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/ca2213-e5a1-4ad2-8a22-768d3fb08e70/1/LPYTYxWlLVJHEkt882mq-4MSIn4.mft
File: LPYTYxWlLVJHEkt882mq-4MSIn4.mft (raw, json)
Hash identifier: RtNKKZctD4YtJBQcgACh+F1i8TFWLhgt74o7X8m0mQM=
Subject key identifier: 40:51:B7:13:09:DC:47:D4:B0:D1:F5:AD:3B:D4:F4:02:C0:F4:35:FA
Authority key identifier: 2C:F6:13:63:15:A5:2D:52:47:12:4B:7C:F3:69:AA:FB:83:12:22:7E
Certificate issuer: /CN=2cf6136315a52d5247124b7cf369aafb8312227e
Certificate serial: 019F90C7C5B30D6221C334684AB447EDB0FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LPYTYxWlLVJHEkt882mq-4MSIn4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/ca2213-e5a1-4ad2-8a22-768d3fb08e70/1/LPYTYxWlLVJHEkt882mq-4MSIn4.mft
Manifest number: 0FCB
Signing time: Thu 23 Jul 2026 21:00:39 +0000
Manifest this update: Thu 23 Jul 2026 21:00:39 +0000
Manifest next update: Fri 24 Jul 2026 21:00:39 +0000
Files and hashes: 1: LPYTYxWlLVJHEkt882mq-4MSIn4.crl (hash: xnNng9BJhjm1yuB7HdJsrMNzFzMW0tx7DDpLq70Shl0=)
2: r45G67-96LJpADDZJVJ0gLKO_X4.roa (hash: xLucZhj5eosliNF0R5ZBpKqpdmf4rFaViGwVRkuYRmo=)
3: u7gow9KmygGFJud8Kbx8Q5bXl10.roa (hash: zOMjeXXBLvQlEvulfQkHinq9NE+I+uXsiNr8CDWlugI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/ca2213-e5a1-4ad2-8a22-768d3fb08e70/1/LPYTYxWlLVJHEkt882mq-4MSIn4.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/ca2213-e5a1-4ad2-8a22-768d3fb08e70/1/LPYTYxWlLVJHEkt882mq-4MSIn4.mft
rsync://rpki.ripe.net/repository/DEFAULT/LPYTYxWlLVJHEkt882mq-4MSIn4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:c7:c5:b3:0d:62:21:c3:34:68:4a:b4:47:ed:b0:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2cf6136315a52d5247124b7cf369aafb8312227e
Validity
Not Before: Jul 23 21:00:39 2026 GMT
Not After : Jul 24 21:00:39 2026 GMT
Subject: CN=4051b71309dc47d4b0d1f5ad3bd4f402c0f435fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:fa:91:ce:fc:21:13:49:2f:7f:76:fb:9e:fc:
45:e3:cf:e1:19:53:a1:63:85:81:94:d1:dc:9d:47:
12:be:5e:da:2f:0c:70:34:73:0a:c6:1a:8a:f5:fd:
18:03:e8:30:47:73:88:f5:85:a5:69:cd:35:d6:45:
f6:8f:28:5d:5e:b5:4c:4f:37:7e:54:48:81:85:f2:
b9:e1:0a:81:b2:12:cc:96:80:49:ab:b4:54:e5:aa:
e6:10:fa:4a:6c:1f:c4:17:00:f7:d1:2a:e6:6e:bc:
3d:ed:5d:ea:bd:1a:95:8c:4c:b3:b4:0b:cf:dd:cc:
58:d4:7f:86:71:b7:6b:09:2d:cf:45:cf:0b:44:53:
77:81:ef:8f:00:1b:84:cd:e3:f7:f3:2a:0b:2a:3f:
c3:92:af:42:62:1f:65:b3:07:72:2a:a6:42:73:2d:
fd:20:44:17:d2:d5:ab:43:89:73:91:05:15:eb:7d:
23:28:8a:d2:a6:e0:94:ae:85:cd:e0:78:e6:d5:25:
a9:f5:f7:6f:66:39:b5:27:eb:fe:7d:c6:1f:72:44:
28:34:29:ca:ba:ef:2b:19:9a:b3:16:3b:7a:2b:aa:
b6:2e:28:cc:c0:60:cb:79:49:82:6b:18:0a:69:af:
76:cb:3c:e7:21:f5:a6:4f:39:c3:64:8a:a0:ee:c8:
47:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:51:B7:13:09:DC:47:D4:B0:D1:F5:AD:3B:D4:F4:02:C0:F4:35:FA
X509v3 Authority Key Identifier:
keyid:2C:F6:13:63:15:A5:2D:52:47:12:4B:7C:F3:69:AA:FB:83:12:22:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LPYTYxWlLVJHEkt882mq-4MSIn4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/ca2213-e5a1-4ad2-8a22-768d3fb08e70/1/LPYTYxWlLVJHEkt882mq-4MSIn4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/ca2213-e5a1-4ad2-8a22-768d3fb08e70/1/LPYTYxWlLVJHEkt882mq-4MSIn4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:1b:d2:b7:bd:6b:d6:fb:73:60:c4:83:2d:c8:b0:c2:52:3d:
6a:bc:c8:b5:ce:b7:4d:3a:5d:13:81:6a:d6:53:40:7c:2b:9e:
08:1e:cb:8d:17:f4:72:7f:f9:b2:7e:29:6b:f4:5b:7b:a1:b0:
be:68:fb:31:ce:e4:13:a2:4a:ac:54:ca:23:18:39:08:f5:db:
e7:2e:65:a3:1d:e8:d8:cf:d2:08:1e:54:33:40:d8:e8:30:a9:
5f:36:e6:aa:9a:19:7c:c4:39:1b:c1:59:32:2d:a2:d9:d2:91:
d0:a6:0a:d5:f6:08:2e:42:a0:ee:6f:aa:30:78:a4:30:44:ae:
01:1b:ad:ac:f9:5c:c8:88:69:36:97:58:fb:26:72:3b:32:9e:
0c:1d:b5:4c:7a:d4:04:44:4a:c2:23:50:9d:8e:f0:8e:c0:a5:
9a:ca:52:e0:64:d4:8e:be:51:b7:8a:8d:a9:4a:32:b6:3d:49:
a0:40:32:cb:6a:2c:b8:99:1a:ed:58:ee:78:c2:f7:6c:9e:a1:
cd:72:e4:8e:bc:d4:b4:f5:75:e2:ff:1f:1c:a4:39:f5:62:53:
cf:ed:1a:ea:83:08:68:33:49:84:27:e0:b1:ad:13:6b:fc:c9:
ff:27:86:49:e7:cb:a0:5b:3b:63:20:cd:31:5e:77:76:39:e9:
20:6b:1c:62
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+Qx8WzDWIhwzRoSrRH7bD7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJjZjYxMzYzMTVhNTJkNTI0NzEyNGI3Y2YzNjlhYWZiODMx
MjIyN2UwHhcNMjYwNzIzMjEwMDM5WhcNMjYwNzI0MjEwMDM5WjAzMTEwLwYDVQQD
Eyg0MDUxYjcxMzA5ZGM0N2Q0YjBkMWY1YWQzYmQ0ZjQwMmMwZjQzNWZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnfqRzvwhE0kvf3b7nvxF48/hGVOh
Y4WBlNHcnUcSvl7aLwxwNHMKxhqK9f0YA+gwR3OI9YWlac011kX2jyhdXrVMTzd+
VEiBhfK54QqBshLMloBJq7RU5armEPpKbB/EFwD30Srmbrw97V3qvRqVjEyztAvP
3cxY1H+GcbdrCS3PRc8LRFN3ge+PABuEzeP38yoLKj/Dkq9CYh9lswdyKqZCcy39
IEQX0tWrQ4lzkQUV630jKIrSpuCUroXN4Hjm1SWp9fdvZjm1J+v+fcYfckQoNCnK
uu8rGZqzFjt6K6q2LijMwGDLeUmCaxgKaa92yzznIfWmTznDZIqg7shH+wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEBRtxMJ3EfUsNH1rTvU9ALA9DX6MB8GA1UdIwQY
MBaAFCz2E2MVpS1SRxJLfPNpqvuDEiJ+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTFBZVFl4V2xMVkpIRWt0ODgybXEtNE1TSW40LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi9jYTIyMTMtZTVhMS00YWQyLThhMjIt
NzY4ZDNmYjA4ZTcwLzEvTFBZVFl4V2xMVkpIRWt0ODgybXEtNE1TSW40Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZi9jYTIyMTMtZTVhMS00YWQyLThhMjItNzY4ZDNmYjA4ZTcw
LzEvTFBZVFl4V2xMVkpIRWt0ODgybXEtNE1TSW40LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFhvSt71r
1vtzYMSDLciwwlI9arzItc63TTpdE4Fq1lNAfCueCB7LjRf0cn/5sn4pa/Rbe6Gw
vmj7Mc7kE6JKrFTKIxg5CPXb5y5lox3o2M/SCB5UM0DY6DCpXzbmqpoZfMQ5G8FZ
Mi2i2dKR0KYK1fYILkKg7m+qMHikMESuARutrPlcyIhpNpdY+yZyOzKeDB21THrU
BERKwiNQnY7wjsClmspS4GTUjr5Rt4qNqUoytj1JoEAyy2osuJka7VjueML3bJ6h
zXLkjrzUtPV14v8fHKQ59WJTz+0a6oMIaDNJhCfgsa0Ta/zJ/yeGSefLoFs7YyDN
MV53djnpIGscYg==
-----END CERTIFICATE-----
Generated at Thu Jul 23 22:43:03 2026 by rpki-client