Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/811b1b-3a72-4402-b4fd-fa4dd21ae3dc/1/LPtHb88xPP8pXeDRcJFWrwJT188.mft
File: LPtHb88xPP8pXeDRcJFWrwJT188.mft (raw, json)
Hash identifier: JeFN1/eFdSsb38viaekVpCElXNNU6iKfXAPsJ5lvKhg=
Subject key identifier: BD:7F:73:68:07:3B:95:F6:DF:A7:2E:7A:7D:C3:0B:13:B6:65:58:08
Authority key identifier: 2C:FB:47:6F:CF:31:3C:FF:29:5D:E0:D1:70:91:56:AF:02:53:D7:CF
Certificate issuer: /CN=2cfb476fcf313cff295de0d1709156af0253d7cf
Certificate serial: 019D2B852B52C5D8D9F5A1454CD52522F253
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LPtHb88xPP8pXeDRcJFWrwJT188.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/811b1b-3a72-4402-b4fd-fa4dd21ae3dc/1/LPtHb88xPP8pXeDRcJFWrwJT188.mft
Manifest number: 1889
Signing time: Thu 26 Mar 2026 19:00:40 +0000
Manifest this update: Thu 26 Mar 2026 19:00:40 +0000
Manifest next update: Fri 27 Mar 2026 19:00:40 +0000
Files and hashes: 1: LPtHb88xPP8pXeDRcJFWrwJT188.crl (hash: dhd+UyxJZgc/6EMP+FKLydQ+HDHwEy4fUPvjOlN6c2A=)
2: NgV_sHGbNkW-4Wz6vHYFvSOe7VQ.roa (hash: 4t65GeCqspIJ7i8BhQoAjY6xatOQordkuTZDORD2YyM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/811b1b-3a72-4402-b4fd-fa4dd21ae3dc/1/LPtHb88xPP8pXeDRcJFWrwJT188.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/811b1b-3a72-4402-b4fd-fa4dd21ae3dc/1/LPtHb88xPP8pXeDRcJFWrwJT188.mft
rsync://rpki.ripe.net/repository/DEFAULT/LPtHb88xPP8pXeDRcJFWrwJT188.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 16:32:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2b:85:2b:52:c5:d8:d9:f5:a1:45:4c:d5:25:22:f2:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2cfb476fcf313cff295de0d1709156af0253d7cf
Validity
Not Before: Mar 26 19:00:40 2026 GMT
Not After : Mar 27 19:00:40 2026 GMT
Subject: CN=bd7f7368073b95f6dfa72e7a7dc30b13b6655808
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:0f:70:6d:cd:17:5b:68:d4:0c:b0:72:ad:5a:
80:46:33:0a:cb:69:f3:73:d9:6e:37:65:74:a4:00:
2a:e7:a7:66:6e:3e:98:21:3d:40:c8:df:e6:05:bd:
85:3f:47:06:fb:a2:48:99:da:cf:12:25:68:cd:f7:
d7:99:b0:aa:36:8c:51:a7:0e:f7:d9:64:4a:04:8b:
16:46:b9:30:e3:43:7d:84:8a:d6:c8:2c:c6:6a:f9:
5f:fe:ed:c2:3a:34:d0:29:41:f6:b7:d1:39:33:04:
db:46:e6:93:34:6d:f3:6a:6c:1f:75:7f:50:04:ee:
37:62:08:0d:0e:9f:e8:ed:84:0c:cb:47:9e:71:fa:
9c:ab:54:85:10:0b:7c:5c:03:d3:78:e8:35:68:c3:
0d:6c:6a:63:23:c5:23:78:9f:e5:13:f7:6a:12:f8:
f8:0c:91:96:fd:b3:c6:c7:94:2a:be:7a:83:9f:07:
91:3b:6a:0b:29:5f:da:3b:e9:ae:1a:05:13:6c:35:
cb:bb:0b:70:ee:cd:9e:f4:d8:b4:6d:02:ba:c2:56:
f8:cf:f4:92:fd:8b:39:f5:0b:8b:15:e8:61:fa:ef:
97:1c:8f:51:70:d7:95:ce:88:8c:c6:f5:ef:40:40:
a2:9b:66:93:ad:77:3b:ac:50:87:e5:07:4a:6b:d6:
93:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:7F:73:68:07:3B:95:F6:DF:A7:2E:7A:7D:C3:0B:13:B6:65:58:08
X509v3 Authority Key Identifier:
keyid:2C:FB:47:6F:CF:31:3C:FF:29:5D:E0:D1:70:91:56:AF:02:53:D7:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LPtHb88xPP8pXeDRcJFWrwJT188.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/811b1b-3a72-4402-b4fd-fa4dd21ae3dc/1/LPtHb88xPP8pXeDRcJFWrwJT188.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/811b1b-3a72-4402-b4fd-fa4dd21ae3dc/1/LPtHb88xPP8pXeDRcJFWrwJT188.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:25:56:17:bf:50:62:5e:52:33:3d:48:c3:81:64:e1:9d:26:
8d:09:e2:94:c7:04:52:f5:7f:7c:89:c0:34:19:d4:c5:38:d0:
d3:00:70:cd:f2:f9:49:0b:6e:5c:3f:f3:56:33:c8:f1:c9:4e:
bd:52:21:42:d8:ab:50:0c:82:37:79:40:5b:b8:5d:7a:6a:9e:
0c:59:20:7b:ff:4d:55:cf:35:c2:2f:45:f9:cc:8a:1a:58:dc:
fe:46:fa:b2:4e:7c:79:9a:08:35:28:e8:1e:54:c1:6c:dd:9b:
4c:98:ac:8b:87:ef:ef:14:7e:1f:24:32:57:42:a8:5b:67:5e:
b1:f2:05:5e:46:0a:1f:15:85:6e:3a:5d:55:43:ba:35:5f:e4:
03:ac:1b:25:40:e6:e0:d2:96:57:18:32:3f:6a:35:54:51:67:
fe:04:c1:83:02:3d:c5:25:8e:3f:f4:b2:04:6f:0a:3a:16:18:
69:5e:e0:ea:74:5a:55:cf:d6:61:f8:24:54:cf:86:41:07:05:
b1:93:93:7f:09:e5:b4:80:9b:0c:09:20:ae:ab:09:e2:5f:a3:
c0:42:73:0b:66:cf:9c:9b:18:b8:3f:2f:27:65:26:23:dd:49:
7e:79:66:f1:ec:ec:a7:93:e7:e3:c6:08:cf:aa:d2:f6:a0:00:
13:b3:15:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 00:32:05 2026 by rpki-client