Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/1a2fa2-eeb3-4312-9130-53cc5daf52cf/1/lplI0P5Nf5nVS6i__NmaGmCK4NM.mft
File: lplI0P5Nf5nVS6i__NmaGmCK4NM.mft (raw, json)
Hash identifier: YuNQxUuvK6kFwXBYSAvhEEBff53uHmJdxIwti1+sF6c=
Subject key identifier: 79:74:D6:A8:A3:8F:41:FF:55:EF:E3:60:AF:9D:35:01:1A:73:09:14
Authority key identifier: 96:99:48:D0:FE:4D:7F:99:D5:4B:A8:BF:FC:D9:9A:1A:60:8A:E0:D3
Certificate issuer: /CN=969948d0fe4d7f99d54ba8bffcd99a1a608ae0d3
Certificate serial: 019D27A8BB376E5ABB09C46795F3314EE0C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lplI0P5Nf5nVS6i__NmaGmCK4NM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/1a2fa2-eeb3-4312-9130-53cc5daf52cf/1/lplI0P5Nf5nVS6i__NmaGmCK4NM.mft
Manifest number: 188A
Signing time: Thu 26 Mar 2026 01:01:02 +0000
Manifest this update: Thu 26 Mar 2026 01:01:02 +0000
Manifest next update: Fri 27 Mar 2026 01:01:02 +0000
Files and hashes: 1: 4o62SYHgVowFhQpkpPWvhwVLD9Q.roa (hash: vK6TVfic8lSalHyDGwJA9KbxcHNJxy5XQ0Dw+O5/4ds=)
2: 9ZWmW7O-KUcnYms6KVGgedV7Spc.roa (hash: bmb6Wj5ZVAMQDodHsUEWFxaagxJI3FYmAMxoZWG5qPE=)
3: _ATH2LaUcsFsbm3ZfMvMi0XWcbY.roa (hash: Ot7Mpd5Sngu+BgXvflikN22yePv0fhYUQRspiY3WG70=)
4: erQKZk8l1sfGy2j4oWBOZugKqRw.roa (hash: VoUoWf07vKDS1/XZDrCXHR2by3KCcT90k8/LCxTvKsc=)
5: lplI0P5Nf5nVS6i__NmaGmCK4NM.crl (hash: r4w/2wCqIRteEbflPLNDQ81bAL7JmQt8iFcp4RJpR7Y=)
6: nxSiffZukE6mQ7e460Rx5V-1a1Q.roa (hash: pzrYDt10/X+WJpToSelFVj9O1wyuTbaQZr2egEcvKq4=)
7: pbGUP3y4RpyVSLG7eXeil8rY1ME.roa (hash: SysyRMZRJZakF6FXhRynobKTSkCFH7tLqdsJUw3S05A=)
8: q3gUzU97j2RVDtM4CbuTr5ACAD4.roa (hash: rYA240BhPQIfAoHPOn9xxzmH9ldKEiVQ7iO6HZORQtw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/1a2fa2-eeb3-4312-9130-53cc5daf52cf/1/lplI0P5Nf5nVS6i__NmaGmCK4NM.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/1a2fa2-eeb3-4312-9130-53cc5daf52cf/1/lplI0P5Nf5nVS6i__NmaGmCK4NM.mft
rsync://rpki.ripe.net/repository/DEFAULT/lplI0P5Nf5nVS6i__NmaGmCK4NM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a8:bb:37:6e:5a:bb:09:c4:67:95:f3:31:4e:e0:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=969948d0fe4d7f99d54ba8bffcd99a1a608ae0d3
Validity
Not Before: Mar 26 01:01:02 2026 GMT
Not After : Mar 27 01:01:02 2026 GMT
Subject: CN=7974d6a8a38f41ff55efe360af9d35011a730914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:2b:b9:5b:5d:12:f4:97:34:2a:89:bd:0f:f4:
96:d3:fe:89:34:6f:b2:db:4e:a7:89:82:92:92:eb:
c7:d5:81:e3:45:6a:7a:2f:0e:fb:fa:91:56:88:c4:
1b:93:73:e3:b3:bd:74:52:9d:50:64:ec:9e:d6:60:
9d:2a:d5:01:dc:d7:2b:93:46:2f:3f:dc:6d:4c:e7:
91:9c:e5:52:90:76:70:dc:6a:d1:d6:13:5c:e4:fd:
32:3b:f3:47:d8:d4:6b:90:18:3f:a7:c7:f5:ef:ae:
12:0a:27:bf:cf:23:1f:07:56:72:6f:d3:8b:76:df:
77:03:3c:55:37:4a:5a:ef:ad:54:22:02:e0:ab:db:
66:64:52:19:42:e6:24:69:8d:54:ff:0f:e3:9c:b2:
2a:cc:b4:db:9a:d0:33:df:b9:bf:2d:ab:79:ff:cc:
cc:89:40:58:1d:e5:61:8e:77:5c:85:17:e7:0a:b4:
85:51:5e:be:a3:30:56:29:bb:60:e5:e7:1d:2b:e1:
a1:d3:d8:c8:a5:f0:e0:03:7b:fd:04:85:a6:a7:b3:
54:0b:3e:20:3e:ae:93:94:31:3a:da:2b:c5:67:4a:
4a:63:b8:0f:cb:27:3d:c1:fb:a0:4e:93:15:bb:56:
cc:ad:ac:f4:8a:64:24:ff:7b:53:03:b4:5a:03:7f:
b8:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:74:D6:A8:A3:8F:41:FF:55:EF:E3:60:AF:9D:35:01:1A:73:09:14
X509v3 Authority Key Identifier:
keyid:96:99:48:D0:FE:4D:7F:99:D5:4B:A8:BF:FC:D9:9A:1A:60:8A:E0:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lplI0P5Nf5nVS6i__NmaGmCK4NM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/1a2fa2-eeb3-4312-9130-53cc5daf52cf/1/lplI0P5Nf5nVS6i__NmaGmCK4NM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/1a2fa2-eeb3-4312-9130-53cc5daf52cf/1/lplI0P5Nf5nVS6i__NmaGmCK4NM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:ed:69:3e:3f:5a:4a:37:f1:25:58:2c:e4:cc:05:36:4e:fc:
d0:65:7e:2c:48:5a:70:da:ce:bb:d1:f1:21:0a:76:f7:cb:25:
9a:a9:66:48:12:20:bd:23:27:56:dd:2b:1b:b6:d1:ca:e8:9a:
5e:20:e0:39:6e:a6:21:b2:ad:76:fd:d5:98:3c:07:b4:61:0e:
1d:78:cd:8d:0a:31:30:50:18:71:ad:96:7a:bb:64:23:c3:5f:
d6:67:32:0a:17:7b:55:7b:a6:2e:81:b4:fb:69:73:d4:d9:73:
09:8b:2f:fb:0f:5e:a6:18:7a:87:be:d3:fd:16:20:e4:2f:f8:
b9:cd:f2:0f:43:60:c3:67:ca:88:4e:44:87:ec:22:b5:61:cd:
e6:f8:33:b3:2c:4e:a2:32:40:7f:60:2f:d4:4f:56:3d:01:cc:
0e:53:a6:4e:ca:bf:ad:b1:3f:07:7a:49:53:f9:9d:69:fd:8f:
8a:6e:74:5d:60:de:9e:b1:b8:25:46:7a:87:cf:3f:4f:3e:0b:
17:db:96:cc:16:30:57:30:a1:37:c0:22:64:29:96:94:f3:13:
ec:e5:80:73:3f:2b:7c:6c:8d:2d:83:50:07:89:20:3d:7e:5d:
e4:e8:fc:07:0a:65:87:90:76:e5:6b:1e:e0:c7:b0:cc:cc:55:
bd:66:d0:d3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nqLs3blq7CcRnlfMxTuDDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk2OTk0OGQwZmU0ZDdmOTlkNTRiYThiZmZjZDk5YTFhNjA4
YWUwZDMwHhcNMjYwMzI2MDEwMTAyWhcNMjYwMzI3MDEwMTAyWjAzMTEwLwYDVQQD
Eyg3OTc0ZDZhOGEzOGY0MWZmNTVlZmUzNjBhZjlkMzUwMTFhNzMwOTE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqiu5W10S9Jc0Kom9D/SW0/6JNG+y
206niYKSkuvH1YHjRWp6Lw77+pFWiMQbk3Pjs710Up1QZOye1mCdKtUB3Ncrk0Yv
P9xtTOeRnOVSkHZw3GrR1hNc5P0yO/NH2NRrkBg/p8f1764SCie/zyMfB1Zyb9OL
dt93AzxVN0pa761UIgLgq9tmZFIZQuYkaY1U/w/jnLIqzLTbmtAz37m/Lat5/8zM
iUBYHeVhjndchRfnCrSFUV6+ozBWKbtg5ecdK+Gh09jIpfDgA3v9BIWmp7NUCz4g
Pq6TlDE62ivFZ0pKY7gPyyc9wfugTpMVu1bMraz0imQk/3tTA7RaA3+47wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHl01qijj0H/Ve/jYK+dNQEacwkUMB8GA1UdIwQY
MBaAFJaZSND+TX+Z1Uuov/zZmhpgiuDTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbHBsSTBQNU5mNW5WUzZpX19ObWFHbUNLNE5NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi8xYTJmYTItZWViMy00MzEyLTkxMzAt
NTNjYzVkYWY1MmNmLzEvbHBsSTBQNU5mNW5WUzZpX19ObWFHbUNLNE5NLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZi8xYTJmYTItZWViMy00MzEyLTkxMzAtNTNjYzVkYWY1MmNm
LzEvbHBsSTBQNU5mNW5WUzZpX19ObWFHbUNLNE5NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAl+1pPj9a
SjfxJVgs5MwFNk780GV+LEhacNrOu9HxIQp298slmqlmSBIgvSMnVt0rG7bRyuia
XiDgOW6mIbKtdv3VmDwHtGEOHXjNjQoxMFAYca2WertkI8Nf1mcyChd7VXumLoG0
+2lz1NlzCYsv+w9ephh6h77T/RYg5C/4uc3yD0Ngw2fKiE5Eh+witWHN5vgzsyxO
ojJAf2Av1E9WPQHMDlOmTsq/rbE/B3pJU/mdaf2Pim50XWDenrG4JUZ6h88/Tz4L
F9uWzBYwVzChN8AiZCmWlPMT7OWAcz8rfGyNLYNQB4kgPX5d5Oj8Bwplh5B25Wse
4MewzMxVvWbQ0w==
-----END CERTIFICATE-----
Generated at Thu Mar 26 06:51:29 2026 by rpki-client