Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2f/1a2fa2-eeb3-4312-9130-53cc5daf52cf/1/lplI0P5Nf5nVS6i__NmaGmCK4NM.mft
File: lplI0P5Nf5nVS6i__NmaGmCK4NM.mft (raw, json)
Hash identifier: P70tMrD3cuNElBQefzbOZzCzRRYfi7xWIvj0QRo5OK0=
Subject key identifier: D8:8F:D1:86:EE:A6:58:75:9E:F2:C2:51:0E:4C:9D:BC:80:71:9D:F5
Authority key identifier: 96:99:48:D0:FE:4D:7F:99:D5:4B:A8:BF:FC:D9:9A:1A:60:8A:E0:D3
Certificate issuer: /CN=969948d0fe4d7f99d54ba8bffcd99a1a608ae0d3
Certificate serial: 01A1DB38DB9EF10D6EDDB4E0A0AEFA1261A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lplI0P5Nf5nVS6i__NmaGmCK4NM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/1a2fa2-eeb3-4312-9130-53cc5daf52cf/1/lplI0P5Nf5nVS6i__NmaGmCK4NM.mft
Manifest number: 1AFB
Signing time: Sat 14 Nov 2026 18:01:38 +0000
Manifest this update: Sat 14 Nov 2026 18:01:38 +0000
Manifest next update: Sun 15 Nov 2026 18:01:38 +0000
Files and hashes: 1: 4o62SYHgVowFhQpkpPWvhwVLD9Q.roa (hash: vK6TVfic8lSalHyDGwJA9KbxcHNJxy5XQ0Dw+O5/4ds=)
2: 9ZWmW7O-KUcnYms6KVGgedV7Spc.roa (hash: bmb6Wj5ZVAMQDodHsUEWFxaagxJI3FYmAMxoZWG5qPE=)
3: erQKZk8l1sfGy2j4oWBOZugKqRw.roa (hash: VoUoWf07vKDS1/XZDrCXHR2by3KCcT90k8/LCxTvKsc=)
4: ikMa9MqXV9fTt-fpeOTMdH_rGjk.roa (hash: IZXIhlBJHXlW68AogpmsrwZKXAwk0TGWgKDJGc8gaFU=)
5: lplI0P5Nf5nVS6i__NmaGmCK4NM.crl (hash: odVna6cV42hWc5aGjO2tuegpP0uy0fMScxOSWJd0zdY=)
6: pbGUP3y4RpyVSLG7eXeil8rY1ME.roa (hash: SysyRMZRJZakF6FXhRynobKTSkCFH7tLqdsJUw3S05A=)
7: q3gUzU97j2RVDtM4CbuTr5ACAD4.roa (hash: rYA240BhPQIfAoHPOn9xxzmH9ldKEiVQ7iO6HZORQtw=)
8: sHCmUOZD8zEHvWgjLXqNkjroi6o.roa (hash: OK6PF/BL3eupkhpURtyslk38x0wzZU1I+gsKKO7VPtU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/1a2fa2-eeb3-4312-9130-53cc5daf52cf/1/lplI0P5Nf5nVS6i__NmaGmCK4NM.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/1a2fa2-eeb3-4312-9130-53cc5daf52cf/1/lplI0P5Nf5nVS6i__NmaGmCK4NM.mft
rsync://rpki.ripe.net/repository/DEFAULT/lplI0P5Nf5nVS6i__NmaGmCK4NM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 18:01:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:db:38:db:9e:f1:0d:6e:dd:b4:e0:a0:ae:fa:12:61:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=969948d0fe4d7f99d54ba8bffcd99a1a608ae0d3
Validity
Not Before: Nov 14 18:01:38 2026 GMT
Not After : Nov 15 18:01:38 2026 GMT
Subject: CN=d88fd186eea658759ef2c2510e4c9dbc80719df5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:21:76:90:f3:00:99:d2:53:d9:fb:25:64:12:
48:ae:2f:95:1c:0a:36:aa:ab:54:a0:1b:a5:c5:d0:
7b:d1:83:ec:24:04:57:20:8b:f7:9d:03:84:36:8b:
67:9a:d4:1e:61:5d:a3:6d:bb:02:d0:f7:ea:64:04:
7a:55:31:4d:6e:c3:ed:09:ca:fe:8a:57:61:e6:99:
5e:9e:57:34:dd:4a:64:ed:47:27:43:84:11:02:9f:
4e:3d:45:6c:ff:e7:35:31:05:e8:10:e6:38:4e:ff:
ee:85:14:64:16:72:25:23:f6:f9:d3:38:6a:c6:77:
65:fc:19:38:11:81:aa:b8:fa:04:43:00:b6:cb:d4:
0e:06:0d:2e:14:d6:9e:d4:31:72:6e:64:91:d4:3a:
5a:cc:c0:a7:78:2a:bd:2e:08:53:a9:76:cf:a2:aa:
82:2a:bd:e9:7c:36:7d:a8:79:68:98:4f:47:08:5d:
9b:98:11:e6:c4:a4:6f:29:98:d6:ba:28:9b:27:fa:
78:cf:e1:f2:86:76:df:e0:94:42:49:cd:34:28:b6:
99:a3:d2:23:1a:f8:4c:21:94:c7:57:f8:47:43:6a:
ef:dd:c9:03:76:40:10:a5:ed:ae:c0:ce:75:11:14:
4b:37:6a:80:48:2d:a8:db:7e:6d:49:01:6b:a3:36:
62:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:8F:D1:86:EE:A6:58:75:9E:F2:C2:51:0E:4C:9D:BC:80:71:9D:F5
X509v3 Authority Key Identifier:
keyid:96:99:48:D0:FE:4D:7F:99:D5:4B:A8:BF:FC:D9:9A:1A:60:8A:E0:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lplI0P5Nf5nVS6i__NmaGmCK4NM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/1a2fa2-eeb3-4312-9130-53cc5daf52cf/1/lplI0P5Nf5nVS6i__NmaGmCK4NM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/1a2fa2-eeb3-4312-9130-53cc5daf52cf/1/lplI0P5Nf5nVS6i__NmaGmCK4NM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:09:af:b0:e4:5a:ef:ce:f6:a9:28:6c:ae:9b:58:a6:e3:d7:
b0:80:38:4f:96:93:a0:52:e4:b4:9d:ac:f4:e2:ee:43:c0:53:
c1:33:f7:da:83:9f:af:85:c0:65:c1:fe:f8:4b:da:8b:17:50:
3b:38:eb:a8:3e:9f:5d:a3:8d:10:2a:0f:aa:44:9a:a7:b9:83:
2d:66:5f:17:ae:d0:90:53:a7:12:40:8d:a9:bd:a4:f1:1d:be:
e9:7f:05:ac:31:b9:b7:62:56:6d:a3:07:35:79:59:9c:0b:57:
5d:6d:d7:48:c3:1a:57:c3:1f:8f:a0:61:23:3d:da:78:db:a8:
8f:5b:b4:53:55:14:f8:f1:52:2f:07:18:5a:10:35:68:66:7d:
96:e2:44:cd:58:59:9d:c1:ec:70:c8:07:35:b4:1f:23:7c:a7:
53:0b:c1:5d:2c:82:b4:6f:ea:16:be:f1:e1:55:c6:ec:c0:10:
c0:d2:59:9f:2b:16:3e:cb:1f:23:13:0d:08:e9:28:95:e9:2d:
30:0a:c7:0f:49:b9:e9:05:85:a6:96:93:82:3b:5a:88:f8:f4:
06:23:d3:c5:7b:f3:61:06:97:ea:cb:3d:3e:b6:c1:5f:f5:67:
cb:87:58:05:57:6a:78:d5:48:17:25:3b:ba:82:2b:90:be:98:
55:d7:a3:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 00:37:37 2026 by rpki-client