Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/1a2fa2-eeb3-4312-9130-53cc5daf52cf/1/lplI0P5Nf5nVS6i__NmaGmCK4NM.mft
File: lplI0P5Nf5nVS6i__NmaGmCK4NM.mft (raw, json)
Hash identifier: GhI0/uQxkKJ2jeQSkaBQGRFz3QHUCblk9v8IroNR5j8=
Subject key identifier: 40:77:35:28:C4:DC:B5:D3:26:69:31:79:5F:09:AF:C8:18:9F:2D:FC
Authority key identifier: 96:99:48:D0:FE:4D:7F:99:D5:4B:A8:BF:FC:D9:9A:1A:60:8A:E0:D3
Certificate issuer: /CN=969948d0fe4d7f99d54ba8bffcd99a1a608ae0d3
Certificate serial: 019F91A363C9099D62161E5BF0DB69C7B71E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lplI0P5Nf5nVS6i__NmaGmCK4NM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/1a2fa2-eeb3-4312-9130-53cc5daf52cf/1/lplI0P5Nf5nVS6i__NmaGmCK4NM.mft
Manifest number: 19CA
Signing time: Fri 24 Jul 2026 01:00:31 +0000
Manifest this update: Fri 24 Jul 2026 01:00:31 +0000
Manifest next update: Sat 25 Jul 2026 01:00:31 +0000
Files and hashes: 1: 4o62SYHgVowFhQpkpPWvhwVLD9Q.roa (hash: vK6TVfic8lSalHyDGwJA9KbxcHNJxy5XQ0Dw+O5/4ds=)
2: 9ZWmW7O-KUcnYms6KVGgedV7Spc.roa (hash: bmb6Wj5ZVAMQDodHsUEWFxaagxJI3FYmAMxoZWG5qPE=)
3: _ATH2LaUcsFsbm3ZfMvMi0XWcbY.roa (hash: Ot7Mpd5Sngu+BgXvflikN22yePv0fhYUQRspiY3WG70=)
4: erQKZk8l1sfGy2j4oWBOZugKqRw.roa (hash: VoUoWf07vKDS1/XZDrCXHR2by3KCcT90k8/LCxTvKsc=)
5: lplI0P5Nf5nVS6i__NmaGmCK4NM.crl (hash: SVUkFU8EGrbeAiP+3YncPoTXVBkgKYQ1TOlyDRzBbiQ=)
6: nxSiffZukE6mQ7e460Rx5V-1a1Q.roa (hash: pzrYDt10/X+WJpToSelFVj9O1wyuTbaQZr2egEcvKq4=)
7: pbGUP3y4RpyVSLG7eXeil8rY1ME.roa (hash: SysyRMZRJZakF6FXhRynobKTSkCFH7tLqdsJUw3S05A=)
8: q3gUzU97j2RVDtM4CbuTr5ACAD4.roa (hash: rYA240BhPQIfAoHPOn9xxzmH9ldKEiVQ7iO6HZORQtw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/1a2fa2-eeb3-4312-9130-53cc5daf52cf/1/lplI0P5Nf5nVS6i__NmaGmCK4NM.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/1a2fa2-eeb3-4312-9130-53cc5daf52cf/1/lplI0P5Nf5nVS6i__NmaGmCK4NM.mft
rsync://rpki.ripe.net/repository/DEFAULT/lplI0P5Nf5nVS6i__NmaGmCK4NM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:a3:63:c9:09:9d:62:16:1e:5b:f0:db:69:c7:b7:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=969948d0fe4d7f99d54ba8bffcd99a1a608ae0d3
Validity
Not Before: Jul 24 01:00:31 2026 GMT
Not After : Jul 25 01:00:31 2026 GMT
Subject: CN=40773528c4dcb5d3266931795f09afc8189f2dfc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:df:3e:37:09:82:90:02:7f:47:e3:4a:bb:f6:
08:4a:cc:97:ce:20:b3:f8:b6:76:ec:09:84:97:24:
bb:d0:32:7a:8d:02:e1:d3:8a:3c:29:4a:64:5b:f4:
de:12:2c:82:71:7d:46:1c:c6:09:b1:e1:22:dd:2f:
06:e6:dd:c5:8a:63:59:7e:2b:a5:9c:5a:78:2e:70:
61:7f:45:17:d5:07:95:04:b6:e0:eb:36:15:27:b9:
b9:e7:c9:1b:67:5a:e0:31:9c:27:90:c3:7e:3f:1f:
ff:5e:d3:73:a3:7a:b2:b6:23:72:da:23:43:da:20:
01:21:4c:71:c6:96:08:49:4a:74:5c:69:cb:11:5e:
fb:cd:b9:5f:34:f8:17:04:13:27:5b:04:fd:92:2b:
f1:55:55:9f:ff:74:51:1d:24:0c:da:da:a9:6b:fe:
84:f4:93:ae:c8:ca:49:29:c5:6b:23:60:3e:19:fd:
c6:97:85:95:2d:0c:6f:9a:14:b1:a8:86:53:3f:c3:
ec:33:77:c1:89:13:19:18:d7:a4:7d:03:da:56:71:
38:6c:a6:d5:da:64:c8:a6:c9:4e:00:9b:a4:2e:89:
85:fe:22:1a:c2:d3:52:43:0a:9f:9d:19:ea:c3:75:
28:6b:e4:ca:fa:33:4c:ee:55:c5:3f:5f:24:db:ec:
48:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:77:35:28:C4:DC:B5:D3:26:69:31:79:5F:09:AF:C8:18:9F:2D:FC
X509v3 Authority Key Identifier:
keyid:96:99:48:D0:FE:4D:7F:99:D5:4B:A8:BF:FC:D9:9A:1A:60:8A:E0:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lplI0P5Nf5nVS6i__NmaGmCK4NM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/1a2fa2-eeb3-4312-9130-53cc5daf52cf/1/lplI0P5Nf5nVS6i__NmaGmCK4NM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/1a2fa2-eeb3-4312-9130-53cc5daf52cf/1/lplI0P5Nf5nVS6i__NmaGmCK4NM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:3b:57:0a:06:ff:30:e5:de:bd:5b:ef:e4:65:5e:16:21:cf:
d8:3f:f0:9f:75:0e:bc:ec:09:de:94:02:0f:2a:44:f5:05:9f:
58:49:80:af:c8:67:03:bc:5e:6a:2f:5a:fb:bb:21:e8:c2:c1:
cd:a2:70:20:76:85:20:cd:b7:39:be:3a:f0:c4:23:fa:7d:c5:
42:ac:e1:af:4a:bd:d8:7a:2b:33:9e:99:df:eb:d7:5e:9c:2f:
03:01:ef:8e:79:dd:f6:5f:e2:b3:26:77:51:2b:c1:df:34:a2:
e2:d3:80:9a:2d:0d:d9:75:75:a2:1b:f0:8d:54:17:59:7b:2c:
ea:73:16:4a:41:1f:dc:fb:e0:02:55:a9:d1:26:ee:56:3e:ec:
5d:e5:99:bf:7c:e3:ee:db:64:55:4a:1a:31:7f:ef:ed:d8:26:
af:75:36:bb:3a:46:23:d7:c4:c4:f7:67:b9:63:e3:61:ac:e5:
b2:dc:11:e6:b6:68:81:7f:13:02:c0:98:4a:00:7e:23:ed:af:
dc:fe:d1:ec:2d:5f:fd:3a:3a:e9:68:a5:af:07:e3:1e:cb:f0:
4f:c9:f5:f6:98:27:30:5a:7f:ce:28:a4:b0:9a:49:9c:a1:a4:
cc:96:d1:95:af:f7:27:cb:4d:23:a7:bb:91:f2:54:ed:9a:cb:
b3:c8:da:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:39:42 2026 by rpki-client