Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/1a2fa2-eeb3-4312-9130-53cc5daf52cf/1/lplI0P5Nf5nVS6i__NmaGmCK4NM.mft
File: lplI0P5Nf5nVS6i__NmaGmCK4NM.mft (raw, json)
Hash identifier: RyYZ04/HUZygNw3h403bQeQ/bsB1/SheG4+8EN/Go9E=
Subject key identifier: 37:9F:83:F6:09:8B:8C:80:60:9E:86:40:B8:4C:7F:62:7E:E8:7D:D2
Authority key identifier: 96:99:48:D0:FE:4D:7F:99:D5:4B:A8:BF:FC:D9:9A:1A:60:8A:E0:D3
Certificate issuer: /CN=969948d0fe4d7f99d54ba8bffcd99a1a608ae0d3
Certificate serial: 019E1CEBB2DDE6CDA28AD157F54E63C02330
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lplI0P5Nf5nVS6i__NmaGmCK4NM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/1a2fa2-eeb3-4312-9130-53cc5daf52cf/1/lplI0P5Nf5nVS6i__NmaGmCK4NM.mft
Manifest number: 1909
Signing time: Tue 12 May 2026 16:01:09 +0000
Manifest this update: Tue 12 May 2026 16:01:09 +0000
Manifest next update: Wed 13 May 2026 16:01:09 +0000
Files and hashes: 1: 4o62SYHgVowFhQpkpPWvhwVLD9Q.roa (hash: vK6TVfic8lSalHyDGwJA9KbxcHNJxy5XQ0Dw+O5/4ds=)
2: 9ZWmW7O-KUcnYms6KVGgedV7Spc.roa (hash: bmb6Wj5ZVAMQDodHsUEWFxaagxJI3FYmAMxoZWG5qPE=)
3: _ATH2LaUcsFsbm3ZfMvMi0XWcbY.roa (hash: Ot7Mpd5Sngu+BgXvflikN22yePv0fhYUQRspiY3WG70=)
4: erQKZk8l1sfGy2j4oWBOZugKqRw.roa (hash: VoUoWf07vKDS1/XZDrCXHR2by3KCcT90k8/LCxTvKsc=)
5: lplI0P5Nf5nVS6i__NmaGmCK4NM.crl (hash: N3qj6pIIDYcU8ogeC+5xrt779XLta5NZRlLwI/WY30M=)
6: nxSiffZukE6mQ7e460Rx5V-1a1Q.roa (hash: pzrYDt10/X+WJpToSelFVj9O1wyuTbaQZr2egEcvKq4=)
7: pbGUP3y4RpyVSLG7eXeil8rY1ME.roa (hash: SysyRMZRJZakF6FXhRynobKTSkCFH7tLqdsJUw3S05A=)
8: q3gUzU97j2RVDtM4CbuTr5ACAD4.roa (hash: rYA240BhPQIfAoHPOn9xxzmH9ldKEiVQ7iO6HZORQtw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/1a2fa2-eeb3-4312-9130-53cc5daf52cf/1/lplI0P5Nf5nVS6i__NmaGmCK4NM.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/1a2fa2-eeb3-4312-9130-53cc5daf52cf/1/lplI0P5Nf5nVS6i__NmaGmCK4NM.mft
rsync://rpki.ripe.net/repository/DEFAULT/lplI0P5Nf5nVS6i__NmaGmCK4NM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 16:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:eb:b2:dd:e6:cd:a2:8a:d1:57:f5:4e:63:c0:23:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=969948d0fe4d7f99d54ba8bffcd99a1a608ae0d3
Validity
Not Before: May 12 16:01:09 2026 GMT
Not After : May 13 16:01:09 2026 GMT
Subject: CN=379f83f6098b8c80609e8640b84c7f627ee87dd2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:63:d4:07:bb:5d:fe:5a:63:8b:c7:60:16:4e:
d6:a3:f9:18:16:29:e5:0f:c0:2c:83:11:a7:38:38:
31:c1:39:3e:f4:02:68:e5:85:29:5f:bc:a2:04:ba:
e2:bb:f8:a2:1b:34:db:94:8f:30:7b:4d:7c:18:5d:
b1:79:88:05:4b:47:3f:1b:62:fb:7e:49:5e:de:48:
bf:10:03:6c:97:b2:bf:65:61:64:fa:d6:e8:49:b5:
5b:70:73:c2:61:84:6a:be:42:84:1d:be:7e:3b:83:
84:87:83:1b:f6:18:47:96:dc:7f:93:45:87:45:46:
7c:6b:6d:53:79:f5:6b:2c:0f:48:92:ff:79:1e:53:
fa:67:74:c2:d4:78:8d:e3:b5:4a:11:d9:25:38:c5:
45:70:bd:38:75:f4:71:12:52:62:cc:c7:3d:58:7f:
67:b3:4f:11:f1:17:6c:ba:a2:a2:fb:dd:29:35:55:
ff:ad:c9:fc:e6:24:47:eb:18:b0:4b:f5:fa:86:dd:
87:05:23:d9:3c:14:31:bc:76:41:0d:1d:17:ba:04:
93:29:4b:21:ff:3f:6f:cc:7e:4b:a8:29:b2:cc:b0:
8b:80:7d:d6:a7:a4:3b:f0:62:a0:00:28:6d:6e:40:
9b:dd:ef:78:94:8e:52:fd:34:20:d1:da:fd:18:2e:
68:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:9F:83:F6:09:8B:8C:80:60:9E:86:40:B8:4C:7F:62:7E:E8:7D:D2
X509v3 Authority Key Identifier:
keyid:96:99:48:D0:FE:4D:7F:99:D5:4B:A8:BF:FC:D9:9A:1A:60:8A:E0:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lplI0P5Nf5nVS6i__NmaGmCK4NM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/1a2fa2-eeb3-4312-9130-53cc5daf52cf/1/lplI0P5Nf5nVS6i__NmaGmCK4NM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/1a2fa2-eeb3-4312-9130-53cc5daf52cf/1/lplI0P5Nf5nVS6i__NmaGmCK4NM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:b7:e5:3c:7c:5c:c0:d2:53:cb:34:eb:7a:a0:be:30:74:77:
c3:35:e9:2c:4f:4d:60:b5:a9:14:9c:37:17:31:d6:a3:59:bb:
fb:a7:51:59:d3:61:71:64:96:57:6a:19:2e:39:ae:4f:d2:48:
42:b2:95:31:ab:d1:2f:62:d0:04:62:fb:b2:cd:60:ef:74:ca:
af:e6:bd:eb:fa:33:dd:ec:a9:42:8a:5e:c3:d8:75:41:47:72:
49:25:88:f7:c1:0d:53:02:f0:2e:ed:a7:80:17:93:18:8a:78:
c9:29:2e:81:fe:0c:ca:ff:7a:ca:c8:c9:0a:6d:cb:f8:54:04:
f7:73:69:48:e5:39:ee:7c:04:80:87:f2:f8:c4:c7:47:26:85:
76:8b:7c:ad:1b:93:3b:66:5c:57:f9:a7:ad:e6:6b:b1:38:a5:
0f:67:09:23:1f:ae:52:3e:63:c7:20:ee:57:d6:44:f7:5b:54:
8e:ec:ae:93:b9:55:b7:27:cd:3c:60:e0:31:a9:c1:73:60:f2:
c1:44:72:71:63:22:82:c3:cc:5f:c0:77:c3:07:63:93:b7:a9:
35:ea:8b:6e:1c:49:f5:70:46:62:b2:aa:db:99:00:e3:a5:e7:
10:02:5f:23:c8:00:ad:d8:d1:69:8b:25:be:6c:a1:35:6d:6c:
c3:81:56:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:35:59 2026 by rpki-client