Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2f/1a2fa2-eeb3-4312-9130-53cc5daf52cf/1/lplI0P5Nf5nVS6i__NmaGmCK4NM.mft
File: lplI0P5Nf5nVS6i__NmaGmCK4NM.mft (raw, json)
Hash identifier: 9F/OKfl4u6PiXVplONFwWTNWDCyWXO946R9vLhsFhm8=
Subject key identifier: 2F:23:62:BA:51:EE:89:C8:30:BA:56:05:EE:95:37:A4:34:FF:EE:8A
Authority key identifier: 96:99:48:D0:FE:4D:7F:99:D5:4B:A8:BF:FC:D9:9A:1A:60:8A:E0:D3
Certificate issuer: /CN=969948d0fe4d7f99d54ba8bffcd99a1a608ae0d3
Certificate serial: 01A0CEC80936DECC6982A0E05A5F6A322F55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lplI0P5Nf5nVS6i__NmaGmCK4NM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/1a2fa2-eeb3-4312-9130-53cc5daf52cf/1/lplI0P5Nf5nVS6i__NmaGmCK4NM.mft
Manifest number: 1A70
Signing time: Wed 23 Sep 2026 15:00:10 +0000
Manifest this update: Wed 23 Sep 2026 15:00:10 +0000
Manifest next update: Thu 24 Sep 2026 15:00:10 +0000
Files and hashes: 1: 4o62SYHgVowFhQpkpPWvhwVLD9Q.roa (hash: vK6TVfic8lSalHyDGwJA9KbxcHNJxy5XQ0Dw+O5/4ds=)
2: 9ZWmW7O-KUcnYms6KVGgedV7Spc.roa (hash: bmb6Wj5ZVAMQDodHsUEWFxaagxJI3FYmAMxoZWG5qPE=)
3: erQKZk8l1sfGy2j4oWBOZugKqRw.roa (hash: VoUoWf07vKDS1/XZDrCXHR2by3KCcT90k8/LCxTvKsc=)
4: ikMa9MqXV9fTt-fpeOTMdH_rGjk.roa (hash: IZXIhlBJHXlW68AogpmsrwZKXAwk0TGWgKDJGc8gaFU=)
5: lplI0P5Nf5nVS6i__NmaGmCK4NM.crl (hash: e9TXS1u2x93IlHuCjvQNtHmJ1cWweH4IY6GMprTmm6k=)
6: pbGUP3y4RpyVSLG7eXeil8rY1ME.roa (hash: SysyRMZRJZakF6FXhRynobKTSkCFH7tLqdsJUw3S05A=)
7: q3gUzU97j2RVDtM4CbuTr5ACAD4.roa (hash: rYA240BhPQIfAoHPOn9xxzmH9ldKEiVQ7iO6HZORQtw=)
8: sHCmUOZD8zEHvWgjLXqNkjroi6o.roa (hash: OK6PF/BL3eupkhpURtyslk38x0wzZU1I+gsKKO7VPtU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/1a2fa2-eeb3-4312-9130-53cc5daf52cf/1/lplI0P5Nf5nVS6i__NmaGmCK4NM.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/1a2fa2-eeb3-4312-9130-53cc5daf52cf/1/lplI0P5Nf5nVS6i__NmaGmCK4NM.mft
rsync://rpki.ripe.net/repository/DEFAULT/lplI0P5Nf5nVS6i__NmaGmCK4NM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ce:c8:09:36:de:cc:69:82:a0:e0:5a:5f:6a:32:2f:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=969948d0fe4d7f99d54ba8bffcd99a1a608ae0d3
Validity
Not Before: Sep 23 15:00:10 2026 GMT
Not After : Sep 24 15:00:10 2026 GMT
Subject: CN=2f2362ba51ee89c830ba5605ee9537a434ffee8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:fe:30:d2:85:9c:5f:48:8f:05:08:33:43:08:
91:2c:5b:10:72:74:05:2b:4b:d7:f5:2b:08:a0:32:
67:34:bb:dd:61:0f:e1:a1:55:9d:56:1e:38:5f:fe:
50:d8:b6:86:49:0d:1b:0a:12:7b:3b:6c:45:e2:49:
3c:85:ec:49:b3:03:5c:ae:5f:02:ac:0b:7c:1d:21:
32:98:f4:ba:d5:e6:1a:14:45:db:a3:58:6a:93:e2:
b6:33:93:01:0d:aa:3a:9b:44:c7:0a:4c:60:a9:a5:
9d:90:69:26:4b:8b:85:04:8a:b6:ce:de:ed:9b:06:
80:ea:29:75:fd:11:5f:27:ae:c6:5b:68:f7:b4:71:
a2:3e:d5:ed:9a:63:21:d8:22:87:6f:e0:84:98:d5:
ad:94:5f:f7:78:2a:97:c6:c0:3f:90:9d:31:b3:29:
e5:6b:54:9b:46:a8:34:00:eb:a0:bb:c1:fd:41:8e:
11:09:24:46:b5:b6:e2:17:af:ae:58:c1:f2:d5:44:
be:19:ad:51:8f:b2:b7:c1:30:c9:1d:86:46:85:bd:
fa:3a:8c:83:55:5e:28:b7:df:1c:d7:ef:f8:e7:dd:
19:e1:af:08:b4:57:e7:5f:36:d0:b1:c1:bc:3e:7d:
e8:b4:1d:9b:33:34:4c:8a:bd:b4:25:82:05:7c:f8:
b3:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:23:62:BA:51:EE:89:C8:30:BA:56:05:EE:95:37:A4:34:FF:EE:8A
X509v3 Authority Key Identifier:
keyid:96:99:48:D0:FE:4D:7F:99:D5:4B:A8:BF:FC:D9:9A:1A:60:8A:E0:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lplI0P5Nf5nVS6i__NmaGmCK4NM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/1a2fa2-eeb3-4312-9130-53cc5daf52cf/1/lplI0P5Nf5nVS6i__NmaGmCK4NM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/1a2fa2-eeb3-4312-9130-53cc5daf52cf/1/lplI0P5Nf5nVS6i__NmaGmCK4NM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:cf:67:59:1c:94:a2:f0:67:6d:5a:43:b8:31:ac:b8:05:f5:
3a:34:0e:1b:e2:35:56:1d:8d:41:20:bb:9e:98:43:5a:51:4f:
80:e8:54:8d:4d:4b:e6:66:2d:2f:dc:47:58:cd:d6:45:72:a9:
1f:40:4a:22:9e:7d:99:4f:59:ab:5d:37:32:23:fb:fc:a2:d4:
fb:8d:2d:ca:5e:12:eb:5d:51:d2:ee:00:ff:18:42:03:80:40:
fd:f9:32:94:b9:d0:21:e6:7a:ec:0a:f8:a1:a4:93:56:c0:e7:
7b:a3:e9:5f:23:dc:e7:4d:32:09:d4:19:58:ab:48:fd:ea:07:
e5:b7:32:12:83:37:d1:b0:ca:c1:fb:05:42:72:8b:a9:a4:7c:
f1:77:86:a7:77:db:2c:e5:86:be:a9:c8:92:67:02:03:85:10:
6f:63:57:c4:fb:ab:84:0b:87:3e:bb:b5:0e:c0:39:28:58:34:
c9:9f:1e:14:ad:5b:c0:7d:bc:6c:ac:8a:7f:6a:87:7f:5f:24:
6c:6b:c2:fe:f7:17:e7:3b:9b:96:6b:c4:4e:c9:92:7b:0c:85:
9e:03:9e:3f:e2:43:d2:30:ec:d5:84:d2:22:9f:48:a3:4e:81:
26:dc:ff:e3:2a:32:c3:42:ad:13:8a:c6:25:18:a6:5a:dc:49:
36:88:8e:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 22:25:43 2026 by rpki-client