Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/45a04c-cb0d-4c0c-8bf1-48f39fde0eea/1/lpgLSK1WOfc5gTVuMxYNFidxC7c.mft
File: lpgLSK1WOfc5gTVuMxYNFidxC7c.mft (raw, json)
Hash identifier: +0hXT8Q5tUkYNhpKUGH7Wp/AVb43ep1OmUj4RXu2TpM=
Subject key identifier: D4:07:1C:19:BB:90:75:94:BF:57:4E:AA:62:1D:E0:D2:88:58:CB:B6
Authority key identifier: 96:98:0B:48:AD:56:39:F7:39:81:35:6E:33:16:0D:16:27:71:0B:B7
Certificate issuer: /CN=96980b48ad5639f73981356e33160d1627710bb7
Certificate serial: 019F935AD36A34DCD7252E50B565FFF168A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lpgLSK1WOfc5gTVuMxYNFidxC7c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/45a04c-cb0d-4c0c-8bf1-48f39fde0eea/1/lpgLSK1WOfc5gTVuMxYNFidxC7c.mft
Manifest number: 41
Signing time: Fri 24 Jul 2026 09:00:30 +0000
Manifest this update: Fri 24 Jul 2026 09:00:30 +0000
Manifest next update: Sat 25 Jul 2026 09:00:30 +0000
Files and hashes: 1: 6L5y2MFmXfcIFX62MUBPkBCCJX0.roa (hash: KLV777+LOvda3GCIEhi/yJJMh/XCyc6E446aDRA4Mv4=)
2: ikcdv1QOBoSzDWfjCCDZg9ycDHc.roa (hash: jlthj0+9YMBV47DV2aS3JMaKaQi7V78MQtgW3wynm/g=)
3: lpgLSK1WOfc5gTVuMxYNFidxC7c.crl (hash: P/m9Y4Kay3MyqHqG3YaOml8eyl2JOFHQ58b50TcAiRI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/45a04c-cb0d-4c0c-8bf1-48f39fde0eea/1/lpgLSK1WOfc5gTVuMxYNFidxC7c.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/45a04c-cb0d-4c0c-8bf1-48f39fde0eea/1/lpgLSK1WOfc5gTVuMxYNFidxC7c.mft
rsync://rpki.ripe.net/repository/DEFAULT/lpgLSK1WOfc5gTVuMxYNFidxC7c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:5a:d3:6a:34:dc:d7:25:2e:50:b5:65:ff:f1:68:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96980b48ad5639f73981356e33160d1627710bb7
Validity
Not Before: Jul 24 09:00:30 2026 GMT
Not After : Jul 25 09:00:30 2026 GMT
Subject: CN=d4071c19bb907594bf574eaa621de0d28858cbb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:9b:7b:90:8f:94:86:d6:44:d9:5b:fa:d8:6e:
2f:19:7f:e2:01:bb:52:6c:e4:f7:33:71:90:8f:1e:
70:55:0b:fa:44:67:48:78:87:4f:48:8a:54:b9:ba:
49:1e:87:38:0d:a2:43:54:df:98:bd:a8:a7:83:9d:
66:fe:cb:e3:75:4b:bd:53:b2:5d:1f:dd:a8:01:8d:
9e:c4:99:88:13:ee:13:5e:62:f3:ae:eb:e8:1e:21:
b1:bc:87:0e:4f:60:12:bc:6f:de:01:20:11:8a:7a:
b1:9b:6c:f2:79:00:61:fe:07:0a:f8:f1:1a:01:ec:
d1:c1:19:b9:36:31:02:29:6b:89:00:a3:c5:4c:d5:
49:02:d1:b5:e6:d5:cb:1f:25:71:eb:97:e1:a1:3b:
76:d8:1b:df:f3:c6:bf:70:73:cc:ca:d4:1b:a8:de:
7c:c6:63:49:0d:b4:82:3f:ca:b9:02:6b:33:35:c7:
e7:53:12:aa:19:13:85:65:ca:3b:76:67:3a:2f:07:
58:38:76:d4:e2:52:51:90:5d:99:49:a8:4b:8c:82:
3a:d9:ff:34:5c:86:8c:de:65:a2:1f:a8:65:25:75:
7f:31:52:a7:69:45:b5:45:6c:cb:ee:34:7a:4f:fc:
a5:d9:62:a1:d5:de:a1:8f:ef:b0:ca:66:6a:17:34:
68:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:07:1C:19:BB:90:75:94:BF:57:4E:AA:62:1D:E0:D2:88:58:CB:B6
X509v3 Authority Key Identifier:
keyid:96:98:0B:48:AD:56:39:F7:39:81:35:6E:33:16:0D:16:27:71:0B:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lpgLSK1WOfc5gTVuMxYNFidxC7c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/45a04c-cb0d-4c0c-8bf1-48f39fde0eea/1/lpgLSK1WOfc5gTVuMxYNFidxC7c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/45a04c-cb0d-4c0c-8bf1-48f39fde0eea/1/lpgLSK1WOfc5gTVuMxYNFidxC7c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:12:a4:fc:21:8e:b0:05:6e:4f:54:96:d4:e5:03:81:c7:db:
23:6c:44:ba:8e:31:0e:58:45:1c:2d:ca:70:ab:5f:53:b6:35:
ea:39:51:e5:62:93:ce:49:a3:fa:02:ef:f2:ad:9a:13:e7:07:
58:af:ac:9f:af:b3:9b:4a:53:6d:39:86:ca:24:9c:af:29:17:
8c:93:56:6d:03:b0:0a:33:03:7d:3f:2a:07:d1:aa:c9:62:25:
8b:b9:79:7a:44:e4:4e:d6:73:21:bf:19:6a:ea:0c:14:db:fa:
56:f2:8e:5a:70:c4:67:ee:6c:7e:16:89:af:c0:b2:2d:00:b3:
44:47:6d:04:c5:82:ec:be:74:e2:a8:89:be:98:ae:6e:61:cf:
10:23:10:2f:fa:ec:d1:ec:98:a1:53:73:65:c9:40:bb:ac:20:
8a:51:f3:77:6c:bd:96:b2:e2:3f:f3:14:e4:43:c9:ae:77:cf:
04:ed:2f:d1:90:03:af:97:03:24:d2:9b:1d:86:e7:2b:9b:1e:
27:e7:e4:06:2d:54:bf:ac:6f:c3:65:fc:cc:75:19:b9:b5:95:
35:fb:a2:71:41:81:07:b5:55:43:ab:9f:e7:67:e5:aa:34:3f:
f8:34:d0:68:27:25:bb:14:4f:a6:d4:78:c8:ef:ab:f1:0c:c9:
cb:cc:80:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 18:45:32 2026 by rpki-client