Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/42/45a04c-cb0d-4c0c-8bf1-48f39fde0eea/1/lpgLSK1WOfc5gTVuMxYNFidxC7c.mft
File: lpgLSK1WOfc5gTVuMxYNFidxC7c.mft (raw, json)
Hash identifier: 5OYtJKzy15MeiK3XdKZCMC7yvMm6Up9wQOfx9X7NnCc=
Subject key identifier: E5:A6:BF:2C:B5:D1:83:53:D4:C5:94:34:FE:CE:5F:B4:25:2B:ED:EC
Authority key identifier: 96:98:0B:48:AD:56:39:F7:39:81:35:6E:33:16:0D:16:27:71:0B:B7
Certificate issuer: /CN=96980b48ad5639f73981356e33160d1627710bb7
Certificate serial: 01A0F8A9EA43BD58A23AA90E677AA01245F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lpgLSK1WOfc5gTVuMxYNFidxC7c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/45a04c-cb0d-4c0c-8bf1-48f39fde0eea/1/lpgLSK1WOfc5gTVuMxYNFidxC7c.mft
Manifest number: FA
Signing time: Thu 01 Oct 2026 18:11:19 +0000
Manifest this update: Thu 01 Oct 2026 18:11:19 +0000
Manifest next update: Fri 02 Oct 2026 18:11:19 +0000
Files and hashes: 1: 6L5y2MFmXfcIFX62MUBPkBCCJX0.roa (hash: KLV777+LOvda3GCIEhi/yJJMh/XCyc6E446aDRA4Mv4=)
2: ikcdv1QOBoSzDWfjCCDZg9ycDHc.roa (hash: jlthj0+9YMBV47DV2aS3JMaKaQi7V78MQtgW3wynm/g=)
3: lpgLSK1WOfc5gTVuMxYNFidxC7c.crl (hash: i/Hf9XtVBSSeWba0M3d+TtitvSlJWUYDplffA0zHQm0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/45a04c-cb0d-4c0c-8bf1-48f39fde0eea/1/lpgLSK1WOfc5gTVuMxYNFidxC7c.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/45a04c-cb0d-4c0c-8bf1-48f39fde0eea/1/lpgLSK1WOfc5gTVuMxYNFidxC7c.mft
rsync://rpki.ripe.net/repository/DEFAULT/lpgLSK1WOfc5gTVuMxYNFidxC7c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 Oct 2026 14:02:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f8:a9:ea:43:bd:58:a2:3a:a9:0e:67:7a:a0:12:45:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96980b48ad5639f73981356e33160d1627710bb7
Validity
Not Before: Oct 1 18:11:19 2026 GMT
Not After : Oct 2 18:11:19 2026 GMT
Subject: CN=e5a6bf2cb5d18353d4c59434fece5fb4252bedec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:96:83:78:3f:b3:1b:de:2f:51:99:16:ed:cb:
9f:2f:7b:81:ea:de:e8:73:ad:aa:50:56:27:f0:85:
db:c4:b7:50:59:e6:76:9b:c6:05:98:e5:46:26:2c:
13:9d:de:d2:6e:90:05:7b:9d:07:be:1a:12:20:0d:
01:7d:7e:86:c9:41:59:60:ea:7c:9b:f5:39:4c:52:
1b:4b:43:c4:96:d1:b8:53:21:88:c7:d0:a7:23:63:
84:b2:0c:a2:70:03:01:96:d0:df:23:0d:8f:81:fe:
dd:c0:94:89:6a:c7:b4:e4:fa:b3:b5:cd:80:19:52:
2e:2e:b0:4f:34:01:1d:51:67:85:a1:31:9d:6a:f4:
fe:73:89:b7:17:ea:88:e3:60:20:d7:2d:8d:20:2d:
90:fc:88:d5:32:9c:80:05:ab:c5:27:a1:63:35:33:
4c:aa:e7:a1:8b:02:96:32:cb:98:ca:35:73:16:b1:
3d:de:3f:0a:2e:7e:57:64:9c:a6:84:bb:06:8b:0e:
20:02:c2:3c:44:b1:6a:5e:f5:72:11:3b:f9:f6:6f:
97:66:1c:96:07:7a:8a:83:06:29:5a:33:56:1a:4e:
0c:71:74:be:c4:11:2b:12:91:06:b6:04:b4:31:32:
67:87:ff:28:13:11:36:02:71:90:be:22:35:af:40:
73:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:A6:BF:2C:B5:D1:83:53:D4:C5:94:34:FE:CE:5F:B4:25:2B:ED:EC
X509v3 Authority Key Identifier:
keyid:96:98:0B:48:AD:56:39:F7:39:81:35:6E:33:16:0D:16:27:71:0B:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lpgLSK1WOfc5gTVuMxYNFidxC7c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/45a04c-cb0d-4c0c-8bf1-48f39fde0eea/1/lpgLSK1WOfc5gTVuMxYNFidxC7c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/45a04c-cb0d-4c0c-8bf1-48f39fde0eea/1/lpgLSK1WOfc5gTVuMxYNFidxC7c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:ae:9d:4c:cf:7b:31:9b:5b:29:6b:65:43:7e:45:f6:62:79:
46:c6:7b:a4:da:f1:ae:9a:9b:69:c8:53:91:c9:31:7c:6a:74:
39:02:99:d9:df:fe:77:bf:46:a6:d7:db:81:7f:ee:23:f8:f4:
c7:84:d0:4b:05:5f:1d:d7:2d:a2:55:a3:d0:3e:07:4a:07:e4:
ff:93:7b:a1:d0:57:63:dd:8c:5a:98:06:aa:ee:ce:90:a6:15:
3d:e9:f5:ab:f7:a5:5a:aa:f0:b1:5f:16:b7:a5:02:18:92:8d:
3f:b2:95:e2:90:59:f7:6e:39:44:69:23:7e:16:49:97:6d:14:
ed:20:a9:74:a8:c9:5d:4f:f8:e3:c2:f9:f1:40:f7:d9:5a:cc:
dd:6c:67:d8:dd:c4:41:f9:6f:7f:c2:78:71:8a:c0:d9:36:ef:
ee:d9:aa:fa:f0:3d:04:09:f7:c1:24:97:33:7b:06:bc:1c:e1:
94:29:a0:fc:d1:40:67:f5:51:9a:4a:97:10:f0:c9:c3:25:1d:
93:ef:df:b9:0c:fe:f8:8d:4b:bb:e2:69:83:86:fc:8b:85:f2:
2a:5d:ae:3e:16:64:b0:33:94:d5:75:84:0e:7d:2d:f5:df:9d:
98:56:d9:e1:39:16:2f:55:40:73:33:d9:ab:10:fb:79:85:0c:
c8:1a:fb:6b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaD4qepDvViiOqkOZ3qgEkXyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk2OTgwYjQ4YWQ1NjM5ZjczOTgxMzU2ZTMzMTYwZDE2Mjc3
MTBiYjcwHhcNMjYxMDAxMTgxMTE5WhcNMjYxMDAyMTgxMTE5WjAzMTEwLwYDVQQD
EyhlNWE2YmYyY2I1ZDE4MzUzZDRjNTk0MzRmZWNlNWZiNDI1MmJlZGVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxpaDeD+zG94vUZkW7cufL3uB6t7o
c62qUFYn8IXbxLdQWeZ2m8YFmOVGJiwTnd7SbpAFe50HvhoSIA0BfX6GyUFZYOp8
m/U5TFIbS0PEltG4UyGIx9CnI2OEsgyicAMBltDfIw2Pgf7dwJSJase05Pqztc2A
GVIuLrBPNAEdUWeFoTGdavT+c4m3F+qI42Ag1y2NIC2Q/IjVMpyABavFJ6FjNTNM
quehiwKWMsuYyjVzFrE93j8KLn5XZJymhLsGiw4gAsI8RLFqXvVyETv59m+XZhyW
B3qKgwYpWjNWGk4McXS+xBErEpEGtgS0MTJnh/8oExE2AnGQviI1r0BzlQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOWmvyy10YNT1MWUNP7OX7QlK+3sMB8GA1UdIwQY
MBaAFJaYC0itVjn3OYE1bjMWDRYncQu3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbHBnTFNLMVdPZmM1Z1RWdU14WU5GaWR4QzdjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi80NWEwNGMtY2IwZC00YzBjLThiZjEt
NDhmMzlmZGUwZWVhLzEvbHBnTFNLMVdPZmM1Z1RWdU14WU5GaWR4QzdjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Mi80NWEwNGMtY2IwZC00YzBjLThiZjEtNDhmMzlmZGUwZWVh
LzEvbHBnTFNLMVdPZmM1Z1RWdU14WU5GaWR4QzdjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADq6dTM97
MZtbKWtlQ35F9mJ5RsZ7pNrxrpqbachTkckxfGp0OQKZ2d/+d79GptfbgX/uI/j0
x4TQSwVfHdctolWj0D4HSgfk/5N7odBXY92MWpgGqu7OkKYVPen1q/elWqrwsV8W
t6UCGJKNP7KV4pBZ9245RGkjfhZJl20U7SCpdKjJXU/448L58UD32VrM3Wxn2N3E
Qflvf8J4cYrA2Tbv7tmq+vA9BAn3wSSXM3sGvBzhlCmg/NFAZ/VRmkqXEPDJwyUd
k+/fuQz++I1Lu+Jpg4b8i4XyKl2uPhZksDOU1XWEDn0t9d+dmFbZ4TkWL1VAczPZ
qxD7eYUMyBr7aw==
-----END CERTIFICATE-----
Generated at Fri Oct 2 01:17:07 2026 by rpki-client