Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/5fbcbb-00fa-4ad7-a801-43600171b8bd/1/lp1GNhtq9yD7mDas7JZbD1L0sJw.mft
File: lp1GNhtq9yD7mDas7JZbD1L0sJw.mft (raw, json)
Hash identifier: vMp/JXUDF8MZXai3Nx28q1ciBGhuSLP1MPqGto90ng8=
Subject key identifier: 5C:B4:0F:09:8E:26:50:3B:3C:43:57:4F:63:C0:68:8A:32:8B:81:12
Authority key identifier: 96:9D:46:36:1B:6A:F7:20:FB:98:36:AC:EC:96:5B:0F:52:F4:B0:9C
Certificate issuer: /CN=969d46361b6af720fb9836acec965b0f52f4b09c
Certificate serial: 019E1EDA52366CBAB8731D4DF5BED67618B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lp1GNhtq9yD7mDas7JZbD1L0sJw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/5fbcbb-00fa-4ad7-a801-43600171b8bd/1/lp1GNhtq9yD7mDas7JZbD1L0sJw.mft
Manifest number: 09C4
Signing time: Wed 13 May 2026 01:01:24 +0000
Manifest this update: Wed 13 May 2026 01:01:24 +0000
Manifest next update: Thu 14 May 2026 01:01:24 +0000
Files and hashes: 1: 7qVO45pVF7TizoyZ3tGtHXhleIo.roa (hash: gATl7peABL1S3wTIKJvI8pKX7Z470X6U51KJ5zpO3XQ=)
2: a-DNVnXzKcyTBpRv7rCFDhEA2Ks.roa (hash: uHevbCCqsNL4Z3mLZg7vrx9rkzYsimXYtM+5KXA7MHE=)
3: lp1GNhtq9yD7mDas7JZbD1L0sJw.crl (hash: 4z+/W7jwS7vpFQ3zJFOgAimaYuSy0CpeCXARCqpRulM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/5fbcbb-00fa-4ad7-a801-43600171b8bd/1/lp1GNhtq9yD7mDas7JZbD1L0sJw.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/5fbcbb-00fa-4ad7-a801-43600171b8bd/1/lp1GNhtq9yD7mDas7JZbD1L0sJw.mft
rsync://rpki.ripe.net/repository/DEFAULT/lp1GNhtq9yD7mDas7JZbD1L0sJw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:da:52:36:6c:ba:b8:73:1d:4d:f5:be:d6:76:18:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=969d46361b6af720fb9836acec965b0f52f4b09c
Validity
Not Before: May 13 01:01:24 2026 GMT
Not After : May 14 01:01:24 2026 GMT
Subject: CN=5cb40f098e26503b3c43574f63c0688a328b8112
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:cb:19:ad:27:d4:b5:82:f7:70:db:72:3d:52:
b1:84:5d:a5:de:c9:3e:15:de:69:68:6e:bf:cd:41:
57:58:06:a9:4b:06:12:88:46:fa:c1:32:2d:8f:3c:
ac:b6:92:1b:fe:ce:36:97:83:5c:1e:cc:f6:29:d1:
75:fc:d7:b5:86:8a:1c:66:04:23:e6:5a:4a:84:18:
a1:f9:40:94:c8:bf:5d:4b:f2:25:1a:e5:92:b7:10:
08:c4:28:e6:d5:19:96:71:a1:61:5b:a9:b6:df:39:
e3:a5:bb:e8:0b:b1:45:72:0b:1e:4e:4c:02:ed:7f:
3e:c5:5e:d5:96:8b:0d:c2:53:83:60:1b:ec:d4:a8:
10:56:07:c7:73:1b:62:f0:a3:b6:bf:df:01:51:c2:
2d:05:6d:30:02:4f:72:28:2e:9d:cc:87:05:b7:10:
2c:ee:07:8f:d6:45:dc:2c:cf:6f:00:1e:ec:2c:73:
7e:0f:72:e1:aa:a5:10:ac:d6:de:b6:fc:68:69:5e:
ed:37:2c:4c:80:22:78:b7:bb:50:b8:6a:38:69:83:
54:d5:2f:4d:7b:8c:80:e1:40:a9:53:b4:c3:1c:08:
ea:e4:58:d6:41:70:ce:94:71:2a:74:bc:40:67:fb:
38:16:87:b9:d3:d6:b9:48:16:9f:93:5e:d4:4d:c0:
7e:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:B4:0F:09:8E:26:50:3B:3C:43:57:4F:63:C0:68:8A:32:8B:81:12
X509v3 Authority Key Identifier:
keyid:96:9D:46:36:1B:6A:F7:20:FB:98:36:AC:EC:96:5B:0F:52:F4:B0:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lp1GNhtq9yD7mDas7JZbD1L0sJw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/5fbcbb-00fa-4ad7-a801-43600171b8bd/1/lp1GNhtq9yD7mDas7JZbD1L0sJw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/5fbcbb-00fa-4ad7-a801-43600171b8bd/1/lp1GNhtq9yD7mDas7JZbD1L0sJw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d9:bc:f8:7f:b5:c0:23:50:6f:da:9f:2f:95:11:8e:23:7e:f2:
fc:d3:7c:94:2d:e8:72:78:f2:6d:71:78:ae:86:f2:5c:12:c6:
1c:c9:f9:d2:06:bd:92:b4:af:8e:d7:81:fe:db:c5:d0:ce:16:
e1:74:08:6e:0d:46:76:cc:49:fc:f4:46:08:d3:31:b9:80:33:
72:09:5a:7d:f3:ea:aa:cb:45:4c:eb:bc:36:f6:d9:79:ac:86:
f4:f5:66:2f:fb:a2:03:4d:17:87:79:d8:31:62:f7:73:3a:b1:
93:98:2f:d3:90:79:11:4d:b9:38:ec:df:cf:f2:dc:69:8a:6b:
33:b6:71:86:6c:b5:1a:75:ab:eb:9b:b6:fb:7c:dd:ee:0c:cf:
38:e3:2d:f1:80:4c:9d:8f:f1:3e:df:8b:b6:04:7e:48:9a:e2:
81:64:9e:12:39:e6:e9:5e:f8:fd:ed:51:84:eb:f3:04:42:ba:
c7:1c:98:be:98:c6:b9:5d:88:c0:ec:3b:c2:d8:1f:7e:f8:9e:
dd:7c:cc:af:aa:e7:6c:7d:c7:49:39:eb:9f:1b:cf:03:8d:89:
f1:80:5d:51:4f:06:cc:61:23:1f:3e:5a:5e:70:42:d5:76:22:
28:30:2e:6d:c0:64:6d:5b:a4:8a:e1:ae:e0:b3:34:a9:70:c3:
84:b9:7d:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:59:10 2026 by rpki-client