Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7f/5fbcbb-00fa-4ad7-a801-43600171b8bd/1/lp1GNhtq9yD7mDas7JZbD1L0sJw.mft
File: lp1GNhtq9yD7mDas7JZbD1L0sJw.mft (raw, json)
Hash identifier: AIYXR0+2qdzeerZ8zEcU5C4+gd2r1ZMqyJYisvAFe88=
Subject key identifier: 1C:02:A2:8C:02:ED:A4:05:45:8A:29:0C:7A:06:61:48:D9:69:34:EC
Authority key identifier: 96:9D:46:36:1B:6A:F7:20:FB:98:36:AC:EC:96:5B:0F:52:F4:B0:9C
Certificate issuer: /CN=969d46361b6af720fb9836acec965b0f52f4b09c
Certificate serial: 01A0D426976A0FDDCAE51BEAC0E30064B8FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lp1GNhtq9yD7mDas7JZbD1L0sJw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/5fbcbb-00fa-4ad7-a801-43600171b8bd/1/lp1GNhtq9yD7mDas7JZbD1L0sJw.mft
Manifest number: 0B2B
Signing time: Thu 24 Sep 2026 16:01:33 +0000
Manifest this update: Thu 24 Sep 2026 16:01:33 +0000
Manifest next update: Fri 25 Sep 2026 16:01:33 +0000
Files and hashes: 1: 7qVO45pVF7TizoyZ3tGtHXhleIo.roa (hash: gATl7peABL1S3wTIKJvI8pKX7Z470X6U51KJ5zpO3XQ=)
2: a-DNVnXzKcyTBpRv7rCFDhEA2Ks.roa (hash: uHevbCCqsNL4Z3mLZg7vrx9rkzYsimXYtM+5KXA7MHE=)
3: lp1GNhtq9yD7mDas7JZbD1L0sJw.crl (hash: 8vNzW3HE+YhDEBTVBFCvtO7RF41vmDqmgkqk1mTpYbM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/5fbcbb-00fa-4ad7-a801-43600171b8bd/1/lp1GNhtq9yD7mDas7JZbD1L0sJw.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/5fbcbb-00fa-4ad7-a801-43600171b8bd/1/lp1GNhtq9yD7mDas7JZbD1L0sJw.mft
rsync://rpki.ripe.net/repository/DEFAULT/lp1GNhtq9yD7mDas7JZbD1L0sJw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d4:26:97:6a:0f:dd:ca:e5:1b:ea:c0:e3:00:64:b8:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=969d46361b6af720fb9836acec965b0f52f4b09c
Validity
Not Before: Sep 24 16:01:33 2026 GMT
Not After : Sep 25 16:01:33 2026 GMT
Subject: CN=1c02a28c02eda405458a290c7a066148d96934ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:dc:3a:3b:a8:da:d0:88:bc:6a:05:1a:a1:4f:
be:0f:a2:10:6c:c4:f2:1b:2f:b7:af:39:3c:d0:82:
2a:b3:98:18:b7:e8:ce:b2:d5:65:9a:1a:7d:63:c0:
26:ce:cc:7a:7b:70:ed:86:84:45:46:ba:68:1a:79:
60:a9:3c:f3:94:e8:b6:77:a2:f5:82:04:9a:b8:a0:
24:42:ef:c3:6e:86:b6:d4:50:5b:6d:09:68:29:cf:
b5:78:a0:8f:04:72:5a:fe:6f:3f:d9:f8:26:12:fd:
cf:b8:76:a8:38:4a:86:8a:d1:68:52:a0:75:5f:c5:
7f:34:b3:57:fa:bd:fa:38:42:6e:a4:c7:b2:d0:24:
d7:54:fc:88:4e:c4:29:40:cf:fb:0c:b7:33:8e:07:
da:5e:80:f7:8c:b5:00:59:13:fe:2a:fa:98:e1:53:
f0:2b:5f:5b:6a:24:f6:43:1e:50:53:f9:a0:ab:84:
ca:96:ec:76:09:61:d4:8c:a5:74:e1:81:58:4a:66:
0c:78:b5:6a:d7:5a:14:f7:8e:1f:4e:00:91:0f:60:
59:62:d4:fd:e3:c2:9e:8b:bb:a2:6b:b7:fb:fb:17:
71:2d:5d:38:d9:c0:52:05:37:2c:ca:41:7c:fe:a1:
81:2f:74:55:8f:18:d9:4e:51:7b:a7:5f:99:b6:d4:
2e:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:02:A2:8C:02:ED:A4:05:45:8A:29:0C:7A:06:61:48:D9:69:34:EC
X509v3 Authority Key Identifier:
keyid:96:9D:46:36:1B:6A:F7:20:FB:98:36:AC:EC:96:5B:0F:52:F4:B0:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lp1GNhtq9yD7mDas7JZbD1L0sJw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/5fbcbb-00fa-4ad7-a801-43600171b8bd/1/lp1GNhtq9yD7mDas7JZbD1L0sJw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/5fbcbb-00fa-4ad7-a801-43600171b8bd/1/lp1GNhtq9yD7mDas7JZbD1L0sJw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:8e:60:06:89:bc:6c:f5:b1:c5:37:22:a3:19:ac:99:16:ec:
1f:ce:e9:25:b6:59:55:ea:ec:c1:95:cc:5e:ff:7b:5d:eb:f5:
d8:38:d0:00:cf:6b:f0:2d:e3:d4:73:e0:b1:8e:86:0f:a1:c1:
4a:65:98:7c:a8:0c:94:d6:ff:4c:56:2b:25:bf:e1:9f:c2:5e:
9a:19:e1:cf:81:d3:28:45:be:b0:bd:74:23:44:ad:2d:b3:c4:
e3:99:de:cb:78:bf:9f:11:6f:c3:21:f2:b5:b2:62:25:dd:80:
12:11:e0:20:e7:bc:c9:e4:d0:9f:45:ac:f7:52:1a:c6:51:53:
66:14:df:43:2f:ec:cb:e1:8b:44:f1:4b:2a:77:f4:a2:76:1c:
87:4d:8c:18:45:ba:30:62:1e:98:4f:b5:e3:46:f2:7f:38:25:
bb:ec:5d:1d:8f:dc:d4:20:a0:ff:ae:1c:52:82:08:0a:0e:de:
1b:8b:7e:5f:8a:05:2f:ee:06:22:e1:07:a9:6c:8a:3e:93:1a:
9f:06:43:2b:91:c4:c8:9b:34:0e:36:15:00:06:7b:4d:b5:16:
03:9a:6d:20:ca:51:92:01:50:90:e9:3d:25:b1:34:13:49:98:
64:49:34:e7:a8:f6:43:37:ab:07:0c:f1:44:55:67:4e:33:d4:
8e:3e:52:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 21:22:23 2026 by rpki-client