Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/a6425c-0c7c-4fdf-87b2-6bba7fc31728/1/LpjFBqF0zyytnBpsW4HW6JiGNi0.mft
File: LpjFBqF0zyytnBpsW4HW6JiGNi0.mft (raw, json)
Hash identifier: 036Z8n+Ikfc/dROOob+j6Cz1u5HScnYZJWgT5+u5oBg=
Subject key identifier: ED:2D:A4:55:5E:28:17:5A:51:F8:44:3F:30:1D:1B:BD:DA:C2:1A:A9
Authority key identifier: 2E:98:C5:06:A1:74:CF:2C:AD:9C:1A:6C:5B:81:D6:E8:98:86:36:2D
Certificate issuer: /CN=2e98c506a174cf2cad9c1a6c5b81d6e89886362d
Certificate serial: 019D27E00363380E1CD0D34A6E62A43066A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LpjFBqF0zyytnBpsW4HW6JiGNi0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/a6425c-0c7c-4fdf-87b2-6bba7fc31728/1/LpjFBqF0zyytnBpsW4HW6JiGNi0.mft
Manifest number: 169A
Signing time: Thu 26 Mar 2026 02:01:25 +0000
Manifest this update: Thu 26 Mar 2026 02:01:25 +0000
Manifest next update: Fri 27 Mar 2026 02:01:25 +0000
Files and hashes: 1: Du6kGTRHXI4yfntbUGKdYnjPgko.roa (hash: 1oJFFLp85i5EIPDvvQ2y+xVdVmVO4zl8WcaNvzV96iI=)
2: LpjFBqF0zyytnBpsW4HW6JiGNi0.crl (hash: df4t4pmxZiAnTqEfBTnKPSfC9Kx8cimpq5Pt/X8rc2I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/a6425c-0c7c-4fdf-87b2-6bba7fc31728/1/LpjFBqF0zyytnBpsW4HW6JiGNi0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/a6425c-0c7c-4fdf-87b2-6bba7fc31728/1/LpjFBqF0zyytnBpsW4HW6JiGNi0.mft
rsync://rpki.ripe.net/repository/DEFAULT/LpjFBqF0zyytnBpsW4HW6JiGNi0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:e0:03:63:38:0e:1c:d0:d3:4a:6e:62:a4:30:66:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e98c506a174cf2cad9c1a6c5b81d6e89886362d
Validity
Not Before: Mar 26 02:01:25 2026 GMT
Not After : Mar 27 02:01:25 2026 GMT
Subject: CN=ed2da4555e28175a51f8443f301d1bbddac21aa9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:d3:b9:e6:b8:49:d0:f6:c1:31:c7:ef:62:7d:
6e:1d:d2:9c:83:f1:f4:41:55:1d:f4:52:08:5a:00:
48:63:cb:f8:92:82:2e:f0:7d:86:03:52:c3:00:22:
9e:4b:db:99:f6:86:55:48:94:0a:db:34:b4:1b:3d:
3d:89:65:cc:95:61:c0:dd:c8:8c:0d:0d:3c:c8:9c:
00:0e:f2:9d:96:a4:ac:44:11:55:bb:72:60:66:c1:
d4:5d:8c:e1:2b:d8:07:d7:7f:a7:d5:95:50:be:08:
59:1c:de:67:22:e7:64:11:aa:b7:19:97:c1:28:0b:
12:42:e9:df:fd:28:02:0e:d9:1e:99:e3:d3:5a:de:
7d:16:4d:2b:53:cb:3c:7a:17:7a:b1:48:1e:e4:76:
40:21:7e:da:8c:bc:2c:07:4d:bf:3e:de:2b:6c:d2:
fe:a0:ef:be:b0:6c:b4:12:23:78:7a:ed:e7:ae:19:
c1:6f:96:11:4d:33:54:c2:c6:75:94:b3:f4:62:9b:
e7:7f:84:cc:5d:af:f1:9c:d2:11:58:47:7d:5f:ac:
3a:93:68:d6:b5:7c:4c:b2:c3:73:69:4b:45:b4:1d:
ec:20:0e:6d:85:ce:91:bf:e1:cc:b9:ff:0a:bc:74:
9a:d7:fd:86:8f:54:85:e5:a0:7b:34:4b:d9:f9:aa:
16:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:2D:A4:55:5E:28:17:5A:51:F8:44:3F:30:1D:1B:BD:DA:C2:1A:A9
X509v3 Authority Key Identifier:
keyid:2E:98:C5:06:A1:74:CF:2C:AD:9C:1A:6C:5B:81:D6:E8:98:86:36:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LpjFBqF0zyytnBpsW4HW6JiGNi0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/a6425c-0c7c-4fdf-87b2-6bba7fc31728/1/LpjFBqF0zyytnBpsW4HW6JiGNi0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/a6425c-0c7c-4fdf-87b2-6bba7fc31728/1/LpjFBqF0zyytnBpsW4HW6JiGNi0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:73:20:8a:2d:09:6d:09:39:65:91:43:81:61:53:9b:fd:e5:
20:fa:f6:04:f3:cf:e4:21:9d:db:4b:c0:fa:4d:99:14:1d:96:
d3:42:ae:ef:90:92:f5:19:ce:87:90:0d:c9:a5:17:a2:f9:68:
78:c5:b2:b7:df:32:d6:c9:05:28:1f:23:e7:ed:fc:d2:d5:e0:
fd:96:e1:3a:02:e0:a3:2e:c6:be:b2:27:69:f0:9e:86:da:0b:
e9:dc:07:f5:13:2e:94:d1:81:90:45:ca:2b:4e:a6:ac:cc:b9:
7e:df:f8:e0:1a:e4:c0:b5:88:9e:9b:9d:cd:04:c8:8b:78:9b:
bb:9f:42:e0:3c:0b:ae:58:ff:f1:1d:d7:b9:e8:92:f1:1e:bf:
0a:01:72:46:83:b2:5c:8d:cb:11:7c:45:8b:ec:15:ab:6b:9d:
5b:ee:b8:00:d2:23:a3:91:54:07:8c:e2:f3:82:5e:79:45:80:
f2:2e:ab:59:d3:c7:3d:57:a6:a6:27:03:b7:e5:09:d2:69:03:
5e:aa:9d:a4:b7:55:8d:95:64:86:df:bf:85:d2:68:06:e3:33:
b5:a0:b5:26:65:d2:98:59:e8:7d:8e:62:55:89:42:1c:e4:63:
05:99:1e:e7:c8:0b:d9:1f:6b:0f:a3:63:b9:2d:07:46:c4:ea:
05:84:e1:51
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0n4ANjOA4c0NNKbmKkMGamMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJlOThjNTA2YTE3NGNmMmNhZDljMWE2YzViODFkNmU4OTg4
NjM2MmQwHhcNMjYwMzI2MDIwMTI1WhcNMjYwMzI3MDIwMTI1WjAzMTEwLwYDVQQD
EyhlZDJkYTQ1NTVlMjgxNzVhNTFmODQ0M2YzMDFkMWJiZGRhYzIxYWE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs9O55rhJ0PbBMcfvYn1uHdKcg/H0
QVUd9FIIWgBIY8v4koIu8H2GA1LDACKeS9uZ9oZVSJQK2zS0Gz09iWXMlWHA3ciM
DQ08yJwADvKdlqSsRBFVu3JgZsHUXYzhK9gH13+n1ZVQvghZHN5nIudkEaq3GZfB
KAsSQunf/SgCDtkemePTWt59Fk0rU8s8ehd6sUge5HZAIX7ajLwsB02/Pt4rbNL+
oO++sGy0EiN4eu3nrhnBb5YRTTNUwsZ1lLP0Ypvnf4TMXa/xnNIRWEd9X6w6k2jW
tXxMssNzaUtFtB3sIA5thc6Rv+HMuf8KvHSa1/2Gj1SF5aB7NEvZ+aoWHwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO0tpFVeKBdaUfhEPzAdG73awhqpMB8GA1UdIwQY
MBaAFC6YxQahdM8srZwabFuB1uiYhjYtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTHBqRkJxRjB6eXl0bkJwc1c0SFc2SmlHTmkwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi9hNjQyNWMtMGM3Yy00ZmRmLTg3YjIt
NmJiYTdmYzMxNzI4LzEvTHBqRkJxRjB6eXl0bkJwc1c0SFc2SmlHTmkwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZi9hNjQyNWMtMGM3Yy00ZmRmLTg3YjItNmJiYTdmYzMxNzI4
LzEvTHBqRkJxRjB6eXl0bkJwc1c0SFc2SmlHTmkwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnnMgii0J
bQk5ZZFDgWFTm/3lIPr2BPPP5CGd20vA+k2ZFB2W00Ku75CS9RnOh5ANyaUXovlo
eMWyt98y1skFKB8j5+380tXg/ZbhOgLgoy7GvrInafCehtoL6dwH9RMulNGBkEXK
K06mrMy5ft/44BrkwLWInpudzQTIi3ibu59C4DwLrlj/8R3XueiS8R6/CgFyRoOy
XI3LEXxFi+wVq2udW+64ANIjo5FUB4zi84JeeUWA8i6rWdPHPVempicDt+UJ0mkD
XqqdpLdVjZVkht+/hdJoBuMztaC1JmXSmFnofY5iVYlCHORjBZke58gL2R9rD6Nj
uS0HRsTqBYThUQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 07:04:08 2026 by rpki-client