Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/a6425c-0c7c-4fdf-87b2-6bba7fc31728/1/LpjFBqF0zyytnBpsW4HW6JiGNi0.mft
File: LpjFBqF0zyytnBpsW4HW6JiGNi0.mft (raw, json)
Hash identifier: 8NxpQVUyxsEKXRXPqM8UCZysl8gQoJ6A8LBDyILs0O4=
Subject key identifier: 2B:0E:1A:0F:6F:39:E4:27:A2:42:FF:4F:B1:9E:CC:05:44:AB:AA:AD
Authority key identifier: 2E:98:C5:06:A1:74:CF:2C:AD:9C:1A:6C:5B:81:D6:E8:98:86:36:2D
Certificate issuer: /CN=2e98c506a174cf2cad9c1a6c5b81d6e89886362d
Certificate serial: 019E1F10CC369D60FD44EFE38BBFE78BBC34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LpjFBqF0zyytnBpsW4HW6JiGNi0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/a6425c-0c7c-4fdf-87b2-6bba7fc31728/1/LpjFBqF0zyytnBpsW4HW6JiGNi0.mft
Manifest number: 171A
Signing time: Wed 13 May 2026 02:00:54 +0000
Manifest this update: Wed 13 May 2026 02:00:54 +0000
Manifest next update: Thu 14 May 2026 02:00:54 +0000
Files and hashes: 1: Du6kGTRHXI4yfntbUGKdYnjPgko.roa (hash: 1oJFFLp85i5EIPDvvQ2y+xVdVmVO4zl8WcaNvzV96iI=)
2: LpjFBqF0zyytnBpsW4HW6JiGNi0.crl (hash: cjKxVTBXmn4x4tbUa1iGsZifox8CnU0Br27F71slmkQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/a6425c-0c7c-4fdf-87b2-6bba7fc31728/1/LpjFBqF0zyytnBpsW4HW6JiGNi0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/a6425c-0c7c-4fdf-87b2-6bba7fc31728/1/LpjFBqF0zyytnBpsW4HW6JiGNi0.mft
rsync://rpki.ripe.net/repository/DEFAULT/LpjFBqF0zyytnBpsW4HW6JiGNi0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:10:cc:36:9d:60:fd:44:ef:e3:8b:bf:e7:8b:bc:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e98c506a174cf2cad9c1a6c5b81d6e89886362d
Validity
Not Before: May 13 02:00:54 2026 GMT
Not After : May 14 02:00:54 2026 GMT
Subject: CN=2b0e1a0f6f39e427a242ff4fb19ecc0544abaaad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:ca:a6:49:25:3d:51:ca:d3:ca:0e:2f:95:78:
ef:e1:9a:3e:eb:bd:bb:1d:2f:ca:f0:2e:d6:f4:16:
00:cb:67:a1:8a:58:a0:18:32:30:12:80:a7:92:0b:
7b:57:16:40:3b:32:e3:9c:8f:42:c5:64:56:f9:fc:
f5:6c:bf:74:0c:10:b4:ee:84:49:96:1d:94:6d:b0:
a9:0f:20:b1:60:8c:ba:1f:17:77:05:c2:a3:20:ad:
2a:59:ae:4a:40:33:e9:5a:03:7b:b8:81:7f:7d:0f:
5f:0f:ac:a0:2d:bb:cc:08:eb:72:cf:98:fe:55:42:
95:b0:13:91:76:ce:a3:27:d7:5a:36:59:46:82:6f:
2b:cb:9f:5d:6b:e5:51:61:eb:88:1a:bb:50:63:aa:
99:0a:6a:2a:10:52:00:09:78:f1:4b:09:19:16:66:
d9:f1:9b:8b:6c:4d:a9:09:fd:ac:f8:da:2b:af:f0:
f4:a9:a0:39:3d:78:43:04:53:a6:ce:36:fb:d4:25:
55:f3:c1:fb:94:a3:11:6a:62:3a:43:b1:4f:21:41:
c5:64:d1:24:e4:d6:43:f6:8c:82:7a:97:b1:75:50:
2e:b9:5a:d6:24:a3:b2:f3:38:5b:93:40:0c:fe:1e:
0f:c1:76:f5:7c:78:fa:b2:fc:ff:d1:dc:83:71:b4:
ab:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:0E:1A:0F:6F:39:E4:27:A2:42:FF:4F:B1:9E:CC:05:44:AB:AA:AD
X509v3 Authority Key Identifier:
keyid:2E:98:C5:06:A1:74:CF:2C:AD:9C:1A:6C:5B:81:D6:E8:98:86:36:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LpjFBqF0zyytnBpsW4HW6JiGNi0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/a6425c-0c7c-4fdf-87b2-6bba7fc31728/1/LpjFBqF0zyytnBpsW4HW6JiGNi0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/a6425c-0c7c-4fdf-87b2-6bba7fc31728/1/LpjFBqF0zyytnBpsW4HW6JiGNi0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:ce:15:8e:c4:08:18:db:23:ac:f2:22:ef:bc:0c:ad:9d:01:
2e:2d:64:bd:e2:db:62:7c:ff:06:5b:c8:d7:40:54:5f:63:2d:
8f:df:84:ac:8a:40:a2:ff:4c:b6:ae:c1:68:cb:32:1f:86:97:
50:2b:17:b8:27:d5:87:8d:75:5f:6d:5b:c6:69:32:b9:48:e2:
7d:93:fd:58:84:aa:6e:65:36:f2:3c:6b:d2:42:1c:89:e2:eb:
ea:2c:c8:a2:a6:60:7f:16:8a:9f:88:81:0a:13:98:8d:ea:f5:
9e:88:ce:d7:f1:5f:b8:95:02:48:b8:fd:35:65:95:2a:75:a7:
44:78:1d:57:39:4a:3b:f9:b5:02:c0:7e:be:0e:b8:a2:e7:1c:
d6:f7:fc:8d:e1:62:2f:ff:15:49:f9:31:8f:5c:ed:42:23:65:
13:c8:09:75:1c:4c:00:58:d0:3e:b7:01:1d:a8:1f:4c:93:90:
05:2c:24:f7:a4:c5:40:a2:f2:36:8c:00:f8:68:fe:93:67:19:
36:6a:97:d5:42:03:eb:b4:d3:3b:98:b1:94:af:fa:0f:69:33:
da:81:98:43:79:72:57:7e:9e:cf:0e:cf:f3:07:1f:24:6d:fe:
1b:83:ed:37:76:6a:ba:9a:b2:de:cc:12:af:06:20:f0:e6:3f:
13:c5:d9:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:10:31 2026 by rpki-client