Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/420c14-cb2c-4e3e-87b9-3fc39487807c/1/LIPfskYpwWd5NQtKd3tbKA_FnUQ.mft
File: LIPfskYpwWd5NQtKd3tbKA_FnUQ.mft (raw, json)
Hash identifier: 8hCvdu8vAX143mGuBDsKydcP8lcNzTfJ5tVqeGeX0Yk=
Subject key identifier: 59:8E:78:E2:39:DB:DC:38:BE:21:BA:66:B1:43:30:D7:CB:16:59:CF
Authority key identifier: 2C:83:DF:B2:46:29:C1:67:79:35:0B:4A:77:7B:5B:28:0F:C5:9D:44
Certificate issuer: /CN=2c83dfb24629c16779350b4a777b5b280fc59d44
Certificate serial: 019CAA8FEFB75C36B44366F75E94EF37A54D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LIPfskYpwWd5NQtKd3tbKA_FnUQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/420c14-cb2c-4e3e-87b9-3fc39487807c/1/LIPfskYpwWd5NQtKd3tbKA_FnUQ.mft
Manifest number: 1847
Signing time: Sun 01 Mar 2026 18:01:25 +0000
Manifest this update: Sun 01 Mar 2026 18:01:25 +0000
Manifest next update: Mon 02 Mar 2026 18:01:25 +0000
Files and hashes: 1: LIPfskYpwWd5NQtKd3tbKA_FnUQ.crl (hash: YUkPBOHo/sXA5+3Et1UCvP5habtaVPFiJea97n8WHeE=)
2: SizhTkIG2sATNsv1VQNzH4wHchc.roa (hash: 2PYBEpDEAGt3SnEGmQvvCFiLA489Fe6L2n4/O/hryFQ=)
3: cMMwTPV9hTcR-LW3CCNoNNI7ghU.roa (hash: D27oXJgFuXlMx0AdNp5xIFlLxsheQv6fczl4XU0D9Lc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/420c14-cb2c-4e3e-87b9-3fc39487807c/1/LIPfskYpwWd5NQtKd3tbKA_FnUQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/420c14-cb2c-4e3e-87b9-3fc39487807c/1/LIPfskYpwWd5NQtKd3tbKA_FnUQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/LIPfskYpwWd5NQtKd3tbKA_FnUQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:8f:ef:b7:5c:36:b4:43:66:f7:5e:94:ef:37:a5:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c83dfb24629c16779350b4a777b5b280fc59d44
Validity
Not Before: Mar 1 18:01:25 2026 GMT
Not After : Mar 2 18:01:25 2026 GMT
Subject: CN=598e78e239dbdc38be21ba66b14330d7cb1659cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:56:eb:3f:37:1a:db:ce:5d:0e:d9:96:4a:a4:
bb:ac:ef:1a:6e:b7:81:67:63:05:b4:05:85:1f:ab:
da:21:d7:67:1a:da:6a:01:fe:0f:53:db:51:ef:ac:
4a:83:9b:eb:74:92:02:ac:3b:9c:fa:3f:30:37:37:
9f:fa:fa:0a:c8:2f:6b:75:be:c6:20:07:4e:2b:f0:
9f:c8:fe:8e:ba:c1:6f:a0:c1:ce:8a:8f:a0:d6:94:
3c:91:f0:3f:05:82:05:e8:6c:8b:ed:66:ba:a8:3c:
74:49:a4:18:0a:14:b3:29:85:fd:58:fc:da:8e:ee:
99:32:e0:61:a4:b7:96:a6:b2:7d:fe:d2:50:71:3a:
1c:f1:d8:ab:31:48:db:54:27:a9:8e:73:83:06:4f:
ca:65:04:1c:95:c8:72:89:90:96:31:96:82:2b:50:
51:c8:37:e4:60:d1:ce:6f:22:ca:2c:8d:ab:9c:ba:
93:be:88:e9:f3:24:81:db:b3:ca:63:0e:5d:d0:fb:
95:95:f1:68:34:cd:75:3d:24:51:1f:e8:2a:92:54:
5e:9e:0e:06:68:a1:36:52:c0:6b:e8:5f:c4:18:bc:
28:a5:18:f9:86:b3:dd:e7:30:ce:68:55:30:74:d8:
da:70:51:32:51:6c:68:f0:f3:79:f8:13:ec:3e:ca:
e2:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:8E:78:E2:39:DB:DC:38:BE:21:BA:66:B1:43:30:D7:CB:16:59:CF
X509v3 Authority Key Identifier:
keyid:2C:83:DF:B2:46:29:C1:67:79:35:0B:4A:77:7B:5B:28:0F:C5:9D:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LIPfskYpwWd5NQtKd3tbKA_FnUQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/420c14-cb2c-4e3e-87b9-3fc39487807c/1/LIPfskYpwWd5NQtKd3tbKA_FnUQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/420c14-cb2c-4e3e-87b9-3fc39487807c/1/LIPfskYpwWd5NQtKd3tbKA_FnUQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:07:6d:b9:e8:9d:d6:e5:4b:8b:d3:95:34:57:2d:49:28:7f:
f0:a1:e7:7f:0d:d9:36:77:17:44:83:0c:5f:a2:ca:47:0a:95:
c3:9b:b4:72:74:dd:54:70:ce:b8:f0:89:5a:54:0f:de:fa:39:
8c:e1:24:43:1b:a6:99:80:86:27:3c:38:1e:71:41:2d:43:7d:
73:b9:60:a4:4f:0b:53:4f:90:a3:77:55:a9:90:a6:21:0b:ac:
d9:18:b9:73:d4:3d:2f:b0:00:e9:f2:3f:0a:eb:90:62:73:14:
93:2f:94:e1:88:ff:83:56:58:7d:19:0e:3f:7e:71:3c:68:6f:
f8:83:46:82:71:bd:f7:5e:a6:ec:a8:e0:da:15:15:e4:f6:40:
23:8a:3b:6c:a4:f1:74:e9:d4:c2:6b:fd:16:3d:d8:47:dc:e2:
74:65:14:02:d8:d8:3d:fc:0d:17:c6:59:6a:5a:35:1e:10:87:
40:01:37:24:cb:39:cc:9a:d0:e5:ea:ce:bd:b8:0e:f9:df:57:
7a:c8:a1:dd:2d:ff:5f:42:09:01:3c:e1:5d:b4:87:2a:0f:1c:
1f:38:93:21:59:bf:ea:59:0b:af:03:47:d2:25:2d:d4:e0:1e:
25:79:2a:1f:f4:1d:36:90:1c:db:3f:2a:71:39:30:78:8a:92:
69:f5:4d:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:03:33 2026 by rpki-client