Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0a/420c14-cb2c-4e3e-87b9-3fc39487807c/1/LIPfskYpwWd5NQtKd3tbKA_FnUQ.mft
File: LIPfskYpwWd5NQtKd3tbKA_FnUQ.mft (raw, json)
Hash identifier: WiRmvJ308J+d2+5GC1W9tBJr5LLfP+MvtRlG69HHPS4=
Subject key identifier: AC:E7:27:97:9F:B9:7D:56:55:EE:57:67:99:40:46:A6:4C:FD:39:CF
Authority key identifier: 2C:83:DF:B2:46:29:C1:67:79:35:0B:4A:77:7B:5B:28:0F:C5:9D:44
Certificate issuer: /CN=2c83dfb24629c16779350b4a777b5b280fc59d44
Certificate serial: 01A12B7B9CCD35C3EA396BACFBF23CCF04B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LIPfskYpwWd5NQtKd3tbKA_FnUQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/420c14-cb2c-4e3e-87b9-3fc39487807c/1/LIPfskYpwWd5NQtKd3tbKA_FnUQ.mft
Manifest number: 1A9C
Signing time: Sun 11 Oct 2026 15:01:23 +0000
Manifest this update: Sun 11 Oct 2026 15:01:23 +0000
Manifest next update: Mon 12 Oct 2026 15:01:23 +0000
Files and hashes: 1: LIPfskYpwWd5NQtKd3tbKA_FnUQ.crl (hash: sFHFvr/SBoHI31GLQfmxsuCPD5eVq0G0aUS83aPOQY4=)
2: SizhTkIG2sATNsv1VQNzH4wHchc.roa (hash: 2PYBEpDEAGt3SnEGmQvvCFiLA489Fe6L2n4/O/hryFQ=)
3: cMMwTPV9hTcR-LW3CCNoNNI7ghU.roa (hash: D27oXJgFuXlMx0AdNp5xIFlLxsheQv6fczl4XU0D9Lc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/420c14-cb2c-4e3e-87b9-3fc39487807c/1/LIPfskYpwWd5NQtKd3tbKA_FnUQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/420c14-cb2c-4e3e-87b9-3fc39487807c/1/LIPfskYpwWd5NQtKd3tbKA_FnUQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/LIPfskYpwWd5NQtKd3tbKA_FnUQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 14:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2b:7b:9c:cd:35:c3:ea:39:6b:ac:fb:f2:3c:cf:04:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c83dfb24629c16779350b4a777b5b280fc59d44
Validity
Not Before: Oct 11 15:01:23 2026 GMT
Not After : Oct 12 15:01:23 2026 GMT
Subject: CN=ace727979fb97d5655ee5767994046a64cfd39cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:a4:63:51:fb:e2:a1:64:52:b2:74:f5:30:35:
6a:60:64:fb:60:d2:f3:82:a5:39:03:6c:6b:0a:ee:
e0:52:6e:15:09:53:76:58:fa:8c:76:5f:32:48:88:
25:e8:53:7f:f3:c9:bf:61:33:c5:e0:91:ee:bb:bb:
77:0e:c4:22:88:e4:a7:6d:59:0d:29:62:51:99:1e:
99:ad:67:5b:df:6f:26:4b:69:73:f5:a7:76:32:c4:
3e:ea:d7:80:01:88:a7:1a:1c:12:2b:9d:65:9d:53:
7f:dd:fe:8f:cb:ba:b7:53:cc:63:ce:83:4c:a3:07:
6f:19:48:32:f4:ca:b0:42:51:c9:00:ce:af:85:16:
5a:67:fd:9e:81:bf:12:00:f8:48:c6:c8:88:3a:d7:
b4:6c:1d:a2:e5:8d:a6:28:da:3f:20:4d:0c:a3:1b:
ec:4a:d0:5c:85:52:84:78:6a:5c:a6:e5:fa:bc:ac:
1b:ee:d6:0d:48:6e:ea:1c:5e:62:cf:37:43:a7:99:
16:e3:40:ed:33:19:1d:aa:c7:69:db:1e:69:5b:b3:
db:08:0d:70:4d:9c:33:58:a4:de:74:77:8a:9b:e0:
81:7c:de:c3:03:36:77:ff:6c:d4:35:6a:06:e0:36:
cb:14:08:f3:2c:b2:1e:e3:e0:cf:bf:a7:8b:24:9d:
da:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:E7:27:97:9F:B9:7D:56:55:EE:57:67:99:40:46:A6:4C:FD:39:CF
X509v3 Authority Key Identifier:
keyid:2C:83:DF:B2:46:29:C1:67:79:35:0B:4A:77:7B:5B:28:0F:C5:9D:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LIPfskYpwWd5NQtKd3tbKA_FnUQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/420c14-cb2c-4e3e-87b9-3fc39487807c/1/LIPfskYpwWd5NQtKd3tbKA_FnUQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/420c14-cb2c-4e3e-87b9-3fc39487807c/1/LIPfskYpwWd5NQtKd3tbKA_FnUQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:11:5e:58:73:88:7d:64:5c:61:38:94:0c:e6:86:9f:99:9f:
5d:4c:df:71:50:b3:f1:75:d2:4d:c3:54:d3:10:87:8f:ef:90:
3f:3b:f2:1f:bf:4f:07:6b:48:b4:e5:e7:1a:9e:04:c7:c5:54:
47:4d:32:bc:64:8a:1d:5d:ee:e7:8e:20:fb:c5:53:1b:9f:20:
3f:2d:33:9b:e5:2b:24:ee:b3:aa:c4:b9:d4:6e:7f:bd:fb:5a:
19:54:cf:6e:dc:3e:45:90:29:1c:a5:0a:0d:dd:82:ab:69:4e:
58:7e:07:e7:43:75:a7:fb:78:cf:e8:e2:7f:c9:41:f7:17:22:
43:d3:40:95:bf:8a:83:42:0e:27:f2:db:e3:cf:57:64:52:24:
35:54:08:54:55:84:be:ab:99:7a:f7:32:3f:7c:f2:d2:b2:a7:
33:fe:f6:f3:f9:16:5e:2a:b8:69:7c:89:0f:67:78:74:e9:05:
d3:3b:64:4f:e5:e0:48:ca:6f:42:cc:08:b7:5e:b9:30:7d:de:
91:f6:40:7c:a7:f0:85:ef:9b:02:bb:e9:05:ce:da:ff:18:53:
f2:a8:96:66:07:41:4c:a5:59:8e:ad:44:60:ff:0f:07:0c:66:
0f:f8:91:ef:38:ab:24:0a:e7:7f:f0:80:36:12:a6:ae:4d:96:
70:45:80:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 19:09:22 2026 by rpki-client