Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0a/420c14-cb2c-4e3e-87b9-3fc39487807c/1/LIPfskYpwWd5NQtKd3tbKA_FnUQ.mft
File: LIPfskYpwWd5NQtKd3tbKA_FnUQ.mft (raw, json)
Hash identifier: KN+cEYdKjsoO+0Um5+ldUHfdOG+o/FjJgwEqxIHbtc8=
Subject key identifier: B4:84:F1:A6:A9:D2:0A:D6:A5:CE:1D:E0:2A:5C:DB:6E:B2:C9:54:FC
Authority key identifier: 2C:83:DF:B2:46:29:C1:67:79:35:0B:4A:77:7B:5B:28:0F:C5:9D:44
Certificate issuer: /CN=2c83dfb24629c16779350b4a777b5b280fc59d44
Certificate serial: 01A12D69F549908D1315C8CCABB64BAEFD29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LIPfskYpwWd5NQtKd3tbKA_FnUQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/420c14-cb2c-4e3e-87b9-3fc39487807c/1/LIPfskYpwWd5NQtKd3tbKA_FnUQ.mft
Manifest number: 1A9D
Signing time: Mon 12 Oct 2026 00:01:20 +0000
Manifest this update: Mon 12 Oct 2026 00:01:20 +0000
Manifest next update: Tue 13 Oct 2026 00:01:20 +0000
Files and hashes: 1: LIPfskYpwWd5NQtKd3tbKA_FnUQ.crl (hash: 8Fk72U1MpoTT95fzUPVrIEK0ET8ZpYOtIslD5n1G9XI=)
2: SizhTkIG2sATNsv1VQNzH4wHchc.roa (hash: 2PYBEpDEAGt3SnEGmQvvCFiLA489Fe6L2n4/O/hryFQ=)
3: cMMwTPV9hTcR-LW3CCNoNNI7ghU.roa (hash: D27oXJgFuXlMx0AdNp5xIFlLxsheQv6fczl4XU0D9Lc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/420c14-cb2c-4e3e-87b9-3fc39487807c/1/LIPfskYpwWd5NQtKd3tbKA_FnUQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/420c14-cb2c-4e3e-87b9-3fc39487807c/1/LIPfskYpwWd5NQtKd3tbKA_FnUQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/LIPfskYpwWd5NQtKd3tbKA_FnUQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 22:49:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2d:69:f5:49:90:8d:13:15:c8:cc:ab:b6:4b:ae:fd:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c83dfb24629c16779350b4a777b5b280fc59d44
Validity
Not Before: Oct 12 00:01:20 2026 GMT
Not After : Oct 13 00:01:20 2026 GMT
Subject: CN=b484f1a6a9d20ad6a5ce1de02a5cdb6eb2c954fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:68:aa:7e:bb:90:bd:c3:17:fa:b8:fb:39:74:
94:b3:52:4d:92:e3:61:37:b4:f0:d8:43:27:52:a6:
3c:c1:ef:a7:ce:24:c5:0c:ae:81:2b:36:6e:ba:3e:
27:fe:f0:e7:e3:20:ca:88:59:dc:90:1f:89:a7:d6:
5e:8b:0d:30:eb:36:72:5d:66:44:6b:65:11:a7:27:
43:1c:5d:33:0b:3d:2e:ab:5a:45:44:88:80:c8:e5:
40:55:3b:8d:5a:5e:25:df:bd:91:aa:af:a2:b4:c7:
3b:5a:53:4e:9a:89:df:97:98:d5:a1:47:15:91:4e:
94:7d:cb:06:ab:fb:a2:f6:6f:3a:dd:5c:fa:e9:95:
75:bc:1a:79:7c:0e:1f:30:ec:88:cb:53:3c:6f:ae:
43:df:06:1e:7c:9f:9c:58:6d:d7:bc:8b:41:bf:31:
7d:96:31:e6:d4:50:06:8e:f5:1c:09:a1:00:7a:cf:
fa:af:54:01:57:61:86:a9:69:bb:aa:04:43:c8:55:
8e:53:27:14:24:56:b2:94:5a:96:5f:1c:ff:f0:8f:
74:40:08:06:0e:df:7a:9f:5d:f3:c7:d3:86:32:8e:
78:77:bc:a3:ec:ce:9f:68:13:cf:7e:61:e2:9e:22:
60:a6:80:f5:97:e3:f1:59:83:fb:6c:ba:3a:9f:e9:
c2:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:84:F1:A6:A9:D2:0A:D6:A5:CE:1D:E0:2A:5C:DB:6E:B2:C9:54:FC
X509v3 Authority Key Identifier:
keyid:2C:83:DF:B2:46:29:C1:67:79:35:0B:4A:77:7B:5B:28:0F:C5:9D:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LIPfskYpwWd5NQtKd3tbKA_FnUQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/420c14-cb2c-4e3e-87b9-3fc39487807c/1/LIPfskYpwWd5NQtKd3tbKA_FnUQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/420c14-cb2c-4e3e-87b9-3fc39487807c/1/LIPfskYpwWd5NQtKd3tbKA_FnUQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:c5:fc:17:2d:86:91:6d:82:f8:70:d6:3b:93:c4:f6:0a:45:
00:85:dd:b6:7e:db:a8:74:42:b6:94:73:3f:33:89:9e:f5:98:
fb:9d:61:37:f4:d1:02:6e:20:75:b1:a4:81:5c:23:20:fd:9b:
73:d3:ae:f0:66:81:49:e4:60:12:8c:dc:1e:59:b3:21:3b:d5:
ef:66:3c:48:6d:21:cb:ae:9c:03:b1:d8:7d:d5:9f:29:dd:aa:
0b:4b:cf:ad:31:64:44:c5:d4:3a:10:bf:8a:48:99:0d:19:d9:
99:2c:f0:0c:4f:9e:97:fe:85:d3:e4:9f:81:1a:68:c1:6c:61:
66:8d:d0:69:ba:19:4e:68:06:72:dc:59:6b:f4:e7:f2:73:85:
e7:53:5e:29:c4:c1:9f:26:30:29:99:32:b6:37:5c:c7:07:aa:
9a:fa:f2:c9:a3:27:62:b6:01:58:f8:c4:c0:aa:f8:55:bb:4f:
53:ae:81:3b:c5:5d:db:6b:c1:e7:04:ac:7d:ee:64:d5:e3:56:
ea:69:27:bb:13:e3:af:a7:ea:83:a8:f3:81:3e:4d:88:d3:b3:
b0:de:14:c9:36:47:bb:c0:15:1a:22:d2:45:f4:32:a1:bc:b4:
67:8e:1e:ee:99:bb:b7:35:66:05:93:3c:4b:a6:3f:17:41:20:
b1:06:2b:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 02:32:35 2026 by rpki-client