Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0f/ca2213-e5a1-4ad2-8a22-768d3fb08e70/1/LPYTYxWlLVJHEkt882mq-4MSIn4.mft
File: LPYTYxWlLVJHEkt882mq-4MSIn4.mft (raw, json)
Hash identifier: pdAYBUDkh0cQhOvRw2/eJCdt8ds5xX1+SyDyNBVBRbI=
Subject key identifier: 5D:1C:31:FC:0B:30:CC:C7:7D:40:CE:98:63:11:A4:BA:D2:EF:A8:A6
Authority key identifier: 2C:F6:13:63:15:A5:2D:52:47:12:4B:7C:F3:69:AA:FB:83:12:22:7E
Certificate issuer: /CN=2cf6136315a52d5247124b7cf369aafb8312227e
Certificate serial: 01A0BFFA2EBDAD268D60FDDCD19059263C4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LPYTYxWlLVJHEkt882mq-4MSIn4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/ca2213-e5a1-4ad2-8a22-768d3fb08e70/1/LPYTYxWlLVJHEkt882mq-4MSIn4.mft
Manifest number: 1068
Signing time: Sun 20 Sep 2026 18:00:39 +0000
Manifest this update: Sun 20 Sep 2026 18:00:39 +0000
Manifest next update: Mon 21 Sep 2026 18:00:39 +0000
Files and hashes: 1: LPYTYxWlLVJHEkt882mq-4MSIn4.crl (hash: 8rQXFWg5H35GprSTuo0JmkgB3u135ajqr7mgGiMa264=)
2: r45G67-96LJpADDZJVJ0gLKO_X4.roa (hash: xLucZhj5eosliNF0R5ZBpKqpdmf4rFaViGwVRkuYRmo=)
3: u7gow9KmygGFJud8Kbx8Q5bXl10.roa (hash: zOMjeXXBLvQlEvulfQkHinq9NE+I+uXsiNr8CDWlugI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/ca2213-e5a1-4ad2-8a22-768d3fb08e70/1/LPYTYxWlLVJHEkt882mq-4MSIn4.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/ca2213-e5a1-4ad2-8a22-768d3fb08e70/1/LPYTYxWlLVJHEkt882mq-4MSIn4.mft
rsync://rpki.ripe.net/repository/DEFAULT/LPYTYxWlLVJHEkt882mq-4MSIn4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:bf:fa:2e:bd:ad:26:8d:60:fd:dc:d1:90:59:26:3c:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2cf6136315a52d5247124b7cf369aafb8312227e
Validity
Not Before: Sep 20 18:00:39 2026 GMT
Not After : Sep 21 18:00:39 2026 GMT
Subject: CN=5d1c31fc0b30ccc77d40ce986311a4bad2efa8a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:48:f7:d1:d5:71:21:3a:61:c2:bc:e2:a2:63:
ec:61:77:67:07:ba:36:cd:5a:69:51:c5:93:82:0e:
64:f1:da:e4:29:08:60:c3:3c:6f:8b:6a:c4:8d:1d:
9c:df:18:25:e3:36:0e:63:4c:66:d6:f6:93:d1:9a:
68:59:eb:b1:65:99:73:eb:d3:a4:f2:c5:58:71:da:
c2:83:8b:55:ff:10:57:35:81:9a:f6:8e:54:43:ef:
b1:f6:e2:6d:14:a4:41:87:27:fb:d9:9e:1e:44:6e:
c1:d1:2e:90:46:e7:10:3d:81:47:cd:7b:7f:d5:6d:
4e:93:63:17:9f:53:d9:cf:cc:5a:84:42:17:fa:07:
d1:da:67:dd:0a:a5:0c:15:69:e1:75:ca:bc:06:06:
10:a4:fb:59:d9:bd:7b:a7:da:a8:19:00:30:55:67:
ce:9a:29:d0:e6:5a:cb:58:85:de:3a:c1:c9:3a:70:
9c:a9:22:a0:2f:50:8c:4b:4b:47:19:78:82:4a:e9:
e2:f9:b2:ea:89:d6:b3:86:ab:b5:90:58:32:5f:9a:
49:e1:74:2a:e9:e3:3c:76:f7:37:29:82:d0:57:4f:
de:2d:4b:c0:99:c1:ba:90:e8:73:a9:2a:cd:1a:ef:
49:09:5e:97:19:cd:6e:2c:ed:c4:bb:4b:a7:d0:17:
b0:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:1C:31:FC:0B:30:CC:C7:7D:40:CE:98:63:11:A4:BA:D2:EF:A8:A6
X509v3 Authority Key Identifier:
keyid:2C:F6:13:63:15:A5:2D:52:47:12:4B:7C:F3:69:AA:FB:83:12:22:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LPYTYxWlLVJHEkt882mq-4MSIn4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/ca2213-e5a1-4ad2-8a22-768d3fb08e70/1/LPYTYxWlLVJHEkt882mq-4MSIn4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/ca2213-e5a1-4ad2-8a22-768d3fb08e70/1/LPYTYxWlLVJHEkt882mq-4MSIn4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:3e:92:eb:7f:ce:fa:07:23:4b:fa:0d:d1:69:08:73:59:b9:
c5:0e:6c:3b:86:38:0c:36:81:2f:4b:72:ae:06:b8:6c:96:50:
23:10:f4:22:be:83:d7:5a:96:a9:5c:8f:f9:91:34:25:fc:ee:
4e:cb:b5:14:b5:43:1c:0a:47:13:a4:f6:be:39:3e:cb:aa:99:
4f:20:44:52:4b:63:fb:8e:7c:c5:e4:16:7d:4b:72:e8:35:ee:
65:3d:e0:bf:30:81:d3:5b:f2:74:d2:a7:48:a7:61:3d:68:79:
8e:3b:9b:5a:88:2d:e1:87:f4:0d:4b:bd:07:da:97:4d:e4:da:
ba:39:e8:9d:db:29:05:82:fe:47:56:57:94:21:14:70:16:e5:
83:e7:9b:20:cc:92:6c:93:7b:a7:47:ee:d7:a4:a4:2e:52:72:
39:68:cf:30:90:f5:d3:ad:b9:c1:0d:0a:49:1e:60:b3:2f:34:
99:c5:f5:f8:f2:70:70:76:0d:b8:05:81:48:17:b9:01:8a:94:
ed:05:07:94:73:1d:96:49:b1:47:08:32:7f:18:0f:28:cb:6e:
16:09:41:d4:f9:70:99:29:46:4f:e4:41:eb:81:b6:8e:b6:b0:
f4:25:53:75:71:e5:10:ca:46:02:c3:55:3d:52:78:ed:fe:51:
ef:ac:bd:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 23:46:30 2026 by rpki-client