Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/ca2213-e5a1-4ad2-8a22-768d3fb08e70/1/LPYTYxWlLVJHEkt882mq-4MSIn4.mft
File: LPYTYxWlLVJHEkt882mq-4MSIn4.mft (raw, json)
Hash identifier: WFzr6stVR6H1xZ+wpRa8IZ2olYFQi1WSXvsy7KzQHTA=
Subject key identifier: 25:73:58:52:8A:95:EF:57:ED:49:EC:55:E1:35:7C:E5:B8:C4:C2:30
Authority key identifier: 2C:F6:13:63:15:A5:2D:52:47:12:4B:7C:F3:69:AA:FB:83:12:22:7E
Certificate issuer: /CN=2cf6136315a52d5247124b7cf369aafb8312227e
Certificate serial: 019FA7F4627B42202AA4312CFC56B10F8156
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LPYTYxWlLVJHEkt882mq-4MSIn4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/ca2213-e5a1-4ad2-8a22-768d3fb08e70/1/LPYTYxWlLVJHEkt882mq-4MSIn4.mft
Manifest number: 0FD7
Signing time: Tue 28 Jul 2026 09:00:38 +0000
Manifest this update: Tue 28 Jul 2026 09:00:38 +0000
Manifest next update: Wed 29 Jul 2026 09:00:38 +0000
Files and hashes: 1: LPYTYxWlLVJHEkt882mq-4MSIn4.crl (hash: QI1OVVfZWTdBuHc/eA8RSNbIvMhkX1H6oX2jU3kKN3Q=)
2: r45G67-96LJpADDZJVJ0gLKO_X4.roa (hash: xLucZhj5eosliNF0R5ZBpKqpdmf4rFaViGwVRkuYRmo=)
3: u7gow9KmygGFJud8Kbx8Q5bXl10.roa (hash: zOMjeXXBLvQlEvulfQkHinq9NE+I+uXsiNr8CDWlugI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/ca2213-e5a1-4ad2-8a22-768d3fb08e70/1/LPYTYxWlLVJHEkt882mq-4MSIn4.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/ca2213-e5a1-4ad2-8a22-768d3fb08e70/1/LPYTYxWlLVJHEkt882mq-4MSIn4.mft
rsync://rpki.ripe.net/repository/DEFAULT/LPYTYxWlLVJHEkt882mq-4MSIn4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a7:f4:62:7b:42:20:2a:a4:31:2c:fc:56:b1:0f:81:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2cf6136315a52d5247124b7cf369aafb8312227e
Validity
Not Before: Jul 28 09:00:38 2026 GMT
Not After : Jul 29 09:00:38 2026 GMT
Subject: CN=257358528a95ef57ed49ec55e1357ce5b8c4c230
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:93:e5:ee:28:2f:59:35:6c:37:db:0e:cc:6b:
35:dc:c2:5a:62:17:ae:96:d0:66:f9:a1:74:96:ca:
09:68:37:c1:de:5e:77:a5:13:57:ef:de:cd:29:b3:
de:4e:be:02:49:58:52:c0:9c:f1:67:7d:8f:76:71:
8a:dc:8e:1a:32:d6:47:d3:84:5d:95:a6:b3:4f:15:
9b:3c:55:08:13:63:ab:15:f2:5c:9a:7b:49:9b:80:
69:d5:30:49:a7:8d:ab:cb:be:8f:41:03:a0:dd:64:
88:b4:8b:56:96:71:3d:3e:6a:5c:9b:34:0b:e4:2f:
5c:10:8d:e2:24:bd:54:49:a2:f1:df:8f:c7:e7:0a:
9f:51:e2:b2:38:fc:f7:73:66:43:65:f6:40:66:93:
3a:98:8b:1c:b8:0f:02:19:be:c8:f8:f6:7a:fe:6b:
ee:17:b0:99:89:17:2a:87:6a:6f:ee:86:f5:b2:78:
45:c8:f4:19:74:8c:c1:04:93:4b:a2:d3:95:d5:08:
7b:2c:90:2c:9f:44:70:6b:7f:14:7a:ec:e5:1f:3f:
bc:9f:a1:43:5c:79:0b:9a:8f:f8:3a:3d:27:2e:d2:
cf:e1:7a:93:81:8d:a6:24:23:02:dc:1a:2a:e9:44:
94:71:ee:f6:79:f3:23:c3:14:4e:5c:25:99:fe:b3:
bc:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:73:58:52:8A:95:EF:57:ED:49:EC:55:E1:35:7C:E5:B8:C4:C2:30
X509v3 Authority Key Identifier:
keyid:2C:F6:13:63:15:A5:2D:52:47:12:4B:7C:F3:69:AA:FB:83:12:22:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LPYTYxWlLVJHEkt882mq-4MSIn4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/ca2213-e5a1-4ad2-8a22-768d3fb08e70/1/LPYTYxWlLVJHEkt882mq-4MSIn4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/ca2213-e5a1-4ad2-8a22-768d3fb08e70/1/LPYTYxWlLVJHEkt882mq-4MSIn4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:be:56:de:b5:73:5a:08:3d:99:15:a9:91:6f:c9:5f:17:c3:
3c:49:d4:fa:56:90:d8:54:7c:4a:ca:44:08:fd:65:c9:fc:dd:
14:0e:70:8a:11:f6:f0:4d:39:8a:32:6e:1d:6b:10:74:ad:7e:
03:6c:bc:77:19:e7:c1:6e:9e:a4:17:6a:ab:45:6b:16:fd:bd:
ed:2c:b6:97:1a:81:93:b2:c0:22:e5:4a:20:43:e9:14:e2:38:
6a:4e:64:ee:a9:c2:a1:2f:b6:03:78:be:0e:54:23:bc:cd:bc:
3b:eb:db:d1:9c:55:e1:a6:2e:14:ad:2d:71:59:34:7a:a8:93:
84:14:24:8d:e0:fe:99:6f:e3:d9:e5:58:4b:ec:a2:d7:0e:1c:
25:bc:99:55:fa:ec:cc:e4:f0:f0:a9:e6:6d:00:c4:13:05:e1:
6d:fc:05:1c:4e:d3:02:4c:5a:55:bf:c3:2b:65:83:4e:ee:f6:
c6:44:73:6a:33:62:a2:93:96:45:64:d9:1a:0b:a2:94:ed:2c:
f0:d7:01:99:7b:f6:ef:15:a3:23:64:4a:11:af:f5:ef:c2:9a:
d8:f9:25:8a:4b:0a:98:14:2a:3b:05:fe:e4:5a:29:ff:76:5d:
c6:86:a5:55:f6:d9:76:eb:9e:1e:26:0f:eb:89:96:7c:b4:af:
71:3f:67:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:23:31 2026 by rpki-client