Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/ca2213-e5a1-4ad2-8a22-768d3fb08e70/1/LPYTYxWlLVJHEkt882mq-4MSIn4.mft
File: LPYTYxWlLVJHEkt882mq-4MSIn4.mft (raw, json)
Hash identifier: oE7GxtpGiD0ufQ5gKnVFmCkNiHuWVElZbHWHs/I4e64=
Subject key identifier: DA:3A:4C:D1:BA:C3:03:FA:5C:96:25:72:02:4B:A0:CF:F1:D8:D6:05
Authority key identifier: 2C:F6:13:63:15:A5:2D:52:47:12:4B:7C:F3:69:AA:FB:83:12:22:7E
Certificate issuer: /CN=2cf6136315a52d5247124b7cf369aafb8312227e
Certificate serial: 019DA453CE4323319CDD80CD2E79B0C457CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LPYTYxWlLVJHEkt882mq-4MSIn4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/ca2213-e5a1-4ad2-8a22-768d3fb08e70/1/LPYTYxWlLVJHEkt882mq-4MSIn4.mft
Manifest number: 0ECC
Signing time: Sun 19 Apr 2026 06:00:48 +0000
Manifest this update: Sun 19 Apr 2026 06:00:48 +0000
Manifest next update: Mon 20 Apr 2026 06:00:48 +0000
Files and hashes: 1: LPYTYxWlLVJHEkt882mq-4MSIn4.crl (hash: CB8aibUBzYsFK1EMYEfIriYlvTtzDvyaR/qW7/uZOn0=)
2: r45G67-96LJpADDZJVJ0gLKO_X4.roa (hash: xLucZhj5eosliNF0R5ZBpKqpdmf4rFaViGwVRkuYRmo=)
3: u7gow9KmygGFJud8Kbx8Q5bXl10.roa (hash: zOMjeXXBLvQlEvulfQkHinq9NE+I+uXsiNr8CDWlugI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/ca2213-e5a1-4ad2-8a22-768d3fb08e70/1/LPYTYxWlLVJHEkt882mq-4MSIn4.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/ca2213-e5a1-4ad2-8a22-768d3fb08e70/1/LPYTYxWlLVJHEkt882mq-4MSIn4.mft
rsync://rpki.ripe.net/repository/DEFAULT/LPYTYxWlLVJHEkt882mq-4MSIn4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:53:ce:43:23:31:9c:dd:80:cd:2e:79:b0:c4:57:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2cf6136315a52d5247124b7cf369aafb8312227e
Validity
Not Before: Apr 19 06:00:48 2026 GMT
Not After : Apr 20 06:00:48 2026 GMT
Subject: CN=da3a4cd1bac303fa5c962572024ba0cff1d8d605
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:34:c0:9d:ae:67:f3:42:27:bb:10:43:9d:f1:
e4:17:9d:38:a7:46:96:ff:54:47:b1:08:ff:19:2b:
05:a4:8f:a9:e9:66:cc:24:df:d5:76:bc:25:1c:a5:
3e:e4:18:8a:a4:8f:d6:8e:fd:d5:9c:8c:07:3d:ef:
e7:35:69:52:dd:ea:5d:23:a3:e0:fd:68:6e:b9:57:
d4:04:a6:07:fe:26:c4:52:da:72:c2:60:5e:1f:90:
57:62:25:6e:91:e8:14:83:87:5a:88:3b:90:77:94:
f7:bc:3f:78:00:99:e6:98:29:13:4f:dc:d4:90:04:
bb:d9:b6:0c:8c:73:df:81:bd:0a:f2:5d:3e:38:75:
bc:05:be:f2:f4:f1:34:33:78:f7:54:72:7a:55:67:
18:e7:4a:36:ca:fc:c4:b2:8e:74:dd:b8:b0:d4:24:
0f:3b:1a:1e:8f:ce:59:14:0f:65:bb:e7:dd:b8:c9:
9c:da:38:c9:ec:15:fc:f0:2c:52:18:a8:2d:2f:fa:
1c:14:87:57:d7:7a:ee:73:9d:bb:77:d7:55:f7:c3:
21:b7:4e:7a:33:dc:2e:05:87:0b:92:f0:c7:25:01:
2a:17:7a:5c:71:b8:f3:3f:9c:ef:1e:f1:a7:cc:1b:
15:0d:d2:a5:5c:61:cb:41:7d:30:82:9b:40:67:1b:
ff:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:3A:4C:D1:BA:C3:03:FA:5C:96:25:72:02:4B:A0:CF:F1:D8:D6:05
X509v3 Authority Key Identifier:
keyid:2C:F6:13:63:15:A5:2D:52:47:12:4B:7C:F3:69:AA:FB:83:12:22:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LPYTYxWlLVJHEkt882mq-4MSIn4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/ca2213-e5a1-4ad2-8a22-768d3fb08e70/1/LPYTYxWlLVJHEkt882mq-4MSIn4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/ca2213-e5a1-4ad2-8a22-768d3fb08e70/1/LPYTYxWlLVJHEkt882mq-4MSIn4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:95:fd:ba:3b:ab:3b:0f:ff:d6:75:4d:d2:b7:a3:c3:35:af:
fe:d0:f8:0d:3d:fa:69:11:e3:10:6c:fc:f0:73:02:7f:04:03:
0b:cb:96:a4:ef:6b:b0:a4:47:4a:fb:66:af:94:33:fd:db:b0:
bd:aa:16:85:e0:e0:32:00:6b:de:04:ab:62:df:c5:b7:c5:93:
5f:59:91:57:37:4a:76:68:05:21:eb:90:58:eb:56:6f:33:97:
f3:5f:e9:af:72:28:e8:60:e2:db:01:c2:6c:a9:15:8b:1c:ed:
47:39:d9:9d:69:5b:df:fd:ca:a2:bf:26:b9:a4:72:d1:f5:15:
b2:ed:28:50:33:2d:f9:3c:8e:56:e2:7b:af:c3:d6:cc:42:bd:
18:2d:d9:e0:f1:32:ea:7c:30:cd:14:a4:bb:e9:27:f4:22:d3:
07:62:01:0b:1f:5b:93:32:f1:0e:7a:69:f1:b0:73:70:86:84:
9d:10:19:12:78:da:7c:a9:bf:d9:c9:88:dc:43:14:1b:2f:89:
a5:21:26:94:d5:3c:d5:b1:28:4e:3a:d6:34:ab:77:4a:56:46:
f8:3a:df:67:8f:4a:20:e6:93:7d:21:88:20:0a:7d:53:77:c2:
38:a4:92:c6:6a:6c:0e:a1:d4:0f:e5:f1:93:cf:f5:14:f2:2c:
59:ef:a0:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:44:06 2026 by rpki-client