Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/811b1b-3a72-4402-b4fd-fa4dd21ae3dc/1/LPtHb88xPP8pXeDRcJFWrwJT188.mft
File: LPtHb88xPP8pXeDRcJFWrwJT188.mft (raw, json)
Hash identifier: wnLErfwMddxeKCs5HXBUh072KP6JvnZ7bgdxrwa703w=
Subject key identifier: C8:B9:87:D9:AE:B6:2A:73:F6:D5:15:37:85:8C:24:EA:9F:8F:77:E5
Authority key identifier: 2C:FB:47:6F:CF:31:3C:FF:29:5D:E0:D1:70:91:56:AF:02:53:D7:CF
Certificate issuer: /CN=2cfb476fcf313cff295de0d1709156af0253d7cf
Certificate serial: 019CAC0FD1999A1A5A94E580ADF6D343AEA8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LPtHb88xPP8pXeDRcJFWrwJT188.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/811b1b-3a72-4402-b4fd-fa4dd21ae3dc/1/LPtHb88xPP8pXeDRcJFWrwJT188.mft
Manifest number: 1847
Signing time: Mon 02 Mar 2026 01:00:43 +0000
Manifest this update: Mon 02 Mar 2026 01:00:43 +0000
Manifest next update: Tue 03 Mar 2026 01:00:43 +0000
Files and hashes: 1: LPtHb88xPP8pXeDRcJFWrwJT188.crl (hash: Bk1cnkal7lSB9KT6kfian+KLDB/vJRdAsfQfa9MdwYk=)
2: NgV_sHGbNkW-4Wz6vHYFvSOe7VQ.roa (hash: 4t65GeCqspIJ7i8BhQoAjY6xatOQordkuTZDORD2YyM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/811b1b-3a72-4402-b4fd-fa4dd21ae3dc/1/LPtHb88xPP8pXeDRcJFWrwJT188.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/811b1b-3a72-4402-b4fd-fa4dd21ae3dc/1/LPtHb88xPP8pXeDRcJFWrwJT188.mft
rsync://rpki.ripe.net/repository/DEFAULT/LPtHb88xPP8pXeDRcJFWrwJT188.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:0f:d1:99:9a:1a:5a:94:e5:80:ad:f6:d3:43:ae:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2cfb476fcf313cff295de0d1709156af0253d7cf
Validity
Not Before: Mar 2 01:00:43 2026 GMT
Not After : Mar 3 01:00:43 2026 GMT
Subject: CN=c8b987d9aeb62a73f6d51537858c24ea9f8f77e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:22:4a:14:20:49:7e:48:23:41:75:06:7f:80:
4e:6b:5e:b0:61:c5:e1:e9:0c:58:18:f9:ff:16:2b:
ce:9f:03:51:63:97:82:18:d4:b7:ff:59:90:05:ae:
4e:ec:ab:ff:9d:f6:4c:97:f3:f8:ee:05:a8:8b:74:
b5:d9:c5:97:08:e2:4f:d7:b0:7d:f2:4c:e4:ba:bb:
bf:8e:24:dd:1b:c2:aa:9b:83:b3:7d:86:7f:eb:6a:
15:eb:e8:5f:7e:ad:ab:06:42:c9:23:f1:0d:e1:7c:
b4:91:a9:20:e7:f7:24:43:1e:7a:8d:e1:a1:34:f9:
2d:05:0a:ad:63:ff:80:88:77:dc:52:e8:34:1e:a9:
3e:de:24:dd:d4:3c:47:26:45:ea:1e:46:4b:fe:a8:
b0:ba:de:88:28:a3:10:87:cf:f8:44:88:79:f0:07:
64:76:40:66:e0:78:f2:29:46:2a:61:b3:6e:a6:34:
75:ce:84:1d:7d:7e:a3:60:12:b8:aa:69:b0:18:09:
24:1b:f5:c6:a5:7e:20:4b:fb:f0:53:d3:0d:55:c8:
fc:36:42:ba:aa:60:ca:0c:52:5e:d6:1e:ec:2c:b2:
ff:a9:a6:27:67:51:b2:51:81:83:a1:94:61:b5:fe:
b5:cd:ef:74:01:21:a9:c8:95:ce:73:c1:a4:a5:b4:
4d:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:B9:87:D9:AE:B6:2A:73:F6:D5:15:37:85:8C:24:EA:9F:8F:77:E5
X509v3 Authority Key Identifier:
keyid:2C:FB:47:6F:CF:31:3C:FF:29:5D:E0:D1:70:91:56:AF:02:53:D7:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LPtHb88xPP8pXeDRcJFWrwJT188.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/811b1b-3a72-4402-b4fd-fa4dd21ae3dc/1/LPtHb88xPP8pXeDRcJFWrwJT188.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/811b1b-3a72-4402-b4fd-fa4dd21ae3dc/1/LPtHb88xPP8pXeDRcJFWrwJT188.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:e2:4c:a8:f4:05:cd:95:dc:c1:2f:ad:b5:cf:ad:5b:82:06:
82:a3:c1:aa:67:cb:8a:5c:d0:02:fb:28:5d:b5:90:70:ee:7e:
78:95:8c:f0:7f:10:da:0f:56:b7:fa:91:8c:24:26:ba:16:39:
91:1e:50:b0:12:51:0e:e7:44:2e:98:78:b0:b3:cb:e8:c2:57:
ad:5c:9b:35:d9:b7:fe:4d:5c:0b:05:bb:e8:9f:09:56:f6:12:
ab:cd:ca:fc:04:62:d5:a9:1f:d9:83:dc:8e:be:1c:af:72:31:
06:f4:a1:39:c4:2f:bb:e1:ac:e1:4e:f6:64:ab:63:aa:0a:9f:
64:cc:80:09:e1:78:e2:c6:72:20:01:dc:41:29:e7:4a:8c:f8:
f6:bb:a9:a2:45:17:f2:ae:94:bc:3e:db:94:95:c6:6c:d2:b8:
cf:aa:d0:56:c0:d7:95:b1:45:29:5d:0b:09:b5:02:c6:11:26:
4d:f7:b8:91:04:b0:a4:27:a8:fa:d1:0f:cc:4d:11:07:68:f6:
f9:f1:1f:e9:a5:e2:2a:4a:91:42:88:bb:61:1e:aa:cb:03:3a:
5e:92:ad:26:93:5f:8b:30:50:bd:8d:42:f8:f2:e8:d4:f7:83:
48:32:08:b6:01:0c:f2:14:ea:ad:f7:35:af:79:9f:e8:87:da:
12:23:67:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:29:35 2026 by rpki-client