Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/22/811b1b-3a72-4402-b4fd-fa4dd21ae3dc/1/LPtHb88xPP8pXeDRcJFWrwJT188.mft
File: LPtHb88xPP8pXeDRcJFWrwJT188.mft (raw, json)
Hash identifier: LapfhwbV9B18t6HX901f5xvzYIWxAhjOGZs1rSS9onA=
Subject key identifier: 1B:C5:A0:B8:44:80:64:49:63:86:EC:C6:19:2A:93:A1:7D:F8:4D:26
Authority key identifier: 2C:FB:47:6F:CF:31:3C:FF:29:5D:E0:D1:70:91:56:AF:02:53:D7:CF
Certificate issuer: /CN=2cfb476fcf313cff295de0d1709156af0253d7cf
Certificate serial: 01A0C2C48F3331F7F6A78BC7A8BF97EBE464
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LPtHb88xPP8pXeDRcJFWrwJT188.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/811b1b-3a72-4402-b4fd-fa4dd21ae3dc/1/LPtHb88xPP8pXeDRcJFWrwJT188.mft
Manifest number: 1A65
Signing time: Mon 21 Sep 2026 07:00:56 +0000
Manifest this update: Mon 21 Sep 2026 07:00:56 +0000
Manifest next update: Tue 22 Sep 2026 07:00:56 +0000
Files and hashes: 1: LPtHb88xPP8pXeDRcJFWrwJT188.crl (hash: WkTSytcwXHYrOsjPCe89MYceHVdnyQDyc4eqbWpAaic=)
2: NgV_sHGbNkW-4Wz6vHYFvSOe7VQ.roa (hash: 4t65GeCqspIJ7i8BhQoAjY6xatOQordkuTZDORD2YyM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/811b1b-3a72-4402-b4fd-fa4dd21ae3dc/1/LPtHb88xPP8pXeDRcJFWrwJT188.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/811b1b-3a72-4402-b4fd-fa4dd21ae3dc/1/LPtHb88xPP8pXeDRcJFWrwJT188.mft
rsync://rpki.ripe.net/repository/DEFAULT/LPtHb88xPP8pXeDRcJFWrwJT188.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 07:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c2:c4:8f:33:31:f7:f6:a7:8b:c7:a8:bf:97:eb:e4:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2cfb476fcf313cff295de0d1709156af0253d7cf
Validity
Not Before: Sep 21 07:00:56 2026 GMT
Not After : Sep 22 07:00:56 2026 GMT
Subject: CN=1bc5a0b8448064496386ecc6192a93a17df84d26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:c3:a9:b6:d0:aa:52:e2:77:b7:bc:da:12:46:
ef:28:2e:a6:85:a2:19:b5:f3:87:d1:d0:ef:c5:f6:
e1:69:74:b5:58:20:bc:77:f6:98:e1:a0:23:86:fe:
81:d0:3f:aa:2f:0b:d7:49:74:8d:2c:f6:19:15:ed:
f4:91:0a:e0:08:59:25:86:4b:29:76:13:45:89:04:
e5:1e:1e:ce:d8:fb:ba:6b:cc:a6:b0:f5:46:5b:94:
29:dd:df:3f:85:e6:b4:ff:b6:04:48:49:d4:af:b9:
1e:cc:ee:f4:42:d0:47:9b:97:74:92:16:85:25:c0:
6b:76:e3:ba:e6:48:45:67:16:69:91:4b:e4:ca:e3:
6d:0e:1c:e6:0a:d8:24:75:da:5c:77:fa:f4:11:2d:
71:e1:31:d0:65:4b:70:6b:a0:d1:f9:7e:e6:b8:4b:
ab:ec:e7:96:f1:94:a4:c4:d5:e5:6d:6d:81:70:20:
fd:7e:ba:f6:05:5c:fd:bf:4c:c1:ab:c9:20:de:77:
31:8c:87:e2:88:51:81:e9:1a:a6:eb:a9:97:45:80:
1f:48:3c:8a:ed:37:ae:e2:90:da:29:a2:7f:72:8a:
33:b1:3a:fa:9d:60:0a:ba:ed:3d:fb:d7:32:05:64:
42:e8:62:84:9a:f4:45:9e:28:ff:a7:d0:4b:8c:43:
3d:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:C5:A0:B8:44:80:64:49:63:86:EC:C6:19:2A:93:A1:7D:F8:4D:26
X509v3 Authority Key Identifier:
keyid:2C:FB:47:6F:CF:31:3C:FF:29:5D:E0:D1:70:91:56:AF:02:53:D7:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LPtHb88xPP8pXeDRcJFWrwJT188.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/811b1b-3a72-4402-b4fd-fa4dd21ae3dc/1/LPtHb88xPP8pXeDRcJFWrwJT188.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/811b1b-3a72-4402-b4fd-fa4dd21ae3dc/1/LPtHb88xPP8pXeDRcJFWrwJT188.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:db:78:63:4d:90:f7:51:b0:6e:8a:c8:86:ed:98:b6:65:8a:
55:55:34:02:8a:43:ba:89:5c:49:f1:e7:54:e6:06:fb:98:71:
25:75:d7:27:1e:a3:1f:0f:ee:c2:89:09:8b:65:b5:98:ed:4b:
06:28:7f:24:01:1f:d5:89:0a:d2:eb:50:a2:74:21:78:9c:05:
34:87:4d:39:5f:56:92:95:36:97:63:83:cb:4e:5a:31:c6:08:
62:f5:9d:de:5b:35:cc:4a:b0:89:e7:d2:64:40:ff:78:91:7d:
18:47:02:67:e8:5e:0e:67:02:2a:1a:1e:2f:77:4c:ba:ad:5a:
20:b3:5a:76:c3:ca:9b:e2:3d:ae:99:81:01:6d:4d:b2:43:29:
65:0e:60:fc:eb:de:d9:29:58:bf:c8:83:2b:22:d7:90:b5:1f:
66:26:3c:dd:5c:6f:9b:02:b3:66:58:03:72:96:da:90:c6:91:
ff:b8:48:4b:bb:65:14:a8:fa:31:1b:3b:45:03:62:c3:86:8d:
54:91:1b:2c:9d:1a:f6:a5:23:11:75:63:15:fb:d2:0b:52:58:
00:17:9e:dc:2d:42:46:4f:a2:d1:54:33:e6:9c:f3:22:1f:53:
e4:50:47:c2:de:8a:fb:f9:c4:94:98:10:58:e3:b0:fd:6a:4f:
b0:5b:6b:a8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDCxI8zMff2p4vHqL+X6+RkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJjZmI0NzZmY2YzMTNjZmYyOTVkZTBkMTcwOTE1NmFmMDI1
M2Q3Y2YwHhcNMjYwOTIxMDcwMDU2WhcNMjYwOTIyMDcwMDU2WjAzMTEwLwYDVQQD
EygxYmM1YTBiODQ0ODA2NDQ5NjM4NmVjYzYxOTJhOTNhMTdkZjg0ZDI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApcOpttCqUuJ3t7zaEkbvKC6mhaIZ
tfOH0dDvxfbhaXS1WCC8d/aY4aAjhv6B0D+qLwvXSXSNLPYZFe30kQrgCFklhksp
dhNFiQTlHh7O2Pu6a8ymsPVGW5Qp3d8/hea0/7YESEnUr7kezO70QtBHm5d0khaF
JcBrduO65khFZxZpkUvkyuNtDhzmCtgkddpcd/r0ES1x4THQZUtwa6DR+X7muEur
7OeW8ZSkxNXlbW2BcCD9frr2BVz9v0zBq8kg3ncxjIfiiFGB6Rqm66mXRYAfSDyK
7Teu4pDaKaJ/coozsTr6nWAKuu09+9cyBWRC6GKEmvRFnij/p9BLjEM98wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBvFoLhEgGRJY4bsxhkqk6F9+E0mMB8GA1UdIwQY
MBaAFCz7R2/PMTz/KV3g0XCRVq8CU9fPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTFB0SGI4OHhQUDhwWGVEUmNKRldyd0pUMTg4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi84MTFiMWItM2E3Mi00NDAyLWI0ZmQt
ZmE0ZGQyMWFlM2RjLzEvTFB0SGI4OHhQUDhwWGVEUmNKRldyd0pUMTg4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMi84MTFiMWItM2E3Mi00NDAyLWI0ZmQtZmE0ZGQyMWFlM2Rj
LzEvTFB0SGI4OHhQUDhwWGVEUmNKRldyd0pUMTg4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ9t4Y02Q
91GwborIhu2YtmWKVVU0AopDuolcSfHnVOYG+5hxJXXXJx6jHw/uwokJi2W1mO1L
Bih/JAEf1YkK0utQonQheJwFNIdNOV9WkpU2l2ODy05aMcYIYvWd3ls1zEqwiefS
ZED/eJF9GEcCZ+heDmcCKhoeL3dMuq1aILNadsPKm+I9rpmBAW1NskMpZQ5g/Ove
2SlYv8iDKyLXkLUfZiY83VxvmwKzZlgDcpbakMaR/7hIS7tlFKj6MRs7RQNiw4aN
VJEbLJ0a9qUjEXVjFfvSC1JYABee3C1CRk+i0VQz5pzzIh9T5FBHwt6K+/nElJgQ
WOOw/WpPsFtrqA==
-----END CERTIFICATE-----
Generated at Mon Sep 21 17:37:22 2026 by rpki-client