Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/3da6fd-5f10-4058-bc02-23724bab2227/1/gZTqPO1PE3ENNARM_LPR1WxVCGI.mft
File: gZTqPO1PE3ENNARM_LPR1WxVCGI.mft (raw, json)
Hash identifier: Lt5xg59+OhYguM+mXhmhRo61kKSQWAJtkgc8JTQQhjM=
Subject key identifier: 96:0F:F2:29:37:5C:E8:EC:B1:C6:11:70:74:C3:EE:CF:0A:BC:E7:4A
Authority key identifier: 81:94:EA:3C:ED:4F:13:71:0D:34:04:4C:FC:B3:D1:D5:6C:55:08:62
Certificate issuer: /CN=8194ea3ced4f13710d34044cfcb3d1d56c550862
Certificate serial: 019D973D22EB3C8FDF3390D348EBF48EA78F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gZTqPO1PE3ENNARM_LPR1WxVCGI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/3da6fd-5f10-4058-bc02-23724bab2227/1/gZTqPO1PE3ENNARM_LPR1WxVCGI.mft
Manifest number: 18C5
Signing time: Thu 16 Apr 2026 17:00:59 +0000
Manifest this update: Thu 16 Apr 2026 17:00:59 +0000
Manifest next update: Fri 17 Apr 2026 17:00:59 +0000
Files and hashes: 1: STN4bdrkl_YDGWwd5JCdu_Z84Pc.roa (hash: Gb31UnfXmOSYeiOedmM5BYaTEZl9dUUluUrhCjeeCRE=)
2: gZTqPO1PE3ENNARM_LPR1WxVCGI.crl (hash: 4YJguNksOv8zKRR/JEE4sH2I3bJIfVV4QbOaQ+wrfVQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/3da6fd-5f10-4058-bc02-23724bab2227/1/gZTqPO1PE3ENNARM_LPR1WxVCGI.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/3da6fd-5f10-4058-bc02-23724bab2227/1/gZTqPO1PE3ENNARM_LPR1WxVCGI.mft
rsync://rpki.ripe.net/repository/DEFAULT/gZTqPO1PE3ENNARM_LPR1WxVCGI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 17:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:97:3d:22:eb:3c:8f:df:33:90:d3:48:eb:f4:8e:a7:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8194ea3ced4f13710d34044cfcb3d1d56c550862
Validity
Not Before: Apr 16 17:00:59 2026 GMT
Not After : Apr 17 17:00:59 2026 GMT
Subject: CN=960ff229375ce8ecb1c6117074c3eecf0abce74a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:1a:e3:b0:44:21:e9:6d:03:06:2a:6c:24:5d:
56:fe:86:04:51:a4:43:3f:f4:da:75:bc:a6:bc:b9:
e0:ea:c2:9a:26:01:5b:9a:4f:3d:f2:60:78:18:68:
44:d7:4a:46:e1:2e:12:31:7b:11:93:5a:c9:3f:31:
b0:b5:dc:2f:8e:c5:bf:0f:25:5c:95:81:12:76:6a:
d6:ab:a7:62:7c:f1:04:0d:ad:2f:1a:b4:32:e0:e3:
08:6a:03:bc:81:e2:cf:f0:4f:5c:44:79:34:eb:ce:
3f:1e:89:25:44:f8:83:46:da:32:99:f8:f8:7b:3b:
3e:99:85:14:21:88:f0:bd:68:91:5a:eb:3a:1c:fe:
f5:c5:a1:83:17:0c:b1:4b:3b:80:21:78:02:78:24:
87:90:49:01:f9:19:9e:38:ba:94:7b:e6:17:1a:0e:
b4:12:5b:9c:4a:18:34:c6:0d:9f:70:ee:f9:74:e2:
2c:96:82:37:36:ac:1b:67:fa:f9:4b:c9:79:9c:30:
5d:cb:d5:8e:2b:59:ac:7c:34:84:86:19:73:96:1f:
c7:32:a2:c8:ee:07:73:81:b8:74:1f:5c:f3:c6:1f:
37:78:6c:3c:be:11:28:7a:9c:1f:75:78:4b:c0:c8:
9f:a7:e2:81:68:53:10:33:ab:0d:08:f7:c0:73:4e:
60:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:0F:F2:29:37:5C:E8:EC:B1:C6:11:70:74:C3:EE:CF:0A:BC:E7:4A
X509v3 Authority Key Identifier:
keyid:81:94:EA:3C:ED:4F:13:71:0D:34:04:4C:FC:B3:D1:D5:6C:55:08:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gZTqPO1PE3ENNARM_LPR1WxVCGI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/3da6fd-5f10-4058-bc02-23724bab2227/1/gZTqPO1PE3ENNARM_LPR1WxVCGI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/3da6fd-5f10-4058-bc02-23724bab2227/1/gZTqPO1PE3ENNARM_LPR1WxVCGI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:30:d3:9b:9e:76:3a:92:23:27:56:2c:aa:36:14:f1:2c:11:
18:1b:a0:c5:70:13:68:ae:a7:4a:17:a6:0e:da:07:bd:a3:c0:
b8:bd:3d:8a:a5:cc:54:6a:fa:2d:7b:39:24:bd:d5:04:f7:46:
55:4d:83:63:dd:76:ea:68:83:5f:fe:06:a6:79:95:21:8c:ee:
b2:81:2b:16:97:35:62:0a:35:fb:7c:73:94:61:68:0c:af:1e:
aa:d6:ae:2a:b5:6d:0a:09:0f:b9:33:f3:11:b3:b1:e5:1f:a1:
7a:2e:2c:10:0d:ec:84:f9:a9:25:13:dc:f5:60:b6:36:28:58:
65:34:d4:97:d3:b0:d5:58:ca:e1:c8:b1:92:e2:9e:df:fb:e2:
00:74:c9:92:b5:79:85:3f:7d:a1:35:7e:48:7f:c5:4b:4c:f8:
e2:23:1a:f8:50:76:8d:c6:8a:dc:1e:d8:67:8a:88:e0:90:a8:
58:67:ed:92:e4:01:f0:ea:ff:05:1a:20:80:02:bc:0b:5a:0f:
80:3f:b6:77:aa:c3:af:60:14:b6:7d:10:5a:fc:6a:d9:22:5e:
01:5e:6e:74:4f:03:fa:fa:89:be:3f:3c:8b:37:64:e5:1b:da:
26:b7:8d:5d:ca:7f:bf:87:de:cb:bc:c5:c5:06:16:65:62:0c:
d6:bf:b0:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 03:22:49 2026 by rpki-client