Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/1a2fa2-eeb3-4312-9130-53cc5daf52cf/1/lplI0P5Nf5nVS6i__NmaGmCK4NM.mft
File: lplI0P5Nf5nVS6i__NmaGmCK4NM.mft (raw, json)
Hash identifier: uIKuVUwrAid+VwkIRi4Lfvpwna56Tdr5l5Br0ZGMX6g=
Subject key identifier: FA:E8:46:22:F3:F8:D9:37:05:9D:C6:53:B8:2F:E9:09:76:75:3A:CD
Authority key identifier: 96:99:48:D0:FE:4D:7F:99:D5:4B:A8:BF:FC:D9:9A:1A:60:8A:E0:D3
Certificate issuer: /CN=969948d0fe4d7f99d54ba8bffcd99a1a608ae0d3
Certificate serial: 019CAC0FE51EA567299073063B8F247D2B14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lplI0P5Nf5nVS6i__NmaGmCK4NM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/1a2fa2-eeb3-4312-9130-53cc5daf52cf/1/lplI0P5Nf5nVS6i__NmaGmCK4NM.mft
Manifest number: 184A
Signing time: Mon 02 Mar 2026 01:00:48 +0000
Manifest this update: Mon 02 Mar 2026 01:00:48 +0000
Manifest next update: Tue 03 Mar 2026 01:00:48 +0000
Files and hashes: 1: 4o62SYHgVowFhQpkpPWvhwVLD9Q.roa (hash: vK6TVfic8lSalHyDGwJA9KbxcHNJxy5XQ0Dw+O5/4ds=)
2: 9ZWmW7O-KUcnYms6KVGgedV7Spc.roa (hash: bmb6Wj5ZVAMQDodHsUEWFxaagxJI3FYmAMxoZWG5qPE=)
3: _ATH2LaUcsFsbm3ZfMvMi0XWcbY.roa (hash: Ot7Mpd5Sngu+BgXvflikN22yePv0fhYUQRspiY3WG70=)
4: erQKZk8l1sfGy2j4oWBOZugKqRw.roa (hash: VoUoWf07vKDS1/XZDrCXHR2by3KCcT90k8/LCxTvKsc=)
5: lplI0P5Nf5nVS6i__NmaGmCK4NM.crl (hash: RGNXkggXW1YQ/laPrfRwdZkA/uwTz25CAi2OqTvHryc=)
6: nxSiffZukE6mQ7e460Rx5V-1a1Q.roa (hash: pzrYDt10/X+WJpToSelFVj9O1wyuTbaQZr2egEcvKq4=)
7: pbGUP3y4RpyVSLG7eXeil8rY1ME.roa (hash: SysyRMZRJZakF6FXhRynobKTSkCFH7tLqdsJUw3S05A=)
8: q3gUzU97j2RVDtM4CbuTr5ACAD4.roa (hash: rYA240BhPQIfAoHPOn9xxzmH9ldKEiVQ7iO6HZORQtw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/1a2fa2-eeb3-4312-9130-53cc5daf52cf/1/lplI0P5Nf5nVS6i__NmaGmCK4NM.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/1a2fa2-eeb3-4312-9130-53cc5daf52cf/1/lplI0P5Nf5nVS6i__NmaGmCK4NM.mft
rsync://rpki.ripe.net/repository/DEFAULT/lplI0P5Nf5nVS6i__NmaGmCK4NM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:0f:e5:1e:a5:67:29:90:73:06:3b:8f:24:7d:2b:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=969948d0fe4d7f99d54ba8bffcd99a1a608ae0d3
Validity
Not Before: Mar 2 01:00:48 2026 GMT
Not After : Mar 3 01:00:48 2026 GMT
Subject: CN=fae84622f3f8d937059dc653b82fe90976753acd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:1a:3e:a1:a0:9e:81:1f:77:5b:79:3f:c7:91:
f6:78:de:2a:ad:5d:41:c7:76:66:d0:35:ef:62:5f:
4f:bd:dc:bb:8c:a6:bc:b6:fa:92:0c:4f:ad:22:b8:
e5:62:7c:73:aa:13:1d:1e:f5:f4:6e:14:86:00:83:
e8:d7:ee:a0:37:b7:0e:73:83:48:d5:f9:1e:d4:2b:
e1:01:12:95:5c:f1:38:0f:7e:6d:2b:69:a6:7e:9b:
ac:39:e9:9b:13:34:9e:44:f5:df:6a:c7:6b:cc:0c:
54:cc:ac:98:e8:22:65:77:fe:de:1d:76:d9:c4:cf:
bf:c2:1a:d1:b8:f2:5d:22:6a:08:b9:fb:b4:e1:96:
b9:14:54:2d:aa:8e:c5:99:b5:e3:76:0d:9f:87:76:
74:8d:12:46:f0:1d:c5:1a:19:98:81:2e:93:f3:40:
cd:57:6b:06:50:04:2f:b6:ef:dd:0c:cd:1a:96:9f:
67:40:30:2f:fe:65:f3:24:bf:b0:04:99:53:58:33:
29:39:f1:9d:51:fd:5d:d3:20:fb:88:ea:be:2c:e0:
3c:73:6d:89:99:dc:ff:c7:40:1b:f8:ac:d5:5c:d6:
27:1b:78:7c:9a:f3:c8:ea:13:9c:87:14:1c:bf:f4:
bb:ed:90:50:9b:cb:6f:0e:3e:f6:e5:2b:1c:0b:bb:
6b:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:E8:46:22:F3:F8:D9:37:05:9D:C6:53:B8:2F:E9:09:76:75:3A:CD
X509v3 Authority Key Identifier:
keyid:96:99:48:D0:FE:4D:7F:99:D5:4B:A8:BF:FC:D9:9A:1A:60:8A:E0:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lplI0P5Nf5nVS6i__NmaGmCK4NM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/1a2fa2-eeb3-4312-9130-53cc5daf52cf/1/lplI0P5Nf5nVS6i__NmaGmCK4NM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/1a2fa2-eeb3-4312-9130-53cc5daf52cf/1/lplI0P5Nf5nVS6i__NmaGmCK4NM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:fc:ba:d7:4d:a1:bd:68:5b:9d:d2:7d:7c:9c:eb:73:c8:60:
6f:bb:88:12:d4:e9:48:67:e4:0b:d4:14:2f:2f:ba:12:9c:bc:
62:b9:6d:b6:a0:80:12:8c:67:11:de:d6:0d:d9:7b:b2:6e:16:
7b:27:a0:c9:21:2f:79:3c:76:de:a8:f6:9f:a6:33:ea:98:15:
43:0a:ec:65:f6:43:fc:a0:fe:d1:17:e4:fe:f2:1d:11:bc:60:
dc:71:e6:05:42:44:a5:85:dc:34:21:01:68:dd:0f:60:80:7a:
c3:c3:26:1f:37:a4:5f:22:de:12:7a:63:d5:98:48:1b:58:29:
c4:1b:16:d7:12:70:a8:6a:b7:60:b0:40:cd:53:74:93:9e:ad:
2e:1b:41:4a:db:00:50:00:95:6f:69:94:eb:b8:9d:dd:54:57:
12:32:57:3e:d6:e9:96:05:4c:a2:03:e8:f9:c6:7b:4d:7b:16:
c9:72:40:0b:94:03:aa:01:85:e2:4f:25:7f:c7:6f:c3:df:cf:
8d:ab:ad:60:58:ea:a6:90:0c:fa:51:c7:dd:36:cb:51:58:b7:
68:bd:40:ab:38:df:52:ae:3b:b0:a2:85:89:d3:ea:39:19:94:
39:80:77:c8:2f:a0:f3:ad:b7:87:af:40:2f:73:20:15:0c:c5:
ea:01:d6:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:02:43 2026 by rpki-client