
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2f/1a2fa2-eeb3-4312-9130-53cc5daf52cf/1/lplI0P5Nf5nVS6i__NmaGmCK4NM.mft
File: lplI0P5Nf5nVS6i__NmaGmCK4NM.mft (raw, json)
Hash identifier: HVH5SOdrPCVidvP4p2lTei5nGGOPyM91Oj4L9jtNdVQ=
Subject key identifier: F8:C1:DD:B1:5E:54:18:9C:68:33:51:C2:E8:0D:57:D5:59:61:24:47
Authority key identifier: 96:99:48:D0:FE:4D:7F:99:D5:4B:A8:BF:FC:D9:9A:1A:60:8A:E0:D3
Certificate issuer: /CN=969948d0fe4d7f99d54ba8bffcd99a1a608ae0d3
Certificate serial: 01A0C8FD53CA7FCA14657D65415767BEC908
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lplI0P5Nf5nVS6i__NmaGmCK4NM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/1a2fa2-eeb3-4312-9130-53cc5daf52cf/1/lplI0P5Nf5nVS6i__NmaGmCK4NM.mft
Manifest number: 1A6D
Signing time: Tue 22 Sep 2026 12:00:40 +0000
Manifest this update: Tue 22 Sep 2026 12:00:40 +0000
Manifest next update: Wed 23 Sep 2026 12:00:40 +0000
Files and hashes: 1: 4o62SYHgVowFhQpkpPWvhwVLD9Q.roa (hash: vK6TVfic8lSalHyDGwJA9KbxcHNJxy5XQ0Dw+O5/4ds=)
2: 9ZWmW7O-KUcnYms6KVGgedV7Spc.roa (hash: bmb6Wj5ZVAMQDodHsUEWFxaagxJI3FYmAMxoZWG5qPE=)
3: erQKZk8l1sfGy2j4oWBOZugKqRw.roa (hash: VoUoWf07vKDS1/XZDrCXHR2by3KCcT90k8/LCxTvKsc=)
4: ikMa9MqXV9fTt-fpeOTMdH_rGjk.roa (hash: IZXIhlBJHXlW68AogpmsrwZKXAwk0TGWgKDJGc8gaFU=)
5: lplI0P5Nf5nVS6i__NmaGmCK4NM.crl (hash: W3oeWECwztseem9EWGMh3vKDng9VKuEMkD6i+ChoaxA=)
6: pbGUP3y4RpyVSLG7eXeil8rY1ME.roa (hash: SysyRMZRJZakF6FXhRynobKTSkCFH7tLqdsJUw3S05A=)
7: q3gUzU97j2RVDtM4CbuTr5ACAD4.roa (hash: rYA240BhPQIfAoHPOn9xxzmH9ldKEiVQ7iO6HZORQtw=)
8: sHCmUOZD8zEHvWgjLXqNkjroi6o.roa (hash: OK6PF/BL3eupkhpURtyslk38x0wzZU1I+gsKKO7VPtU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/1a2fa2-eeb3-4312-9130-53cc5daf52cf/1/lplI0P5Nf5nVS6i__NmaGmCK4NM.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/1a2fa2-eeb3-4312-9130-53cc5daf52cf/1/lplI0P5Nf5nVS6i__NmaGmCK4NM.mft
rsync://rpki.ripe.net/repository/DEFAULT/lplI0P5Nf5nVS6i__NmaGmCK4NM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 12:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c8:fd:53:ca:7f:ca:14:65:7d:65:41:57:67:be:c9:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=969948d0fe4d7f99d54ba8bffcd99a1a608ae0d3
Validity
Not Before: Sep 22 12:00:40 2026 GMT
Not After : Sep 23 12:00:40 2026 GMT
Subject: CN=f8c1ddb15e54189c683351c2e80d57d559612447
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:68:5d:bf:48:38:36:f9:e2:1d:e9:06:2d:78:
0c:84:cd:b3:24:ce:13:f6:b0:f0:5b:68:b9:07:8b:
eb:d5:ba:96:fe:9c:69:74:d5:95:13:23:38:f6:44:
2b:49:b5:b4:1c:f1:4a:c9:bb:05:29:58:b5:57:c8:
bd:79:53:4f:49:e4:00:b1:2c:db:52:eb:2c:da:20:
73:b6:af:25:59:f0:1c:0c:f5:0a:91:a5:52:92:46:
5f:65:cf:f4:2a:c8:af:14:a1:77:5f:ea:dd:7b:a0:
91:bc:bd:69:1a:2e:87:50:2d:8f:29:89:f9:b7:57:
4a:be:ad:64:d6:26:91:c0:1c:22:28:21:3e:bc:61:
f0:bc:af:10:33:49:64:94:d6:4f:cd:10:9f:2a:9f:
68:88:41:ed:56:ab:e1:5a:04:da:6f:b8:71:fc:46:
c8:3e:a1:26:b8:33:00:06:02:e5:b0:09:93:87:26:
d2:af:4b:32:16:87:63:87:f4:ea:cc:3a:7b:4a:17:
f4:8c:6f:40:aa:4e:06:b6:25:42:f6:ef:ef:d4:45:
ea:20:24:37:00:57:24:be:31:d7:f0:86:b6:7b:92:
8a:71:f8:32:e4:c3:17:31:6f:6a:2f:ad:b6:1d:ec:
1e:b9:ac:e6:9a:18:e3:2b:71:2c:96:1a:95:7a:e6:
a6:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:C1:DD:B1:5E:54:18:9C:68:33:51:C2:E8:0D:57:D5:59:61:24:47
X509v3 Authority Key Identifier:
keyid:96:99:48:D0:FE:4D:7F:99:D5:4B:A8:BF:FC:D9:9A:1A:60:8A:E0:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lplI0P5Nf5nVS6i__NmaGmCK4NM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/1a2fa2-eeb3-4312-9130-53cc5daf52cf/1/lplI0P5Nf5nVS6i__NmaGmCK4NM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/1a2fa2-eeb3-4312-9130-53cc5daf52cf/1/lplI0P5Nf5nVS6i__NmaGmCK4NM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:52:ca:93:7e:e2:b8:1d:00:8e:c6:8d:b7:20:9f:81:19:08:
0e:a1:fe:2c:f8:ca:a1:f3:7f:77:28:c3:e8:7f:13:95:25:2e:
54:16:60:ae:f5:ef:3c:f6:d3:d7:3b:9e:38:37:1c:c2:7a:5a:
58:eb:35:57:db:20:55:88:1e:ac:16:7f:6c:a0:c5:28:31:8c:
ed:32:ad:99:05:ee:2e:26:ab:bf:6a:04:31:27:91:34:5d:ad:
ed:73:d9:f8:8b:43:89:d4:23:52:7c:71:d5:f4:42:fd:94:27:
63:2b:1c:06:67:07:0c:64:0d:2e:a2:fc:79:75:2d:78:89:fe:
3e:be:31:0e:54:12:74:4d:61:d8:f9:6b:b2:9d:2d:40:f1:94:
a3:26:78:96:03:d8:d2:a6:13:e6:6d:3e:41:b1:de:a5:a2:3e:
8e:6d:aa:00:19:82:f1:98:f8:8c:90:f5:40:f9:88:0b:f2:1c:
b5:b3:98:89:fa:4b:d2:14:b8:e6:86:bb:eb:3f:47:60:f7:f0:
e1:80:2d:f6:5b:ff:71:82:75:b3:27:6a:c8:77:09:ea:2c:c5:
b6:14:ff:fd:89:2d:22:f5:db:9b:a5:60:e6:81:9a:36:a6:16:
58:6c:c6:d8:21:fe:5f:6d:5e:0e:d9:04:b8:05:3b:f7:9d:5f:
4a:53:b2:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 16:44:46 2026 by rpki-client