Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/1a2fa2-eeb3-4312-9130-53cc5daf52cf/1/lplI0P5Nf5nVS6i__NmaGmCK4NM.mft
File: lplI0P5Nf5nVS6i__NmaGmCK4NM.mft (raw, json)
Hash identifier: iya+oRZv9CfLbRxf7eOXVX9z2V75gMy0wyfTQSnsYXQ=
Subject key identifier: BD:3E:09:EF:44:E4:DE:65:E9:73:7C:CA:4E:8C:20:36:67:7F:30:50
Authority key identifier: 96:99:48:D0:FE:4D:7F:99:D5:4B:A8:BF:FC:D9:9A:1A:60:8A:E0:D3
Certificate issuer: /CN=969948d0fe4d7f99d54ba8bffcd99a1a608ae0d3
Certificate serial: 019FA7501ECA416FE01A8107F9124F72DAFC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lplI0P5Nf5nVS6i__NmaGmCK4NM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/1a2fa2-eeb3-4312-9130-53cc5daf52cf/1/lplI0P5Nf5nVS6i__NmaGmCK4NM.mft
Manifest number: 19D7
Signing time: Tue 28 Jul 2026 06:01:13 +0000
Manifest this update: Tue 28 Jul 2026 06:01:13 +0000
Manifest next update: Wed 29 Jul 2026 06:01:13 +0000
Files and hashes: 1: 4o62SYHgVowFhQpkpPWvhwVLD9Q.roa (hash: vK6TVfic8lSalHyDGwJA9KbxcHNJxy5XQ0Dw+O5/4ds=)
2: 9ZWmW7O-KUcnYms6KVGgedV7Spc.roa (hash: bmb6Wj5ZVAMQDodHsUEWFxaagxJI3FYmAMxoZWG5qPE=)
3: erQKZk8l1sfGy2j4oWBOZugKqRw.roa (hash: VoUoWf07vKDS1/XZDrCXHR2by3KCcT90k8/LCxTvKsc=)
4: ikMa9MqXV9fTt-fpeOTMdH_rGjk.roa (hash: IZXIhlBJHXlW68AogpmsrwZKXAwk0TGWgKDJGc8gaFU=)
5: lplI0P5Nf5nVS6i__NmaGmCK4NM.crl (hash: IzjdH6FOb6psxbkPgaCCxqdzyyH118G9I3pm2wMG08g=)
6: pbGUP3y4RpyVSLG7eXeil8rY1ME.roa (hash: SysyRMZRJZakF6FXhRynobKTSkCFH7tLqdsJUw3S05A=)
7: q3gUzU97j2RVDtM4CbuTr5ACAD4.roa (hash: rYA240BhPQIfAoHPOn9xxzmH9ldKEiVQ7iO6HZORQtw=)
8: sHCmUOZD8zEHvWgjLXqNkjroi6o.roa (hash: OK6PF/BL3eupkhpURtyslk38x0wzZU1I+gsKKO7VPtU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/1a2fa2-eeb3-4312-9130-53cc5daf52cf/1/lplI0P5Nf5nVS6i__NmaGmCK4NM.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/1a2fa2-eeb3-4312-9130-53cc5daf52cf/1/lplI0P5Nf5nVS6i__NmaGmCK4NM.mft
rsync://rpki.ripe.net/repository/DEFAULT/lplI0P5Nf5nVS6i__NmaGmCK4NM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 06:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a7:50:1e:ca:41:6f:e0:1a:81:07:f9:12:4f:72:da:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=969948d0fe4d7f99d54ba8bffcd99a1a608ae0d3
Validity
Not Before: Jul 28 06:01:13 2026 GMT
Not After : Jul 29 06:01:13 2026 GMT
Subject: CN=bd3e09ef44e4de65e9737cca4e8c2036677f3050
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:5d:95:9e:cc:3a:8b:eb:32:a2:b1:7f:fb:12:
d6:75:74:fa:5a:f1:f9:27:a1:9e:3b:06:c0:c5:5c:
cf:19:6d:74:7d:e2:7f:b7:c5:1a:41:ab:da:82:d0:
0f:4a:f1:98:16:27:69:fd:ea:f0:a2:bd:41:74:72:
8d:48:1c:7d:b3:c9:20:7c:cf:d1:ea:09:3b:b1:c6:
40:82:a5:c7:ca:ea:50:b6:01:72:f7:b9:14:35:bb:
52:e4:0e:0b:97:39:e9:bf:a8:46:72:53:77:18:1b:
7f:0a:14:1f:e2:c5:7c:67:8e:10:2a:e1:3b:75:0d:
e9:40:45:a4:74:75:14:42:45:cb:1d:a8:8c:ae:6b:
54:1c:2c:ac:5e:00:f4:3c:2b:96:10:0e:2d:41:14:
5b:9c:9b:5f:7f:b5:f0:fa:29:46:90:0e:77:26:97:
90:f2:80:49:48:b2:28:5b:4e:50:0a:51:56:2a:d7:
72:99:06:05:83:ce:ea:79:a6:bc:93:7e:a8:fe:70:
c5:7c:6f:74:c6:5e:c1:3c:36:3f:b7:83:02:8c:a0:
29:66:29:05:99:8d:48:f6:db:d3:e7:f6:82:c6:47:
ee:eb:11:e8:7f:3c:1a:d8:d9:19:94:9c:81:2a:43:
62:c7:77:ea:b9:b7:3c:9f:b2:d2:8f:23:c5:64:78:
ac:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:3E:09:EF:44:E4:DE:65:E9:73:7C:CA:4E:8C:20:36:67:7F:30:50
X509v3 Authority Key Identifier:
keyid:96:99:48:D0:FE:4D:7F:99:D5:4B:A8:BF:FC:D9:9A:1A:60:8A:E0:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lplI0P5Nf5nVS6i__NmaGmCK4NM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/1a2fa2-eeb3-4312-9130-53cc5daf52cf/1/lplI0P5Nf5nVS6i__NmaGmCK4NM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/1a2fa2-eeb3-4312-9130-53cc5daf52cf/1/lplI0P5Nf5nVS6i__NmaGmCK4NM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:64:91:50:db:04:64:77:4a:7b:3b:64:73:ca:85:09:82:96:
86:ca:08:1a:39:2e:0a:a1:50:a3:c0:97:4a:85:25:7b:8e:e4:
9b:02:df:1d:ab:6c:35:1f:76:ce:fa:04:d5:95:66:78:3e:28:
9d:6f:83:67:75:84:33:3a:97:43:3d:e5:32:9c:0b:8f:10:10:
de:af:bf:c1:36:3b:68:35:53:df:0c:62:0f:13:e5:d8:78:c4:
b2:45:be:6a:b6:bc:88:a2:00:3f:74:fe:23:00:ac:c7:17:a7:
c9:b4:cd:8b:49:c2:83:e4:01:15:e9:80:e9:d2:eb:d2:f8:3a:
ec:a3:cc:78:3c:57:af:84:e4:d2:62:cc:95:f3:1e:f2:87:09:
fe:0d:64:e4:be:45:87:4d:46:ae:34:07:d3:9d:2a:f5:a7:9e:
36:29:0e:7b:57:9c:13:84:78:c1:b7:f1:d1:fb:a4:e5:d0:93:
47:cf:f0:21:97:38:26:d2:a3:f0:3a:bf:13:e5:b5:2c:d5:bf:
6d:44:ed:9a:d6:66:24:36:6a:ad:78:81:7d:05:02:1f:30:26:
10:68:c6:49:5d:fe:c7:7e:f2:c0:a5:7c:58:58:e2:8f:89:c1:
56:db:cc:26:fb:d8:dc:d8:3f:af:ca:aa:0c:fb:50:ac:a4:cb:
59:6e:a0:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 15:56:00 2026 by rpki-client