Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/45a04c-cb0d-4c0c-8bf1-48f39fde0eea/1/lpgLSK1WOfc5gTVuMxYNFidxC7c.mft
File: lpgLSK1WOfc5gTVuMxYNFidxC7c.mft (raw, json)
Hash identifier: Wc19jSETVtXtMaEi3MyT/ovGU6DD9n+WCZs6fR8mLRI=
Subject key identifier: 25:16:D5:64:2E:E5:42:AF:DB:63:79:34:AD:9F:D6:C7:CC:39:0C:30
Authority key identifier: 96:98:0B:48:AD:56:39:F7:39:81:35:6E:33:16:0D:16:27:71:0B:B7
Certificate issuer: /CN=96980b48ad5639f73981356e33160d1627710bb7
Certificate serial: 019FAC769DEB144583C3012BE636088F85FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lpgLSK1WOfc5gTVuMxYNFidxC7c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/45a04c-cb0d-4c0c-8bf1-48f39fde0eea/1/lpgLSK1WOfc5gTVuMxYNFidxC7c.mft
Manifest number: 4E
Signing time: Wed 29 Jul 2026 06:01:22 +0000
Manifest this update: Wed 29 Jul 2026 06:01:22 +0000
Manifest next update: Thu 30 Jul 2026 06:01:22 +0000
Files and hashes: 1: 6L5y2MFmXfcIFX62MUBPkBCCJX0.roa (hash: KLV777+LOvda3GCIEhi/yJJMh/XCyc6E446aDRA4Mv4=)
2: ikcdv1QOBoSzDWfjCCDZg9ycDHc.roa (hash: jlthj0+9YMBV47DV2aS3JMaKaQi7V78MQtgW3wynm/g=)
3: lpgLSK1WOfc5gTVuMxYNFidxC7c.crl (hash: vUbvwk1yfmYPrfPzY4ZlC6ZFpSTQPLsu95s98ECh3dI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/45a04c-cb0d-4c0c-8bf1-48f39fde0eea/1/lpgLSK1WOfc5gTVuMxYNFidxC7c.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/45a04c-cb0d-4c0c-8bf1-48f39fde0eea/1/lpgLSK1WOfc5gTVuMxYNFidxC7c.mft
rsync://rpki.ripe.net/repository/DEFAULT/lpgLSK1WOfc5gTVuMxYNFidxC7c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 06:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:76:9d:eb:14:45:83:c3:01:2b:e6:36:08:8f:85:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96980b48ad5639f73981356e33160d1627710bb7
Validity
Not Before: Jul 29 06:01:22 2026 GMT
Not After : Jul 30 06:01:22 2026 GMT
Subject: CN=2516d5642ee542afdb637934ad9fd6c7cc390c30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:2c:bd:94:bf:6b:38:0e:84:2c:2f:15:6c:11:
e8:fd:69:e4:12:9f:53:49:07:50:ee:ce:c1:80:6d:
f5:bc:0c:46:3f:88:d8:40:79:9a:31:cc:ec:87:66:
18:bb:a0:d5:98:d1:63:a1:d3:4f:da:17:69:8a:8b:
dd:fd:fb:5f:ea:90:6c:66:62:93:d8:12:ed:4b:af:
c6:5d:4c:88:06:34:f7:40:93:ce:96:64:e2:2e:ad:
d3:5e:b2:9d:e7:23:6b:4d:96:c9:69:67:d6:fe:21:
94:89:14:1e:23:7f:cd:3d:b6:14:9b:86:6a:b7:82:
84:b2:41:38:65:c1:bf:db:5a:a5:89:4e:1a:42:2b:
51:42:2f:7a:f6:61:39:43:b4:f5:0a:33:0f:bf:95:
e3:9e:8b:aa:9c:77:6c:cd:07:ef:f8:4c:08:77:b7:
10:b5:c2:77:32:de:85:cf:70:b3:dc:da:eb:31:1d:
2b:f1:ae:19:8e:c2:08:77:e7:83:87:6b:c2:8d:1b:
ba:f6:24:6c:f5:e4:c4:04:de:30:b4:03:e9:46:d0:
7b:72:d3:29:b6:47:e8:f3:cb:ee:87:1c:cb:85:3d:
3b:d4:dd:6e:75:ff:b4:79:3d:11:de:6a:4c:e5:29:
30:1a:73:5a:31:44:cc:8f:d1:a3:08:36:a2:21:06:
d9:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:16:D5:64:2E:E5:42:AF:DB:63:79:34:AD:9F:D6:C7:CC:39:0C:30
X509v3 Authority Key Identifier:
keyid:96:98:0B:48:AD:56:39:F7:39:81:35:6E:33:16:0D:16:27:71:0B:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lpgLSK1WOfc5gTVuMxYNFidxC7c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/45a04c-cb0d-4c0c-8bf1-48f39fde0eea/1/lpgLSK1WOfc5gTVuMxYNFidxC7c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/45a04c-cb0d-4c0c-8bf1-48f39fde0eea/1/lpgLSK1WOfc5gTVuMxYNFidxC7c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:47:66:c2:dc:82:51:a9:a3:51:3c:6c:d9:9d:bd:59:d7:a8:
74:95:7e:d4:1a:9a:b6:a0:29:a3:d2:be:c9:f5:73:7e:47:ea:
c2:f9:c7:72:ca:74:f3:96:25:0d:4a:5f:f7:34:a2:dd:d1:35:
19:80:b6:26:ae:0d:d2:da:8c:0f:25:fa:49:06:c0:43:df:1e:
49:b4:1f:8f:24:40:93:03:d7:3f:b7:7d:ca:20:11:32:a5:c6:
69:aa:1d:00:f3:cd:39:3e:93:a9:22:2c:5d:3b:c1:e2:dc:0a:
70:ac:bb:c3:69:f7:79:c9:e3:8c:04:c1:47:24:2e:82:e0:62:
39:5b:d7:bb:6d:c0:e6:9f:34:e0:5c:ba:1e:db:88:80:ae:b6:
a6:80:a8:d8:d0:fc:f7:e1:9a:64:a4:40:8a:5e:fe:d5:8e:79:
3b:5b:63:9e:82:ba:f1:29:20:1e:1e:b7:6a:9f:43:7a:64:eb:
f1:c5:5d:1f:f5:33:86:26:69:29:f0:5d:a6:a5:3f:28:49:63:
00:2f:e1:5d:0d:ce:1a:f4:52:0d:a9:9a:64:47:28:73:7c:36:
ed:62:8f:e3:21:8e:89:91:7c:a0:ba:f9:de:8c:3f:82:ce:8d:
e6:d2:66:fb:eb:37:69:09:9f:6c:89:f3:5d:63:68:d8:f4:28:
96:13:aa:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 10:21:32 2026 by rpki-client