Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/42/45a04c-cb0d-4c0c-8bf1-48f39fde0eea/1/lpgLSK1WOfc5gTVuMxYNFidxC7c.mft
File: lpgLSK1WOfc5gTVuMxYNFidxC7c.mft (raw, json)
Hash identifier: SrGyM/hYMCzrrXnC7Fu1Rm4VHEsZfiZ/a6WajT9AhLo=
Subject key identifier: 3F:F5:4A:4F:74:22:A8:05:D4:EA:E0:22:5A:21:A9:EB:4A:03:5B:1B
Authority key identifier: 96:98:0B:48:AD:56:39:F7:39:81:35:6E:33:16:0D:16:27:71:0B:B7
Certificate issuer: /CN=96980b48ad5639f73981356e33160d1627710bb7
Certificate serial: 01A0D012B545CB5E938A590CBE0287F138E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lpgLSK1WOfc5gTVuMxYNFidxC7c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/45a04c-cb0d-4c0c-8bf1-48f39fde0eea/1/lpgLSK1WOfc5gTVuMxYNFidxC7c.mft
Manifest number: E5
Signing time: Wed 23 Sep 2026 21:01:22 +0000
Manifest this update: Wed 23 Sep 2026 21:01:22 +0000
Manifest next update: Thu 24 Sep 2026 21:01:22 +0000
Files and hashes: 1: 6L5y2MFmXfcIFX62MUBPkBCCJX0.roa (hash: KLV777+LOvda3GCIEhi/yJJMh/XCyc6E446aDRA4Mv4=)
2: ikcdv1QOBoSzDWfjCCDZg9ycDHc.roa (hash: jlthj0+9YMBV47DV2aS3JMaKaQi7V78MQtgW3wynm/g=)
3: lpgLSK1WOfc5gTVuMxYNFidxC7c.crl (hash: Vp/J2Gonw/18LWdCZMgsi2FFbglurjonLOYg5A65dgY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/45a04c-cb0d-4c0c-8bf1-48f39fde0eea/1/lpgLSK1WOfc5gTVuMxYNFidxC7c.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/45a04c-cb0d-4c0c-8bf1-48f39fde0eea/1/lpgLSK1WOfc5gTVuMxYNFidxC7c.mft
rsync://rpki.ripe.net/repository/DEFAULT/lpgLSK1WOfc5gTVuMxYNFidxC7c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 18:27:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d0:12:b5:45:cb:5e:93:8a:59:0c:be:02:87:f1:38:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96980b48ad5639f73981356e33160d1627710bb7
Validity
Not Before: Sep 23 21:01:22 2026 GMT
Not After : Sep 24 21:01:22 2026 GMT
Subject: CN=3ff54a4f7422a805d4eae0225a21a9eb4a035b1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:9b:41:a7:df:6d:7d:76:0b:d8:89:5a:d3:02:
a4:ed:f6:47:81:9b:62:ab:aa:38:b7:a5:d4:23:22:
53:e1:7c:ca:1e:98:87:01:4f:9c:e8:b3:a8:57:2c:
98:ef:f7:28:8f:3b:59:ce:ae:f0:d5:3e:96:dc:42:
d3:15:97:f7:45:10:0c:ca:55:51:de:01:c1:d7:c3:
b9:d2:c1:b0:22:e0:be:a5:f8:6f:da:44:42:7a:3f:
5b:2e:a4:71:28:53:5a:ec:84:f6:de:e0:d0:54:b2:
fc:1d:08:8b:3a:d9:95:e5:c2:9b:d0:96:df:3b:2a:
b0:7c:10:97:8e:4c:fa:5b:91:a2:77:e4:3e:4a:71:
33:41:46:53:c0:8d:d5:4e:d9:1c:46:ba:4a:f4:db:
79:ab:ea:4f:a8:26:fb:01:19:66:9a:33:4c:4f:7c:
ef:a6:16:b5:7e:57:b9:95:de:78:90:ae:c6:44:f9:
1b:d3:7b:45:df:a8:d3:5e:b2:c3:4a:f2:35:31:55:
2c:e2:a4:23:f8:6a:62:e7:43:7d:fc:25:58:3c:27:
a9:24:ed:d9:2e:f4:71:f4:de:81:19:6f:05:70:84:
d3:e2:19:64:2f:7b:61:f5:3f:36:e7:74:1b:7b:c7:
ef:38:f4:30:b2:ea:38:1c:f1:7d:a1:62:d4:20:d2:
ef:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:F5:4A:4F:74:22:A8:05:D4:EA:E0:22:5A:21:A9:EB:4A:03:5B:1B
X509v3 Authority Key Identifier:
keyid:96:98:0B:48:AD:56:39:F7:39:81:35:6E:33:16:0D:16:27:71:0B:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lpgLSK1WOfc5gTVuMxYNFidxC7c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/45a04c-cb0d-4c0c-8bf1-48f39fde0eea/1/lpgLSK1WOfc5gTVuMxYNFidxC7c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/45a04c-cb0d-4c0c-8bf1-48f39fde0eea/1/lpgLSK1WOfc5gTVuMxYNFidxC7c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:c2:76:ae:06:b8:59:97:38:1b:03:43:21:6a:97:62:cf:9c:
6d:3e:51:a2:b3:dc:93:27:18:0e:9b:85:7d:97:32:6d:15:1c:
80:62:83:f8:84:0b:1a:b2:e4:23:c3:68:bc:9a:ef:bf:c8:e2:
87:48:f2:4a:4e:75:fa:3b:9f:c0:35:c3:e6:b2:3f:84:eb:3b:
9f:82:76:75:50:e0:4b:fa:cd:f6:a1:10:35:95:10:a2:bd:6b:
80:58:0c:00:f0:8e:84:a5:a3:ef:6f:88:af:4a:3a:21:fd:58:
f4:77:14:07:9b:03:46:78:bf:87:fa:93:99:d8:0e:5f:78:d4:
ee:74:56:8c:b0:d3:b5:51:f9:e8:80:58:6f:cd:fc:6c:3f:0f:
3e:2d:9a:9a:44:43:fc:cc:b2:0b:13:74:91:eb:02:86:5f:f4:
f1:64:77:50:37:9b:d2:16:13:7a:29:d2:22:53:88:34:94:14:
2c:e6:58:2a:1f:86:b6:91:9e:b6:5b:ae:96:82:7d:2f:98:ae:
6c:ae:aa:07:bd:a4:42:ea:54:ec:1c:8f:26:de:bc:cb:cf:ab:
f1:d4:f6:50:20:49:2a:fd:74:1b:32:5f:03:8a:b7:2e:41:75:
13:52:3c:be:fa:56:eb:ac:25:39:8c:49:f0:8b:d7:8c:bb:28:
50:85:28:07
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDQErVFy16TilkMvgKH8TjkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk2OTgwYjQ4YWQ1NjM5ZjczOTgxMzU2ZTMzMTYwZDE2Mjc3
MTBiYjcwHhcNMjYwOTIzMjEwMTIyWhcNMjYwOTI0MjEwMTIyWjAzMTEwLwYDVQQD
EygzZmY1NGE0Zjc0MjJhODA1ZDRlYWUwMjI1YTIxYTllYjRhMDM1YjFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsZtBp99tfXYL2Ila0wKk7fZHgZti
q6o4t6XUIyJT4XzKHpiHAU+c6LOoVyyY7/cojztZzq7w1T6W3ELTFZf3RRAMylVR
3gHB18O50sGwIuC+pfhv2kRCej9bLqRxKFNa7IT23uDQVLL8HQiLOtmV5cKb0Jbf
OyqwfBCXjkz6W5Gid+Q+SnEzQUZTwI3VTtkcRrpK9Nt5q+pPqCb7ARlmmjNMT3zv
pha1fle5ld54kK7GRPkb03tF36jTXrLDSvI1MVUs4qQj+Gpi50N9/CVYPCepJO3Z
LvRx9N6BGW8FcITT4hlkL3th9T8253Qbe8fvOPQwsuo4HPF9oWLUINLvfQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD/1Sk90IqgF1OrgIlohqetKA1sbMB8GA1UdIwQY
MBaAFJaYC0itVjn3OYE1bjMWDRYncQu3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbHBnTFNLMVdPZmM1Z1RWdU14WU5GaWR4QzdjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi80NWEwNGMtY2IwZC00YzBjLThiZjEt
NDhmMzlmZGUwZWVhLzEvbHBnTFNLMVdPZmM1Z1RWdU14WU5GaWR4QzdjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Mi80NWEwNGMtY2IwZC00YzBjLThiZjEtNDhmMzlmZGUwZWVh
LzEvbHBnTFNLMVdPZmM1Z1RWdU14WU5GaWR4QzdjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg8J2rga4
WZc4GwNDIWqXYs+cbT5RorPckycYDpuFfZcybRUcgGKD+IQLGrLkI8NovJrvv8ji
h0jySk51+jufwDXD5rI/hOs7n4J2dVDgS/rN9qEQNZUQor1rgFgMAPCOhKWj72+I
r0o6If1Y9HcUB5sDRni/h/qTmdgOX3jU7nRWjLDTtVH56IBYb838bD8PPi2amkRD
/MyyCxN0kesChl/08WR3UDeb0hYTeinSIlOINJQULOZYKh+GtpGetluuloJ9L5iu
bK6qB72kQupU7ByPJt68y8+r8dT2UCBJKv10GzJfA4q3LkF1E1I8vvpW66wlOYxJ
8IvXjLsoUIUoBw==
-----END CERTIFICATE-----
Generated at Thu Sep 24 02:04:23 2026 by rpki-client