Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/5be44c-a4f2-4bd0-b5a7-b468838c7fdf/1/LPqiK9ZcrIKFjqCRaG1bO0vjvTk.mft
File: LPqiK9ZcrIKFjqCRaG1bO0vjvTk.mft (raw, json)
Hash identifier: OfD6ld56GoAqG++jEl15dvI+Ak8mzbb8ug3Z9IAcZQU=
Subject key identifier: 07:0D:8A:9A:0E:38:25:9E:F7:69:E9:BE:D4:E9:AB:7F:80:40:D0:88
Authority key identifier: 2C:FA:A2:2B:D6:5C:AC:82:85:8E:A0:91:68:6D:5B:3B:4B:E3:BD:39
Certificate issuer: /CN=2cfaa22bd65cac82858ea091686d5b3b4be3bd39
Certificate serial: 019CA9EA9E80B8DC05B8A276E98288EE6A70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LPqiK9ZcrIKFjqCRaG1bO0vjvTk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/5be44c-a4f2-4bd0-b5a7-b468838c7fdf/1/LPqiK9ZcrIKFjqCRaG1bO0vjvTk.mft
Manifest number: 1343
Signing time: Sun 01 Mar 2026 15:00:51 +0000
Manifest this update: Sun 01 Mar 2026 15:00:51 +0000
Manifest next update: Mon 02 Mar 2026 15:00:51 +0000
Files and hashes: 1: LPqiK9ZcrIKFjqCRaG1bO0vjvTk.crl (hash: 3cfXRb2e7ADDLkZA3W3RadHDPTVaEEJksMOmCfBpd+A=)
2: ao8cSCiGJ7ClPx10CHs-9lIIGq8.roa (hash: P9VwufsfbDvR02msSd4m6J1kCxDfxah00sWQYJJy8SE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/5be44c-a4f2-4bd0-b5a7-b468838c7fdf/1/LPqiK9ZcrIKFjqCRaG1bO0vjvTk.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/5be44c-a4f2-4bd0-b5a7-b468838c7fdf/1/LPqiK9ZcrIKFjqCRaG1bO0vjvTk.mft
rsync://rpki.ripe.net/repository/DEFAULT/LPqiK9ZcrIKFjqCRaG1bO0vjvTk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:ea:9e:80:b8:dc:05:b8:a2:76:e9:82:88:ee:6a:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2cfaa22bd65cac82858ea091686d5b3b4be3bd39
Validity
Not Before: Mar 1 15:00:51 2026 GMT
Not After : Mar 2 15:00:51 2026 GMT
Subject: CN=070d8a9a0e38259ef769e9bed4e9ab7f8040d088
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:0c:c3:c8:c4:8e:9a:41:a9:d2:12:91:30:93:
87:de:e3:ab:50:7a:b7:ba:ac:28:4c:fb:8f:0e:e2:
56:73:a3:da:ff:9a:e7:8d:df:ba:8b:7a:9c:5a:ea:
69:90:3f:e1:f6:ea:df:b0:1e:33:51:a9:c5:6f:3a:
3f:53:7b:17:93:8f:46:ad:ce:b9:ce:ae:ea:64:a0:
7a:ab:6a:64:b9:5b:01:2a:1c:30:b1:ce:54:50:86:
89:9d:20:cf:ca:c8:af:98:d5:ad:ed:22:56:47:7e:
9d:c2:d2:48:7f:ea:46:18:81:29:40:47:c2:4d:29:
65:5c:95:28:33:f3:74:8a:58:1b:55:70:cc:81:67:
d5:4c:65:79:b5:ee:07:d8:51:ae:76:83:3b:ff:f6:
ff:12:91:b1:a2:79:7c:75:be:61:98:5b:46:89:22:
18:e5:3a:7b:7e:31:55:76:47:08:39:46:3b:af:f5:
c8:0d:8f:bf:ca:fd:1b:a4:90:94:b2:f8:74:f5:ce:
e0:e0:a5:11:02:f4:39:a2:df:a9:e1:43:ec:19:d9:
97:1c:56:4e:f7:58:06:32:18:ce:b2:02:26:35:6f:
a3:41:26:71:94:0e:48:cd:0b:15:df:2b:76:db:e4:
a4:13:a3:37:1e:d1:39:63:a7:04:82:3e:bc:2c:58:
f3:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:0D:8A:9A:0E:38:25:9E:F7:69:E9:BE:D4:E9:AB:7F:80:40:D0:88
X509v3 Authority Key Identifier:
keyid:2C:FA:A2:2B:D6:5C:AC:82:85:8E:A0:91:68:6D:5B:3B:4B:E3:BD:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LPqiK9ZcrIKFjqCRaG1bO0vjvTk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/5be44c-a4f2-4bd0-b5a7-b468838c7fdf/1/LPqiK9ZcrIKFjqCRaG1bO0vjvTk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/5be44c-a4f2-4bd0-b5a7-b468838c7fdf/1/LPqiK9ZcrIKFjqCRaG1bO0vjvTk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:91:23:d1:70:f8:58:ba:26:59:de:5c:a3:da:f5:08:25:31:
63:43:be:cc:9a:1b:5d:b3:30:9a:78:c0:16:3f:ad:7a:0a:fe:
d7:99:3b:b6:12:13:94:34:91:c9:82:c2:73:8f:98:9f:cb:03:
dc:9a:5a:54:50:fe:ee:86:70:f8:ce:b3:72:19:9b:62:73:d6:
8d:49:4e:3d:46:bb:cf:fe:d7:d2:40:fd:1a:ed:3b:97:c5:f0:
9a:bc:91:1d:e4:6e:fa:fb:5e:cd:82:a9:f6:e5:0f:1b:f5:52:
df:f3:d3:d2:57:b4:0a:b8:46:02:fa:e7:3e:ce:5e:31:bb:fc:
cc:06:78:31:64:bd:a5:d2:fc:86:9d:17:f1:85:37:9f:1e:8f:
29:5d:75:7f:24:43:12:0e:c1:34:29:f1:1e:9f:cf:2d:b3:18:
d0:4b:4b:55:6a:b3:33:0f:d0:5f:6f:98:fd:ca:af:ae:ab:76:
53:a3:54:00:66:34:97:6f:5e:91:9b:71:47:35:4d:6f:a8:b3:
93:e6:04:44:f9:bf:88:b6:c1:0e:df:11:a6:67:e4:45:ce:70:
c7:02:1a:b2:9c:b3:65:5d:b6:3e:ec:53:60:a8:0b:71:1e:6c:
24:8a:18:4e:56:b2:93:2e:7c:d9:82:04:31:c0:85:53:f9:80:
a7:0f:ed:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:44:45 2026 by rpki-client