Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5a/5cffd2-b568-4d55-a124-21fc9afc8ac1/1/lpztpb83kB_p5E9ztb-CtoezRXI.mft
File: lpztpb83kB_p5E9ztb-CtoezRXI.mft (raw, json)
Hash identifier: 70wqtfEgi/wzZTpLrmfmH5ieZ751CTHXYdVJRHtOdrc=
Subject key identifier: 0F:FC:B9:0C:68:31:2A:F9:10:EB:C0:08:19:C6:30:13:FF:78:F2:F6
Authority key identifier: 96:9C:ED:A5:BF:37:90:1F:E9:E4:4F:73:B5:BF:82:B6:87:B3:45:72
Certificate issuer: /CN=969ceda5bf37901fe9e44f73b5bf82b687b34572
Certificate serial: 01A0D83BBF8E4BA4F9B1057784E4E8DED301
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lpztpb83kB_p5E9ztb-CtoezRXI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/5cffd2-b568-4d55-a124-21fc9afc8ac1/1/lpztpb83kB_p5E9ztb-CtoezRXI.mft
Manifest number: 0F15
Signing time: Fri 25 Sep 2026 11:03:09 +0000
Manifest this update: Fri 25 Sep 2026 11:03:09 +0000
Manifest next update: Sat 26 Sep 2026 11:03:09 +0000
Files and hashes: 1: 5tq-dphgnapNG8uID0bzWyuSiiI.roa (hash: Geh8HxvdWtRdjQA8GTRZhRKQeMt/TQkbrTaKQX7hwuM=)
2: SNXaMmatRq7Y2yZacERGh_Byx3c.roa (hash: 1VfAG/PWe9ADh3l7lJxuP3CaKheNhNOZc9+mMKVHmsc=)
3: aeJRC_Zrs1Xdsza3m-Bp94bJ1dk.roa (hash: 31o9/oasTnGfM4n9yp1biNvrc9x/A8EYFBmDcG491Fg=)
4: lpztpb83kB_p5E9ztb-CtoezRXI.crl (hash: tA23JDRcDtQLF18cPDznHCpFYhSvXjZ7Z6cIH4i+C/I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/5cffd2-b568-4d55-a124-21fc9afc8ac1/1/lpztpb83kB_p5E9ztb-CtoezRXI.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/5cffd2-b568-4d55-a124-21fc9afc8ac1/1/lpztpb83kB_p5E9ztb-CtoezRXI.mft
rsync://rpki.ripe.net/repository/DEFAULT/lpztpb83kB_p5E9ztb-CtoezRXI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 11:03:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d8:3b:bf:8e:4b:a4:f9:b1:05:77:84:e4:e8:de:d3:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=969ceda5bf37901fe9e44f73b5bf82b687b34572
Validity
Not Before: Sep 25 11:03:09 2026 GMT
Not After : Sep 26 11:03:09 2026 GMT
Subject: CN=0ffcb90c68312af910ebc00819c63013ff78f2f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:f7:2e:5e:15:94:d4:05:54:42:dc:6b:5b:36:
f3:7c:4f:7a:ec:a3:0c:e6:a8:c0:f5:d1:62:f7:a5:
1e:2d:51:95:ec:13:08:ae:50:dd:ff:a8:25:c7:b2:
25:34:97:c2:8b:16:74:4c:46:ce:43:c5:6d:cf:42:
5c:c0:6c:3b:a6:f6:6d:d8:56:b7:46:51:94:92:9e:
63:a9:ae:db:54:d7:ee:3d:c2:ee:4e:d0:42:7a:04:
d8:e0:fd:d2:ac:d4:b9:82:5a:34:0c:52:23:ac:72:
cd:6b:6b:15:f6:46:d0:36:77:57:ce:6a:b5:bd:49:
11:74:78:4c:fe:98:d4:33:97:64:96:e4:82:1e:53:
54:de:40:4f:81:7b:90:44:5a:c9:5d:c6:e2:cc:4e:
5c:03:4a:8f:74:44:0d:88:ba:56:4e:53:27:d7:d3:
c0:3b:f9:fc:9d:36:65:2c:c0:4d:f5:d7:97:b6:ad:
23:1a:2b:09:0c:9d:b1:e0:73:20:41:ca:25:15:9e:
47:6c:c0:c4:d5:81:6a:9a:7f:ea:98:68:1c:96:69:
dd:8b:24:06:ae:71:70:29:ae:eb:b0:b4:c2:90:03:
ab:b1:9b:8b:a0:2d:33:8f:ed:8c:43:86:60:aa:46:
78:97:29:57:0e:64:97:cd:ad:92:a8:06:e4:52:e1:
40:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:FC:B9:0C:68:31:2A:F9:10:EB:C0:08:19:C6:30:13:FF:78:F2:F6
X509v3 Authority Key Identifier:
keyid:96:9C:ED:A5:BF:37:90:1F:E9:E4:4F:73:B5:BF:82:B6:87:B3:45:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lpztpb83kB_p5E9ztb-CtoezRXI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/5cffd2-b568-4d55-a124-21fc9afc8ac1/1/lpztpb83kB_p5E9ztb-CtoezRXI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/5cffd2-b568-4d55-a124-21fc9afc8ac1/1/lpztpb83kB_p5E9ztb-CtoezRXI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:32:c4:20:d7:22:c2:bc:a5:ec:8a:b5:fa:44:96:e4:4a:5c:
1b:9c:16:36:9b:fc:75:36:5f:f1:e7:4e:80:bb:9b:b8:06:e8:
31:51:e1:74:63:1a:0b:1e:91:91:fb:60:35:50:fe:16:31:cb:
af:fd:d0:c3:e4:b5:ab:0b:84:bf:db:d2:2b:de:51:13:14:35:
72:1c:87:a0:5d:d2:58:a4:ec:52:0a:44:07:1a:00:ef:df:9e:
f0:4a:45:09:fa:f3:27:0c:7b:86:e7:f8:1e:eb:8e:20:ce:ec:
1a:8d:3f:ee:23:07:6e:0a:b5:08:3a:30:ca:b8:93:cd:e8:bd:
8a:ae:a1:9f:84:d1:81:df:90:47:11:bb:0b:2b:73:cd:d7:d2:
32:ba:c1:3b:b3:82:4d:66:14:60:e9:6e:e6:f7:5f:bf:35:cb:
b2:82:cb:a8:4f:d9:85:4c:04:ab:e2:cd:3a:f3:60:29:89:cf:
f5:1c:72:95:fc:49:12:e6:65:cf:65:82:7f:cb:bf:1a:51:f3:
71:ac:93:21:0d:b1:e3:f5:38:50:c9:2f:d5:4c:be:27:a8:f2:
cb:3d:eb:32:7a:70:81:b0:aa:7f:3f:ae:8d:4c:74:db:43:d1:
ad:e1:80:7c:a3:cf:f7:f3:2e:2a:0a:bc:32:ac:70:77:75:c7:
7d:84:e6:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 21:40:23 2026 by rpki-client