Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/9307f6-1458-432f-9915-ca4ed8097970/1/LPAizk3IHwOzswcwpsI-rzQuzF4.mft
File: LPAizk3IHwOzswcwpsI-rzQuzF4.mft (raw, json)
Hash identifier: IrO6KY8rlCqSLgDH+HRe4SEQMH2oRxdQURPiGUgHYSM=
Subject key identifier: 2C:A6:14:C7:DC:AC:24:B2:30:34:4C:09:5C:54:09:07:FD:7C:1C:1B
Authority key identifier: 2C:F0:22:CE:4D:C8:1F:03:B3:B3:07:30:A6:C2:3E:AF:34:2E:CC:5E
Certificate issuer: /CN=2cf022ce4dc81f03b3b30730a6c23eaf342ecc5e
Certificate serial: 019D9C2D5605CA562DEE70E3346AA2E251F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LPAizk3IHwOzswcwpsI-rzQuzF4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/9307f6-1458-432f-9915-ca4ed8097970/1/LPAizk3IHwOzswcwpsI-rzQuzF4.mft
Manifest number: 0DE4
Signing time: Fri 17 Apr 2026 16:01:49 +0000
Manifest this update: Fri 17 Apr 2026 16:01:49 +0000
Manifest next update: Sat 18 Apr 2026 16:01:49 +0000
Files and hashes: 1: LPAizk3IHwOzswcwpsI-rzQuzF4.crl (hash: wkFR80W3izmruR96Y8UrY8KWQnIxkT9aBhikXSymhC8=)
2: XCJhrSPpZucqjPgaRc-yq5mBolo.roa (hash: aP3PkSYJUsN1jhJkS9fDL4Ew5pUSNdbtYk5nVTNSpag=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/9307f6-1458-432f-9915-ca4ed8097970/1/LPAizk3IHwOzswcwpsI-rzQuzF4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/9307f6-1458-432f-9915-ca4ed8097970/1/LPAizk3IHwOzswcwpsI-rzQuzF4.mft
rsync://rpki.ripe.net/repository/DEFAULT/LPAizk3IHwOzswcwpsI-rzQuzF4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9c:2d:56:05:ca:56:2d:ee:70:e3:34:6a:a2:e2:51:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2cf022ce4dc81f03b3b30730a6c23eaf342ecc5e
Validity
Not Before: Apr 17 16:01:49 2026 GMT
Not After : Apr 18 16:01:49 2026 GMT
Subject: CN=2ca614c7dcac24b230344c095c540907fd7c1c1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:5a:a9:a6:0c:fb:18:a8:f0:e6:51:f2:6b:c0:
1f:8c:a9:c9:47:ee:9a:ec:02:e9:b3:02:22:9d:5d:
f0:87:90:3f:81:05:72:ac:72:23:b9:c5:44:50:d6:
fb:6c:b0:48:2d:4f:2c:f8:4d:1a:42:e0:e4:30:c1:
1e:63:c4:c6:f7:aa:f8:76:9c:19:1c:ad:2f:d1:6d:
25:fb:62:01:71:e7:3b:6a:d6:23:43:cc:5f:54:98:
29:01:b2:a6:fd:85:75:b7:3e:e5:68:f7:60:ec:7a:
15:17:71:d8:56:25:dc:95:50:9c:f1:ab:ed:26:6a:
fd:07:69:41:01:f9:42:bc:63:46:a1:e6:b2:ec:bf:
93:94:9f:fe:ea:a3:35:06:80:41:62:c1:ae:0f:39:
b0:b3:88:0f:d8:41:33:a5:6b:62:86:24:e9:ca:37:
b4:14:09:d5:9e:6e:18:af:90:73:55:e9:95:51:63:
2a:18:0b:c0:d4:6b:a5:c1:73:e0:16:e2:cd:36:a7:
7f:b6:06:79:34:f9:04:70:2a:25:a9:96:dd:07:85:
45:65:40:96:a1:4c:5c:1b:32:3a:51:6c:07:dc:34:
f1:50:51:52:e5:3d:b1:91:3f:e8:9a:f6:6f:8c:8c:
47:5d:78:68:9e:17:2b:8d:b6:9f:56:ef:5a:15:c1:
55:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:A6:14:C7:DC:AC:24:B2:30:34:4C:09:5C:54:09:07:FD:7C:1C:1B
X509v3 Authority Key Identifier:
keyid:2C:F0:22:CE:4D:C8:1F:03:B3:B3:07:30:A6:C2:3E:AF:34:2E:CC:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LPAizk3IHwOzswcwpsI-rzQuzF4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/9307f6-1458-432f-9915-ca4ed8097970/1/LPAizk3IHwOzswcwpsI-rzQuzF4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/9307f6-1458-432f-9915-ca4ed8097970/1/LPAizk3IHwOzswcwpsI-rzQuzF4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:b0:95:90:7f:07:97:61:4c:77:08:ba:23:ea:92:4b:b5:1e:
8a:ad:eb:4f:00:7c:de:a2:5e:50:aa:0c:23:c5:91:f5:23:78:
8e:f4:db:e9:e1:a2:bb:6b:9a:6e:f9:56:32:b5:a1:40:e5:0f:
46:ab:6d:d4:dc:53:53:75:0c:6f:d7:f4:be:97:92:8c:5e:ec:
e0:be:33:6f:4c:5f:77:60:c1:f5:40:56:1d:c7:25:74:ee:25:
67:7f:f1:ed:89:6c:e3:65:d6:23:96:9d:0a:0d:89:ce:b4:fd:
5f:bf:f7:5c:12:bd:87:00:3a:f5:a6:66:86:30:5f:7d:f7:c4:
e2:a5:d6:7d:8c:11:b6:dc:08:3a:9f:cf:46:77:2a:06:c4:a8:
b3:a5:25:2e:7a:9c:f2:5a:12:25:87:f1:fc:29:6f:5b:c2:ab:
7b:91:9b:cd:0e:60:6c:b9:e8:65:d0:77:26:fa:ec:06:b0:a1:
5c:ed:f9:19:2a:1a:47:e4:41:42:b0:9e:7b:dd:60:ae:36:59:
23:ca:32:5d:f9:e2:54:70:06:ad:6d:b8:f5:a0:56:fa:dc:2a:
26:71:08:77:ed:4c:73:bf:03:08:7e:85:af:a1:63:7e:a2:77:
ca:cf:1c:a7:5b:a9:b0:5b:5f:76:d8:c6:fd:ef:d0:f3:eb:3d:
a7:b7:d3:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 21:05:54 2026 by rpki-client