Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/186a93-8e93-4652-9289-7ed51ca5af51/1/lkM1Vj2bb54-KN42jYWYi8FBNx4.mft
File: lkM1Vj2bb54-KN42jYWYi8FBNx4.mft (raw, json)
Hash identifier: 30jKvSYrHYm6DE2dzrGaJtYqmglHhgzFsADwGogcpUk=
Subject key identifier: A9:72:6C:B4:E2:7C:38:02:02:B1:68:B1:94:D3:3F:CA:64:F5:4F:03
Authority key identifier: 96:43:35:56:3D:9B:6F:9E:3E:28:DE:36:8D:85:98:8B:C1:41:37:1E
Certificate issuer: /CN=964335563d9b6f9e3e28de368d85988bc141371e
Certificate serial: 019F81C24024C077A5F8BC0EA7362AA4753C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lkM1Vj2bb54-KN42jYWYi8FBNx4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/186a93-8e93-4652-9289-7ed51ca5af51/1/lkM1Vj2bb54-KN42jYWYi8FBNx4.mft
Manifest number: 1806
Signing time: Mon 20 Jul 2026 23:00:19 +0000
Manifest this update: Mon 20 Jul 2026 23:00:19 +0000
Manifest next update: Tue 21 Jul 2026 23:00:19 +0000
Files and hashes: 1: 3j-9iaSKXJ2L7jlRSEs0qAlyRzk.roa (hash: kn2dNNNAcDT9/tnxgSN6E9lAiJiIXAqVGnn+Z6zefmM=)
2: WxK98FtTbTtBWK0NDqa7PLSHh-4.roa (hash: 6Do9u90Y5TD8a3hd4jqlXjVJP1K6MfYLEiK3okcKW40=)
3: lkM1Vj2bb54-KN42jYWYi8FBNx4.crl (hash: DLTXFeHwOXLPGWP2QBrVOkgUJSYJRUFZ5BoR5ky6/f8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/186a93-8e93-4652-9289-7ed51ca5af51/1/lkM1Vj2bb54-KN42jYWYi8FBNx4.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/186a93-8e93-4652-9289-7ed51ca5af51/1/lkM1Vj2bb54-KN42jYWYi8FBNx4.mft
rsync://rpki.ripe.net/repository/DEFAULT/lkM1Vj2bb54-KN42jYWYi8FBNx4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:81:c2:40:24:c0:77:a5:f8:bc:0e:a7:36:2a:a4:75:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=964335563d9b6f9e3e28de368d85988bc141371e
Validity
Not Before: Jul 20 23:00:19 2026 GMT
Not After : Jul 21 23:00:19 2026 GMT
Subject: CN=a9726cb4e27c380202b168b194d33fca64f54f03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:68:e7:f4:3c:d9:b7:e0:53:7b:d9:3a:cd:6d:
05:89:1f:42:ea:7b:55:69:4a:29:16:a2:d6:4b:9b:
8e:0c:1d:ed:3b:3e:52:36:a9:8e:78:23:dd:58:1e:
40:cc:8d:4d:1d:12:7c:d1:b1:99:b4:e4:10:c3:1e:
2f:d5:d5:aa:14:f7:c6:e6:6f:40:c7:a9:be:92:46:
a4:6f:61:ef:f0:e4:0f:01:06:60:e4:34:d6:e2:4d:
79:d1:d9:9a:02:61:5c:a9:84:95:c7:81:75:10:8b:
db:12:dd:83:95:52:04:05:6f:48:12:d0:47:bd:ef:
43:8b:4d:1c:46:94:33:58:16:58:46:9d:b6:97:c3:
2a:80:df:07:0d:d4:81:e0:5f:dd:b0:bc:6e:b6:39:
2f:1f:a7:e3:7e:11:7b:2c:59:70:12:41:c2:e3:59:
bc:dc:b0:38:b8:78:c7:5f:d4:01:71:49:c1:7c:8b:
a0:ed:ce:33:cf:c6:15:d7:05:d9:15:9c:fb:07:bf:
db:0b:aa:df:2a:e1:3c:f5:fb:30:39:61:59:86:d4:
d4:38:c9:4f:26:f0:fa:b8:b6:c6:9c:dc:d1:5f:aa:
bd:c9:1e:5e:97:3b:11:ad:7b:5c:79:ac:85:ab:db:
da:0c:2b:aa:44:d5:2c:1c:d5:c9:f9:ae:d7:43:ae:
a6:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:72:6C:B4:E2:7C:38:02:02:B1:68:B1:94:D3:3F:CA:64:F5:4F:03
X509v3 Authority Key Identifier:
keyid:96:43:35:56:3D:9B:6F:9E:3E:28:DE:36:8D:85:98:8B:C1:41:37:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lkM1Vj2bb54-KN42jYWYi8FBNx4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/186a93-8e93-4652-9289-7ed51ca5af51/1/lkM1Vj2bb54-KN42jYWYi8FBNx4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/186a93-8e93-4652-9289-7ed51ca5af51/1/lkM1Vj2bb54-KN42jYWYi8FBNx4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:41:9b:3f:62:c7:96:bf:8f:22:c3:b0:91:83:2d:9f:8a:1f:
e1:02:78:6f:ef:df:6a:c6:e4:2c:f2:d2:49:b4:a2:b7:38:fc:
a3:dc:bd:65:a8:97:18:b7:ac:3d:a7:99:4f:a7:97:e6:2d:8f:
8f:04:7f:36:b2:2c:c5:c7:fe:aa:bb:8e:d1:fe:9d:79:b9:43:
9a:3d:8c:69:a8:74:24:06:bd:c8:21:c9:cd:79:30:ba:e7:c6:
b4:f3:e3:88:f9:d2:1f:9a:e4:bc:c3:47:dd:c8:aa:52:0f:51:
c0:a6:e3:01:e5:68:90:3b:c0:6d:9f:e4:86:93:88:27:7c:6d:
48:11:11:a9:97:7a:3c:c6:db:de:a1:60:eb:8d:65:72:6c:4b:
65:d6:26:06:27:4d:50:a3:8d:76:c9:6a:fc:8a:7d:dd:74:cd:
4f:b5:04:f4:08:ec:c3:95:f7:e9:12:86:03:02:e8:43:86:11:
86:4b:c3:54:d3:33:61:07:ce:32:8f:7f:41:46:2d:75:14:3a:
b7:7d:74:18:5a:36:82:7b:ee:87:f9:cc:16:9b:5c:dc:5a:fd:
71:f0:c1:4c:ff:6b:0a:df:4d:56:b3:ec:98:d1:5b:44:dd:35:
4b:4e:de:4c:50:e4:46:cb:26:d4:55:08:ad:ad:67:82:0d:37:
c3:42:71:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 07:00:46 2026 by rpki-client