Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/6fcf66-8e8c-4dbb-8cf0-5019d2c388db/1/LKYTd0lZnAPHtHLxQscZaAAGtuY.mft
File: LKYTd0lZnAPHtHLxQscZaAAGtuY.mft (raw, json)
Hash identifier: +2a1a4lB5u7um//RCtetrQAE/pQKW8YS6a4F2IVbWw4=
Subject key identifier: 3E:15:29:F6:45:FB:B7:41:32:84:33:4E:D9:80:21:D7:85:DC:26:DB
Authority key identifier: 2C:A6:13:77:49:59:9C:03:C7:B4:72:F1:42:C7:19:68:00:06:B6:E6
Certificate issuer: /CN=2ca6137749599c03c7b472f142c719680006b6e6
Certificate serial: 019D38669BAB1A3CA7A467E287A37C567A2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LKYTd0lZnAPHtHLxQscZaAAGtuY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/6fcf66-8e8c-4dbb-8cf0-5019d2c388db/1/LKYTd0lZnAPHtHLxQscZaAAGtuY.mft
Manifest number: 1523
Signing time: Sun 29 Mar 2026 07:02:21 +0000
Manifest this update: Sun 29 Mar 2026 07:02:21 +0000
Manifest next update: Mon 30 Mar 2026 07:02:21 +0000
Files and hashes: 1: DjKvHGkxm9JLkDzr5jJuPNohrKM.roa (hash: 4xyJPy+sZSw3rF0C0CNhWMzSFjnYCLyNFxo1nQPPkU4=)
2: LKYTd0lZnAPHtHLxQscZaAAGtuY.crl (hash: 5Tj1qsJWb41bjmBTL13bgz9J/Sp+ey0CSG7Bptv2MYA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/6fcf66-8e8c-4dbb-8cf0-5019d2c388db/1/LKYTd0lZnAPHtHLxQscZaAAGtuY.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/6fcf66-8e8c-4dbb-8cf0-5019d2c388db/1/LKYTd0lZnAPHtHLxQscZaAAGtuY.mft
rsync://rpki.ripe.net/repository/DEFAULT/LKYTd0lZnAPHtHLxQscZaAAGtuY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:9b:ab:1a:3c:a7:a4:67:e2:87:a3:7c:56:7a:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ca6137749599c03c7b472f142c719680006b6e6
Validity
Not Before: Mar 29 07:02:21 2026 GMT
Not After : Mar 30 07:02:21 2026 GMT
Subject: CN=3e1529f645fbb7413284334ed98021d785dc26db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:6e:90:41:cf:e6:14:ae:99:4a:c9:46:74:63:
a0:96:ff:b6:51:03:d7:8f:c3:22:42:9a:c2:bd:70:
b6:1f:43:94:a2:34:b4:b5:53:7f:a9:1c:90:14:9f:
7b:72:df:14:07:9c:81:2d:7a:ba:76:42:04:78:56:
9e:b6:62:0d:02:ad:d3:72:6f:7b:cc:55:12:f2:28:
2a:aa:38:57:cb:55:37:a8:07:9c:4f:b8:30:cd:89:
e8:68:f2:15:dc:d2:27:7e:0a:dd:37:3b:83:8e:92:
97:99:8b:18:0a:84:17:6b:e3:f2:1c:6a:17:26:76:
28:2e:ed:73:67:2e:1c:e9:30:79:4a:95:bf:29:1a:
62:9a:ca:c1:73:63:d6:f0:80:48:18:3d:95:43:d9:
52:79:a9:3a:6d:f0:9a:4b:d7:13:8f:81:19:5d:32:
c4:bd:c4:82:b0:42:16:6c:ab:fb:1a:6f:6b:c5:de:
c8:85:1b:72:98:8e:54:79:45:9a:6e:f7:56:4b:b8:
55:a9:4f:03:b7:d7:af:55:a7:41:9b:55:4d:0e:08:
15:a6:fc:30:72:14:94:55:08:24:e0:c9:d5:6f:ea:
39:47:df:c7:a0:ab:f7:25:75:eb:b3:c9:8d:e1:02:
27:a8:37:39:7c:60:4c:f0:19:ff:53:a0:e6:f5:f0:
d2:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:15:29:F6:45:FB:B7:41:32:84:33:4E:D9:80:21:D7:85:DC:26:DB
X509v3 Authority Key Identifier:
keyid:2C:A6:13:77:49:59:9C:03:C7:B4:72:F1:42:C7:19:68:00:06:B6:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LKYTd0lZnAPHtHLxQscZaAAGtuY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/6fcf66-8e8c-4dbb-8cf0-5019d2c388db/1/LKYTd0lZnAPHtHLxQscZaAAGtuY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/6fcf66-8e8c-4dbb-8cf0-5019d2c388db/1/LKYTd0lZnAPHtHLxQscZaAAGtuY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:72:d8:64:7d:74:00:82:fc:77:95:48:4c:b8:0c:56:d6:a6:
eb:cb:56:9d:d1:2b:c6:13:37:dd:8e:74:41:dd:7c:2b:fb:66:
d8:4a:d8:8b:d0:95:ff:f1:84:e4:e6:fc:76:ca:39:44:3d:9f:
eb:a1:1f:f8:ab:4d:b0:0b:e1:23:f5:63:ff:ff:79:ba:06:2c:
1e:05:4a:3a:eb:d6:7f:29:56:27:c7:75:e8:29:cb:ad:70:41:
b1:bf:a3:64:e3:5f:0c:c5:04:a2:4c:5a:7e:8b:03:02:66:d1:
0a:26:16:4c:79:fa:50:d6:13:02:56:ab:7b:d9:c7:b0:77:44:
e5:b5:fb:20:73:d7:ea:cf:8e:e1:98:2d:1c:a7:55:68:67:9b:
f9:c5:7a:37:57:cb:b2:72:b5:17:84:01:62:e0:39:2f:0d:2b:
3e:27:1b:4f:39:6b:d4:fb:64:d1:95:8c:a8:1b:6c:9f:51:ef:
a1:69:31:90:12:24:47:10:0d:b5:ea:47:83:d5:39:8e:86:b3:
ee:92:b0:86:8c:a8:bb:08:25:92:43:91:93:6f:ef:34:1a:ac:
fa:c1:ca:11:a3:e3:e8:e6:95:bf:7f:9c:c3:8c:b0:72:ad:cf:
a7:30:06:11:b1:dd:11:94:12:2a:8e:dc:27:47:8d:70:54:2a:
34:31:41:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:24:07 2026 by rpki-client