Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/f891c4-19ac-437c-b782-e1487a54c1e5/1/lKMuRFwk3tm4UhLUebiACBZevbo.mft
File: lKMuRFwk3tm4UhLUebiACBZevbo.mft (raw, json)
Hash identifier: Wgx8eXOF9RFGY81m+GAEnEza7+oOY6a0ledxx0etVBs=
Subject key identifier: 01:F1:C6:6A:D9:4C:3E:B1:67:3C:0C:04:E4:9D:62:F6:19:9D:07:DD
Authority key identifier: 94:A3:2E:44:5C:24:DE:D9:B8:52:12:D4:79:B8:80:08:16:5E:BD:BA
Certificate issuer: /CN=94a32e445c24ded9b85212d479b88008165ebdba
Certificate serial: 019EB98F7105B67156D3E5CC12467E33654C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lKMuRFwk3tm4UhLUebiACBZevbo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/f891c4-19ac-437c-b782-e1487a54c1e5/1/lKMuRFwk3tm4UhLUebiACBZevbo.mft
Manifest number: 1959
Signing time: Fri 12 Jun 2026 02:00:45 +0000
Manifest this update: Fri 12 Jun 2026 02:00:45 +0000
Manifest next update: Sat 13 Jun 2026 02:00:45 +0000
Files and hashes: 1: lKMuRFwk3tm4UhLUebiACBZevbo.crl (hash: TxEpAJPWvMjkAjL0+2UwR7dfy9AVSAFRWG8yiHPUzJM=)
2: q_6rXYE5naFTYIqL8Xb1V5kt0hw.roa (hash: oNdTo6cg1MBLR8xzU20UilfpNxSC7GvJArzxlqR/iAg=)
3: sdkmYCTpxXVubPzt0Vusqo9p2cM.roa (hash: cR5IHtVLgA9zfYhE/lZgYLsMdhZ5hl2OfHWB5ot/8mQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/f891c4-19ac-437c-b782-e1487a54c1e5/1/lKMuRFwk3tm4UhLUebiACBZevbo.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/f891c4-19ac-437c-b782-e1487a54c1e5/1/lKMuRFwk3tm4UhLUebiACBZevbo.mft
rsync://rpki.ripe.net/repository/DEFAULT/lKMuRFwk3tm4UhLUebiACBZevbo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 22:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b9:8f:71:05:b6:71:56:d3:e5:cc:12:46:7e:33:65:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94a32e445c24ded9b85212d479b88008165ebdba
Validity
Not Before: Jun 12 02:00:45 2026 GMT
Not After : Jun 13 02:00:45 2026 GMT
Subject: CN=01f1c66ad94c3eb1673c0c04e49d62f6199d07dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:ea:ef:43:49:d3:b2:f7:e8:a6:76:b7:a9:ba:
9f:07:ef:7c:14:03:b5:7a:ea:b9:e5:f2:da:ef:75:
b9:6a:b4:c4:d2:b3:1f:f5:6c:bc:a7:a9:b8:bc:79:
e1:bb:96:88:19:ac:90:9f:84:18:1a:06:24:ee:42:
a7:f3:0b:dd:f9:09:07:f4:bb:36:00:94:80:da:80:
55:82:5a:3c:42:fc:8e:63:6d:51:e5:bc:29:e1:84:
38:85:94:08:0c:cb:9b:99:28:ef:d4:3f:4e:99:a8:
73:8a:0a:f0:a1:a7:27:9d:6f:ee:7b:9a:29:d2:e6:
32:45:e2:74:e5:c3:04:d0:b5:46:55:5b:20:64:87:
21:1b:b9:43:1b:6b:48:a6:43:63:9f:80:a1:b1:d0:
87:b0:05:17:8a:68:55:84:c3:4d:81:b1:35:48:e9:
f0:1d:d2:b0:db:b3:f5:7b:25:c1:a6:13:3e:2b:5a:
ec:1f:25:43:64:35:10:7a:99:23:24:9a:95:77:48:
e2:52:de:7f:6c:e7:17:63:2b:98:a2:c5:dd:43:a9:
e5:43:26:6a:98:a7:bc:86:6a:1d:0a:09:a4:af:49:
d5:e3:df:e9:52:38:6f:7c:5e:44:8d:bb:15:a3:53:
30:e4:c4:c7:79:a6:bd:d1:dd:e0:16:5c:c4:fa:ad:
3d:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:F1:C6:6A:D9:4C:3E:B1:67:3C:0C:04:E4:9D:62:F6:19:9D:07:DD
X509v3 Authority Key Identifier:
keyid:94:A3:2E:44:5C:24:DE:D9:B8:52:12:D4:79:B8:80:08:16:5E:BD:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lKMuRFwk3tm4UhLUebiACBZevbo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/f891c4-19ac-437c-b782-e1487a54c1e5/1/lKMuRFwk3tm4UhLUebiACBZevbo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/f891c4-19ac-437c-b782-e1487a54c1e5/1/lKMuRFwk3tm4UhLUebiACBZevbo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:63:75:63:72:ed:4f:2d:e4:f2:42:48:22:1a:88:e5:bd:e4:
e7:84:35:30:a8:d1:df:31:3b:46:90:bc:c9:74:19:5a:91:f1:
85:e7:80:1d:d7:d6:54:04:87:7d:27:ce:da:1e:43:84:cc:b2:
2a:6a:70:9f:a5:98:0a:32:2c:56:8a:93:99:ad:24:4d:b7:a8:
e0:5a:c1:12:ef:9b:7a:83:ff:a3:16:f3:fc:79:bd:18:46:c1:
db:e3:b2:98:56:6f:19:e8:35:a4:02:96:9f:e7:7b:bc:c9:4e:
1c:0e:83:ab:25:a8:78:1d:89:2b:23:01:8a:fb:5e:e2:eb:ab:
d7:fe:9b:22:b7:ec:f3:06:19:0c:92:67:15:7f:1a:f5:38:b1:
fc:fb:42:11:35:42:58:88:35:8d:df:17:64:58:db:b1:55:04:
56:bb:df:28:d8:f5:77:82:11:ab:ab:e0:6a:a5:21:41:04:48:
97:50:a4:c9:da:c6:1b:27:6e:b2:94:78:6a:ec:12:7f:a2:82:
88:ee:26:4c:12:d5:62:0f:bd:81:8d:56:0b:df:29:00:12:f0:
96:57:ef:e0:b8:71:64:d9:79:9b:8c:43:9a:49:fe:c7:52:58:
0b:23:9d:3c:f0:50:66:05:23:5e:e5:07:a7:a3:5e:1b:51:7d:
43:90:81:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 07:02:58 2026 by rpki-client