Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/48/5ea425-af1a-4e30-8bb0-bfa636877e90/1/lkdopthwizYxQ6qIEeXZdoJk718.mft
File: lkdopthwizYxQ6qIEeXZdoJk718.mft (raw, json)
Hash identifier: OnmeoZZ8oKimkswSdfCbwGnxW44bFrn7CNFlXw+PWIM=
Subject key identifier: 67:A6:42:FD:75:27:06:95:48:70:40:6B:41:A7:71:0D:89:E3:C8:B5
Authority key identifier: 96:47:68:A6:D8:70:8B:36:31:43:AA:88:11:E5:D9:76:82:64:EF:5F
Certificate issuer: /CN=964768a6d8708b363143aa8811e5d9768264ef5f
Certificate serial: 01A111174E88BAF38A4F6CFFC27D2B751C3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lkdopthwizYxQ6qIEeXZdoJk718.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/5ea425-af1a-4e30-8bb0-bfa636877e90/1/lkdopthwizYxQ6qIEeXZdoJk718.mft
Manifest number: 1A8C
Signing time: Tue 06 Oct 2026 12:01:42 +0000
Manifest this update: Tue 06 Oct 2026 12:01:42 +0000
Manifest next update: Wed 07 Oct 2026 12:01:42 +0000
Files and hashes: 1: lkdopthwizYxQ6qIEeXZdoJk718.crl (hash: IWSBAbh0c1kGtx9cOdeoQlok/qrQmK1a8p7/Ss7C9u0=)
2: y_2SHxKhfe_rgzbIS6eSd_GEWIw.roa (hash: /4b4cJ0+NGqltrpZyUr4ICghwSOnPUDvjMTMvvgLSLA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/5ea425-af1a-4e30-8bb0-bfa636877e90/1/lkdopthwizYxQ6qIEeXZdoJk718.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/5ea425-af1a-4e30-8bb0-bfa636877e90/1/lkdopthwizYxQ6qIEeXZdoJk718.mft
rsync://rpki.ripe.net/repository/DEFAULT/lkdopthwizYxQ6qIEeXZdoJk718.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 Oct 2026 12:01:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:11:17:4e:88:ba:f3:8a:4f:6c:ff:c2:7d:2b:75:1c:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=964768a6d8708b363143aa8811e5d9768264ef5f
Validity
Not Before: Oct 6 12:01:42 2026 GMT
Not After : Oct 7 12:01:42 2026 GMT
Subject: CN=67a642fd752706954870406b41a7710d89e3c8b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:f6:50:d3:90:42:c5:0d:0d:62:7d:7f:b0:8f:
ba:4a:f2:dd:2b:9e:c4:8a:f6:de:58:09:a5:bd:86:
0a:26:1a:e1:b3:c9:0c:12:e0:ab:d3:3a:38:dd:41:
78:49:e7:b9:ad:7e:0d:af:d5:c0:7e:00:72:86:f0:
17:3f:2a:5a:76:b9:f1:90:0e:1d:d3:bf:a0:9c:ee:
72:40:bb:78:df:f1:36:42:0c:0a:16:06:a6:a4:2b:
b2:d0:d7:99:2a:2f:87:3d:c1:9b:17:3b:95:ad:5e:
e5:77:c7:cd:84:08:ae:ea:37:ba:75:79:0b:35:4b:
14:5a:df:d3:cf:9e:b6:b3:22:a1:f3:f4:eb:8c:42:
43:ed:59:52:67:be:2f:8e:88:0d:13:3c:63:27:f9:
b9:c8:14:2a:34:81:cd:18:a0:02:a0:04:75:ca:a9:
c6:e8:48:4e:84:b2:5f:92:b4:3f:4a:2e:98:82:f2:
68:b9:bb:35:77:a3:a0:0e:a3:0e:cf:af:21:11:a7:
e9:dd:74:71:c8:8e:e3:15:08:6f:f0:c7:6a:4d:4f:
a0:af:de:cc:e9:bf:42:f3:07:83:dc:e8:2f:5a:ea:
29:53:b3:f7:7d:dd:6f:54:b1:85:48:a8:8d:ad:b1:
48:03:a4:a2:79:7e:7e:97:90:15:17:05:5d:3c:e2:
ac:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:A6:42:FD:75:27:06:95:48:70:40:6B:41:A7:71:0D:89:E3:C8:B5
X509v3 Authority Key Identifier:
keyid:96:47:68:A6:D8:70:8B:36:31:43:AA:88:11:E5:D9:76:82:64:EF:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lkdopthwizYxQ6qIEeXZdoJk718.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/5ea425-af1a-4e30-8bb0-bfa636877e90/1/lkdopthwizYxQ6qIEeXZdoJk718.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/5ea425-af1a-4e30-8bb0-bfa636877e90/1/lkdopthwizYxQ6qIEeXZdoJk718.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:85:28:16:d3:46:1e:21:cd:4e:5d:f8:4e:9a:0e:d5:fa:3b:
a9:cc:de:c6:f3:1f:03:b6:61:84:50:5c:90:8f:04:fb:7c:79:
5d:02:76:f0:c2:32:be:b8:92:1a:54:65:97:e0:3b:ec:a8:88:
3c:57:25:7f:c4:9e:8f:64:98:53:22:68:17:ef:87:3c:5b:8e:
0e:d2:11:f7:a1:88:57:33:3e:a5:59:08:f8:84:6f:4f:59:01:
a2:95:2e:98:ce:95:47:c7:e7:70:fa:9d:ba:7b:97:f6:dc:72:
de:83:e2:88:7f:aa:a1:9e:0c:37:7e:7b:28:df:dd:41:3e:aa:
9d:05:3e:73:0a:2d:f3:55:0e:f1:98:b9:49:97:3e:76:70:a7:
f8:93:41:fc:bb:d9:15:ac:3a:a2:04:9f:92:ad:bb:2b:66:6f:
5d:99:b9:6e:b2:4b:38:49:b6:45:a3:d0:26:4f:96:de:b4:a0:
86:01:c3:50:d7:20:fa:a4:17:0e:51:55:72:a9:26:77:c2:32:
22:4b:27:bf:c2:6d:44:43:75:75:e5:c1:6b:f8:29:aa:e0:ab:
78:12:0a:10:85:01:5a:fa:de:23:49:4c:6c:a0:58:f5:7c:23:
5f:df:c6:67:e6:c1:7a:88:29:58:dd:42:51:c0:33:14:94:7b:
2a:0d:0c:e8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaERF06IuvOKT2z/wn0rdRw6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk2NDc2OGE2ZDg3MDhiMzYzMTQzYWE4ODExZTVkOTc2ODI2
NGVmNWYwHhcNMjYxMDA2MTIwMTQyWhcNMjYxMDA3MTIwMTQyWjAzMTEwLwYDVQQD
Eyg2N2E2NDJmZDc1MjcwNjk1NDg3MDQwNmI0MWE3NzEwZDg5ZTNjOGI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArvZQ05BCxQ0NYn1/sI+6SvLdK57E
ivbeWAmlvYYKJhrhs8kMEuCr0zo43UF4See5rX4Nr9XAfgByhvAXPypadrnxkA4d
07+gnO5yQLt43/E2QgwKFgampCuy0NeZKi+HPcGbFzuVrV7ld8fNhAiu6je6dXkL
NUsUWt/Tz562syKh8/TrjEJD7VlSZ74vjogNEzxjJ/m5yBQqNIHNGKACoAR1yqnG
6EhOhLJfkrQ/Si6YgvJoubs1d6OgDqMOz68hEafp3XRxyI7jFQhv8MdqTU+gr97M
6b9C8weD3OgvWuopU7P3fd1vVLGFSKiNrbFIA6SieX5+l5AVFwVdPOKsFQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGemQv11JwaVSHBAa0GncQ2J48i1MB8GA1UdIwQY
MBaAFJZHaKbYcIs2MUOqiBHl2XaCZO9fMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbGtkb3B0aHdpell4UTZxSUVlWFpkb0prNzE4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC81ZWE0MjUtYWYxYS00ZTMwLThiYjAt
YmZhNjM2ODc3ZTkwLzEvbGtkb3B0aHdpell4UTZxSUVlWFpkb0prNzE4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OC81ZWE0MjUtYWYxYS00ZTMwLThiYjAtYmZhNjM2ODc3ZTkw
LzEvbGtkb3B0aHdpell4UTZxSUVlWFpkb0prNzE4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbYUoFtNG
HiHNTl34TpoO1fo7qczexvMfA7ZhhFBckI8E+3x5XQJ28MIyvriSGlRll+A77KiI
PFclf8Sej2SYUyJoF++HPFuODtIR96GIVzM+pVkI+IRvT1kBopUumM6VR8fncPqd
unuX9txy3oPiiH+qoZ4MN357KN/dQT6qnQU+cwot81UO8Zi5SZc+dnCn+JNB/LvZ
Faw6ogSfkq27K2ZvXZm5brJLOEm2RaPQJk+W3rSghgHDUNcg+qQXDlFVcqkmd8Iy
Iksnv8JtREN1deXBa/gpquCreBIKEIUBWvreI0lMbKBY9XwjX9/GZ+bBeogpWN1C
UcAzFJR7Kg0M6A==
-----END CERTIFICATE-----
Generated at Tue Oct 6 20:35:13 2026 by rpki-client