Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/5ea425-af1a-4e30-8bb0-bfa636877e90/1/lkdopthwizYxQ6qIEeXZdoJk718.mft
File: lkdopthwizYxQ6qIEeXZdoJk718.mft (raw, json)
Hash identifier: Rloqo056EZ+i6yf9a4gxMiozRgpXXQ3kRh+EtGrnTfE=
Subject key identifier: B4:88:C8:68:56:75:51:9A:4F:35:FD:8C:56:7D:4D:D7:A7:71:1F:8F
Authority key identifier: 96:47:68:A6:D8:70:8B:36:31:43:AA:88:11:E5:D9:76:82:64:EF:5F
Certificate issuer: /CN=964768a6d8708b363143aa8811e5d9768264ef5f
Certificate serial: 019D382E669264C1830DB179CB68AA6005EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lkdopthwizYxQ6qIEeXZdoJk718.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/5ea425-af1a-4e30-8bb0-bfa636877e90/1/lkdopthwizYxQ6qIEeXZdoJk718.mft
Manifest number: 188E
Signing time: Sun 29 Mar 2026 06:00:58 +0000
Manifest this update: Sun 29 Mar 2026 06:00:58 +0000
Manifest next update: Mon 30 Mar 2026 06:00:58 +0000
Files and hashes: 1: lkdopthwizYxQ6qIEeXZdoJk718.crl (hash: k3d9Tkd+POmdlpIRzdx0R7h7wyZMVLmYhjdTCsvhiGs=)
2: y_2SHxKhfe_rgzbIS6eSd_GEWIw.roa (hash: /4b4cJ0+NGqltrpZyUr4ICghwSOnPUDvjMTMvvgLSLA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/5ea425-af1a-4e30-8bb0-bfa636877e90/1/lkdopthwizYxQ6qIEeXZdoJk718.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/5ea425-af1a-4e30-8bb0-bfa636877e90/1/lkdopthwizYxQ6qIEeXZdoJk718.mft
rsync://rpki.ripe.net/repository/DEFAULT/lkdopthwizYxQ6qIEeXZdoJk718.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:66:92:64:c1:83:0d:b1:79:cb:68:aa:60:05:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=964768a6d8708b363143aa8811e5d9768264ef5f
Validity
Not Before: Mar 29 06:00:58 2026 GMT
Not After : Mar 30 06:00:58 2026 GMT
Subject: CN=b488c8685675519a4f35fd8c567d4dd7a7711f8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:f1:a6:7a:b7:95:40:d3:38:42:e6:d0:9f:4f:
54:0b:e2:2b:1d:0a:32:35:2a:73:30:1d:f2:bb:44:
0c:7c:d2:9a:d7:d9:75:79:53:bf:ec:f6:85:10:24:
3e:b3:9f:59:7f:f0:14:a1:c1:79:88:79:a5:1f:c9:
dc:7e:9b:40:c1:bd:df:34:9e:1b:62:f3:ed:2f:91:
b2:4f:33:72:52:78:2f:d6:c6:ea:8a:b2:04:df:ec:
6e:7d:d0:d8:01:ad:3c:4d:76:db:68:cf:81:69:07:
20:62:82:55:53:8d:8c:d0:ab:b9:83:8a:3c:91:ca:
18:fc:60:1f:5f:c1:79:ca:f2:64:3c:6d:aa:ea:dd:
7d:e5:55:63:23:7e:26:e1:8c:3f:6d:bb:fc:9e:73:
54:bd:54:1b:06:b3:30:3f:0a:05:dd:52:1e:88:27:
70:07:c1:96:fe:ad:0f:4f:d7:d1:f1:c1:95:b8:c1:
ff:54:13:8a:7c:f5:6b:f4:38:44:16:f3:cb:1b:55:
9c:82:07:92:60:0e:b6:aa:67:9e:13:08:de:78:dd:
35:b7:45:97:29:64:49:a5:85:40:74:14:11:da:e2:
61:f3:c8:ad:86:f6:0c:df:72:c4:3b:18:06:28:64:
8e:63:f2:e5:f8:a5:6f:2d:d3:b9:ef:d7:df:f3:a0:
8b:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:88:C8:68:56:75:51:9A:4F:35:FD:8C:56:7D:4D:D7:A7:71:1F:8F
X509v3 Authority Key Identifier:
keyid:96:47:68:A6:D8:70:8B:36:31:43:AA:88:11:E5:D9:76:82:64:EF:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lkdopthwizYxQ6qIEeXZdoJk718.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/5ea425-af1a-4e30-8bb0-bfa636877e90/1/lkdopthwizYxQ6qIEeXZdoJk718.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/5ea425-af1a-4e30-8bb0-bfa636877e90/1/lkdopthwizYxQ6qIEeXZdoJk718.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:08:8d:42:2e:4b:13:cf:fc:32:f3:3b:0d:47:da:2d:b2:23:
e7:9e:bd:08:d4:2e:0d:cd:96:6d:e0:97:ac:36:44:34:34:cb:
30:be:f7:5d:c2:b7:0a:3a:82:9a:5a:f7:bf:d3:a3:e6:e8:22:
08:29:02:ff:8f:7d:08:8d:c2:91:08:0e:7a:6e:c7:a5:ee:ca:
45:ae:81:68:14:3c:c1:70:0c:58:bd:5e:ae:42:65:ac:ed:16:
9e:76:67:2f:55:fc:5b:cc:f9:4b:11:59:7a:88:b1:fe:ae:62:
dd:07:08:72:eb:93:c5:d5:df:df:85:94:96:0c:80:41:99:f7:
e0:7d:97:5f:9f:66:b1:b0:45:75:0d:2a:1f:99:25:52:a5:40:
3c:cc:cf:7e:92:c6:05:cc:43:1f:78:be:e2:c2:91:1a:f7:51:
f8:41:7e:c9:43:52:a2:b5:62:36:af:5e:70:b8:b0:c1:9f:99:
14:d0:c8:ca:0d:26:9b:4f:c6:61:00:28:89:9d:61:26:91:a7:
a1:89:98:8f:d7:00:74:76:b5:c6:46:9e:c6:d4:40:fc:8c:ac:
a4:67:a9:81:86:86:2a:8b:e6:e0:6b:9d:03:b1:3f:26:3e:49:
44:c0:c9:58:2f:69:e3:f6:6e:c9:06:6d:03:3d:1a:e6:95:dc:
17:0a:3d:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:28:48 2026 by rpki-client