Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/5ea425-af1a-4e30-8bb0-bfa636877e90/1/lkdopthwizYxQ6qIEeXZdoJk718.mft
File: lkdopthwizYxQ6qIEeXZdoJk718.mft (raw, json)
Hash identifier: DGZkAl3hlXC6Zx8XzJ76o2n3Vp+Q1Up1lVe5pmJK6Tk=
Subject key identifier: 8F:52:E4:71:CB:5D:07:1E:73:30:5D:43:52:9E:61:2E:ED:3B:8E:AF
Authority key identifier: 96:47:68:A6:D8:70:8B:36:31:43:AA:88:11:E5:D9:76:82:64:EF:5F
Certificate issuer: /CN=964768a6d8708b363143aa8811e5d9768264ef5f
Certificate serial: 01A002B8DFBF04DD8087E63935E8AF1EA998
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lkdopthwizYxQ6qIEeXZdoJk718.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/5ea425-af1a-4e30-8bb0-bfa636877e90/1/lkdopthwizYxQ6qIEeXZdoJk718.mft
Manifest number: 1A00
Signing time: Sat 15 Aug 2026 00:01:05 +0000
Manifest this update: Sat 15 Aug 2026 00:01:05 +0000
Manifest next update: Sun 16 Aug 2026 00:01:05 +0000
Files and hashes: 1: lkdopthwizYxQ6qIEeXZdoJk718.crl (hash: RLsszQkAE8GvJPLBF+rjufRms5FTI3NMmbUsVQI5V8o=)
2: y_2SHxKhfe_rgzbIS6eSd_GEWIw.roa (hash: /4b4cJ0+NGqltrpZyUr4ICghwSOnPUDvjMTMvvgLSLA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/5ea425-af1a-4e30-8bb0-bfa636877e90/1/lkdopthwizYxQ6qIEeXZdoJk718.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/5ea425-af1a-4e30-8bb0-bfa636877e90/1/lkdopthwizYxQ6qIEeXZdoJk718.mft
rsync://rpki.ripe.net/repository/DEFAULT/lkdopthwizYxQ6qIEeXZdoJk718.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Aug 2026 00:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:02:b8:df:bf:04:dd:80:87:e6:39:35:e8:af:1e:a9:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=964768a6d8708b363143aa8811e5d9768264ef5f
Validity
Not Before: Aug 15 00:01:05 2026 GMT
Not After : Aug 16 00:01:05 2026 GMT
Subject: CN=8f52e471cb5d071e73305d43529e612eed3b8eaf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:fa:96:fd:f8:b0:97:ff:62:16:48:b6:07:be:
a8:95:dc:a7:05:f2:96:13:75:e9:aa:46:fb:7b:ce:
83:85:4b:ca:89:7c:f4:19:8c:d5:84:2b:76:78:21:
e0:39:e1:05:4b:34:ee:fc:ed:21:36:ab:a3:67:95:
48:42:f4:0a:6d:3d:ef:7f:3a:a4:8d:fc:50:5f:4e:
8e:3c:a4:1d:c6:34:5a:48:74:f2:38:37:0f:b6:83:
b8:d6:e2:60:69:2d:a4:d9:a8:7d:87:75:f1:91:44:
33:5d:38:4f:dc:cb:1b:af:57:c4:43:c6:99:a2:f1:
2e:44:59:ee:2c:9c:77:3c:74:8d:fc:b9:71:17:5f:
91:42:34:c3:1e:13:61:80:16:ce:e2:01:4d:d5:5b:
a7:9e:8a:96:f1:98:3b:1b:31:f2:5d:f7:21:9b:94:
43:af:9f:77:8c:19:87:94:51:b0:56:86:fb:2b:81:
cf:e2:6d:76:7c:a9:8e:f1:77:f0:f2:73:7a:c8:b4:
d7:68:07:64:9e:5a:50:a1:6e:99:67:55:a4:03:b7:
22:37:4b:ee:ad:15:d8:c9:bc:95:fb:e1:79:45:39:
3e:ba:4d:62:67:27:ea:9c:37:85:06:54:82:c1:46:
35:c2:39:64:14:ad:4a:7b:cf:59:99:41:e2:03:44:
f4:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:52:E4:71:CB:5D:07:1E:73:30:5D:43:52:9E:61:2E:ED:3B:8E:AF
X509v3 Authority Key Identifier:
keyid:96:47:68:A6:D8:70:8B:36:31:43:AA:88:11:E5:D9:76:82:64:EF:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lkdopthwizYxQ6qIEeXZdoJk718.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/5ea425-af1a-4e30-8bb0-bfa636877e90/1/lkdopthwizYxQ6qIEeXZdoJk718.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/5ea425-af1a-4e30-8bb0-bfa636877e90/1/lkdopthwizYxQ6qIEeXZdoJk718.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:1f:98:91:2a:90:33:f4:5f:d8:33:2d:7d:23:c3:f1:23:27:
0d:c0:b4:8b:4a:ad:c1:78:32:aa:23:31:bd:1b:1b:a7:cf:85:
bf:81:34:31:fa:b6:f5:f1:fd:e5:80:72:3c:e5:0f:11:c4:48:
3e:f2:7c:d8:df:8a:91:5c:01:d3:7c:b9:b1:6e:b2:cd:7f:c2:
d6:7a:f2:ab:b8:8d:25:51:71:36:2f:9b:dd:55:cb:84:e1:a3:
92:07:ba:6c:25:3a:ef:b5:aa:3b:9c:bd:6e:9e:5c:d4:f5:db:
50:b2:3d:65:73:56:2a:5c:82:33:32:94:05:1a:2a:f0:df:da:
75:bb:9b:fa:3f:41:5b:34:ef:a4:46:6c:4d:65:f7:f7:93:30:
0d:60:21:4c:ac:5e:02:d5:b7:a2:0f:88:01:9a:79:9c:09:79:
ac:e6:76:72:61:42:e1:30:f5:74:1a:2f:7d:a0:28:33:3d:03:
b9:a7:d9:63:b0:13:15:f3:ff:15:3a:79:b7:bd:73:51:ea:3f:
05:3b:c7:7a:df:4b:2b:14:32:0e:6c:05:f7:49:32:2d:51:34:
f0:86:09:0b:2f:a1:19:47:66:29:75:f4:eb:36:8e:c9:b0:7e:
82:b6:39:a7:08:d4:d7:9e:da:53:38:e5:5e:5c:c7:f5:6b:c5:
df:e6:2e:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 04:22:42 2026 by rpki-client