
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/5ea425-af1a-4e30-8bb0-bfa636877e90/1/lkdopthwizYxQ6qIEeXZdoJk718.mft
File: lkdopthwizYxQ6qIEeXZdoJk718.mft (raw, json)
Hash identifier: HwBz4ezza2NIb6dOaSChOcq2BBBCrHiDE7je4zzZj+w=
Subject key identifier: 73:21:86:3D:25:16:55:0B:68:27:13:6D:F1:0A:C2:BD:E7:C5:FB:DB
Authority key identifier: 96:47:68:A6:D8:70:8B:36:31:43:AA:88:11:E5:D9:76:82:64:EF:5F
Certificate issuer: /CN=964768a6d8708b363143aa8811e5d9768264ef5f
Certificate serial: 019E314E0A0A21CC1EFF097F0BFF5B97873B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lkdopthwizYxQ6qIEeXZdoJk718.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/5ea425-af1a-4e30-8bb0-bfa636877e90/1/lkdopthwizYxQ6qIEeXZdoJk718.mft
Manifest number: 190F
Signing time: Sat 16 May 2026 15:00:58 +0000
Manifest this update: Sat 16 May 2026 15:00:58 +0000
Manifest next update: Sun 17 May 2026 15:00:58 +0000
Files and hashes: 1: lkdopthwizYxQ6qIEeXZdoJk718.crl (hash: IQ1WzvZN28VSLvobG9mWI+gLhXFbrPw06IenoJaXm2E=)
2: y_2SHxKhfe_rgzbIS6eSd_GEWIw.roa (hash: /4b4cJ0+NGqltrpZyUr4ICghwSOnPUDvjMTMvvgLSLA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/5ea425-af1a-4e30-8bb0-bfa636877e90/1/lkdopthwizYxQ6qIEeXZdoJk718.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/5ea425-af1a-4e30-8bb0-bfa636877e90/1/lkdopthwizYxQ6qIEeXZdoJk718.mft
rsync://rpki.ripe.net/repository/DEFAULT/lkdopthwizYxQ6qIEeXZdoJk718.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 12:40:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:31:4e:0a:0a:21:cc:1e:ff:09:7f:0b:ff:5b:97:87:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=964768a6d8708b363143aa8811e5d9768264ef5f
Validity
Not Before: May 16 15:00:58 2026 GMT
Not After : May 17 15:00:58 2026 GMT
Subject: CN=7321863d2516550b6827136df10ac2bde7c5fbdb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:7c:cd:05:31:1c:f0:1f:37:cc:12:97:cb:90:
6b:46:03:bd:94:58:34:72:14:27:e4:7b:df:f6:e0:
74:3f:72:a4:da:72:ba:00:a3:0d:16:cc:10:9d:07:
b3:ef:c0:eb:3c:59:d7:59:3f:9f:12:06:46:13:0f:
3f:c4:bc:a9:c2:87:0f:b8:e3:a7:09:88:b1:3a:94:
64:62:ab:54:a5:3c:62:11:52:c1:a7:3b:ea:86:a1:
d1:ac:df:e7:f4:39:c6:1a:f9:35:86:b0:24:70:fc:
e4:5d:13:84:85:58:98:26:b7:75:44:85:92:c5:db:
9c:87:1f:c0:a8:fa:41:c0:15:1a:cb:56:71:b3:28:
42:19:28:a0:27:61:d6:9c:ec:81:01:f6:b8:c4:92:
ea:2a:32:61:dd:c3:a9:11:ca:43:67:f2:db:7d:51:
00:5c:47:0f:03:07:79:7d:97:5f:c1:b1:fe:62:2c:
bc:95:1b:ac:1c:18:f5:02:3f:ba:57:e4:46:c7:a6:
86:9f:88:cb:54:b2:03:b1:d0:f7:20:f3:62:fb:a8:
2c:bc:25:55:b6:3a:af:64:e0:b6:52:7d:d5:6e:bd:
db:52:53:e4:07:6f:61:cd:99:41:9b:00:8d:cc:1e:
43:3b:9e:15:79:8d:9a:7e:45:8f:4a:20:1d:cd:d5:
b6:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:21:86:3D:25:16:55:0B:68:27:13:6D:F1:0A:C2:BD:E7:C5:FB:DB
X509v3 Authority Key Identifier:
keyid:96:47:68:A6:D8:70:8B:36:31:43:AA:88:11:E5:D9:76:82:64:EF:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lkdopthwizYxQ6qIEeXZdoJk718.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/5ea425-af1a-4e30-8bb0-bfa636877e90/1/lkdopthwizYxQ6qIEeXZdoJk718.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/5ea425-af1a-4e30-8bb0-bfa636877e90/1/lkdopthwizYxQ6qIEeXZdoJk718.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:b8:0a:b8:f0:ab:e3:c5:7c:af:6b:ed:54:1e:2a:e0:9d:eb:
7b:e3:4e:85:e3:2c:b5:1d:42:c5:67:bf:d9:01:76:18:da:29:
91:85:9d:69:d3:32:69:62:79:e5:5e:86:12:18:df:17:4d:f9:
2f:9d:c9:1b:49:b6:8c:df:fe:de:29:d3:bd:2e:b3:05:69:15:
19:af:c0:b7:26:7f:fb:b6:d9:ed:e8:23:21:9e:a4:fa:0f:19:
dc:e4:44:8c:68:34:4e:ba:90:5e:56:bc:74:c3:25:0a:f9:e8:
7c:7e:80:8d:b8:77:1f:d1:be:fc:20:91:90:64:1c:e1:5e:e9:
20:af:e6:f9:9e:5b:29:5c:62:77:ed:8f:01:e3:59:69:0b:7a:
56:48:b9:1c:07:6e:59:2f:16:69:5a:22:4d:be:a1:17:c5:c4:
7c:08:af:e4:f3:24:52:9e:28:50:b6:bd:41:29:e5:07:db:af:
b6:98:a6:97:8e:c9:d7:4d:42:4e:5d:fd:ce:9f:06:73:49:c0:
4d:89:00:ff:4c:ee:d9:5a:d4:84:7d:e2:ef:0d:dd:b2:d8:ca:
48:3a:ba:e8:da:f9:55:df:bb:a4:c9:10:44:d4:67:4f:e7:f6:
b0:3a:07:92:9d:8e:47:de:9a:1c:88:49:6b:05:1d:8c:c1:13:
98:78:75:c8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4xTgoKIcwe/wl/C/9bl4c7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk2NDc2OGE2ZDg3MDhiMzYzMTQzYWE4ODExZTVkOTc2ODI2
NGVmNWYwHhcNMjYwNTE2MTUwMDU4WhcNMjYwNTE3MTUwMDU4WjAzMTEwLwYDVQQD
Eyg3MzIxODYzZDI1MTY1NTBiNjgyNzEzNmRmMTBhYzJiZGU3YzVmYmRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqHzNBTEc8B83zBKXy5BrRgO9lFg0
chQn5Hvf9uB0P3Kk2nK6AKMNFswQnQez78DrPFnXWT+fEgZGEw8/xLypwocPuOOn
CYixOpRkYqtUpTxiEVLBpzvqhqHRrN/n9DnGGvk1hrAkcPzkXROEhViYJrd1RIWS
xduchx/AqPpBwBUay1ZxsyhCGSigJ2HWnOyBAfa4xJLqKjJh3cOpEcpDZ/LbfVEA
XEcPAwd5fZdfwbH+Yiy8lRusHBj1Aj+6V+RGx6aGn4jLVLIDsdD3IPNi+6gsvCVV
tjqvZOC2Un3Vbr3bUlPkB29hzZlBmwCNzB5DO54VeY2afkWPSiAdzdW2mQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHMhhj0lFlULaCcTbfEKwr3nxfvbMB8GA1UdIwQY
MBaAFJZHaKbYcIs2MUOqiBHl2XaCZO9fMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbGtkb3B0aHdpell4UTZxSUVlWFpkb0prNzE4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC81ZWE0MjUtYWYxYS00ZTMwLThiYjAt
YmZhNjM2ODc3ZTkwLzEvbGtkb3B0aHdpell4UTZxSUVlWFpkb0prNzE4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OC81ZWE0MjUtYWYxYS00ZTMwLThiYjAtYmZhNjM2ODc3ZTkw
LzEvbGtkb3B0aHdpell4UTZxSUVlWFpkb0prNzE4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAl7gKuPCr
48V8r2vtVB4q4J3re+NOheMstR1CxWe/2QF2GNopkYWdadMyaWJ55V6GEhjfF035
L53JG0m2jN/+3inTvS6zBWkVGa/AtyZ/+7bZ7egjIZ6k+g8Z3OREjGg0TrqQXla8
dMMlCvnofH6Ajbh3H9G+/CCRkGQc4V7pIK/m+Z5bKVxid+2PAeNZaQt6Vki5HAdu
WS8WaVoiTb6hF8XEfAiv5PMkUp4oULa9QSnlB9uvtpiml47J101CTl39zp8Gc0nA
TYkA/0zu2VrUhH3i7w3dstjKSDq66Nr5Vd+7pMkQRNRnT+f2sDoHkp2OR96aHIhJ
awUdjMETmHh1yA==
-----END CERTIFICATE-----
Generated at Sat May 16 21:12:45 2026 by rpki-client