Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/5ea425-af1a-4e30-8bb0-bfa636877e90/1/lkdopthwizYxQ6qIEeXZdoJk718.mft
File: lkdopthwizYxQ6qIEeXZdoJk718.mft (raw, json)
Hash identifier: IMulVaiC3ZKZdoYCowV/b+unvsbC7AzLX3hlZ9sgcII=
Subject key identifier: 0A:8F:1A:E0:84:32:A8:A8:2C:AA:A6:24:A1:4A:B1:E6:B1:24:51:48
Authority key identifier: 96:47:68:A6:D8:70:8B:36:31:43:AA:88:11:E5:D9:76:82:64:EF:5F
Certificate issuer: /CN=964768a6d8708b363143aa8811e5d9768264ef5f
Certificate serial: 019F190D2C11A9BF2E9792C59C11955A1FAF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lkdopthwizYxQ6qIEeXZdoJk718.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/5ea425-af1a-4e30-8bb0-bfa636877e90/1/lkdopthwizYxQ6qIEeXZdoJk718.mft
Manifest number: 1987
Signing time: Tue 30 Jun 2026 15:02:01 +0000
Manifest this update: Tue 30 Jun 2026 15:02:01 +0000
Manifest next update: Wed 01 Jul 2026 15:02:01 +0000
Files and hashes: 1: lkdopthwizYxQ6qIEeXZdoJk718.crl (hash: I3Yo8VyPYNKX7cn7XuHDsOo3VPNyJJ80x8fZtn7hL5U=)
2: y_2SHxKhfe_rgzbIS6eSd_GEWIw.roa (hash: /4b4cJ0+NGqltrpZyUr4ICghwSOnPUDvjMTMvvgLSLA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/5ea425-af1a-4e30-8bb0-bfa636877e90/1/lkdopthwizYxQ6qIEeXZdoJk718.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/5ea425-af1a-4e30-8bb0-bfa636877e90/1/lkdopthwizYxQ6qIEeXZdoJk718.mft
rsync://rpki.ripe.net/repository/DEFAULT/lkdopthwizYxQ6qIEeXZdoJk718.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 14:31:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:19:0d:2c:11:a9:bf:2e:97:92:c5:9c:11:95:5a:1f:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=964768a6d8708b363143aa8811e5d9768264ef5f
Validity
Not Before: Jun 30 15:02:01 2026 GMT
Not After : Jul 1 15:02:01 2026 GMT
Subject: CN=0a8f1ae08432a8a82caaa624a14ab1e6b1245148
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:15:dd:de:33:97:d7:96:3f:86:66:0a:1f:cc:
53:3c:09:25:ef:00:aa:e4:67:9a:92:8b:0a:ee:b8:
42:6e:ef:44:38:b3:bf:2a:19:63:a5:2f:42:7c:bc:
61:34:c9:9f:5c:54:40:7f:30:6f:c0:65:21:7f:da:
e8:12:a2:12:a7:57:84:c2:20:f5:97:cb:c0:87:cb:
54:c6:a7:42:38:89:58:79:72:e9:31:11:52:80:03:
a5:e3:26:92:69:0f:68:2e:06:fa:a2:f5:c5:a9:ed:
be:a9:c9:47:4a:fa:7b:67:f3:3e:ec:90:85:c2:fc:
d7:49:29:70:56:c4:d7:a9:0f:7f:02:82:9c:f1:3a:
e8:d4:d4:e5:8e:b1:a0:2e:33:20:96:a9:87:60:cf:
e5:65:ac:1b:8c:d9:38:db:30:49:03:a6:4d:b5:40:
08:5d:b4:de:03:04:48:ca:24:dc:c9:e9:da:68:92:
2e:21:8d:4c:1d:bd:eb:c9:33:6b:0d:09:dd:70:4c:
5d:fc:b7:8d:bc:94:53:37:03:8d:a5:b5:dd:65:4c:
c6:5b:94:ed:2e:f6:32:92:68:bc:38:f7:e6:4b:bb:
95:4c:d3:fc:6d:fc:e0:75:13:a5:75:5c:67:ce:e1:
0b:71:25:4d:fd:33:98:e9:e5:24:7a:ba:ac:89:e5:
06:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:8F:1A:E0:84:32:A8:A8:2C:AA:A6:24:A1:4A:B1:E6:B1:24:51:48
X509v3 Authority Key Identifier:
keyid:96:47:68:A6:D8:70:8B:36:31:43:AA:88:11:E5:D9:76:82:64:EF:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lkdopthwizYxQ6qIEeXZdoJk718.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/5ea425-af1a-4e30-8bb0-bfa636877e90/1/lkdopthwizYxQ6qIEeXZdoJk718.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/5ea425-af1a-4e30-8bb0-bfa636877e90/1/lkdopthwizYxQ6qIEeXZdoJk718.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:fb:a7:94:83:bd:7f:2e:d3:f8:f7:49:55:60:30:0a:e9:c3:
a0:83:b0:c0:34:b2:88:f4:33:b8:c4:7f:4f:0d:4b:21:f6:d3:
6f:5f:ae:db:a7:d8:d4:c1:5b:40:a1:e4:8f:80:79:65:05:8f:
13:fc:d1:e5:bd:47:9b:bc:c8:c4:69:de:19:22:4c:5e:d9:09:
d5:3b:6a:23:71:b9:90:67:78:50:e9:64:06:af:c2:df:d2:07:
87:8c:d0:32:21:21:a9:b2:37:83:61:2b:38:21:0a:97:d4:65:
82:35:87:71:3b:95:f1:fe:73:8a:bd:8e:e8:40:7c:ff:ee:bb:
97:a8:76:65:3c:2c:31:54:7a:47:64:03:2d:59:71:0d:dd:db:
c6:99:38:b0:3e:c6:2b:8a:b9:7a:46:8c:c7:66:92:fe:00:84:
ac:ca:5f:d1:24:bd:74:ae:92:b0:fd:0b:45:93:5a:bc:45:85:
01:04:8e:3b:dc:74:f6:59:90:0a:8b:c7:3c:d5:5c:36:71:b8:
28:ca:9e:9e:4e:0b:95:d6:83:3d:47:39:9d:ed:db:c1:74:be:
b6:a5:dd:8d:f7:33:c0:0b:1e:10:cc:ca:9d:2d:0f:f7:55:57:
b1:a4:56:15:90:3a:79:d1:d1:82:99:85:26:b5:42:8b:4c:3d:
6c:cd:3b:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 22:40:46 2026 by rpki-client