Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/669e47-c04d-4d96-b9a0-0d50944f239e/1/LKsQ6K_fA-Sx2oV_rAUZ9JQ9vKs.mft
File: LKsQ6K_fA-Sx2oV_rAUZ9JQ9vKs.mft (raw, json)
Hash identifier: TLuzsLq4qI3kfmZyAQQjn14qT0rwdZotpKrLZir6aEA=
Subject key identifier: 93:69:0A:E3:2C:A0:D8:5B:2E:38:6F:EE:50:B7:FA:02:92:DE:81:17
Authority key identifier: 2C:AB:10:E8:AF:DF:03:E4:B1:DA:85:7F:AC:05:19:F4:94:3D:BC:AB
Certificate issuer: /CN=2cab10e8afdf03e4b1da857fac0519f4943dbcab
Certificate serial: 019D3A5483CA5A769356ABFB217B3966C2EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LKsQ6K_fA-Sx2oV_rAUZ9JQ9vKs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/669e47-c04d-4d96-b9a0-0d50944f239e/1/LKsQ6K_fA-Sx2oV_rAUZ9JQ9vKs.mft
Manifest number: 188B
Signing time: Sun 29 Mar 2026 16:01:50 +0000
Manifest this update: Sun 29 Mar 2026 16:01:50 +0000
Manifest next update: Mon 30 Mar 2026 16:01:50 +0000
Files and hashes: 1: LKsQ6K_fA-Sx2oV_rAUZ9JQ9vKs.crl (hash: GwxIyp4VScVsQuORb7NGXTOcw3Mrii4svq7xFZwUnIQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/669e47-c04d-4d96-b9a0-0d50944f239e/1/LKsQ6K_fA-Sx2oV_rAUZ9JQ9vKs.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/669e47-c04d-4d96-b9a0-0d50944f239e/1/LKsQ6K_fA-Sx2oV_rAUZ9JQ9vKs.mft
rsync://rpki.ripe.net/repository/DEFAULT/LKsQ6K_fA-Sx2oV_rAUZ9JQ9vKs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 16:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:54:83:ca:5a:76:93:56:ab:fb:21:7b:39:66:c2:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2cab10e8afdf03e4b1da857fac0519f4943dbcab
Validity
Not Before: Mar 29 16:01:50 2026 GMT
Not After : Mar 30 16:01:50 2026 GMT
Subject: CN=93690ae32ca0d85b2e386fee50b7fa0292de8117
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:b0:23:cd:aa:05:05:bd:bf:d4:04:af:e7:5f:
87:40:bf:10:43:bc:be:fa:b3:7c:73:81:10:58:ae:
eb:e6:d0:58:a1:0c:1b:b0:2d:d8:d0:05:b1:58:ee:
c1:e9:a0:4f:6a:ec:10:4c:a2:72:db:99:ae:5a:23:
df:60:0d:21:0c:cc:97:87:1c:bc:43:a4:73:10:ea:
1d:56:99:13:ec:0f:b0:78:ca:38:7f:9d:39:be:b1:
93:7e:eb:a6:20:4a:72:c9:51:61:92:87:30:4a:66:
28:64:8f:02:e0:1c:4b:d6:e0:65:d8:89:6d:e6:29:
13:0d:66:81:81:5d:6b:40:ec:10:60:6a:2b:fc:8e:
95:a1:a0:42:a2:30:87:86:f2:4d:57:cd:96:b9:10:
e8:5d:08:67:ab:31:7c:8c:a7:f9:46:a4:31:e1:2a:
02:02:30:f1:cb:56:41:bf:b6:37:77:87:f0:2e:22:
4d:a9:cf:54:6c:35:63:23:5f:65:d8:b6:cf:35:5a:
cf:c6:15:db:ae:30:b5:10:31:31:df:86:4b:97:51:
2b:e5:cb:33:f8:e2:76:5c:16:f1:c7:a5:86:3e:b4:
f4:8a:a1:23:61:85:87:55:21:28:79:8c:65:80:d4:
2f:85:05:10:c6:b5:48:8f:77:b3:e6:32:3c:6b:54:
d7:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:69:0A:E3:2C:A0:D8:5B:2E:38:6F:EE:50:B7:FA:02:92:DE:81:17
X509v3 Authority Key Identifier:
keyid:2C:AB:10:E8:AF:DF:03:E4:B1:DA:85:7F:AC:05:19:F4:94:3D:BC:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LKsQ6K_fA-Sx2oV_rAUZ9JQ9vKs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/669e47-c04d-4d96-b9a0-0d50944f239e/1/LKsQ6K_fA-Sx2oV_rAUZ9JQ9vKs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/669e47-c04d-4d96-b9a0-0d50944f239e/1/LKsQ6K_fA-Sx2oV_rAUZ9JQ9vKs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:67:58:4a:ce:35:72:0b:40:23:ff:cf:f8:9d:85:52:09:3b:
e5:c5:09:89:27:89:f9:15:33:2d:96:6a:77:4a:6a:b5:57:e0:
4e:52:99:aa:d1:fa:bd:9d:c5:82:37:a0:ee:9f:a4:47:ec:c4:
a5:90:8a:44:c6:7c:30:38:63:1e:d2:86:5f:2c:af:a2:24:64:
5f:b8:91:9a:33:9a:51:89:8c:9c:c4:01:6f:58:ea:e5:91:83:
ba:a8:1e:42:d8:cb:44:92:51:2e:9f:ef:4b:9a:f1:c5:4b:00:
f7:25:3d:01:38:ef:3e:2c:5d:b5:8d:99:be:f1:1e:72:c1:8d:
91:c2:11:43:3c:a4:89:6d:73:b9:78:af:e7:52:93:18:3d:ef:
b9:a1:0f:94:f0:b3:8a:43:b4:3c:11:cd:90:e4:00:00:6e:71:
ba:5d:8b:30:13:98:09:fd:f5:3f:66:33:67:ec:75:b6:fa:63:
61:eb:ef:51:a6:9a:1b:c1:cc:8a:1d:c4:1f:8e:5d:0f:d2:e3:
ce:5f:ef:e9:c8:82:17:e3:09:e5:39:d1:0c:86:95:a1:ba:c7:
20:6b:8e:7a:0b:17:85:83:0a:33:57:18:8d:4a:fd:86:2a:b5:
79:f8:3e:0b:d2:ab:7e:fc:bc:7e:04:11:c7:ab:2e:99:69:9f:
20:0a:97:92
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ06VIPKWnaTVqv7IXs5ZsLuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJjYWIxMGU4YWZkZjAzZTRiMWRhODU3ZmFjMDUxOWY0OTQz
ZGJjYWIwHhcNMjYwMzI5MTYwMTUwWhcNMjYwMzMwMTYwMTUwWjAzMTEwLwYDVQQD
Eyg5MzY5MGFlMzJjYTBkODViMmUzODZmZWU1MGI3ZmEwMjkyZGU4MTE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnLAjzaoFBb2/1ASv51+HQL8QQ7y+
+rN8c4EQWK7r5tBYoQwbsC3Y0AWxWO7B6aBPauwQTKJy25muWiPfYA0hDMyXhxy8
Q6RzEOodVpkT7A+weMo4f505vrGTfuumIEpyyVFhkocwSmYoZI8C4BxL1uBl2Ilt
5ikTDWaBgV1rQOwQYGor/I6VoaBCojCHhvJNV82WuRDoXQhnqzF8jKf5RqQx4SoC
AjDxy1ZBv7Y3d4fwLiJNqc9UbDVjI19l2LbPNVrPxhXbrjC1EDEx34ZLl1Er5csz
+OJ2XBbxx6WGPrT0iqEjYYWHVSEoeYxlgNQvhQUQxrVIj3ez5jI8a1TXBQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJNpCuMsoNhbLjhv7lC3+gKS3oEXMB8GA1UdIwQY
MBaAFCyrEOiv3wPksdqFf6wFGfSUPbyrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTEtzUTZLX2ZBLVN4Mm9WX3JBVVo5SlE5dktzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC82NjllNDctYzA0ZC00ZDk2LWI5YTAt
MGQ1MDk0NGYyMzllLzEvTEtzUTZLX2ZBLVN4Mm9WX3JBVVo5SlE5dktzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NC82NjllNDctYzA0ZC00ZDk2LWI5YTAtMGQ1MDk0NGYyMzll
LzEvTEtzUTZLX2ZBLVN4Mm9WX3JBVVo5SlE5dktzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfmdYSs41
cgtAI//P+J2FUgk75cUJiSeJ+RUzLZZqd0pqtVfgTlKZqtH6vZ3Fgjeg7p+kR+zE
pZCKRMZ8MDhjHtKGXyyvoiRkX7iRmjOaUYmMnMQBb1jq5ZGDuqgeQtjLRJJRLp/v
S5rxxUsA9yU9ATjvPixdtY2ZvvEecsGNkcIRQzykiW1zuXiv51KTGD3vuaEPlPCz
ikO0PBHNkOQAAG5xul2LMBOYCf31P2YzZ+x1tvpjYevvUaaaG8HMih3EH45dD9Lj
zl/v6ciCF+MJ5TnRDIaVobrHIGuOegsXhYMKM1cYjUr9hiq1efg+C9Krfvy8fgQR
x6sumWmfIAqXkg==
-----END CERTIFICATE-----
Generated at Sun Mar 29 21:22:11 2026 by rpki-client