Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/4ee734-efe8-41a1-80df-16afba987b06/1/lkSOhA0nKj4xWRktHfEfEA5Qb2o.mft
File: lkSOhA0nKj4xWRktHfEfEA5Qb2o.mft (raw, json)
Hash identifier: AZQLj7Rc0BLRod6fIaHHueZ0hctHtFpoSnx0KMnxlTk=
Subject key identifier: 5E:E5:A4:5A:94:20:61:2D:99:7A:94:8F:F8:22:A8:DD:BA:8C:12:E4
Authority key identifier: 96:44:8E:84:0D:27:2A:3E:31:59:19:2D:1D:F1:1F:10:0E:50:6F:6A
Certificate issuer: /CN=96448e840d272a3e3159192d1df11f100e506f6a
Certificate serial: 019D37F7332F531E72C78E18A78F94E2C59A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lkSOhA0nKj4xWRktHfEfEA5Qb2o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/4ee734-efe8-41a1-80df-16afba987b06/1/lkSOhA0nKj4xWRktHfEfEA5Qb2o.mft
Manifest number: 0AB9
Signing time: Sun 29 Mar 2026 05:00:40 +0000
Manifest this update: Sun 29 Mar 2026 05:00:40 +0000
Manifest next update: Mon 30 Mar 2026 05:00:40 +0000
Files and hashes: 1: gtKo7QAi2WcSoZ12HmBm24qw-r4.roa (hash: qnaglWaJ+iAOcdqIITkJYy4ZOlNoiaJCiuIcC9Lr3R4=)
2: lkSOhA0nKj4xWRktHfEfEA5Qb2o.crl (hash: LvxBnSe8k1xKUWI0k1gC3gQg00tSrctLDkKynZOvDm4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/4ee734-efe8-41a1-80df-16afba987b06/1/lkSOhA0nKj4xWRktHfEfEA5Qb2o.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/4ee734-efe8-41a1-80df-16afba987b06/1/lkSOhA0nKj4xWRktHfEfEA5Qb2o.mft
rsync://rpki.ripe.net/repository/DEFAULT/lkSOhA0nKj4xWRktHfEfEA5Qb2o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f7:33:2f:53:1e:72:c7:8e:18:a7:8f:94:e2:c5:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96448e840d272a3e3159192d1df11f100e506f6a
Validity
Not Before: Mar 29 05:00:40 2026 GMT
Not After : Mar 30 05:00:40 2026 GMT
Subject: CN=5ee5a45a9420612d997a948ff822a8ddba8c12e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:f3:bd:55:cd:26:f1:43:6b:92:27:d0:7f:12:
29:8c:c6:7a:ce:3e:32:eb:43:5b:cc:fe:d8:a4:38:
68:61:cd:7c:a2:41:3d:04:14:df:fb:a8:de:19:fd:
18:eb:cc:26:4d:2a:c0:42:f5:65:b3:24:b3:50:74:
1f:aa:13:53:1f:f0:14:e7:51:dc:de:ab:eb:0f:73:
3c:75:0c:d4:69:40:92:e5:e2:7d:c9:f0:a3:b5:53:
6a:95:94:d0:12:7b:46:28:2e:aa:74:94:49:44:ae:
97:76:75:e5:b7:e1:5d:ac:83:5e:8a:56:06:e0:0d:
1e:e7:d4:e1:b7:c9:a2:e4:33:47:e2:7e:99:50:02:
2f:8c:72:15:a6:f8:28:44:fd:cd:b3:a1:87:df:b0:
64:3e:e3:cb:30:87:89:19:81:9e:3b:e3:79:c6:ee:
b1:c9:b5:71:76:90:93:a5:69:b8:05:d1:74:11:f8:
23:98:25:d0:a2:2c:b2:9a:19:5f:02:08:28:83:fb:
be:7a:1a:e6:1b:b8:7a:26:41:44:de:96:ed:60:22:
9b:54:f2:74:98:bd:18:22:9e:6d:9d:4f:59:27:69:
0b:1c:af:10:0d:05:1e:8a:d8:a4:05:1b:6b:8d:17:
46:74:41:76:01:9e:f7:5b:48:c6:34:98:bb:64:67:
17:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:E5:A4:5A:94:20:61:2D:99:7A:94:8F:F8:22:A8:DD:BA:8C:12:E4
X509v3 Authority Key Identifier:
keyid:96:44:8E:84:0D:27:2A:3E:31:59:19:2D:1D:F1:1F:10:0E:50:6F:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lkSOhA0nKj4xWRktHfEfEA5Qb2o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/4ee734-efe8-41a1-80df-16afba987b06/1/lkSOhA0nKj4xWRktHfEfEA5Qb2o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/4ee734-efe8-41a1-80df-16afba987b06/1/lkSOhA0nKj4xWRktHfEfEA5Qb2o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:e2:4a:24:4e:18:90:96:e0:ff:20:b1:29:d9:ea:70:4c:51:
24:33:0d:2f:41:be:38:04:08:8b:5e:1f:83:dc:bf:28:21:39:
f8:2b:2b:27:a8:16:b1:d7:a8:03:5e:7a:88:ff:a7:c8:d1:c9:
a5:b7:03:5a:95:bf:bf:0a:f8:82:20:17:51:18:26:7d:e8:df:
19:c9:aa:66:15:87:e4:38:2b:ca:80:bf:b2:65:f4:ce:94:08:
36:aa:56:91:40:f2:ce:59:57:4c:4d:64:74:da:cf:53:44:4e:
70:fd:25:61:63:31:b0:5a:bc:e4:8a:8b:d4:4b:01:69:8a:09:
51:a5:d7:b5:90:25:22:93:c7:ee:54:71:2e:fa:24:31:cf:a9:
9c:35:91:b8:c4:99:64:07:aa:97:04:af:05:cd:48:ad:91:af:
62:aa:1a:0c:76:5c:fc:32:81:0e:b4:bf:87:f6:58:d5:3e:ea:
a3:e7:63:bd:73:f1:c4:44:07:63:b9:a0:d5:6a:c9:7f:ae:1d:
0f:fc:d1:c4:37:59:67:2f:ea:50:57:a6:c7:bf:92:35:d6:34:
95:ca:3d:0e:14:3f:85:0b:88:89:3c:f6:19:07:91:a1:79:57:
3e:d1:d6:3d:6c:d2:8d:aa:47:fb:e8:68:75:9b:bb:53:b1:70:
61:41:1a:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:46:07 2026 by rpki-client