Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/a53bb6-66c0-4861-b288-2a6372e054d2/1/LkvU7cop1Ocr6GztC3rWUsfSYck.mft
File: LkvU7cop1Ocr6GztC3rWUsfSYck.mft (raw, json)
Hash identifier: yfG6ZFig62LWrJ3100RPNAYhXSCgXXDaF/BvW9wxz6A=
Subject key identifier: E5:B7:EC:3E:6F:62:E7:EF:7B:0A:BF:42:76:A0:85:6B:27:B8:B0:1E
Authority key identifier: 2E:4B:D4:ED:CA:29:D4:E7:2B:E8:6C:ED:0B:7A:D6:52:C7:D2:61:C9
Certificate issuer: /CN=2e4bd4edca29d4e72be86ced0b7ad652c7d261c9
Certificate serial: 019C9362BB0745BC292470AB856B6B511BB9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LkvU7cop1Ocr6GztC3rWUsfSYck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/a53bb6-66c0-4861-b288-2a6372e054d2/1/LkvU7cop1Ocr6GztC3rWUsfSYck.mft
Manifest number: 1842
Signing time: Wed 25 Feb 2026 06:00:46 +0000
Manifest this update: Wed 25 Feb 2026 06:00:46 +0000
Manifest next update: Thu 26 Feb 2026 06:00:46 +0000
Files and hashes: 1: LkvU7cop1Ocr6GztC3rWUsfSYck.crl (hash: Q5hakbg5LBE0H28vC6aax5yf5W5OOxl2vcJR76NlA68=)
2: csavTgWbEnAnj2FE7wmf-6_xsDo.roa (hash: NZc1W28oYgzZGInvZ1xUa3lyDRZmfm8SXHqRaJX4eiA=)
3: kciLrIkaNokpbwgdgmqHhosEQAA.roa (hash: lRqsBb/ckM2u20pZEo0aziVALwxR00NbO8g2ocSg11k=)
4: rDqpWECW0pza-2J9_z5v1QcmMYM.roa (hash: BlCKHTq9I2NrgHH11AE9oJ3PcBo5UMsZimSMaB2XjYs=)
5: tGV4YPNnQsDRzdIlgaAMjflbyZc.roa (hash: mek/U6Kf3m68n3h5nQGxZ1IWYVE3zIoWHPx7TmOAqIM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/a53bb6-66c0-4861-b288-2a6372e054d2/1/LkvU7cop1Ocr6GztC3rWUsfSYck.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/a53bb6-66c0-4861-b288-2a6372e054d2/1/LkvU7cop1Ocr6GztC3rWUsfSYck.mft
rsync://rpki.ripe.net/repository/DEFAULT/LkvU7cop1Ocr6GztC3rWUsfSYck.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Feb 2026 06:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:93:62:bb:07:45:bc:29:24:70:ab:85:6b:6b:51:1b:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e4bd4edca29d4e72be86ced0b7ad652c7d261c9
Validity
Not Before: Feb 25 06:00:46 2026 GMT
Not After : Feb 26 06:00:46 2026 GMT
Subject: CN=e5b7ec3e6f62e7ef7b0abf4276a0856b27b8b01e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:40:7a:d7:a7:54:60:ab:4c:59:9d:90:4d:8e:
15:15:b7:d3:8a:14:6c:a1:0b:04:97:cb:08:b2:fc:
73:b1:44:70:0c:34:9e:de:c4:bb:86:1a:e2:48:70:
2f:d0:98:90:35:32:80:bc:a2:d9:c9:fc:0a:7b:a4:
75:39:8c:7e:3c:0c:86:02:61:a8:c6:ca:24:25:79:
1f:6f:9c:cd:99:2c:62:88:15:d6:1b:94:c3:82:be:
a7:44:ac:15:97:3e:9a:ab:c8:c9:a7:2e:9e:55:38:
8e:59:9a:8e:84:0b:f5:28:37:c8:5a:38:b3:c6:62:
3c:60:0b:f0:69:e2:70:40:30:58:d5:90:ba:af:99:
ea:55:d4:5e:3d:e0:63:64:c5:10:f5:03:53:84:2d:
fe:34:5f:36:cd:87:eb:63:c6:20:c9:26:91:cc:1e:
8f:b4:8b:12:42:f1:d3:43:ff:81:fa:98:07:ec:0d:
5b:65:bb:c8:0e:0e:5b:b1:fe:b2:e0:f9:a7:14:5d:
83:8c:d6:28:85:f7:77:e6:d4:b2:05:49:f8:2a:d0:
fb:6a:e0:91:24:56:a8:91:68:48:94:ba:df:ea:0b:
70:24:62:66:86:46:1f:3d:55:1e:fe:96:91:b2:76:
3a:fc:c9:ed:74:63:b7:0d:a2:48:33:33:90:3f:ee:
46:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:B7:EC:3E:6F:62:E7:EF:7B:0A:BF:42:76:A0:85:6B:27:B8:B0:1E
X509v3 Authority Key Identifier:
keyid:2E:4B:D4:ED:CA:29:D4:E7:2B:E8:6C:ED:0B:7A:D6:52:C7:D2:61:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LkvU7cop1Ocr6GztC3rWUsfSYck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/a53bb6-66c0-4861-b288-2a6372e054d2/1/LkvU7cop1Ocr6GztC3rWUsfSYck.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/a53bb6-66c0-4861-b288-2a6372e054d2/1/LkvU7cop1Ocr6GztC3rWUsfSYck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:2d:cf:54:64:4a:c8:7a:fd:6a:32:c8:61:d8:d1:c0:17:43:
66:91:ba:49:03:ca:34:98:0d:04:f1:46:a3:f6:e9:fe:42:86:
83:e8:43:8b:00:1d:0a:46:25:15:aa:a2:68:12:98:8e:d1:cd:
e0:42:4c:7e:93:7b:79:05:d2:6d:b3:94:76:d4:d9:7b:f4:05:
15:70:8a:37:2a:88:e8:c0:ed:e9:1b:e1:81:b3:f8:73:4c:a6:
87:24:9b:6d:f9:d7:56:72:4b:a9:eb:dc:36:7c:ab:39:fe:dc:
df:62:8a:d6:b8:5a:2c:6c:63:9d:91:72:8a:4a:b9:b4:f0:5b:
58:84:90:88:bf:7f:75:d6:d3:5f:e0:ed:0a:17:97:10:4b:f0:
b3:7c:b0:53:75:cf:33:78:cc:69:c7:ff:4b:0d:e6:a2:5a:57:
b6:13:f3:2c:b8:62:d3:18:e3:d9:cf:d8:a4:b6:aa:93:de:7c:
50:82:cc:5c:77:36:12:62:db:6a:e0:8b:46:39:9e:0e:c1:b9:
0d:9e:16:7f:4e:19:49:40:c5:c7:0b:21:49:ce:4e:00:9d:90:
c8:b7:0e:cd:74:66:b7:f9:bc:a2:a2:17:9b:fe:3c:de:31:9e:
1d:81:56:c8:12:15:98:40:9d:a1:c1:9e:73:7a:33:9c:11:a2:
11:4b:7d:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 25 12:34:16 2026 by rpki-client