Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/a53bb6-66c0-4861-b288-2a6372e054d2/1/LkvU7cop1Ocr6GztC3rWUsfSYck.mft
File: LkvU7cop1Ocr6GztC3rWUsfSYck.mft (raw, json)
Hash identifier: 3JckZq8MYe7oyh0W7eDUB4BUeAfj1EKsc1S2s5prg34=
Subject key identifier: B6:3E:2F:A8:C8:91:5A:93:EE:5F:33:49:08:10:BD:E2:AF:5A:FD:9D
Authority key identifier: 2E:4B:D4:ED:CA:29:D4:E7:2B:E8:6C:ED:0B:7A:D6:52:C7:D2:61:C9
Certificate issuer: /CN=2e4bd4edca29d4e72be86ced0b7ad652c7d261c9
Certificate serial: 01A01FB0C2F040D51ACE376E0C693B8863AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LkvU7cop1Ocr6GztC3rWUsfSYck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/a53bb6-66c0-4861-b288-2a6372e054d2/1/LkvU7cop1Ocr6GztC3rWUsfSYck.mft
Manifest number: 1A1B
Signing time: Thu 20 Aug 2026 15:01:12 +0000
Manifest this update: Thu 20 Aug 2026 15:01:12 +0000
Manifest next update: Fri 21 Aug 2026 15:01:12 +0000
Files and hashes: 1: 9TWBsQcYt_3DqrpIxhr7ZchkbEs.roa (hash: S+4/zNMH2kmuHN+0Pj1sw0CtTfECJrrhZmhXHKALpLQ=)
2: LkvU7cop1Ocr6GztC3rWUsfSYck.crl (hash: ZlzCktYIKO4ranmLS+XoO/kBGqToj/KLeBRITbthTkI=)
3: csavTgWbEnAnj2FE7wmf-6_xsDo.roa (hash: NZc1W28oYgzZGInvZ1xUa3lyDRZmfm8SXHqRaJX4eiA=)
4: hWYYYTPX5BW-YlQJP7a7zSBSnAs.roa (hash: KB7u9iqoxD3Dcgosf4P5H0oRDToXUib7RpHigbMrFSE=)
5: kciLrIkaNokpbwgdgmqHhosEQAA.roa (hash: lRqsBb/ckM2u20pZEo0aziVALwxR00NbO8g2ocSg11k=)
6: t2zUFpxy4LQGct9r9ZJ0asDpLFw.roa (hash: 024FwN2O3pbhYVF2lJCnVAQHX9MDtHOalE1ahWO/jyA=)
7: tGV4YPNnQsDRzdIlgaAMjflbyZc.roa (hash: mek/U6Kf3m68n3h5nQGxZ1IWYVE3zIoWHPx7TmOAqIM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/a53bb6-66c0-4861-b288-2a6372e054d2/1/LkvU7cop1Ocr6GztC3rWUsfSYck.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/a53bb6-66c0-4861-b288-2a6372e054d2/1/LkvU7cop1Ocr6GztC3rWUsfSYck.mft
rsync://rpki.ripe.net/repository/DEFAULT/LkvU7cop1Ocr6GztC3rWUsfSYck.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 21 Aug 2026 13:32:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:1f:b0:c2:f0:40:d5:1a:ce:37:6e:0c:69:3b:88:63:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e4bd4edca29d4e72be86ced0b7ad652c7d261c9
Validity
Not Before: Aug 20 15:01:12 2026 GMT
Not After : Aug 21 15:01:12 2026 GMT
Subject: CN=b63e2fa8c8915a93ee5f33490810bde2af5afd9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:25:25:03:6e:af:af:30:1b:eb:02:58:11:3a:
9e:b8:85:e8:b1:23:05:15:28:7f:e1:30:15:2c:eb:
03:4a:c7:f5:93:1e:b9:54:a0:06:bb:6c:c8:d6:2f:
74:75:3a:0a:65:ec:ca:c7:32:ec:5c:de:10:ce:56:
f6:66:d4:5a:e3:35:0d:8b:cd:ed:3d:ee:13:92:9c:
b0:16:ea:73:21:90:3f:38:2b:3f:38:a4:2d:98:7b:
f0:43:01:59:2f:c2:59:fc:9a:8b:a5:10:c5:7a:2b:
4a:b2:0b:4d:e1:4c:58:c2:93:b0:39:6f:ff:da:f3:
5e:1b:60:54:d0:db:de:26:0d:18:92:8f:4e:73:a3:
4a:46:a2:c7:c5:ee:5f:02:7f:38:21:2f:ec:57:f0:
eb:58:7c:59:78:5a:da:d9:e4:74:75:b8:4e:18:0b:
ed:eb:aa:c4:b1:d2:65:c5:3c:6b:c9:f2:12:bc:b6:
eb:80:38:76:e4:5d:47:87:9a:3c:13:8b:10:be:86:
49:21:67:3c:62:d9:a2:a9:10:10:96:e9:25:cb:01:
10:ae:c4:20:4c:a5:3e:12:41:44:4d:13:3d:9e:ec:
30:55:db:0b:f3:24:33:9e:56:36:7d:73:07:c9:2d:
e6:6a:2e:98:ce:76:70:71:6a:72:59:6c:89:fb:6b:
0a:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:3E:2F:A8:C8:91:5A:93:EE:5F:33:49:08:10:BD:E2:AF:5A:FD:9D
X509v3 Authority Key Identifier:
keyid:2E:4B:D4:ED:CA:29:D4:E7:2B:E8:6C:ED:0B:7A:D6:52:C7:D2:61:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LkvU7cop1Ocr6GztC3rWUsfSYck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/a53bb6-66c0-4861-b288-2a6372e054d2/1/LkvU7cop1Ocr6GztC3rWUsfSYck.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/a53bb6-66c0-4861-b288-2a6372e054d2/1/LkvU7cop1Ocr6GztC3rWUsfSYck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:35:57:20:12:9a:0a:3d:43:b5:79:84:32:48:05:0a:da:cd:
fb:c5:1b:17:c7:75:30:a1:16:35:e5:83:4e:e3:c9:30:0b:d6:
2f:3e:da:e1:e5:e6:10:d7:84:79:0e:90:59:db:95:24:02:7c:
c2:9d:6f:6d:21:ad:79:2b:8b:14:d9:d6:35:a5:22:f1:7a:b2:
71:14:e1:4d:94:20:12:a2:c9:d4:b6:86:fc:e6:34:34:85:e9:
27:70:24:e2:bd:11:a6:b2:6b:60:f6:2a:9d:be:01:ec:b9:3d:
8c:c8:90:25:cb:38:e4:80:54:69:b6:47:c8:7e:71:5a:65:a5:
b9:c9:40:f5:3b:06:d9:5a:0b:87:eb:b9:c2:b1:c5:bc:3d:cc:
f2:42:8b:91:81:8a:aa:4b:ce:6c:22:e0:6f:1f:64:29:79:4b:
7f:00:58:c3:0e:14:09:41:b9:34:e8:dc:c2:8c:d6:4c:a6:48:
4c:d7:f9:9c:c3:47:aa:65:88:10:a5:68:78:99:6d:00:f9:90:
e5:6d:9f:14:58:4d:6a:57:04:f0:52:05:4d:df:ac:cd:5a:62:
a9:76:e4:9d:60:9f:52:ce:a5:84:bd:02:c6:6c:f5:c7:f7:f9:
b5:04:d6:e7:93:a6:c3:1b:7e:0d:6c:10:09:31:59:1f:3e:03:
20:a3:cf:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 20 22:54:36 2026 by rpki-client