Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/a53bb6-66c0-4861-b288-2a6372e054d2/1/LkvU7cop1Ocr6GztC3rWUsfSYck.mft
File: LkvU7cop1Ocr6GztC3rWUsfSYck.mft (raw, json)
Hash identifier: QHBVBVnEq4XenfatIsQ7749Xv5ehqTRHWeFHTyRYRrc=
Subject key identifier: 74:81:9B:8F:8F:AB:F0:66:7F:EE:18:83:63:3F:D3:30:BE:C1:1C:47
Authority key identifier: 2E:4B:D4:ED:CA:29:D4:E7:2B:E8:6C:ED:0B:7A:D6:52:C7:D2:61:C9
Certificate issuer: /CN=2e4bd4edca29d4e72be86ced0b7ad652c7d261c9
Certificate serial: 019EFA2671E0CBA2B5AEEE04A2A520AC1025
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LkvU7cop1Ocr6GztC3rWUsfSYck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/a53bb6-66c0-4861-b288-2a6372e054d2/1/LkvU7cop1Ocr6GztC3rWUsfSYck.mft
Manifest number: 1983
Signing time: Wed 24 Jun 2026 15:01:23 +0000
Manifest this update: Wed 24 Jun 2026 15:01:23 +0000
Manifest next update: Thu 25 Jun 2026 15:01:23 +0000
Files and hashes: 1: 9TWBsQcYt_3DqrpIxhr7ZchkbEs.roa (hash: S+4/zNMH2kmuHN+0Pj1sw0CtTfECJrrhZmhXHKALpLQ=)
2: LkvU7cop1Ocr6GztC3rWUsfSYck.crl (hash: Q/JGFSGL0oQN/Ic0rrOp5XFb7XlN6zz/xzNf4YyU1QI=)
3: csavTgWbEnAnj2FE7wmf-6_xsDo.roa (hash: NZc1W28oYgzZGInvZ1xUa3lyDRZmfm8SXHqRaJX4eiA=)
4: hWYYYTPX5BW-YlQJP7a7zSBSnAs.roa (hash: KB7u9iqoxD3Dcgosf4P5H0oRDToXUib7RpHigbMrFSE=)
5: kciLrIkaNokpbwgdgmqHhosEQAA.roa (hash: lRqsBb/ckM2u20pZEo0aziVALwxR00NbO8g2ocSg11k=)
6: t2zUFpxy4LQGct9r9ZJ0asDpLFw.roa (hash: 024FwN2O3pbhYVF2lJCnVAQHX9MDtHOalE1ahWO/jyA=)
7: tGV4YPNnQsDRzdIlgaAMjflbyZc.roa (hash: mek/U6Kf3m68n3h5nQGxZ1IWYVE3zIoWHPx7TmOAqIM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/a53bb6-66c0-4861-b288-2a6372e054d2/1/LkvU7cop1Ocr6GztC3rWUsfSYck.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/a53bb6-66c0-4861-b288-2a6372e054d2/1/LkvU7cop1Ocr6GztC3rWUsfSYck.mft
rsync://rpki.ripe.net/repository/DEFAULT/LkvU7cop1Ocr6GztC3rWUsfSYck.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 25 Jun 2026 14:31:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:fa:26:71:e0:cb:a2:b5:ae:ee:04:a2:a5:20:ac:10:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e4bd4edca29d4e72be86ced0b7ad652c7d261c9
Validity
Not Before: Jun 24 15:01:23 2026 GMT
Not After : Jun 25 15:01:23 2026 GMT
Subject: CN=74819b8f8fabf0667fee1883633fd330bec11c47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:e0:4d:ae:02:93:9f:da:ac:05:b2:ab:a9:26:
45:99:ed:90:4f:59:6a:62:0d:79:d7:d4:11:2b:45:
6c:d9:56:64:2b:d9:d5:e1:de:93:f6:d8:fa:b3:89:
37:85:44:09:22:a1:ca:75:fe:60:c2:37:1b:f9:5b:
77:c7:a7:09:4e:70:a9:a3:3d:26:cc:96:56:53:1c:
ea:37:a9:ef:ee:b8:7f:94:92:e7:24:0e:44:3f:47:
f3:8e:f0:ed:6a:e2:0a:8a:90:e3:df:cd:f0:69:9b:
30:f7:c7:f6:ab:9d:1b:bf:77:65:6e:38:b0:2b:87:
38:bd:ea:93:30:77:39:90:d7:98:5f:1d:50:d6:9e:
db:42:ab:4d:77:1e:66:88:dd:da:60:7f:de:5c:1f:
a0:d5:1c:93:38:69:e2:9b:87:79:0f:fa:49:90:a9:
44:12:3d:43:cb:a7:4f:06:4f:c2:91:76:37:43:2d:
6f:18:9c:5e:5e:af:19:64:14:42:18:8d:eb:90:24:
45:11:2c:9c:44:6d:39:db:d5:d6:91:a9:44:c3:f8:
a1:68:58:71:e2:d7:11:7e:69:35:2a:4c:12:a1:15:
a5:5b:8a:c9:2d:2e:4c:6b:1c:ce:ce:1e:46:e4:1f:
e9:27:a4:c7:41:7b:e3:e0:50:f9:9e:62:b7:32:4a:
34:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:81:9B:8F:8F:AB:F0:66:7F:EE:18:83:63:3F:D3:30:BE:C1:1C:47
X509v3 Authority Key Identifier:
keyid:2E:4B:D4:ED:CA:29:D4:E7:2B:E8:6C:ED:0B:7A:D6:52:C7:D2:61:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LkvU7cop1Ocr6GztC3rWUsfSYck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/a53bb6-66c0-4861-b288-2a6372e054d2/1/LkvU7cop1Ocr6GztC3rWUsfSYck.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/a53bb6-66c0-4861-b288-2a6372e054d2/1/LkvU7cop1Ocr6GztC3rWUsfSYck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:31:d5:00:bd:e1:d5:00:59:be:0f:d7:18:39:cd:e3:63:55:
e5:d8:00:a1:eb:d4:72:97:59:1b:f6:9c:58:26:23:ed:7c:73:
d4:0f:a6:b1:67:89:eb:f0:e9:d1:7f:3a:bd:20:59:6a:4b:42:
7e:3b:c7:3b:d7:da:5f:96:5e:3e:b5:13:3f:88:54:df:ee:fa:
a5:9d:6d:8b:91:3d:4e:ad:1a:8f:81:0c:f8:f8:78:27:32:6d:
82:c8:4f:2e:1b:13:39:dc:ed:7b:43:01:26:ed:86:a3:8a:4c:
9e:e6:e8:3c:06:86:fb:d1:cd:22:2b:13:50:be:a4:e8:63:2f:
ef:b0:02:e2:0c:47:90:ba:26:84:ed:45:af:54:43:66:27:87:
59:60:4f:40:0f:8f:c0:43:80:de:d0:4f:e0:17:9d:8d:41:da:
27:5b:ee:23:45:ce:32:f2:1f:db:e8:cc:b7:5f:46:7f:d7:7c:
09:55:5b:51:a7:7a:21:49:be:50:cb:94:59:7e:f3:fe:f2:2a:
ea:9b:7f:59:06:ac:24:2a:4a:87:87:70:b1:b7:19:16:5f:98:
a6:1c:9e:44:24:c4:cb:29:ab:2b:3f:a9:a7:6a:03:8a:6a:e0:
42:b6:b6:3f:47:73:68:ae:77:80:cd:0f:a5:d8:b9:dd:72:eb:
93:c7:a2:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 21:20:17 2026 by rpki-client