Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/67/a53bb6-66c0-4861-b288-2a6372e054d2/1/LkvU7cop1Ocr6GztC3rWUsfSYck.mft
File: LkvU7cop1Ocr6GztC3rWUsfSYck.mft (raw, json)
Hash identifier: GB27frKSR0/ULuNUtvc9Mg1/HlfGAfACoGe5Rs3s1Zs=
Subject key identifier: 12:58:90:C6:83:21:A8:36:22:7D:99:BD:A1:93:AC:CE:53:EF:8E:E1
Authority key identifier: 2E:4B:D4:ED:CA:29:D4:E7:2B:E8:6C:ED:0B:7A:D6:52:C7:D2:61:C9
Certificate issuer: /CN=2e4bd4edca29d4e72be86ced0b7ad652c7d261c9
Certificate serial: 01A116E1533D745CAD2BE6288E663B5E2DD1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LkvU7cop1Ocr6GztC3rWUsfSYck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/a53bb6-66c0-4861-b288-2a6372e054d2/1/LkvU7cop1Ocr6GztC3rWUsfSYck.mft
Manifest number: 1A9B
Signing time: Wed 07 Oct 2026 15:00:27 +0000
Manifest this update: Wed 07 Oct 2026 15:00:27 +0000
Manifest next update: Thu 08 Oct 2026 15:00:27 +0000
Files and hashes: 1: 9TWBsQcYt_3DqrpIxhr7ZchkbEs.roa (hash: S+4/zNMH2kmuHN+0Pj1sw0CtTfECJrrhZmhXHKALpLQ=)
2: LkvU7cop1Ocr6GztC3rWUsfSYck.crl (hash: kiZI04k3YFEjJ0RS7cfJjEA51gdWfilToNL+XjG251I=)
3: csavTgWbEnAnj2FE7wmf-6_xsDo.roa (hash: NZc1W28oYgzZGInvZ1xUa3lyDRZmfm8SXHqRaJX4eiA=)
4: hWYYYTPX5BW-YlQJP7a7zSBSnAs.roa (hash: KB7u9iqoxD3Dcgosf4P5H0oRDToXUib7RpHigbMrFSE=)
5: kciLrIkaNokpbwgdgmqHhosEQAA.roa (hash: lRqsBb/ckM2u20pZEo0aziVALwxR00NbO8g2ocSg11k=)
6: t2zUFpxy4LQGct9r9ZJ0asDpLFw.roa (hash: 024FwN2O3pbhYVF2lJCnVAQHX9MDtHOalE1ahWO/jyA=)
7: tGV4YPNnQsDRzdIlgaAMjflbyZc.roa (hash: mek/U6Kf3m68n3h5nQGxZ1IWYVE3zIoWHPx7TmOAqIM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/a53bb6-66c0-4861-b288-2a6372e054d2/1/LkvU7cop1Ocr6GztC3rWUsfSYck.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/a53bb6-66c0-4861-b288-2a6372e054d2/1/LkvU7cop1Ocr6GztC3rWUsfSYck.mft
rsync://rpki.ripe.net/repository/DEFAULT/LkvU7cop1Ocr6GztC3rWUsfSYck.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 Oct 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:16:e1:53:3d:74:5c:ad:2b:e6:28:8e:66:3b:5e:2d:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e4bd4edca29d4e72be86ced0b7ad652c7d261c9
Validity
Not Before: Oct 7 15:00:27 2026 GMT
Not After : Oct 8 15:00:27 2026 GMT
Subject: CN=125890c68321a836227d99bda193acce53ef8ee1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:15:5c:25:00:d6:53:fa:65:ef:3a:d2:a0:8e:
be:e0:f5:49:6a:2f:cf:3e:94:b0:24:89:dd:0c:22:
bf:ec:df:aa:39:0b:d7:6f:52:d2:26:37:33:e2:d6:
e1:36:cd:29:b1:6e:20:4b:08:73:b0:f6:e3:fb:42:
b1:80:79:ad:13:17:f6:f9:a1:ad:d7:11:df:55:a0:
cf:3b:48:3c:d7:49:05:3d:61:01:19:31:04:26:19:
56:9d:03:32:28:47:4d:5f:e5:e3:ef:f3:50:5f:b0:
44:23:03:5a:2b:cf:14:f0:3a:9b:59:13:9d:3d:ec:
fd:f6:49:22:07:e5:f1:37:55:29:26:1c:56:73:40:
83:53:88:3c:ae:8c:5e:92:f5:a7:bd:a4:77:64:46:
20:30:46:43:83:5a:21:1c:8a:d4:3b:d5:75:1c:14:
ef:ca:d8:54:1b:1b:15:00:8f:40:60:4f:93:7e:0e:
37:de:10:b6:9a:dc:7e:20:a4:22:ac:3d:1a:b6:41:
71:42:d5:e3:a5:32:61:f1:bb:3e:17:44:12:6f:54:
aa:33:fa:ab:ae:36:30:7f:b4:a1:09:46:b2:1c:7c:
3f:e4:2e:f9:19:8a:5b:95:4a:75:9b:44:c8:80:ce:
6a:a5:c4:d7:cb:b2:e9:97:90:e2:37:b3:67:7d:5c:
d0:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:58:90:C6:83:21:A8:36:22:7D:99:BD:A1:93:AC:CE:53:EF:8E:E1
X509v3 Authority Key Identifier:
keyid:2E:4B:D4:ED:CA:29:D4:E7:2B:E8:6C:ED:0B:7A:D6:52:C7:D2:61:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LkvU7cop1Ocr6GztC3rWUsfSYck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/a53bb6-66c0-4861-b288-2a6372e054d2/1/LkvU7cop1Ocr6GztC3rWUsfSYck.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/a53bb6-66c0-4861-b288-2a6372e054d2/1/LkvU7cop1Ocr6GztC3rWUsfSYck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:5e:ae:52:5c:b3:b1:85:47:9c:00:f1:68:db:0c:79:a3:3c:
24:56:00:bd:9e:7e:2f:05:33:b8:29:e5:da:4c:1a:ec:00:e2:
b6:0c:fd:a4:1a:f8:ea:79:5b:7b:16:1d:cd:88:e4:47:80:a4:
37:54:cf:c3:0a:ef:cf:4c:e1:e5:00:e4:13:65:f3:ca:6a:b0:
8f:03:ca:f3:98:6f:e1:cf:70:93:30:99:ce:45:b1:cb:b6:9b:
89:2f:80:73:80:c6:54:2b:a8:bb:8b:60:c6:75:cc:61:af:55:
7e:ce:7b:f6:88:19:30:bc:bc:24:bd:ed:68:fd:45:0f:72:b6:
d6:25:41:66:3e:2e:1f:93:72:b2:50:c5:9e:90:aa:c5:c9:85:
20:af:a1:ba:37:0a:dd:10:cb:9d:0a:9a:13:d2:75:fe:2e:69:
56:16:c2:58:54:6b:1a:bf:8b:eb:51:89:fa:2f:01:52:5e:98:
d1:99:e3:1d:bb:51:2d:e1:5a:19:fb:80:12:b3:8b:2b:eb:68:
84:70:d9:5e:48:6f:84:6a:f6:47:47:aa:34:fb:9e:11:f8:9c:
0b:84:12:95:4c:dd:87:f2:06:5e:af:45:ba:8e:df:50:d0:ed:
91:e2:31:dc:d7:6d:06:42:3d:78:3b:77:b9:7b:e5:7d:ae:9c:
0a:7a:1b:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 01:11:07 2026 by rpki-client