Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/e4b789-3c0f-4a3b-815f-06978f18c734/1/LKv1dU_-Ghz7ibTysL8QZYI7Es8.mft
File: LKv1dU_-Ghz7ibTysL8QZYI7Es8.mft (raw, json)
Hash identifier: LZMkI4Bo3yLzVlUHXF5AHr8siapjJiTpmRmfQICZDjk=
Subject key identifier: 5B:E2:AF:8D:F3:0B:C8:E9:26:FE:84:8D:09:86:64:58:9D:71:C7:4D
Authority key identifier: 2C:AB:F5:75:4F:FE:1A:1C:FB:89:B4:F2:B0:BF:10:65:82:3B:12:CF
Certificate issuer: /CN=2cabf5754ffe1a1cfb89b4f2b0bf1065823b12cf
Certificate serial: 019C9BF8DE860A71E6283E670D94C8295D11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LKv1dU_-Ghz7ibTysL8QZYI7Es8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/e4b789-3c0f-4a3b-815f-06978f18c734/1/LKv1dU_-Ghz7ibTysL8QZYI7Es8.mft
Manifest number: 1172
Signing time: Thu 26 Feb 2026 22:01:43 +0000
Manifest this update: Thu 26 Feb 2026 22:01:43 +0000
Manifest next update: Fri 27 Feb 2026 22:01:43 +0000
Files and hashes: 1: LKv1dU_-Ghz7ibTysL8QZYI7Es8.crl (hash: BJzyLp9FFEnllTos4Tk33l59/0d70rV+gak1Ee8gSLM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/e4b789-3c0f-4a3b-815f-06978f18c734/1/LKv1dU_-Ghz7ibTysL8QZYI7Es8.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/e4b789-3c0f-4a3b-815f-06978f18c734/1/LKv1dU_-Ghz7ibTysL8QZYI7Es8.mft
rsync://rpki.ripe.net/repository/DEFAULT/LKv1dU_-Ghz7ibTysL8QZYI7Es8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Feb 2026 22:01:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:9b:f8:de:86:0a:71:e6:28:3e:67:0d:94:c8:29:5d:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2cabf5754ffe1a1cfb89b4f2b0bf1065823b12cf
Validity
Not Before: Feb 26 22:01:43 2026 GMT
Not After : Feb 27 22:01:43 2026 GMT
Subject: CN=5be2af8df30bc8e926fe848d098664589d71c74d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:ba:e1:28:46:5c:1f:af:5a:b6:be:f2:f1:04:
92:97:cc:37:f1:2e:18:ec:3a:57:c9:99:29:87:90:
11:3b:36:a4:20:ec:35:10:1f:f0:fe:5b:1e:7e:50:
ae:c8:ec:bc:0b:d2:e4:79:96:88:b2:a1:cf:b6:c8:
29:02:45:8b:0d:fa:60:0e:8c:24:b8:18:e1:23:7b:
48:49:ec:59:35:7d:5c:0a:e2:98:e9:0a:f1:28:30:
b9:3c:c1:2b:dd:df:17:c7:d1:24:f6:2d:07:2d:f3:
b4:e5:12:00:12:5f:71:b5:94:a2:e3:59:1f:44:8d:
41:6a:74:04:e2:4d:00:37:1f:a3:3d:b6:fe:a2:27:
e5:f5:6a:af:aa:f6:a1:a3:f9:d0:a8:c7:b5:cd:5f:
67:70:f9:6d:bb:61:7b:5d:cf:dc:e6:bf:29:80:81:
9f:8e:63:48:50:d8:38:0a:25:4a:71:d6:46:32:4a:
97:35:0b:b9:a1:32:b4:02:4e:45:9b:35:6b:25:76:
03:73:16:c6:44:d6:7a:75:9e:c9:84:b5:99:d5:79:
c3:ac:26:f7:82:3e:88:fc:c5:c5:96:00:fd:b4:1f:
58:5e:82:66:16:4b:dd:95:68:03:34:55:68:f1:8e:
bf:53:c7:d0:33:e8:41:42:85:53:d5:be:b4:1c:84:
b3:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:E2:AF:8D:F3:0B:C8:E9:26:FE:84:8D:09:86:64:58:9D:71:C7:4D
X509v3 Authority Key Identifier:
keyid:2C:AB:F5:75:4F:FE:1A:1C:FB:89:B4:F2:B0:BF:10:65:82:3B:12:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LKv1dU_-Ghz7ibTysL8QZYI7Es8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/e4b789-3c0f-4a3b-815f-06978f18c734/1/LKv1dU_-Ghz7ibTysL8QZYI7Es8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/e4b789-3c0f-4a3b-815f-06978f18c734/1/LKv1dU_-Ghz7ibTysL8QZYI7Es8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:9d:1a:ae:f0:be:f7:e8:6d:e4:49:22:5b:3c:27:0c:28:0c:
d3:08:b9:46:ce:91:ce:f6:54:7e:89:56:8e:66:bb:f3:61:ab:
8f:4a:e9:14:81:70:8d:32:e5:13:fa:99:77:e4:0b:94:27:6e:
c1:31:cc:4b:75:a0:1e:57:dd:b2:dd:d0:6b:f9:50:3d:36:00:
fc:90:91:4f:35:69:31:66:7c:36:f6:f3:b3:68:7d:fb:33:77:
ef:ae:43:cb:17:3f:6d:98:6b:66:4e:ec:1a:9e:76:12:36:58:
e8:0e:ce:c5:94:82:bc:ea:9a:61:2c:16:e0:32:f6:cf:90:69:
12:04:e1:bb:7f:1a:40:3e:1c:3f:ef:1d:46:b7:7f:d9:8d:67:
a6:a5:41:9a:53:76:44:a2:a6:59:76:e7:6b:be:46:d6:5e:3f:
52:40:5d:5a:8f:85:9a:03:0a:41:71:dd:17:82:6d:12:3a:da:
47:be:7e:c4:ca:c9:6f:25:53:9f:79:27:1c:d0:1f:41:bf:e2:
8c:67:8e:e3:d6:e3:f4:0e:38:3d:8d:1c:3e:1a:8c:14:b2:0e:
76:b4:7f:c9:5b:51:b5:2d:bd:b1:01:c2:a9:c9:74:53:d6:be:
87:12:0c:72:dd:7b:74:d5:77:9d:3e:45:c8:d3:b2:3d:9c:1f:
91:2e:0b:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 27 06:37:20 2026 by rpki-client