Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/88/668bf3-77dc-43ea-8fdd-485eda34998f/1/LkWQWSMqS7ky9j-w37ZUk-ucgng.mft
File: LkWQWSMqS7ky9j-w37ZUk-ucgng.mft (raw, json)
Hash identifier: k0zjo5CkFhAv6inRCXjmxWv94Sku4POief2Pqk7ZMFU=
Subject key identifier: 6A:2B:F5:52:6B:F0:55:E6:D1:BD:9B:80:29:D3:69:FC:B3:6F:B2:70
Authority key identifier: 2E:45:90:59:23:2A:4B:B9:32:F6:3F:B0:DF:B6:54:93:EB:9C:82:78
Certificate issuer: /CN=2e459059232a4bb932f63fb0dfb65493eb9c8278
Certificate serial: 01A17F620909B341E9177673EF7C88999418
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LkWQWSMqS7ky9j-w37ZUk-ucgng.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/668bf3-77dc-43ea-8fdd-485eda34998f/1/LkWQWSMqS7ky9j-w37ZUk-ucgng.mft
Manifest number: 1A55
Signing time: Tue 27 Oct 2026 22:01:33 +0000
Manifest this update: Tue 27 Oct 2026 22:01:33 +0000
Manifest next update: Wed 28 Oct 2026 22:01:33 +0000
Files and hashes: 1: LkWQWSMqS7ky9j-w37ZUk-ucgng.crl (hash: RruBwSYv59DROBn6VmkgzrmBnVMu0r10uwBPAf6eAlc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/668bf3-77dc-43ea-8fdd-485eda34998f/1/LkWQWSMqS7ky9j-w37ZUk-ucgng.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/668bf3-77dc-43ea-8fdd-485eda34998f/1/LkWQWSMqS7ky9j-w37ZUk-ucgng.mft
rsync://rpki.ripe.net/repository/DEFAULT/LkWQWSMqS7ky9j-w37ZUk-ucgng.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 22:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7f:62:09:09:b3:41:e9:17:76:73:ef:7c:88:99:94:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e459059232a4bb932f63fb0dfb65493eb9c8278
Validity
Not Before: Oct 27 22:01:33 2026 GMT
Not After : Oct 28 22:01:33 2026 GMT
Subject: CN=6a2bf5526bf055e6d1bd9b8029d369fcb36fb270
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:90:71:86:18:5a:39:90:52:9e:a5:12:1f:47:
17:db:a9:11:50:3b:cf:20:c3:64:c5:78:2d:ab:73:
71:1a:f1:ad:20:06:5b:58:ec:ca:95:26:78:26:cf:
1d:a6:b5:09:0f:28:70:e6:a8:52:e0:2f:73:e2:15:
6b:d6:58:11:32:79:d6:f8:17:d5:73:18:d2:2b:50:
51:c9:ec:ad:15:23:cc:78:85:c8:c2:04:40:3b:41:
8e:06:34:f0:30:d5:19:8d:e1:b9:dc:e4:a7:a5:dc:
3f:8f:ff:a9:85:22:88:fc:de:db:3b:bb:69:ee:cc:
0c:73:12:22:7f:34:79:04:4e:a4:48:16:4d:49:c3:
63:b6:d1:3d:ae:37:fc:3d:19:8b:29:67:b2:d8:68:
70:39:72:90:0e:88:93:df:ca:f5:b7:3e:b5:f2:4b:
05:50:2b:91:ca:1f:12:58:6c:a4:d8:ff:0e:8f:d5:
49:71:0d:53:01:a4:78:16:28:9d:79:e0:94:36:c2:
bf:2d:d0:a8:f2:2b:93:a5:3a:46:5f:b9:78:a5:4a:
00:31:ba:ec:67:62:39:72:48:11:a5:14:b6:b4:d6:
15:a4:db:a2:d6:28:13:79:d4:c4:87:f0:d8:74:c9:
13:ef:fb:bd:dd:28:1c:68:f7:c0:c2:4d:45:6d:3b:
77:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:2B:F5:52:6B:F0:55:E6:D1:BD:9B:80:29:D3:69:FC:B3:6F:B2:70
X509v3 Authority Key Identifier:
keyid:2E:45:90:59:23:2A:4B:B9:32:F6:3F:B0:DF:B6:54:93:EB:9C:82:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LkWQWSMqS7ky9j-w37ZUk-ucgng.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/668bf3-77dc-43ea-8fdd-485eda34998f/1/LkWQWSMqS7ky9j-w37ZUk-ucgng.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/668bf3-77dc-43ea-8fdd-485eda34998f/1/LkWQWSMqS7ky9j-w37ZUk-ucgng.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:5a:12:4d:c9:c6:cf:bc:66:53:a9:a9:f1:c7:b6:5d:15:a3:
a1:75:58:31:8b:b3:d3:f5:6c:87:8f:b6:7b:97:19:2e:9d:6e:
0a:12:36:35:32:6b:d8:ac:8c:37:c9:5d:c2:6f:e7:f1:32:7a:
13:0b:9a:fc:6e:31:60:de:9e:27:7d:73:48:5c:91:80:39:c7:
3e:c6:9a:55:54:c7:8d:c4:7b:5b:04:86:b6:4e:27:63:3a:2d:
fc:09:41:3d:bf:0c:aa:4d:ff:7b:55:d6:e0:41:83:9d:a3:e8:
ab:a9:c7:2d:c5:fe:64:1d:28:d6:80:c6:dd:4a:b6:1f:d0:ea:
cf:25:95:35:5d:2b:81:48:14:09:2d:89:fc:4d:80:44:35:c5:
51:3c:3a:24:a0:c7:a2:0c:8b:11:c6:8a:75:77:1f:03:e6:72:
4e:60:81:fa:8d:fa:ca:d7:fa:56:36:bd:1a:53:e4:0c:3a:dd:
32:1b:84:5a:1e:fd:51:ea:dc:e1:7b:9f:8a:0c:af:e9:3b:25:
10:86:81:65:c5:82:d6:19:f7:c7:64:57:4c:94:44:e5:fe:ec:
14:e2:6c:a9:27:1d:d0:d9:40:d5:be:e6:df:b2:8f:74:a1:12:
19:58:d6:3e:51:43:79:73:dd:d7:26:6c:35:67:5a:ce:86:cd:
d0:5f:7c:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 05:27:30 2026 by rpki-client