Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/6b0dc9-c1b9-4fae-acd9-6bff1c0e68ae/1/lkyqlAOgjTc7kLcQpW0-roE5T_A.mft
File: lkyqlAOgjTc7kLcQpW0-roE5T_A.mft (raw, json)
Hash identifier: u/99JxMv9tXONQZ13T8itDcArkl/qKzvMDbJlkIutb4=
Subject key identifier: AE:49:E0:D3:EB:E2:8B:F8:61:5A:38:DA:FF:1D:F5:0C:A6:CA:75:AC
Authority key identifier: 96:4C:AA:94:03:A0:8D:37:3B:90:B7:10:A5:6D:3E:AE:81:39:4F:F0
Certificate issuer: /CN=964caa9403a08d373b90b710a56d3eae81394ff0
Certificate serial: 019D38D3995525058EF16B73BE5E0A0E6FF8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lkyqlAOgjTc7kLcQpW0-roE5T_A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/6b0dc9-c1b9-4fae-acd9-6bff1c0e68ae/1/lkyqlAOgjTc7kLcQpW0-roE5T_A.mft
Manifest number: 181C
Signing time: Sun 29 Mar 2026 09:01:24 +0000
Manifest this update: Sun 29 Mar 2026 09:01:24 +0000
Manifest next update: Mon 30 Mar 2026 09:01:24 +0000
Files and hashes: 1: lkyqlAOgjTc7kLcQpW0-roE5T_A.crl (hash: tbTTYCa5lewJfaZjrCKGOr61OPHMd6OvYY+jbLiCB9Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/6b0dc9-c1b9-4fae-acd9-6bff1c0e68ae/1/lkyqlAOgjTc7kLcQpW0-roE5T_A.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/6b0dc9-c1b9-4fae-acd9-6bff1c0e68ae/1/lkyqlAOgjTc7kLcQpW0-roE5T_A.mft
rsync://rpki.ripe.net/repository/DEFAULT/lkyqlAOgjTc7kLcQpW0-roE5T_A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:99:55:25:05:8e:f1:6b:73:be:5e:0a:0e:6f:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=964caa9403a08d373b90b710a56d3eae81394ff0
Validity
Not Before: Mar 29 09:01:24 2026 GMT
Not After : Mar 30 09:01:24 2026 GMT
Subject: CN=ae49e0d3ebe28bf8615a38daff1df50ca6ca75ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:ec:af:9f:73:8b:ef:bd:47:4e:51:b4:7d:7a:
30:4a:b6:9f:e0:bc:e8:0c:9f:3f:9e:b4:3c:f8:56:
9c:c4:8a:b1:b7:97:b9:9c:85:f6:2d:0e:ea:c5:a0:
eb:df:b3:a4:3b:e1:de:3f:f9:71:31:99:94:17:14:
e3:a5:e1:68:6c:c9:56:a8:7d:e0:bf:f2:09:da:66:
87:18:ae:53:fa:2e:ed:16:d2:84:ed:78:63:b2:4a:
a3:ac:d6:63:fa:e3:23:50:eb:0b:ef:7e:ee:a2:42:
64:88:01:11:40:6e:7c:2c:20:df:9f:75:7a:7e:40:
1c:40:5d:7b:ee:5a:a7:91:de:8a:93:6c:6a:91:3b:
4a:86:5b:6c:fb:79:61:9d:a0:33:8e:c3:43:e7:31:
77:fd:26:a1:ae:92:13:7f:aa:43:a3:f7:a5:ab:87:
41:7a:c9:82:5d:22:99:e5:2d:cb:ff:89:9f:13:75:
85:78:ee:78:a6:6a:d7:4e:c9:99:14:f7:77:10:81:
8c:73:ab:40:3a:96:e9:5a:71:60:22:49:22:26:64:
b9:61:f7:53:74:27:a2:bc:53:82:4b:86:b5:83:d5:
06:83:bb:e4:5e:06:e4:df:28:7a:93:04:46:70:bd:
6d:d0:1c:4a:5c:11:48:8f:c4:11:ec:6a:05:47:8e:
42:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:49:E0:D3:EB:E2:8B:F8:61:5A:38:DA:FF:1D:F5:0C:A6:CA:75:AC
X509v3 Authority Key Identifier:
keyid:96:4C:AA:94:03:A0:8D:37:3B:90:B7:10:A5:6D:3E:AE:81:39:4F:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lkyqlAOgjTc7kLcQpW0-roE5T_A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/6b0dc9-c1b9-4fae-acd9-6bff1c0e68ae/1/lkyqlAOgjTc7kLcQpW0-roE5T_A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/6b0dc9-c1b9-4fae-acd9-6bff1c0e68ae/1/lkyqlAOgjTc7kLcQpW0-roE5T_A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:12:ed:5c:6a:0b:2c:99:48:51:b1:f8:2c:6a:43:e0:10:04:
3f:f2:14:98:08:6c:5a:3e:26:8e:63:28:b4:a7:f0:78:f5:8a:
b3:02:8a:fc:17:fa:38:cd:5b:67:9a:88:c9:59:c4:5a:75:ea:
a0:7b:c5:b3:7c:69:3a:1d:c0:e2:b4:51:48:3f:24:0b:ec:b1:
24:c7:a7:93:f8:98:10:d4:43:b2:ad:b7:8c:d8:d2:1d:b2:f4:
ac:0c:9a:96:f7:53:4a:9d:63:cf:8c:78:ed:eb:21:f2:07:93:
2a:8b:96:61:c6:82:47:13:fe:07:13:63:2f:17:04:f8:12:23:
be:ae:6f:13:39:24:4a:a8:c3:a0:d8:48:38:a3:c7:9f:19:4f:
40:a1:fa:fe:7e:45:27:84:50:f8:e7:7c:28:0b:ef:f7:1c:f6:
4c:42:85:bf:09:1b:6d:95:ab:54:ea:df:5f:12:5f:5b:49:c6:
e1:a0:1e:e4:45:57:86:4a:29:9d:b8:8b:0b:d0:26:06:4a:35:
c9:52:d3:50:7b:2f:58:bd:7f:25:9a:f4:e8:68:e3:25:b4:06:
ce:dd:82:23:a6:43:1e:07:fb:58:07:80:2c:33:99:a6:aa:0e:
45:d3:2d:c2:17:e0:de:87:e5:d2:fa:fc:98:03:53:25:e3:cb:
11:67:44:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 18:38:46 2026 by rpki-client