Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/186a93-8e93-4652-9289-7ed51ca5af51/1/lkM1Vj2bb54-KN42jYWYi8FBNx4.mft
File: lkM1Vj2bb54-KN42jYWYi8FBNx4.mft (raw, json)
Hash identifier: EP9lgv1iqISd65n/4EX8Y6m3f8OU1q4+kO4s0os+6tg=
Subject key identifier: 5B:1C:1C:2E:7B:C8:1D:8A:D9:81:35:D0:5D:F4:76:10:F0:E4:E9:64
Authority key identifier: 96:43:35:56:3D:9B:6F:9E:3E:28:DE:36:8D:85:98:8B:C1:41:37:1E
Certificate issuer: /CN=964335563d9b6f9e3e28de368d85988bc141371e
Certificate serial: 019E905C1FECD0EF80A6D94CACE310AA765C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lkM1Vj2bb54-KN42jYWYi8FBNx4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/186a93-8e93-4652-9289-7ed51ca5af51/1/lkM1Vj2bb54-KN42jYWYi8FBNx4.mft
Manifest number: 1789
Signing time: Thu 04 Jun 2026 02:00:17 +0000
Manifest this update: Thu 04 Jun 2026 02:00:17 +0000
Manifest next update: Fri 05 Jun 2026 02:00:17 +0000
Files and hashes: 1: 3j-9iaSKXJ2L7jlRSEs0qAlyRzk.roa (hash: kn2dNNNAcDT9/tnxgSN6E9lAiJiIXAqVGnn+Z6zefmM=)
2: WxK98FtTbTtBWK0NDqa7PLSHh-4.roa (hash: 6Do9u90Y5TD8a3hd4jqlXjVJP1K6MfYLEiK3okcKW40=)
3: lkM1Vj2bb54-KN42jYWYi8FBNx4.crl (hash: iD530k+S2M+c2S8xPKCBVIu742dvhLBDrRaBhqf1W78=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/186a93-8e93-4652-9289-7ed51ca5af51/1/lkM1Vj2bb54-KN42jYWYi8FBNx4.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/186a93-8e93-4652-9289-7ed51ca5af51/1/lkM1Vj2bb54-KN42jYWYi8FBNx4.mft
rsync://rpki.ripe.net/repository/DEFAULT/lkM1Vj2bb54-KN42jYWYi8FBNx4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 05 Jun 2026 02:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:90:5c:1f:ec:d0:ef:80:a6:d9:4c:ac:e3:10:aa:76:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=964335563d9b6f9e3e28de368d85988bc141371e
Validity
Not Before: Jun 4 02:00:17 2026 GMT
Not After : Jun 5 02:00:17 2026 GMT
Subject: CN=5b1c1c2e7bc81d8ad98135d05df47610f0e4e964
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:6f:27:11:7f:bc:cb:55:4d:04:6a:0a:18:c0:
97:f2:08:b5:93:eb:ec:56:54:2f:ea:ad:28:e0:96:
e3:85:7e:8b:86:5e:b4:d2:47:8e:d8:a6:a6:1f:37:
1c:64:6a:7a:64:96:0e:41:e0:df:29:cc:43:81:db:
c7:86:8d:39:f4:76:85:0d:14:2a:1e:2a:c1:04:64:
fc:4d:4c:4c:80:3a:c2:4c:c7:9b:d4:1c:ae:cd:7c:
97:88:70:36:06:7f:6d:0e:f3:9f:f2:a3:12:cb:7d:
1a:8c:10:19:0e:7e:9b:b0:a0:f6:58:2b:9a:b4:f5:
08:d1:b7:e9:ed:e9:0d:f5:a3:4b:5f:7e:85:2a:dd:
46:56:ad:34:cf:97:8b:92:c7:5d:43:2e:0c:61:65:
80:3e:a0:1d:2f:5c:d1:c9:c5:05:c2:36:5a:a3:18:
d2:4d:9f:84:24:ad:4e:e9:9c:79:32:87:d0:28:24:
fb:ac:19:12:bc:2c:4f:e0:81:89:98:07:1a:a2:91:
26:bd:de:21:1c:c5:98:31:8e:39:6c:4c:0a:fa:4c:
31:0c:07:80:ba:c7:fa:b9:a2:0b:c8:f0:b3:f0:82:
64:43:0f:71:d3:5e:fd:3c:c9:7c:56:24:e7:4a:24:
b5:9f:7e:57:76:a5:9c:3c:9d:03:30:29:f0:e2:45:
c3:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:1C:1C:2E:7B:C8:1D:8A:D9:81:35:D0:5D:F4:76:10:F0:E4:E9:64
X509v3 Authority Key Identifier:
keyid:96:43:35:56:3D:9B:6F:9E:3E:28:DE:36:8D:85:98:8B:C1:41:37:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lkM1Vj2bb54-KN42jYWYi8FBNx4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/186a93-8e93-4652-9289-7ed51ca5af51/1/lkM1Vj2bb54-KN42jYWYi8FBNx4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/186a93-8e93-4652-9289-7ed51ca5af51/1/lkM1Vj2bb54-KN42jYWYi8FBNx4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:18:87:e7:b2:42:3c:4c:a8:eb:dc:8f:6a:21:71:29:cc:99:
a8:ea:00:13:25:89:72:e5:3f:83:ac:d4:de:c9:b1:b9:5d:7a:
48:e3:de:9f:3b:dd:38:5d:db:f6:21:c9:ac:72:c2:8a:a5:36:
0e:ed:9f:0f:f4:c5:78:3a:bb:08:32:39:83:15:74:41:1c:71:
55:8a:19:5d:f4:cd:6e:a2:01:81:bd:fb:54:74:d3:f8:0d:0b:
d1:c0:f8:54:3f:00:e4:fd:94:1f:3b:a9:ea:59:5f:fd:26:bc:
32:c9:77:07:c0:46:5a:fa:87:81:86:9d:45:3c:1a:37:d7:e9:
2d:7b:95:eb:94:b4:f5:c8:b0:09:6c:c7:a3:97:53:93:a4:f7:
13:55:91:a0:84:16:9c:04:80:b2:8b:ef:51:4f:4f:af:35:f3:
1b:47:e6:f5:2e:46:a8:d1:ae:3e:54:6d:0b:e7:a5:6e:12:97:
c6:22:0c:b0:8c:91:6f:21:29:87:c7:cd:2a:bc:b7:5b:db:f6:
37:8f:a7:bb:96:c8:02:55:53:d5:61:24:9b:e0:56:f6:f8:8b:
06:fe:f3:39:c0:07:b3:5d:75:d0:39:48:d6:f2:7b:3a:15:8c:
49:60:ac:19:e4:e0:aa:2b:d1:9f:50:72:3c:9e:0b:e7:7c:14:
a2:77:3c:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 12:32:02 2026 by rpki-client