Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a0/186a93-8e93-4652-9289-7ed51ca5af51/1/lkM1Vj2bb54-KN42jYWYi8FBNx4.mft
File: lkM1Vj2bb54-KN42jYWYi8FBNx4.mft (raw, json)
Hash identifier: UfmDKYUOEf4kg8deFg1lKRQ6aSjsMD0kvxKjAnfplis=
Subject key identifier: 3D:2E:9B:A9:2A:1B:CF:90:86:C7:43:A7:98:8F:E9:73:75:38:2C:E1
Authority key identifier: 96:43:35:56:3D:9B:6F:9E:3E:28:DE:36:8D:85:98:8B:C1:41:37:1E
Certificate issuer: /CN=964335563d9b6f9e3e28de368d85988bc141371e
Certificate serial: 01A179CC7A2FE530D5146FD5217BC7389A8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lkM1Vj2bb54-KN42jYWYi8FBNx4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/186a93-8e93-4652-9289-7ed51ca5af51/1/lkM1Vj2bb54-KN42jYWYi8FBNx4.mft
Manifest number: 190B
Signing time: Mon 26 Oct 2026 20:00:06 +0000
Manifest this update: Mon 26 Oct 2026 20:00:06 +0000
Manifest next update: Tue 27 Oct 2026 20:00:06 +0000
Files and hashes: 1: 3j-9iaSKXJ2L7jlRSEs0qAlyRzk.roa (hash: kn2dNNNAcDT9/tnxgSN6E9lAiJiIXAqVGnn+Z6zefmM=)
2: WxK98FtTbTtBWK0NDqa7PLSHh-4.roa (hash: 6Do9u90Y5TD8a3hd4jqlXjVJP1K6MfYLEiK3okcKW40=)
3: lkM1Vj2bb54-KN42jYWYi8FBNx4.crl (hash: jfVyqg40qGr1edww6jCkmG16LPnxIx7L0XCMkX6AEbw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/186a93-8e93-4652-9289-7ed51ca5af51/1/lkM1Vj2bb54-KN42jYWYi8FBNx4.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/186a93-8e93-4652-9289-7ed51ca5af51/1/lkM1Vj2bb54-KN42jYWYi8FBNx4.mft
rsync://rpki.ripe.net/repository/DEFAULT/lkM1Vj2bb54-KN42jYWYi8FBNx4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:79:cc:7a:2f:e5:30:d5:14:6f:d5:21:7b:c7:38:9a:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=964335563d9b6f9e3e28de368d85988bc141371e
Validity
Not Before: Oct 26 20:00:06 2026 GMT
Not After : Oct 27 20:00:06 2026 GMT
Subject: CN=3d2e9ba92a1bcf9086c743a7988fe97375382ce1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:ed:cf:6a:71:5c:23:d2:87:f8:9d:39:f1:b1:
1d:2f:4d:e7:23:64:ac:e8:b3:b1:a8:cb:26:b7:cb:
e7:c0:67:a0:7c:3f:73:52:cc:55:06:af:0b:69:58:
94:91:36:99:2b:95:fa:1d:d4:27:73:d2:f6:51:77:
6b:63:cf:13:45:1d:5f:fc:52:6f:f1:b8:64:82:7e:
d9:b1:c8:82:e3:ec:74:f0:07:d2:09:f1:ba:0c:1b:
3f:da:68:d8:90:0c:04:e8:b6:2f:84:e0:de:d9:a6:
f0:f7:8e:7d:f9:80:14:b0:22:34:9d:f2:b3:99:17:
b3:a5:59:7a:8a:19:7b:72:f3:0a:90:be:d7:62:d1:
98:12:3a:72:98:fe:c0:b4:e3:74:31:ba:b3:63:e0:
55:85:c8:4d:b3:18:35:e7:cb:2a:0e:17:4a:a3:71:
a5:01:80:b0:a5:4b:64:56:d3:95:f6:e7:fb:2f:52:
8b:d7:12:89:10:6d:e8:9b:20:0d:cb:78:e7:b5:46:
e4:ce:d2:31:b8:5e:3d:88:bd:8d:a4:bc:4c:1c:23:
59:7e:bd:7b:d5:7e:0c:19:5b:c0:db:32:27:fe:db:
f6:d5:cb:f0:06:1e:54:3d:18:ec:a1:97:bf:48:f0:
c5:bd:ef:ef:de:9a:58:d9:7b:ab:e7:ff:7a:5a:99:
c8:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:2E:9B:A9:2A:1B:CF:90:86:C7:43:A7:98:8F:E9:73:75:38:2C:E1
X509v3 Authority Key Identifier:
keyid:96:43:35:56:3D:9B:6F:9E:3E:28:DE:36:8D:85:98:8B:C1:41:37:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lkM1Vj2bb54-KN42jYWYi8FBNx4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/186a93-8e93-4652-9289-7ed51ca5af51/1/lkM1Vj2bb54-KN42jYWYi8FBNx4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/186a93-8e93-4652-9289-7ed51ca5af51/1/lkM1Vj2bb54-KN42jYWYi8FBNx4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:fd:cc:4b:e4:db:49:33:c3:ce:f5:4b:7a:d7:50:aa:ca:ab:
40:62:f7:61:04:d1:e1:d0:ff:94:d1:1a:f5:9f:3c:df:e8:da:
95:09:67:66:05:a3:66:86:db:3c:c2:c7:37:9b:b4:c9:9f:3c:
8f:f7:20:e5:a4:84:85:23:b0:f8:9c:f1:3d:14:bc:b2:19:fa:
b9:70:b0:2c:f3:db:3c:49:b6:85:5c:4c:03:bc:3e:4d:6c:27:
c0:65:df:57:23:28:0d:7f:00:fc:a0:77:e2:91:8b:aa:b5:bc:
81:2c:9c:d1:b6:e2:8c:38:01:ad:f7:3d:8b:d4:e1:91:e7:90:
e3:a2:c6:94:b8:6d:97:3b:5a:f0:1a:c0:f0:4d:e4:50:07:a6:
78:a9:9b:cb:af:2c:39:9c:4a:b1:f0:66:36:a4:ca:e1:01:d4:
cf:20:3a:02:f0:98:9f:29:2b:47:6a:c7:59:5d:d3:8d:6f:af:
9b:49:8f:dc:92:1e:82:81:8b:08:d1:91:c2:21:11:88:2b:94:
a4:11:e9:6c:ca:bd:40:6e:15:27:de:9e:b8:e1:e1:7f:97:e7:
0c:c1:52:25:72:9e:1e:52:98:4e:c9:b8:f2:6b:b8:54:87:ce:
11:f9:b1:76:73:45:f9:68:96:2a:f3:bd:dc:ab:b5:7f:18:d4:
7c:31:28:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 04:49:53 2026 by rpki-client