
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/957c68-6f27-40ed-abed-df64f0e82360/1/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.mft
File: LoKWP_GqcKsQ0dM-hrHW1JTWzlE.mft (raw, json)
Hash identifier: WaG3KPOW1hqq/WPdVyXfyxsAccrED/Zr3hEx5EfofRs=
Subject key identifier: 6A:32:D5:7F:4B:CB:D3:18:F0:9E:BD:7C:AA:16:1E:47:C6:79:CA:ED
Authority key identifier: 2E:82:96:3F:F1:AA:70:AB:10:D1:D3:3E:86:B1:D6:D4:94:D6:CE:51
Certificate issuer: /CN=2e82963ff1aa70ab10d1d33e86b1d6d494d6ce51
Certificate serial: 019FC66DC97E157F5B7485B93315B57BE8DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/957c68-6f27-40ed-abed-df64f0e82360/1/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.mft
Manifest number: 1271
Signing time: Mon 03 Aug 2026 07:01:51 +0000
Manifest this update: Mon 03 Aug 2026 07:01:51 +0000
Manifest next update: Tue 04 Aug 2026 07:01:51 +0000
Files and hashes: 1: 1-PeUZDh2-1Afu1QRFV_yHzYhPCM.roa (hash: OuunDL6LgvQ6D8lmFD9dFkeAYcQl23IGkOT49tokdT4=)
2: 3JYzRFMomy3SIlmvc60lTNqVY2w.roa (hash: u90fZWL82/Hup0ed0gRl+iG6TY3ZCd/LRMwj8fnJF0E=)
3: ArhgU7rp7FQT9A4LoyMGhcr3cLs.roa (hash: oHGGq9BCjwsGbigK1i0tvnkd8z9zUxF68PL08Pmocf8=)
4: CIWFwZHpllyhItc6ZafwS9V0Jvw.roa (hash: FLaHSv17cLAfaJ7PpG0zmIipTskF+c0L1m1jMEvYS7o=)
5: FE_S4W2tO92nb8O_O-hOesCLUm8.roa (hash: GDvu1c61oibSFyqoFZ8ntITmbpcdKoP+42kQduFji50=)
6: LoKWP_GqcKsQ0dM-hrHW1JTWzlE.crl (hash: h0Uap6RENFUisiTg5AkCGCfXB1oVJbAP3YetyHr6iWc=)
7: O5b_7tKwlPMatzVkYYKBgBMnfM8.roa (hash: 260wtgrIyMYyB5Lq3vWLFsUlojYNN6+upJ5BFAmQs2c=)
8: PRDpqr__phj4tP6vnFDWrcpfKxA.roa (hash: uHPAo/HsN4Jrrpq/omD/PHKhS8n8qFVXJSt+wnrhtig=)
9: RovjuxiKGfwHw2_fwtGcSifzO4s.roa (hash: tIXxG91aBMX3Z5uvVO9d6bJnj+cwOoTerADNDKWyVcg=)
10: SH-dZUoP-4wqp-OfFzRIcmNOCkw.roa (hash: ToWHKGjEIsq+7lwa0nIU+umA7zL6SRVtFJSLvV3VgFo=)
11: Tm_OIsXDaO190gkMynE2KF1a_Lg.roa (hash: wWOhNkWAvhE/1NrGHUdttjXxcj8mx9lhL8rWBqR0cP4=)
12: XM6w5HowZWBtpHPnnj9Mwr-w-qw.roa (hash: sO/zxb0InsWF34Hr/VTHqeD4EmRo9FGLqjvxwwn51/c=)
13: Y5g5oBOGc1untW-b8R0nkKOlMYM.roa (hash: zoXYFGWu10XAJabbTcHy0gp5U0/ZFRaMgSjLnS5OevA=)
14: eFg69EJOf-kPIJa-UZ4VA5X44DY.roa (hash: taVC9yah86Lzo3bSt+z850n7YnEiqp0UW4LWcp/iA5I=)
15: ifZRe-uWcqKwNo_M2vAzvpT9OUU.roa (hash: s3kSZnJOaNBcLJk6I6FfrLp2Zy1y2JcndjzephM3GAA=)
16: nynFadiKhVTTAb1VPU3Cmie2xF0.roa (hash: 3QJ9XmE3XhfqpSOZbO8CGD3RHkFQ2Ty7eUnID8LQjBc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/957c68-6f27-40ed-abed-df64f0e82360/1/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/957c68-6f27-40ed-abed-df64f0e82360/1/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.mft
rsync://rpki.ripe.net/repository/DEFAULT/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 04 Aug 2026 07:01:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:c6:6d:c9:7e:15:7f:5b:74:85:b9:33:15:b5:7b:e8:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e82963ff1aa70ab10d1d33e86b1d6d494d6ce51
Validity
Not Before: Aug 3 07:01:51 2026 GMT
Not After : Aug 4 07:01:51 2026 GMT
Subject: CN=6a32d57f4bcbd318f09ebd7caa161e47c679caed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:8b:81:ed:b1:c2:a2:29:19:db:c9:56:7f:91:
1d:0c:ba:c5:4c:79:79:5d:eb:3c:3e:6d:c2:d8:1c:
ff:2c:0f:f4:0f:c4:40:af:e3:e5:d8:77:3c:0e:94:
06:29:2b:56:5f:18:28:34:f6:57:b2:55:e8:40:e3:
f9:5a:65:d4:20:fb:30:79:2d:e1:e6:bc:3a:07:1d:
90:82:83:58:87:bc:41:bf:b0:21:60:54:6b:2c:8a:
fb:0c:a7:e9:75:07:d2:c1:1e:dc:5c:50:2a:7c:5e:
e3:03:db:47:b7:1d:37:57:b5:68:6c:6e:c6:6f:7b:
21:72:d0:a1:66:68:1b:7c:75:d4:7e:ac:a2:96:78:
f6:39:13:45:da:44:6f:6e:c6:09:83:8d:aa:11:a4:
cf:4e:d0:a3:ab:3b:14:f6:26:50:68:c0:94:ac:28:
31:5b:fa:3a:70:c5:22:fb:b7:9d:e0:7e:34:cc:64:
51:39:01:8d:da:dd:da:3b:cd:80:dd:87:51:57:27:
82:62:70:45:84:17:f1:3c:79:69:d1:ed:69:c8:c0:
ad:4b:1e:45:7d:5f:b8:20:8f:22:3d:77:09:30:f9:
a0:9f:d2:87:42:33:42:c3:2e:93:49:de:ee:52:f1:
15:01:a2:c6:dd:cd:6d:91:ce:5b:6f:41:30:16:7f:
40:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:32:D5:7F:4B:CB:D3:18:F0:9E:BD:7C:AA:16:1E:47:C6:79:CA:ED
X509v3 Authority Key Identifier:
keyid:2E:82:96:3F:F1:AA:70:AB:10:D1:D3:3E:86:B1:D6:D4:94:D6:CE:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/957c68-6f27-40ed-abed-df64f0e82360/1/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/957c68-6f27-40ed-abed-df64f0e82360/1/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
dc:f5:ee:44:27:e0:aa:54:0a:1c:fd:31:ac:73:ac:be:a5:15:
b6:17:ef:90:a4:18:51:dc:89:aa:be:11:2a:e2:8b:9b:1c:91:
90:94:b1:0e:9e:1f:ae:18:8a:56:23:67:4c:8f:2f:cb:75:dc:
45:52:1f:67:08:6c:c6:29:e6:35:83:e6:c7:e1:06:f7:89:9b:
e5:2f:2b:4f:24:35:74:0f:d1:c3:17:a9:62:d6:ae:8a:9a:4e:
1f:d6:6f:03:bb:58:0d:50:eb:3b:52:3e:af:90:89:1f:99:6e:
d1:b0:36:fd:76:91:ed:3d:4b:65:b7:36:c2:ea:28:e7:e9:dd:
f0:ac:8e:40:b5:8a:af:1e:21:bc:21:f4:fc:1c:3f:65:20:80:
45:17:35:5f:fc:ba:33:7b:f0:47:1c:49:d3:d3:7d:ee:79:f6:
5a:76:de:8b:89:95:8a:bc:9e:6e:4f:f1:77:26:fe:bc:e9:c6:
71:9e:2f:98:a5:7b:71:3d:45:20:7d:18:6e:b5:e9:9e:e9:99:
2a:1f:7e:6f:4d:88:fd:c8:dc:7a:c4:19:ba:dc:7f:46:8d:58:
11:85:e2:f2:de:b1:2e:b7:8a:e8:66:07:14:6f:7c:51:00:de:
c7:db:06:d8:cc:1a:1b:15:bc:43:1f:b6:1c:98:d7:47:37:98:
cc:6e:7d:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 3 13:11:56 2026 by rpki-client