Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/7f16ea-26d3-457f-92cb-87bc58f34665/1/LkgZCVWUgNJISQ2OHXHDwJOwX-U.mft
File: LkgZCVWUgNJISQ2OHXHDwJOwX-U.mft (raw, json)
Hash identifier: YA5gkrHL6ia4aFqI0Md4JmFLck7X1AxShouUljZZ9lE=
Subject key identifier: DC:08:E5:5B:77:AA:6F:DB:4B:4E:5C:9B:DB:21:70:41:73:DB:5E:D3
Authority key identifier: 2E:48:19:09:55:94:80:D2:48:49:0D:8E:1D:71:C3:C0:93:B0:5F:E5
Certificate issuer: /CN=2e481909559480d248490d8e1d71c3c093b05fe5
Certificate serial: 019E2A70A03BEA13AD11E975082EE64D7F87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LkgZCVWUgNJISQ2OHXHDwJOwX-U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/7f16ea-26d3-457f-92cb-87bc58f34665/1/LkgZCVWUgNJISQ2OHXHDwJOwX-U.mft
Manifest number: 1909
Signing time: Fri 15 May 2026 07:01:24 +0000
Manifest this update: Fri 15 May 2026 07:01:24 +0000
Manifest next update: Sat 16 May 2026 07:01:24 +0000
Files and hashes: 1: LkgZCVWUgNJISQ2OHXHDwJOwX-U.crl (hash: BoKT0YW3Yrgj6oEQDT8rC0dxO/zJQLvykMGNgEQ7QVA=)
2: TpPJId1e5lG2meo0GsY8127KDCk.roa (hash: aMNWtngKVeTHR3PWHuMGJZAZEL09LOJBZOu+feFbIPo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/7f16ea-26d3-457f-92cb-87bc58f34665/1/LkgZCVWUgNJISQ2OHXHDwJOwX-U.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/7f16ea-26d3-457f-92cb-87bc58f34665/1/LkgZCVWUgNJISQ2OHXHDwJOwX-U.mft
rsync://rpki.ripe.net/repository/DEFAULT/LkgZCVWUgNJISQ2OHXHDwJOwX-U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 16 May 2026 07:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:2a:70:a0:3b:ea:13:ad:11:e9:75:08:2e:e6:4d:7f:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e481909559480d248490d8e1d71c3c093b05fe5
Validity
Not Before: May 15 07:01:24 2026 GMT
Not After : May 16 07:01:24 2026 GMT
Subject: CN=dc08e55b77aa6fdb4b4e5c9bdb21704173db5ed3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:53:bd:08:49:05:d5:a1:6e:32:6c:d0:52:b7:
c6:4b:f5:49:60:21:d9:ae:7e:98:1e:ed:39:5c:38:
1a:4c:9a:44:9f:14:9a:70:19:9f:b0:dd:ff:e9:34:
1d:21:e9:6c:8f:e4:1a:b6:24:68:20:62:5c:93:ea:
4e:6c:11:f4:ca:11:2a:b1:4b:74:b3:06:0b:b1:f4:
0e:9a:c2:62:49:b9:f7:13:79:f1:5c:bc:56:d4:30:
80:a8:e9:28:f2:45:2c:89:5d:8b:e1:eb:6d:a1:63:
98:18:32:b5:6c:f3:e5:22:d8:d4:19:51:1c:44:6c:
52:ad:af:83:19:d5:56:0b:b3:9b:6f:03:54:11:dd:
e6:21:d3:7d:be:3a:94:1b:65:d3:14:6a:bb:31:ea:
a8:91:87:24:40:9d:f2:06:67:3c:68:24:87:03:34:
81:e0:40:47:de:45:f9:25:2d:25:32:cc:78:03:04:
39:33:2f:11:71:9f:06:0b:8d:63:a9:9d:41:24:b0:
91:80:0e:c6:9e:81:d9:d0:75:d0:a0:33:52:ec:19:
98:4e:1e:6d:50:3e:71:a4:8f:5f:17:3e:ef:d8:a9:
a2:b3:ad:e9:a7:91:1b:d9:5b:d5:a4:e2:b7:b3:3f:
41:49:31:6f:2d:c3:ce:46:f0:c8:70:bb:dd:e0:3e:
b0:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:08:E5:5B:77:AA:6F:DB:4B:4E:5C:9B:DB:21:70:41:73:DB:5E:D3
X509v3 Authority Key Identifier:
keyid:2E:48:19:09:55:94:80:D2:48:49:0D:8E:1D:71:C3:C0:93:B0:5F:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LkgZCVWUgNJISQ2OHXHDwJOwX-U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/7f16ea-26d3-457f-92cb-87bc58f34665/1/LkgZCVWUgNJISQ2OHXHDwJOwX-U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/7f16ea-26d3-457f-92cb-87bc58f34665/1/LkgZCVWUgNJISQ2OHXHDwJOwX-U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:03:74:aa:90:21:41:cd:f9:4a:3e:ba:71:3c:24:6f:d3:c4:
4a:dd:4e:1a:8a:be:bf:ba:cf:b8:c6:ac:99:d8:0b:1d:2e:ca:
47:25:24:d8:be:c9:e6:51:21:03:97:6b:fb:3e:8d:9f:1c:a2:
7a:55:5d:7e:e6:da:81:56:c6:0f:36:ed:29:ee:d5:00:5b:31:
23:32:20:d5:34:e3:81:29:b2:5a:2a:fd:2c:fa:9c:bd:69:f8:
1e:c2:b9:bf:0d:b9:2c:da:43:f7:35:ac:31:27:22:74:c0:a0:
57:25:e3:e7:f7:05:44:c4:ec:47:1b:c7:e1:50:eb:cd:47:5a:
e2:ac:57:16:5d:83:73:ab:b1:d8:d8:fc:c6:a0:bd:d4:1c:61:
67:cc:61:12:24:5e:aa:0b:eb:b7:70:a1:f7:79:14:9f:d4:e8:
32:6f:cd:85:e8:7e:2f:a0:df:33:68:11:70:4f:28:7d:76:4d:
8d:77:69:5e:a2:46:90:ab:82:75:77:2e:6c:f7:e0:53:1e:c7:
30:56:2a:9a:4f:28:6f:a1:81:59:83:06:78:38:3e:3f:55:bb:
47:0e:7a:d8:aa:4e:26:e7:5c:5d:33:27:d6:e0:e8:25:44:79:
af:0c:3f:55:b9:9a:1c:64:98:07:ba:1c:f8:ab:0f:1d:63:29:
af:46:3d:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 17:54:56 2026 by rpki-client