Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ab/7f16ea-26d3-457f-92cb-87bc58f34665/1/LkgZCVWUgNJISQ2OHXHDwJOwX-U.mft
File: LkgZCVWUgNJISQ2OHXHDwJOwX-U.mft (raw, json)
Hash identifier: YSdtMMZ2BtjmjXT4dSVi2uoXoBSGi271PVm0bnY2Lh4=
Subject key identifier: 74:32:50:14:50:38:2A:5E:DC:E3:EA:37:0D:09:D5:E1:DB:BE:1A:EB
Authority key identifier: 2E:48:19:09:55:94:80:D2:48:49:0D:8E:1D:71:C3:C0:93:B0:5F:E5
Certificate issuer: /CN=2e481909559480d248490d8e1d71c3c093b05fe5
Certificate serial: 01A026574006822FB9BE554018A15776550D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LkgZCVWUgNJISQ2OHXHDwJOwX-U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/7f16ea-26d3-457f-92cb-87bc58f34665/1/LkgZCVWUgNJISQ2OHXHDwJOwX-U.mft
Manifest number: 1A10
Signing time: Fri 21 Aug 2026 22:00:47 +0000
Manifest this update: Fri 21 Aug 2026 22:00:47 +0000
Manifest next update: Sat 22 Aug 2026 22:00:47 +0000
Files and hashes: 1: LkgZCVWUgNJISQ2OHXHDwJOwX-U.crl (hash: C3LYwxRFeFU9QK8S8mfeWgQxgVFB4+MVdpmPvdSbWk4=)
2: TpPJId1e5lG2meo0GsY8127KDCk.roa (hash: aMNWtngKVeTHR3PWHuMGJZAZEL09LOJBZOu+feFbIPo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/7f16ea-26d3-457f-92cb-87bc58f34665/1/LkgZCVWUgNJISQ2OHXHDwJOwX-U.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/7f16ea-26d3-457f-92cb-87bc58f34665/1/LkgZCVWUgNJISQ2OHXHDwJOwX-U.mft
rsync://rpki.ripe.net/repository/DEFAULT/LkgZCVWUgNJISQ2OHXHDwJOwX-U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 22 Aug 2026 22:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:26:57:40:06:82:2f:b9:be:55:40:18:a1:57:76:55:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e481909559480d248490d8e1d71c3c093b05fe5
Validity
Not Before: Aug 21 22:00:47 2026 GMT
Not After : Aug 22 22:00:47 2026 GMT
Subject: CN=7432501450382a5edce3ea370d09d5e1dbbe1aeb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:81:0d:ed:ef:21:13:be:7f:27:7a:26:11:50:
82:3a:9f:19:67:6b:e9:05:87:d9:ff:02:7a:a5:ba:
74:c4:83:c5:c2:7b:ea:8c:dc:ac:ad:71:b8:d9:04:
81:0f:b2:cf:9e:9e:e3:d3:7d:e1:59:1d:65:76:22:
78:40:79:dd:cb:fd:7f:70:e7:6d:3a:72:b0:6e:1a:
2e:b8:5e:47:8c:14:7e:c7:43:b7:dc:71:96:79:da:
40:b6:68:bf:f3:c4:ff:28:b9:10:10:5e:e8:28:ff:
36:8d:33:35:c4:d8:5d:5b:f7:b3:b1:38:87:c2:47:
8d:b1:25:0d:2c:f4:24:a8:d7:74:2e:ae:67:ec:80:
72:be:c0:f0:3a:ff:37:2b:1d:90:03:ad:ee:75:59:
55:e2:da:1d:8f:39:c1:f5:4a:9d:62:2e:1c:7d:dd:
a3:fc:20:df:6a:35:bc:fc:0b:14:cf:29:bf:8a:28:
2a:81:af:9c:d6:a5:44:aa:64:f1:94:bb:fc:b1:6f:
91:91:ee:6a:c3:2c:07:eb:e1:35:13:c3:fe:3e:7a:
1d:a2:41:6f:5f:7f:c2:33:66:76:61:d2:cf:3e:db:
c1:cf:b0:1d:6e:ef:30:a5:87:74:d9:da:66:e6:c8:
81:1d:4c:10:c6:b3:f2:f1:fc:36:15:47:fa:d0:ab:
fa:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:32:50:14:50:38:2A:5E:DC:E3:EA:37:0D:09:D5:E1:DB:BE:1A:EB
X509v3 Authority Key Identifier:
keyid:2E:48:19:09:55:94:80:D2:48:49:0D:8E:1D:71:C3:C0:93:B0:5F:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LkgZCVWUgNJISQ2OHXHDwJOwX-U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/7f16ea-26d3-457f-92cb-87bc58f34665/1/LkgZCVWUgNJISQ2OHXHDwJOwX-U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/7f16ea-26d3-457f-92cb-87bc58f34665/1/LkgZCVWUgNJISQ2OHXHDwJOwX-U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:16:68:2a:13:af:f9:f2:48:c2:38:fd:ae:eb:c3:41:0f:cc:
0f:38:de:35:14:34:7b:49:17:93:2e:9c:12:bb:4e:07:5e:0e:
26:34:ef:66:4b:e6:67:8a:9f:f4:be:c0:2b:62:7a:4e:7a:34:
b6:b2:50:45:a5:4f:77:13:80:81:45:d5:27:f3:c4:ac:54:9f:
86:2c:30:98:77:04:aa:b7:73:0a:2a:32:cb:62:d6:d7:49:ff:
8a:2e:95:ea:d9:4b:e2:d9:14:6e:e2:e0:66:0d:72:1f:9c:09:
f9:74:00:d5:0f:b8:52:a0:1f:16:25:04:a1:7e:e6:89:6f:d5:
22:d9:b7:78:04:8a:4f:a5:00:c8:85:9d:ff:85:e6:70:03:9c:
4d:b0:29:78:e3:40:18:ca:2a:e5:02:00:cd:1b:b6:d9:03:ef:
60:bd:11:c4:c0:58:62:1a:88:04:7f:23:2f:99:2a:08:7c:ed:
39:9e:3f:fc:23:b7:4d:92:66:5c:1d:b6:29:85:19:94:59:f6:
ee:c2:19:a3:7a:0b:f2:96:66:32:df:d2:e2:44:71:87:7d:c6:
58:b3:f1:3b:66:49:62:75:ca:d9:19:f3:f9:be:80:9b:9e:64:
67:22:5f:b1:12:cb:b9:72:38:b3:01:e5:1b:49:51:fa:8a:49:
dd:0c:ea:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 07:03:09 2026 by rpki-client