Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/7f16ea-26d3-457f-92cb-87bc58f34665/1/LkgZCVWUgNJISQ2OHXHDwJOwX-U.mft
File: LkgZCVWUgNJISQ2OHXHDwJOwX-U.mft (raw, json)
Hash identifier: xWSdlRvjdcRQRPQAMvJEfe4D5XL/Yy8qQdkpru8yLVk=
Subject key identifier: 3A:EE:19:E4:3A:DA:A0:A0:7F:31:B4:5F:E8:1E:11:F1:A1:9C:CC:51
Authority key identifier: 2E:48:19:09:55:94:80:D2:48:49:0D:8E:1D:71:C3:C0:93:B0:5F:E5
Certificate issuer: /CN=2e481909559480d248490d8e1d71c3c093b05fe5
Certificate serial: 019D371BFD873F5D5D535358DA1453D13835
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LkgZCVWUgNJISQ2OHXHDwJOwX-U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/7f16ea-26d3-457f-92cb-87bc58f34665/1/LkgZCVWUgNJISQ2OHXHDwJOwX-U.mft
Manifest number: 188B
Signing time: Sun 29 Mar 2026 01:01:14 +0000
Manifest this update: Sun 29 Mar 2026 01:01:14 +0000
Manifest next update: Mon 30 Mar 2026 01:01:14 +0000
Files and hashes: 1: LkgZCVWUgNJISQ2OHXHDwJOwX-U.crl (hash: KeOqDY9trgIV/DW1mYptgYy2p6vAvm1kGoM3GFYkuhA=)
2: TpPJId1e5lG2meo0GsY8127KDCk.roa (hash: aMNWtngKVeTHR3PWHuMGJZAZEL09LOJBZOu+feFbIPo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/7f16ea-26d3-457f-92cb-87bc58f34665/1/LkgZCVWUgNJISQ2OHXHDwJOwX-U.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/7f16ea-26d3-457f-92cb-87bc58f34665/1/LkgZCVWUgNJISQ2OHXHDwJOwX-U.mft
rsync://rpki.ripe.net/repository/DEFAULT/LkgZCVWUgNJISQ2OHXHDwJOwX-U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 01:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:1b:fd:87:3f:5d:5d:53:53:58:da:14:53:d1:38:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e481909559480d248490d8e1d71c3c093b05fe5
Validity
Not Before: Mar 29 01:01:14 2026 GMT
Not After : Mar 30 01:01:14 2026 GMT
Subject: CN=3aee19e43adaa0a07f31b45fe81e11f1a19ccc51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:78:5d:2a:08:9d:31:67:a0:5e:4b:b4:a7:f9:
58:c9:5a:a2:bd:5f:b6:c1:ee:ec:29:e0:8d:d2:77:
44:f6:88:5c:72:33:16:d4:35:61:c7:d7:cf:0d:87:
d1:86:bd:47:41:eb:58:0e:3b:35:13:c9:80:09:d4:
2c:d6:38:c1:27:f6:05:3d:48:53:cf:05:e7:d8:ae:
b3:6c:b1:7b:50:20:94:cb:9d:3b:33:12:11:77:ae:
9d:d5:bd:2c:0a:78:4c:8e:09:9b:95:25:62:2b:9a:
f3:b6:c7:40:30:27:91:46:9b:d3:6b:45:0a:af:3f:
25:47:ae:09:bb:86:57:05:7e:b6:79:8a:b0:5b:3e:
c4:c1:fe:3d:0d:76:15:15:ab:4e:03:a4:cf:02:3e:
35:73:a3:64:dc:4e:b9:63:db:ae:51:02:d6:4d:54:
b4:63:7e:6c:41:17:67:22:59:c2:0a:1a:28:63:fe:
7b:26:38:4d:32:0a:c1:9a:0a:91:0f:b9:bf:bc:74:
0c:80:bc:92:a6:dc:e4:8e:fd:2f:da:dc:91:35:1c:
3d:77:13:7e:cb:2b:6f:da:14:eb:99:74:20:1c:d4:
58:87:7c:d0:3b:1e:04:f9:96:33:27:18:ee:72:29:
35:08:d7:e1:4d:d5:2f:c0:81:65:f7:4b:ec:7c:c1:
67:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:EE:19:E4:3A:DA:A0:A0:7F:31:B4:5F:E8:1E:11:F1:A1:9C:CC:51
X509v3 Authority Key Identifier:
keyid:2E:48:19:09:55:94:80:D2:48:49:0D:8E:1D:71:C3:C0:93:B0:5F:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LkgZCVWUgNJISQ2OHXHDwJOwX-U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/7f16ea-26d3-457f-92cb-87bc58f34665/1/LkgZCVWUgNJISQ2OHXHDwJOwX-U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/7f16ea-26d3-457f-92cb-87bc58f34665/1/LkgZCVWUgNJISQ2OHXHDwJOwX-U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:f3:67:e8:a7:9c:65:a2:cb:1c:81:0f:b6:d6:78:71:96:52:
0f:18:1f:9f:7f:ba:b5:18:36:02:da:70:92:45:8b:54:f8:45:
48:f6:76:e4:82:a4:16:d1:db:5d:82:61:c5:7e:34:6f:fe:19:
91:95:05:e9:8d:85:b0:20:90:9d:54:03:19:2a:82:b4:56:90:
d6:68:59:b7:4b:56:92:07:31:de:7d:48:40:e4:ad:59:5e:3a:
0a:35:98:48:05:28:b0:e7:ad:62:90:e9:1f:a9:ee:2f:fe:fe:
d8:f2:c5:d8:9b:b5:d0:61:71:ff:2c:7a:0e:d5:5e:e9:49:d5:
7c:bb:c5:ef:a7:be:fe:e6:4f:39:89:3f:19:56:68:63:d6:9b:
ff:bb:e0:6e:33:9a:91:09:c5:f3:e6:7b:71:62:f0:35:0b:11:
7c:82:04:8d:45:50:2b:bc:83:ad:3f:f9:d9:52:81:f2:d7:e4:
7a:32:c1:c3:fa:68:15:ed:5b:2a:93:14:a5:4c:89:f8:ef:00:
0a:e5:c9:38:3f:65:29:e9:8b:fe:1f:77:bd:7f:8d:e7:fd:c9:
23:7f:fa:a6:9b:de:26:da:07:40:84:be:83:0a:92:12:26:05:
02:16:46:ac:37:46:1b:28:ec:e7:04:90:44:8d:c2:28:82:ac:
08:18:d3:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:27:01 2026 by rpki-client