Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ab/7f16ea-26d3-457f-92cb-87bc58f34665/1/LkgZCVWUgNJISQ2OHXHDwJOwX-U.mft
File: LkgZCVWUgNJISQ2OHXHDwJOwX-U.mft (raw, json)
Hash identifier: DB9xScXMWlXt7F0HIVnyQVUVZg+Z5UWqGnx3VfW83fE=
Subject key identifier: 1C:FA:2E:36:28:43:C8:0D:92:A8:DD:7B:DE:16:90:62:8E:6D:A8:88
Authority key identifier: 2E:48:19:09:55:94:80:D2:48:49:0D:8E:1D:71:C3:C0:93:B0:5F:E5
Certificate issuer: /CN=2e481909559480d248490d8e1d71c3c093b05fe5
Certificate serial: 01A13A803798D6D2778EAA7B421A07894E7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LkgZCVWUgNJISQ2OHXHDwJOwX-U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/7f16ea-26d3-457f-92cb-87bc58f34665/1/LkgZCVWUgNJISQ2OHXHDwJOwX-U.mft
Manifest number: 1A9F
Signing time: Wed 14 Oct 2026 13:00:43 +0000
Manifest this update: Wed 14 Oct 2026 13:00:43 +0000
Manifest next update: Thu 15 Oct 2026 13:00:43 +0000
Files and hashes: 1: LkgZCVWUgNJISQ2OHXHDwJOwX-U.crl (hash: jZvm3iawerx3qjuKx6u5uobUh0JRQ2bnLysqZPg7DXQ=)
2: TpPJId1e5lG2meo0GsY8127KDCk.roa (hash: aMNWtngKVeTHR3PWHuMGJZAZEL09LOJBZOu+feFbIPo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/7f16ea-26d3-457f-92cb-87bc58f34665/1/LkgZCVWUgNJISQ2OHXHDwJOwX-U.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/7f16ea-26d3-457f-92cb-87bc58f34665/1/LkgZCVWUgNJISQ2OHXHDwJOwX-U.mft
rsync://rpki.ripe.net/repository/DEFAULT/LkgZCVWUgNJISQ2OHXHDwJOwX-U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 13:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3a:80:37:98:d6:d2:77:8e:aa:7b:42:1a:07:89:4e:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e481909559480d248490d8e1d71c3c093b05fe5
Validity
Not Before: Oct 14 13:00:43 2026 GMT
Not After : Oct 15 13:00:43 2026 GMT
Subject: CN=1cfa2e362843c80d92a8dd7bde1690628e6da888
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:da:18:41:9c:42:1e:99:42:dd:47:04:79:bd:
7a:cd:84:8f:fe:cc:05:e3:3f:48:12:dc:f0:50:51:
6e:98:00:18:6a:e7:21:08:a9:46:b3:bc:2f:3a:55:
22:47:35:31:f7:a4:01:0f:d5:7f:90:ae:13:d5:2d:
aa:93:58:d4:cf:1a:ac:0d:0f:fa:b2:39:26:1e:31:
3b:cf:3f:da:c4:8d:ed:27:99:78:df:0e:4a:e0:25:
76:60:d9:d6:28:e7:c4:12:f9:bd:98:16:c9:ee:de:
93:ff:6d:ac:e6:63:67:42:1a:9c:8d:43:99:24:22:
3b:2e:21:46:4f:80:89:98:98:13:38:19:2e:43:21:
77:18:e1:c0:63:93:47:e4:18:29:8e:5c:74:86:59:
45:62:60:1a:34:a9:84:55:b0:9a:dd:88:03:bc:27:
7e:1a:4e:3c:35:c8:57:67:2e:6f:a7:85:0a:4f:2c:
ea:b4:0d:6c:8f:bd:9b:77:e8:f8:fe:96:3b:fe:82:
06:62:cf:0a:34:f8:d2:b7:c4:9c:44:90:fa:38:97:
ce:64:c2:34:02:eb:0e:ba:6c:29:05:f8:b6:68:6c:
cd:cd:03:fb:88:95:3d:c8:c8:0e:45:6f:0d:e1:8e:
c8:0e:22:f2:5c:10:be:5d:ad:ef:85:29:52:6a:bb:
c6:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:FA:2E:36:28:43:C8:0D:92:A8:DD:7B:DE:16:90:62:8E:6D:A8:88
X509v3 Authority Key Identifier:
keyid:2E:48:19:09:55:94:80:D2:48:49:0D:8E:1D:71:C3:C0:93:B0:5F:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LkgZCVWUgNJISQ2OHXHDwJOwX-U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/7f16ea-26d3-457f-92cb-87bc58f34665/1/LkgZCVWUgNJISQ2OHXHDwJOwX-U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/7f16ea-26d3-457f-92cb-87bc58f34665/1/LkgZCVWUgNJISQ2OHXHDwJOwX-U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:4a:65:1f:54:7d:e9:c5:6d:f0:1d:62:4d:0c:cc:17:18:47:
51:db:fd:b7:b0:6d:aa:67:68:86:8f:85:ee:8f:be:25:cd:ad:
35:c9:79:9c:56:4e:5b:17:1d:20:63:ea:cf:f9:52:d5:b4:1b:
78:95:82:4c:a8:c5:64:e4:10:7e:2d:21:e8:cf:93:e0:81:5d:
ed:c2:eb:b4:d4:1f:94:a5:7e:82:f1:da:7f:e9:45:9e:7a:c1:
a8:99:cd:dd:79:96:f7:39:31:41:bf:33:36:1e:36:23:97:61:
f2:f4:2f:11:43:91:c7:6b:85:a9:ba:61:de:18:19:d2:7f:c5:
69:a8:f6:2b:ff:4b:30:bc:28:ef:9a:14:81:aa:47:5c:18:80:
8f:d0:e0:e9:d4:d8:c4:fa:21:f5:36:9c:59:bf:b0:6b:19:9c:
1f:c9:37:3d:ce:a2:d2:34:45:62:2a:dd:28:7a:2c:9f:91:43:
e4:54:85:a6:3a:53:b5:4d:72:71:52:09:dd:fa:f8:21:91:0b:
ea:af:83:76:a7:cc:58:ef:ad:80:3d:b6:f9:e7:9e:0c:d9:23:
c9:56:34:21:1a:dd:06:0f:9a:02:56:18:86:ed:46:84:c5:b7:
29:76:1a:b0:71:18:88:cd:22:bf:7c:57:b6:ba:f2:91:f4:d7:
04:5c:15:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 23:01:41 2026 by rpki-client