
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/7f16ea-26d3-457f-92cb-87bc58f34665/1/LkgZCVWUgNJISQ2OHXHDwJOwX-U.mft
File: LkgZCVWUgNJISQ2OHXHDwJOwX-U.mft (raw, json)
Hash identifier: visE3zDldrJ/l4BxBAFq4zaSI7sD87GMXukx2sX6d94=
Subject key identifier: 55:D8:17:3D:EB:78:03:C0:3F:11:79:8E:A7:F9:6A:7B:F2:1D:A5:96
Authority key identifier: 2E:48:19:09:55:94:80:D2:48:49:0D:8E:1D:71:C3:C0:93:B0:5F:E5
Certificate issuer: /CN=2e481909559480d248490d8e1d71c3c093b05fe5
Certificate serial: 019F295B7AC0F69ED58C2A8A20DF0B7B27A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LkgZCVWUgNJISQ2OHXHDwJOwX-U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/7f16ea-26d3-457f-92cb-87bc58f34665/1/LkgZCVWUgNJISQ2OHXHDwJOwX-U.mft
Manifest number: 198D
Signing time: Fri 03 Jul 2026 19:01:28 +0000
Manifest this update: Fri 03 Jul 2026 19:01:28 +0000
Manifest next update: Sat 04 Jul 2026 19:01:28 +0000
Files and hashes: 1: LkgZCVWUgNJISQ2OHXHDwJOwX-U.crl (hash: sHOKjLIt7Bc6AdcGacMcpEvy8l5nUNAvXKYz1r2H2kc=)
2: TpPJId1e5lG2meo0GsY8127KDCk.roa (hash: aMNWtngKVeTHR3PWHuMGJZAZEL09LOJBZOu+feFbIPo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/7f16ea-26d3-457f-92cb-87bc58f34665/1/LkgZCVWUgNJISQ2OHXHDwJOwX-U.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/7f16ea-26d3-457f-92cb-87bc58f34665/1/LkgZCVWUgNJISQ2OHXHDwJOwX-U.mft
rsync://rpki.ripe.net/repository/DEFAULT/LkgZCVWUgNJISQ2OHXHDwJOwX-U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 Jul 2026 19:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:29:5b:7a:c0:f6:9e:d5:8c:2a:8a:20:df:0b:7b:27:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e481909559480d248490d8e1d71c3c093b05fe5
Validity
Not Before: Jul 3 19:01:28 2026 GMT
Not After : Jul 4 19:01:28 2026 GMT
Subject: CN=55d8173deb7803c03f11798ea7f96a7bf21da596
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:89:db:c0:d8:75:f8:40:68:71:de:e4:5f:07:
09:5e:08:a9:81:81:de:87:be:18:68:f1:55:31:f9:
e2:70:9a:8c:64:06:02:a7:c6:00:e5:78:f9:81:bd:
d6:19:39:07:0d:f0:98:a5:f3:62:17:b4:82:9c:3b:
1f:a1:83:cc:6a:3b:fd:45:5a:d7:a4:d0:4e:8a:aa:
5e:d7:24:89:66:6f:6c:fa:ba:10:78:de:73:1a:85:
44:78:d7:ed:f7:97:e6:4c:6f:08:f1:a7:81:a3:74:
70:7d:e3:be:8e:d8:ea:03:05:77:1d:c8:ac:d9:9c:
a7:b5:5d:f0:c9:6c:80:6e:e0:1d:42:00:2c:c3:7f:
87:85:b7:7b:6b:3e:b8:ba:8b:9d:9d:96:f8:f3:1c:
ed:d9:91:c5:d9:71:37:63:07:d8:6b:cf:e1:88:fc:
f8:f5:a1:d9:75:7d:1f:52:fe:92:49:42:cd:c3:42:
57:f1:5a:a3:38:a9:6e:ad:69:11:2e:09:e9:cd:ea:
9c:99:9d:41:95:d3:68:f7:c0:ce:e1:da:a3:1a:9c:
01:af:f1:27:d5:d0:01:00:ad:67:d1:82:40:f6:b1:
14:22:35:89:29:2b:1b:fc:08:4c:b0:e9:22:a5:4c:
8f:77:e4:d4:fd:7a:50:a2:56:18:19:3c:62:be:41:
bd:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:D8:17:3D:EB:78:03:C0:3F:11:79:8E:A7:F9:6A:7B:F2:1D:A5:96
X509v3 Authority Key Identifier:
keyid:2E:48:19:09:55:94:80:D2:48:49:0D:8E:1D:71:C3:C0:93:B0:5F:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LkgZCVWUgNJISQ2OHXHDwJOwX-U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/7f16ea-26d3-457f-92cb-87bc58f34665/1/LkgZCVWUgNJISQ2OHXHDwJOwX-U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/7f16ea-26d3-457f-92cb-87bc58f34665/1/LkgZCVWUgNJISQ2OHXHDwJOwX-U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:a7:fa:04:20:b3:13:1b:bf:6b:93:5f:e4:b8:2b:fc:83:ae:
5b:e7:e7:e9:81:54:c0:ce:ea:23:97:bd:4c:45:c4:ab:7f:18:
28:c1:94:5e:ba:80:7f:bf:ea:a0:98:9f:2b:f1:77:18:7c:e4:
ee:ac:ad:be:a5:b4:49:88:ee:0e:66:12:76:71:8e:ab:68:42:
08:37:37:87:bf:51:f2:96:01:f5:9f:7c:27:6d:e5:ce:80:40:
0d:ca:a3:86:23:6e:6b:74:6c:a3:0a:55:c9:ad:38:a5:3c:33:
8a:46:84:5e:87:85:57:e7:99:18:25:ea:fc:48:33:60:22:2b:
35:c7:f7:b3:5a:a2:f7:8d:01:e8:b9:ba:bb:c3:c5:d3:12:7b:
b8:38:d7:88:9e:7b:1f:c4:f2:a4:03:4a:5d:95:6c:8b:80:e0:
60:03:86:83:16:86:18:1a:e3:60:c2:9e:95:82:96:c2:e9:69:
78:62:fc:7a:a2:eb:a7:24:03:da:38:71:0f:57:cd:11:47:05:
f6:e4:84:95:4e:da:d1:95:53:bc:25:bd:0d:b7:e5:47:48:20:
bd:0a:b8:75:40:a8:2f:be:2b:45:18:91:ed:b1:5d:1d:94:94:
0b:9e:92:53:8b:d7:c7:39:97:ab:90:be:39:3b:d8:c6:c0:02:
9f:a8:59:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 3 21:47:56 2026 by rpki-client