Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cd/8fad8b-a033-4484-885e-e02872d1db01/1/LkFFfaHqbHmxtr6lLGSnobXylkg.mft
File: LkFFfaHqbHmxtr6lLGSnobXylkg.mft (raw, json)
Hash identifier: yZ9AAppsiv+TTo1G0RhW0frzwlAe5oTUjoKxSlC3paY=
Subject key identifier: 84:3C:28:48:26:D0:E3:11:C3:95:EB:04:2A:77:53:FD:43:1F:43:6A
Authority key identifier: 2E:41:45:7D:A1:EA:6C:79:B1:B6:BE:A5:2C:64:A7:A1:B5:F2:96:48
Certificate issuer: /CN=2e41457da1ea6c79b1b6bea52c64a7a1b5f29648
Certificate serial: 01A11C76091763C95E14003AF86A40CC6AB1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LkFFfaHqbHmxtr6lLGSnobXylkg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/8fad8b-a033-4484-885e-e02872d1db01/1/LkFFfaHqbHmxtr6lLGSnobXylkg.mft
Manifest number: 1A95
Signing time: Thu 08 Oct 2026 17:00:59 +0000
Manifest this update: Thu 08 Oct 2026 17:00:59 +0000
Manifest next update: Fri 09 Oct 2026 17:00:59 +0000
Files and hashes: 1: 41BadyilkbxexUsN9_QCLE-lN9U.roa (hash: mKipKbsOuZUI5PBjgwAvlkxPu0eVLjnhl1jdP6GuFz8=)
2: LkFFfaHqbHmxtr6lLGSnobXylkg.crl (hash: GvuzHVpM+5WYvkfDiRDOrB+R6MBCmYCJSS6oYc8+4p4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/8fad8b-a033-4484-885e-e02872d1db01/1/LkFFfaHqbHmxtr6lLGSnobXylkg.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/8fad8b-a033-4484-885e-e02872d1db01/1/LkFFfaHqbHmxtr6lLGSnobXylkg.mft
rsync://rpki.ripe.net/repository/DEFAULT/LkFFfaHqbHmxtr6lLGSnobXylkg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 Oct 2026 14:16:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:1c:76:09:17:63:c9:5e:14:00:3a:f8:6a:40:cc:6a:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e41457da1ea6c79b1b6bea52c64a7a1b5f29648
Validity
Not Before: Oct 8 17:00:59 2026 GMT
Not After : Oct 9 17:00:59 2026 GMT
Subject: CN=843c284826d0e311c395eb042a7753fd431f436a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:52:e6:85:7f:98:9e:87:a5:d8:b0:38:cc:9a:
a4:2f:0e:2c:4f:05:40:cf:ac:69:03:ba:93:4b:5f:
3c:5e:de:46:dd:3d:e9:eb:a1:fc:b0:dc:85:8e:46:
bb:ae:16:9e:34:66:46:f3:6b:51:48:51:54:00:fb:
2f:4e:6f:b2:8b:a1:d6:34:67:7b:e9:76:2b:74:74:
6b:63:52:22:fa:69:a9:0a:ec:3e:c8:6e:7d:79:98:
7d:73:3a:ea:81:1e:78:e1:b4:55:b6:31:b9:40:e2:
6a:28:21:d5:89:df:a5:0a:fc:b9:1b:0d:59:03:1f:
a4:5a:f1:08:37:52:80:31:9c:d9:a4:14:8b:28:6c:
4e:d2:f6:ee:4d:0d:e4:1a:4a:44:25:6f:f7:21:df:
d8:42:90:6f:15:74:3f:bf:ba:35:ec:f2:0b:42:b1:
00:67:0f:50:6b:4f:02:a5:08:01:d8:77:9f:e0:d3:
e8:ca:85:2a:66:db:a2:18:61:60:94:81:bc:52:c8:
35:49:e9:06:80:86:7c:db:24:a1:74:8f:fc:78:f7:
f0:af:4c:ea:ae:a3:96:7a:76:d6:cf:70:cd:c6:a2:
4b:49:da:c3:fe:6a:99:55:d3:a3:51:68:ae:eb:d7:
c8:c8:fb:0a:aa:ad:a6:76:33:b9:b2:83:f8:f3:a6:
52:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:3C:28:48:26:D0:E3:11:C3:95:EB:04:2A:77:53:FD:43:1F:43:6A
X509v3 Authority Key Identifier:
keyid:2E:41:45:7D:A1:EA:6C:79:B1:B6:BE:A5:2C:64:A7:A1:B5:F2:96:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LkFFfaHqbHmxtr6lLGSnobXylkg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/8fad8b-a033-4484-885e-e02872d1db01/1/LkFFfaHqbHmxtr6lLGSnobXylkg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/8fad8b-a033-4484-885e-e02872d1db01/1/LkFFfaHqbHmxtr6lLGSnobXylkg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:67:73:16:a1:ec:27:73:a4:0f:3c:ae:ca:cd:39:18:ea:ad:
ac:c2:9c:76:5b:85:99:af:c9:db:77:1d:1f:b5:a8:96:3f:2f:
7c:87:e4:af:b0:f6:a1:54:27:5b:70:c7:61:02:ae:18:ae:6c:
25:d9:8c:78:6c:b3:26:a0:58:65:68:63:2c:4d:b0:3f:30:2b:
7f:32:ee:7a:9c:3a:0d:b5:79:21:0a:bf:73:1b:32:ec:e0:e2:
4c:51:05:32:d1:8f:8e:92:0d:ab:73:79:98:1c:a5:67:ff:7a:
1c:5e:02:09:1c:3e:fb:6c:61:3b:33:c4:f3:79:7e:e4:74:05:
40:10:48:a7:9f:bd:f9:88:a8:f7:2e:6c:54:ba:92:57:28:2f:
04:d1:3f:c6:90:1d:28:d8:14:22:63:64:a5:be:72:6a:ff:e3:
b4:6b:e6:d8:7e:61:24:3d:79:01:a6:55:bf:8f:0e:f7:59:74:
85:51:b9:9c:99:f9:33:04:23:e8:7a:1d:69:91:91:6c:7c:61:
45:f7:2d:7d:85:33:3a:85:22:3f:89:d8:1d:37:9d:86:5c:3d:
97:ed:8f:e0:82:90:fd:49:fa:cf:85:eb:fb:0d:35:b9:49:a7:
b6:8b:a7:6a:7d:41:d7:02:53:67:b7:3d:d2:44:ab:bd:87:40:
80:48:48:c8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEcdgkXY8leFAA6+GpAzGqxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJlNDE0NTdkYTFlYTZjNzliMWI2YmVhNTJjNjRhN2ExYjVm
Mjk2NDgwHhcNMjYxMDA4MTcwMDU5WhcNMjYxMDA5MTcwMDU5WjAzMTEwLwYDVQQD
Eyg4NDNjMjg0ODI2ZDBlMzExYzM5NWViMDQyYTc3NTNmZDQzMWY0MzZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArlLmhX+Ynoel2LA4zJqkLw4sTwVA
z6xpA7qTS188Xt5G3T3p66H8sNyFjka7rhaeNGZG82tRSFFUAPsvTm+yi6HWNGd7
6XYrdHRrY1Ii+mmpCuw+yG59eZh9czrqgR544bRVtjG5QOJqKCHVid+lCvy5Gw1Z
Ax+kWvEIN1KAMZzZpBSLKGxO0vbuTQ3kGkpEJW/3Id/YQpBvFXQ/v7o17PILQrEA
Zw9Qa08CpQgB2Hef4NPoyoUqZtuiGGFglIG8Usg1SekGgIZ82yShdI/8ePfwr0zq
rqOWenbWz3DNxqJLSdrD/mqZVdOjUWiu69fIyPsKqq2mdjO5soP486ZSBQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIQ8KEgm0OMRw5XrBCp3U/1DH0NqMB8GA1UdIwQY
MBaAFC5BRX2h6mx5sba+pSxkp6G18pZIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTGtGRmZhSHFiSG14dHI2bExHU25vYlh5bGtnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC84ZmFkOGItYTAzMy00NDg0LTg4NWUt
ZTAyODcyZDFkYjAxLzEvTGtGRmZhSHFiSG14dHI2bExHU25vYlh5bGtnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZC84ZmFkOGItYTAzMy00NDg0LTg4NWUtZTAyODcyZDFkYjAx
LzEvTGtGRmZhSHFiSG14dHI2bExHU25vYlh5bGtnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM2dzFqHs
J3OkDzyuys05GOqtrMKcdluFma/J23cdH7Wolj8vfIfkr7D2oVQnW3DHYQKuGK5s
JdmMeGyzJqBYZWhjLE2wPzArfzLuepw6DbV5IQq/cxsy7ODiTFEFMtGPjpINq3N5
mBylZ/96HF4CCRw++2xhOzPE83l+5HQFQBBIp5+9+Yio9y5sVLqSVygvBNE/xpAd
KNgUImNkpb5yav/jtGvm2H5hJD15AaZVv48O91l0hVG5nJn5MwQj6HodaZGRbHxh
RfctfYUzOoUiP4nYHTedhlw9l+2P4IKQ/Un6z4Xr+w01uUmntounan1B1wJTZ7c9
0kSrvYdAgEhIyA==
-----END CERTIFICATE-----
Generated at Thu Oct 8 20:55:16 2026 by rpki-client