Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/8fad8b-a033-4484-885e-e02872d1db01/1/LkFFfaHqbHmxtr6lLGSnobXylkg.mft
File: LkFFfaHqbHmxtr6lLGSnobXylkg.mft (raw, json)
Hash identifier: kG+1LoWF/01nSfmxT+pbq5k6BJ+3E7G/xscV/fxObLk=
Subject key identifier: DB:6D:82:A0:31:AF:2E:71:5C:F6:56:8A:FA:95:6B:3E:10:3F:70:53
Authority key identifier: 2E:41:45:7D:A1:EA:6C:79:B1:B6:BE:A5:2C:64:A7:A1:B5:F2:96:48
Certificate issuer: /CN=2e41457da1ea6c79b1b6bea52c64a7a1b5f29648
Certificate serial: 019D39E55477A737E71501480204155BFB17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LkFFfaHqbHmxtr6lLGSnobXylkg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/8fad8b-a033-4484-885e-e02872d1db01/1/LkFFfaHqbHmxtr6lLGSnobXylkg.mft
Manifest number: 1892
Signing time: Sun 29 Mar 2026 14:00:23 +0000
Manifest this update: Sun 29 Mar 2026 14:00:23 +0000
Manifest next update: Mon 30 Mar 2026 14:00:23 +0000
Files and hashes: 1: 41BadyilkbxexUsN9_QCLE-lN9U.roa (hash: mKipKbsOuZUI5PBjgwAvlkxPu0eVLjnhl1jdP6GuFz8=)
2: LkFFfaHqbHmxtr6lLGSnobXylkg.crl (hash: IrJXi4sZMdjLBpC/EnPfdgl4q004sF4Fxbi9MANyzeI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/8fad8b-a033-4484-885e-e02872d1db01/1/LkFFfaHqbHmxtr6lLGSnobXylkg.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/8fad8b-a033-4484-885e-e02872d1db01/1/LkFFfaHqbHmxtr6lLGSnobXylkg.mft
rsync://rpki.ripe.net/repository/DEFAULT/LkFFfaHqbHmxtr6lLGSnobXylkg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 14:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:e5:54:77:a7:37:e7:15:01:48:02:04:15:5b:fb:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e41457da1ea6c79b1b6bea52c64a7a1b5f29648
Validity
Not Before: Mar 29 14:00:23 2026 GMT
Not After : Mar 30 14:00:23 2026 GMT
Subject: CN=db6d82a031af2e715cf6568afa956b3e103f7053
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:bc:3a:06:a3:63:64:68:2e:99:f9:64:31:d3:
19:c1:d5:7b:6f:1f:20:1b:9d:2a:b7:d4:db:22:41:
a0:73:f2:f1:58:42:7d:93:5d:ba:d2:5d:fb:8b:f4:
fb:40:aa:77:70:9d:04:3e:c3:be:a8:67:17:94:aa:
fa:a5:02:fc:79:03:4e:fe:e0:5b:d2:36:f7:b0:b4:
52:1d:ab:6f:eb:22:44:e2:9d:d4:81:5b:6c:06:be:
e5:66:0f:0f:de:f4:81:a4:fa:24:31:3b:4c:a2:cc:
09:11:62:c4:36:0e:f6:bc:f3:cf:59:f8:9c:2e:ef:
b3:78:7c:47:6d:f6:24:d1:91:61:9d:1f:6c:3b:93:
50:ea:a8:40:cc:f0:33:31:5b:ce:41:ea:5e:9c:21:
f9:79:91:48:95:a1:9f:87:20:99:97:fe:d8:9c:1c:
c7:53:f5:af:cd:39:1c:cf:90:3b:13:ce:ad:0d:e2:
05:0f:40:0b:06:09:1d:bb:e0:21:f6:51:a0:93:45:
ab:9b:6f:ec:f7:7f:fe:74:1b:62:81:32:07:e5:64:
f2:3f:32:87:9f:9a:8b:26:47:b1:d6:e3:c7:02:ef:
4d:55:5d:37:a5:23:a3:f9:45:78:66:7a:b6:86:e2:
b3:2c:38:61:6d:60:23:01:53:1d:e5:2c:bb:28:da:
28:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:6D:82:A0:31:AF:2E:71:5C:F6:56:8A:FA:95:6B:3E:10:3F:70:53
X509v3 Authority Key Identifier:
keyid:2E:41:45:7D:A1:EA:6C:79:B1:B6:BE:A5:2C:64:A7:A1:B5:F2:96:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LkFFfaHqbHmxtr6lLGSnobXylkg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/8fad8b-a033-4484-885e-e02872d1db01/1/LkFFfaHqbHmxtr6lLGSnobXylkg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/8fad8b-a033-4484-885e-e02872d1db01/1/LkFFfaHqbHmxtr6lLGSnobXylkg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:c8:c6:71:5f:ee:de:7e:62:5c:5a:04:51:28:38:7d:03:2b:
70:05:bb:4b:cc:73:82:0b:2d:03:df:9a:1d:bc:a0:76:2f:84:
25:21:ab:3f:56:b9:47:2f:62:68:67:c1:58:fd:89:3c:a1:9a:
09:d5:34:42:ca:bb:f1:77:7e:e6:93:58:7f:1c:fe:2b:b8:49:
65:7d:82:6f:37:8b:eb:38:bb:26:26:13:d3:b9:a7:83:b7:a2:
39:00:61:16:c9:52:75:39:e0:13:63:32:4b:5c:cf:a3:14:23:
70:52:61:ff:0c:04:90:6d:40:f2:4f:fe:64:17:f0:00:d5:bc:
c6:81:7f:c6:04:22:3c:96:99:f9:de:55:c0:fb:65:de:5b:88:
83:0d:27:b8:72:28:d1:91:7e:08:06:57:b1:70:60:ed:9a:57:
70:17:41:8c:90:03:70:1d:28:90:a6:28:65:eb:71:4b:c6:d1:
f1:92:a7:5f:a3:a3:7d:32:99:9f:20:36:eb:66:4c:9b:41:bf:
c5:17:dd:a2:ab:f5:6d:0b:8b:9e:78:10:93:71:6c:ed:03:63:
72:5e:27:40:62:1f:a4:f7:11:7f:0f:98:6a:c6:ff:c5:e9:61:
15:59:f3:ab:88:a9:7d:f6:17:5d:42:05:a6:37:cd:bd:fa:07:
df:54:a9:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 20:48:20 2026 by rpki-client