Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/8fad8b-a033-4484-885e-e02872d1db01/1/LkFFfaHqbHmxtr6lLGSnobXylkg.mft
File: LkFFfaHqbHmxtr6lLGSnobXylkg.mft (raw, json)
Hash identifier: uT8zjJzIQWPW8yix/YAfUTBFsMjaXyNw9ZZl+XHqe9A=
Subject key identifier: 02:79:91:35:25:3C:07:A8:C7:CD:87:14:F2:0B:64:0E:77:0F:15:1F
Authority key identifier: 2E:41:45:7D:A1:EA:6C:79:B1:B6:BE:A5:2C:64:A7:A1:B5:F2:96:48
Certificate issuer: /CN=2e41457da1ea6c79b1b6bea52c64a7a1b5f29648
Certificate serial: 019F1503959C3AAB8991CE753F9A2B677693
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LkFFfaHqbHmxtr6lLGSnobXylkg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/8fad8b-a033-4484-885e-e02872d1db01/1/LkFFfaHqbHmxtr6lLGSnobXylkg.mft
Manifest number: 1988
Signing time: Mon 29 Jun 2026 20:13:04 +0000
Manifest this update: Mon 29 Jun 2026 20:13:04 +0000
Manifest next update: Tue 30 Jun 2026 20:13:04 +0000
Files and hashes: 1: 41BadyilkbxexUsN9_QCLE-lN9U.roa (hash: mKipKbsOuZUI5PBjgwAvlkxPu0eVLjnhl1jdP6GuFz8=)
2: LkFFfaHqbHmxtr6lLGSnobXylkg.crl (hash: He2QPGg8cE/ZURs8gZUyoX4cyzIpCiK1vBGHvbNciK8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/8fad8b-a033-4484-885e-e02872d1db01/1/LkFFfaHqbHmxtr6lLGSnobXylkg.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/8fad8b-a033-4484-885e-e02872d1db01/1/LkFFfaHqbHmxtr6lLGSnobXylkg.mft
rsync://rpki.ripe.net/repository/DEFAULT/LkFFfaHqbHmxtr6lLGSnobXylkg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 14:12:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:15:03:95:9c:3a:ab:89:91:ce:75:3f:9a:2b:67:76:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e41457da1ea6c79b1b6bea52c64a7a1b5f29648
Validity
Not Before: Jun 29 20:13:04 2026 GMT
Not After : Jun 30 20:13:04 2026 GMT
Subject: CN=02799135253c07a8c7cd8714f20b640e770f151f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:93:e6:1b:66:38:f1:6f:9c:0a:87:f9:9e:b0:
17:4d:95:a4:15:63:bb:1b:a1:c8:64:3b:1e:3b:c8:
4e:5a:ee:81:8a:50:95:fd:50:a6:df:85:0b:50:17:
92:6d:6e:07:5a:19:0e:a5:c4:3d:a3:fc:e9:26:5f:
93:c9:cd:fc:82:1e:44:9a:62:38:e3:c0:89:f1:fc:
97:e7:66:44:8c:c1:66:10:40:48:dd:cc:52:49:86:
e7:2f:d6:0f:7f:06:72:85:4c:c3:80:9e:7e:81:ac:
24:55:3f:4b:94:6b:9b:0d:67:52:e5:6d:4b:8c:65:
80:53:2e:f2:4f:ae:2e:17:23:16:a8:80:04:27:bc:
15:0b:5a:75:4d:9b:e9:67:c5:11:12:d0:d0:b6:ad:
76:e0:d3:ea:4f:98:77:59:2c:d6:bb:6d:6b:4c:97:
fb:6a:8a:e5:5c:ba:a2:0a:73:a7:19:94:73:0c:51:
3a:f3:ca:87:6d:d2:d9:7c:34:82:e3:13:8b:2f:58:
5d:af:14:3b:21:89:40:3c:1c:59:f4:e0:86:57:96:
3f:8a:6f:18:3d:6c:e0:7c:0d:8c:56:ca:70:44:81:
a9:8d:d4:e6:8d:68:a7:1c:98:d6:32:bf:4b:aa:88:
66:61:1b:e2:0c:07:f7:88:98:e7:d3:17:b4:25:6b:
21:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:79:91:35:25:3C:07:A8:C7:CD:87:14:F2:0B:64:0E:77:0F:15:1F
X509v3 Authority Key Identifier:
keyid:2E:41:45:7D:A1:EA:6C:79:B1:B6:BE:A5:2C:64:A7:A1:B5:F2:96:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LkFFfaHqbHmxtr6lLGSnobXylkg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/8fad8b-a033-4484-885e-e02872d1db01/1/LkFFfaHqbHmxtr6lLGSnobXylkg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/8fad8b-a033-4484-885e-e02872d1db01/1/LkFFfaHqbHmxtr6lLGSnobXylkg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:52:5b:00:ab:06:62:14:84:da:f2:13:36:14:5f:d8:15:43:
df:88:0f:a9:00:3f:34:d8:13:30:0c:48:e6:45:9f:fe:3d:de:
e2:2f:40:bf:37:e9:c5:32:11:4c:42:ba:37:07:b1:4c:39:50:
80:d7:b5:47:53:13:e7:9c:70:30:ed:9e:7f:d4:01:04:51:6a:
a1:fb:a9:ed:d0:48:9f:23:0f:93:b7:e6:b8:ca:4b:1b:af:bb:
46:fa:99:8f:a8:e7:41:fc:50:a3:cd:d3:c0:eb:fe:33:4c:ce:
1e:f5:1f:67:e8:54:9c:e6:8d:62:2e:d8:e6:76:f2:ec:20:c5:
74:ca:7a:b2:5f:b6:58:42:87:43:7c:83:c3:20:58:e0:d5:73:
3c:07:6c:94:4f:4c:ef:13:58:b8:fd:86:e4:48:86:e6:23:fe:
c7:43:f3:a0:1a:49:b9:bb:3d:d6:9b:87:a2:2c:3d:b0:6f:75:
f3:e0:64:8d:55:0f:eb:be:a5:49:2d:87:b3:e2:57:83:4f:2e:
37:6c:a1:e1:52:24:05:7c:5b:34:c4:5b:2a:68:23:e7:d9:87:
0b:cc:f6:25:6b:e2:a9:f6:29:36:0a:b1:e3:cf:58:10:ee:b4:
33:16:db:c6:1f:23:52:63:15:a1:b7:89:28:e1:ce:aa:77:64:
46:f6:bf:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 23:31:26 2026 by rpki-client