Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/8fad8b-a033-4484-885e-e02872d1db01/1/LkFFfaHqbHmxtr6lLGSnobXylkg.mft
File: LkFFfaHqbHmxtr6lLGSnobXylkg.mft (raw, json)
Hash identifier: 8e4W5gMG3GVYL8If0f5natyszostuoF+8IWY3Vt4pLs=
Subject key identifier: 4C:0C:A0:4B:A2:9E:BB:9F:38:35:24:63:81:E4:2C:0D:E7:6D:2B:AD
Authority key identifier: 2E:41:45:7D:A1:EA:6C:79:B1:B6:BE:A5:2C:64:A7:A1:B5:F2:96:48
Certificate issuer: /CN=2e41457da1ea6c79b1b6bea52c64a7a1b5f29648
Certificate serial: 019E2B4C9017D1692DBE0C65DF89D38CBDD8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LkFFfaHqbHmxtr6lLGSnobXylkg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/8fad8b-a033-4484-885e-e02872d1db01/1/LkFFfaHqbHmxtr6lLGSnobXylkg.mft
Manifest number: 190F
Signing time: Fri 15 May 2026 11:01:38 +0000
Manifest this update: Fri 15 May 2026 11:01:38 +0000
Manifest next update: Sat 16 May 2026 11:01:38 +0000
Files and hashes: 1: 41BadyilkbxexUsN9_QCLE-lN9U.roa (hash: mKipKbsOuZUI5PBjgwAvlkxPu0eVLjnhl1jdP6GuFz8=)
2: LkFFfaHqbHmxtr6lLGSnobXylkg.crl (hash: aKcg6q4BEY9qVf7UAhV7cmDPZNsSR+ZnameX1++tMKQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/8fad8b-a033-4484-885e-e02872d1db01/1/LkFFfaHqbHmxtr6lLGSnobXylkg.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/8fad8b-a033-4484-885e-e02872d1db01/1/LkFFfaHqbHmxtr6lLGSnobXylkg.mft
rsync://rpki.ripe.net/repository/DEFAULT/LkFFfaHqbHmxtr6lLGSnobXylkg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 16 May 2026 11:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:2b:4c:90:17:d1:69:2d:be:0c:65:df:89:d3:8c:bd:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e41457da1ea6c79b1b6bea52c64a7a1b5f29648
Validity
Not Before: May 15 11:01:38 2026 GMT
Not After : May 16 11:01:38 2026 GMT
Subject: CN=4c0ca04ba29ebb9f3835246381e42c0de76d2bad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:1d:46:47:99:e7:65:2e:ab:eb:3e:81:7f:3f:
89:9d:df:f6:d0:62:62:05:19:f4:61:f0:92:ff:28:
80:b7:36:59:93:20:0f:f9:d4:45:58:e0:d3:85:6b:
58:5d:de:c0:ca:76:4d:fc:d4:8a:e2:fc:49:e4:b9:
07:8f:69:f1:c3:69:a0:68:4d:67:c7:69:38:41:2a:
78:6b:69:2e:aa:fb:0f:35:c5:37:a9:59:3e:b3:86:
b3:72:0a:d7:53:e5:97:16:c7:c3:47:35:5e:d8:2a:
f7:4c:ba:d3:8a:7f:7e:3e:bd:8a:c0:80:d8:e7:a0:
fc:42:ab:cd:51:f6:31:eb:97:82:5f:44:5c:57:7a:
20:aa:b8:89:ef:fb:36:43:54:d1:4b:87:9d:7d:2d:
d1:f9:92:88:0e:61:2c:c7:b3:22:bc:53:ee:7f:78:
c9:45:20:ff:c0:8a:4f:41:d6:8e:39:df:97:6e:f6:
6f:64:83:3f:b0:67:fd:71:3f:ca:c7:b9:cf:f9:65:
bb:4f:2a:98:f4:24:51:5d:0b:99:63:e2:b1:af:f7:
ad:2d:3f:e5:80:76:69:de:ba:b6:33:57:fb:53:c3:
f9:17:f8:bc:ea:40:2e:7b:40:80:88:21:25:15:c7:
7d:a2:72:1a:01:0d:98:d2:b0:44:59:be:2a:d9:52:
1f:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:0C:A0:4B:A2:9E:BB:9F:38:35:24:63:81:E4:2C:0D:E7:6D:2B:AD
X509v3 Authority Key Identifier:
keyid:2E:41:45:7D:A1:EA:6C:79:B1:B6:BE:A5:2C:64:A7:A1:B5:F2:96:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LkFFfaHqbHmxtr6lLGSnobXylkg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/8fad8b-a033-4484-885e-e02872d1db01/1/LkFFfaHqbHmxtr6lLGSnobXylkg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/8fad8b-a033-4484-885e-e02872d1db01/1/LkFFfaHqbHmxtr6lLGSnobXylkg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:b7:9c:01:96:d6:2a:e4:24:32:b5:be:c8:3c:f1:36:24:12:
a8:8c:7f:9c:1b:0b:47:bb:e6:44:39:f6:8d:3f:70:9c:ad:d8:
94:f0:ef:b2:b0:66:95:fd:eb:68:1c:b1:70:8d:64:24:b3:ad:
f3:78:47:f5:de:a3:35:da:77:64:42:30:f1:bf:03:f7:0f:2c:
fb:f5:61:a7:0f:31:2b:f6:26:85:76:3f:97:f9:b7:57:f7:76:
73:45:50:f6:ee:31:32:12:b2:45:f4:e4:37:8e:1d:25:f8:de:
c5:df:72:b5:0b:b9:3d:ab:0d:ee:e3:38:14:3b:67:0e:25:2d:
3b:cd:24:b4:94:b0:f1:a0:ed:d5:54:dc:95:1e:d2:a7:36:d7:
10:1c:54:86:4d:86:b7:78:a2:57:a2:90:b9:d4:77:85:69:25:
b1:3e:e7:e0:17:b7:66:c7:51:91:2e:4c:4c:41:19:f9:1c:7e:
a0:90:af:31:14:08:33:b9:68:a6:4b:38:f0:9e:21:5f:28:d6:
a3:89:b4:45:e1:50:0c:0c:7b:37:df:a7:97:da:8e:26:a7:24:
a6:4e:29:bf:4d:a1:92:59:26:be:05:f8:6b:02:16:af:92:4a:
47:e4:13:42:55:b9:5d:ab:67:a2:2e:27:d2:e9:29:f5:64:4e:
63:a9:d5:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 15:18:32 2026 by rpki-client