Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e2/2a714e-c7d3-47b5-8c57-caa7d5b482c5/1/LKYVZ8sQmYVRFwCP0dNqqK2pb68.mft
File: LKYVZ8sQmYVRFwCP0dNqqK2pb68.mft (raw, json)
Hash identifier: +W3IT3bPRbAoJ+FNFzc9npq/Y1mY14TkuzE5DaCqvug=
Subject key identifier: 17:0E:C4:C3:B8:5C:39:1F:1C:E6:D3:E0:83:E1:F5:BB:92:C6:68:DD
Authority key identifier: 2C:A6:15:67:CB:10:99:85:51:17:00:8F:D1:D3:6A:A8:AD:A9:6F:AF
Certificate issuer: /CN=2ca61567cb1099855117008fd1d36aa8ada96faf
Certificate serial: 01A1250B48010ED9E8CA1CB91B0729E3AF5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LKYVZ8sQmYVRFwCP0dNqqK2pb68.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/2a714e-c7d3-47b5-8c57-caa7d5b482c5/1/LKYVZ8sQmYVRFwCP0dNqqK2pb68.mft
Manifest number: 054D
Signing time: Sat 10 Oct 2026 09:00:58 +0000
Manifest this update: Sat 10 Oct 2026 09:00:58 +0000
Manifest next update: Sun 11 Oct 2026 09:00:58 +0000
Files and hashes: 1: 4ldpEzp1rU1ZQns-WM0jNa9SHsQ.roa (hash: p1pHdFtbC/8dYCF+JjiCyCPx5KTD0+sX9j2txF1ter0=)
2: 8lo2QCwTEyDX1lcik71pKddzCW8.roa (hash: ymAo8Z5EkFz2JKt49VhMFeL8VZNeRka/b91ESL0FVv4=)
3: LKYVZ8sQmYVRFwCP0dNqqK2pb68.crl (hash: tN1pVO7WJDOJKscrUtPJCeE3hlfDd95va3xRKY971mY=)
4: yIsBfsc2HhU6jpxl4oaMk-Clsu8.roa (hash: JjYsnsu3j2TdcMo1wC/RUITe8k4/U7ZhlqVPNZaaVSE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/2a714e-c7d3-47b5-8c57-caa7d5b482c5/1/LKYVZ8sQmYVRFwCP0dNqqK2pb68.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/2a714e-c7d3-47b5-8c57-caa7d5b482c5/1/LKYVZ8sQmYVRFwCP0dNqqK2pb68.mft
rsync://rpki.ripe.net/repository/DEFAULT/LKYVZ8sQmYVRFwCP0dNqqK2pb68.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 09:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:25:0b:48:01:0e:d9:e8:ca:1c:b9:1b:07:29:e3:af:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ca61567cb1099855117008fd1d36aa8ada96faf
Validity
Not Before: Oct 10 09:00:58 2026 GMT
Not After : Oct 11 09:00:58 2026 GMT
Subject: CN=170ec4c3b85c391f1ce6d3e083e1f5bb92c668dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:22:56:9d:6f:35:3c:6c:88:f9:22:df:b5:33:
ff:18:89:18:12:70:f6:00:9a:88:f7:d6:93:d7:1f:
cf:97:21:01:e6:53:e1:6f:8f:13:ed:b4:37:3f:7d:
52:d4:34:57:ca:de:4d:a6:45:51:27:a5:f0:f4:80:
f3:c4:3c:0e:e6:66:55:ae:46:39:be:16:4a:bc:97:
65:52:2a:3e:04:62:6b:51:c4:c6:a6:a9:96:47:2f:
da:a8:bf:b1:77:bf:47:d8:dc:f3:0e:b1:4b:cf:c1:
14:79:9c:92:d1:97:4b:df:80:f1:41:ce:51:f5:9b:
e1:c2:d9:b7:1d:de:45:18:d6:07:82:f8:30:d7:85:
87:ec:5d:37:0b:3c:e7:c8:70:ec:16:54:19:18:5b:
c9:5a:28:86:ef:1b:9e:6a:20:90:de:b8:62:0b:be:
24:8a:df:43:fe:39:83:a4:98:cd:f8:54:b8:c4:a4:
7a:6b:39:f8:65:53:00:74:2d:03:fa:5d:e8:dc:ff:
8c:72:74:c6:4d:cb:05:ef:9b:16:9c:a2:3d:14:61:
34:9f:7b:b9:ca:cc:be:09:25:14:c1:73:d8:c7:61:
78:63:c5:06:37:7f:c0:f7:bd:02:dd:8d:13:18:19:
b8:58:3e:d6:a3:82:21:ac:13:9f:b8:17:fb:66:7d:
a7:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:0E:C4:C3:B8:5C:39:1F:1C:E6:D3:E0:83:E1:F5:BB:92:C6:68:DD
X509v3 Authority Key Identifier:
keyid:2C:A6:15:67:CB:10:99:85:51:17:00:8F:D1:D3:6A:A8:AD:A9:6F:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LKYVZ8sQmYVRFwCP0dNqqK2pb68.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/2a714e-c7d3-47b5-8c57-caa7d5b482c5/1/LKYVZ8sQmYVRFwCP0dNqqK2pb68.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/2a714e-c7d3-47b5-8c57-caa7d5b482c5/1/LKYVZ8sQmYVRFwCP0dNqqK2pb68.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
db:4b:cc:a8:fe:6b:32:90:b6:8d:77:e3:a5:2b:06:30:36:31:
60:c5:ac:35:d4:54:f6:0e:4e:63:99:93:a8:3c:6e:79:6a:0a:
47:b6:4f:55:bb:86:30:ac:45:e4:fc:ac:92:cd:1a:bb:d0:a2:
87:dd:a7:6d:5c:64:3e:0c:46:f6:dd:e1:e6:1f:ee:ac:fe:86:
9c:98:4d:0d:9e:3e:c7:e0:17:2b:82:68:0e:5d:be:b0:26:be:
6f:84:b5:2d:1c:91:04:cc:26:57:c8:0d:40:9c:b0:2f:2a:5a:
54:c0:d0:10:29:fc:b8:f5:af:c4:55:95:fe:5a:96:d3:42:bf:
0f:6f:fd:d5:f8:76:ce:3d:93:7f:45:9d:59:31:6e:0a:c2:b0:
18:58:85:6e:7f:9b:53:d3:ec:37:e7:04:78:38:b9:b4:b1:c5:
d7:f0:0c:00:61:53:99:70:2c:f5:ab:47:fa:b1:af:f5:2c:24:
21:f0:e3:47:d9:d2:b7:96:92:66:41:28:30:87:f2:7c:70:c9:
2f:5a:62:67:7f:ec:5f:bc:90:ef:65:8e:b1:73:e5:98:68:c9:
c3:e5:d9:67:88:bd:80:2c:73:78:9b:a0:16:6b:b7:57:3d:fe:
a5:98:e0:e0:99:a3:58:84:cf:0a:c0:01:62:1b:7c:0b:82:d7:
38:20:bf:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 17:25:38 2026 by rpki-client