Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/327742-8156-4fa4-9bd5-2120fd0575ff/1/LkX41ix0LqB9y_jFfVjM9dKOPrk.mft
File: LkX41ix0LqB9y_jFfVjM9dKOPrk.mft (raw, json)
Hash identifier: h9gb6W6wQRAXfvKoSQ+QK/puVKflqXHEfALaEaj7Ljs=
Subject key identifier: BF:BD:90:40:72:F7:7E:47:65:AD:55:B9:26:E2:70:69:97:C9:96:31
Authority key identifier: 2E:45:F8:D6:2C:74:2E:A0:7D:CB:F8:C5:7D:58:CC:F5:D2:8E:3E:B9
Certificate issuer: /CN=2e45f8d62c742ea07dcbf8c57d58ccf5d28e3eb9
Certificate serial: 019CF34D408A318487F3C7F27400F05225E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LkX41ix0LqB9y_jFfVjM9dKOPrk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/327742-8156-4fa4-9bd5-2120fd0575ff/1/LkX41ix0LqB9y_jFfVjM9dKOPrk.mft
Manifest number: 17FD
Signing time: Sun 15 Mar 2026 21:00:52 +0000
Manifest this update: Sun 15 Mar 2026 21:00:52 +0000
Manifest next update: Mon 16 Mar 2026 21:00:52 +0000
Files and hashes: 1: 3F0Eyl_fFWBZccM3jI1k4TCeJvI.roa (hash: 1mvJ1d/O7KfiqZVWH2l7EuJBCJuW/AroLmAMi43n5kw=)
2: LkX41ix0LqB9y_jFfVjM9dKOPrk.crl (hash: 6GQuK40ZK5eyimd3qmNTuGZOf9WLaCinTkIMXWUHntM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/327742-8156-4fa4-9bd5-2120fd0575ff/1/LkX41ix0LqB9y_jFfVjM9dKOPrk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/327742-8156-4fa4-9bd5-2120fd0575ff/1/LkX41ix0LqB9y_jFfVjM9dKOPrk.mft
rsync://rpki.ripe.net/repository/DEFAULT/LkX41ix0LqB9y_jFfVjM9dKOPrk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Mar 2026 21:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:f3:4d:40:8a:31:84:87:f3:c7:f2:74:00:f0:52:25:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e45f8d62c742ea07dcbf8c57d58ccf5d28e3eb9
Validity
Not Before: Mar 15 21:00:52 2026 GMT
Not After : Mar 16 21:00:52 2026 GMT
Subject: CN=bfbd904072f77e4765ad55b926e2706997c99631
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:17:c6:c1:16:f8:8c:1e:cf:df:e2:9e:c8:a7:
ef:da:09:d8:a6:b5:52:be:99:02:80:13:10:e2:1c:
33:b3:40:b4:e3:2d:38:ea:bd:f9:dc:36:d7:da:b1:
18:2e:16:00:39:fa:49:a9:80:ac:ed:73:2e:f2:2e:
69:1b:6d:f3:19:f3:d9:d1:e5:23:f7:cc:a8:2f:29:
1f:d9:8e:b4:a3:56:53:a4:4a:f8:9a:f6:c0:e1:a9:
03:1e:c9:ae:a0:f1:1f:02:a5:14:ab:d7:17:f1:21:
d3:1b:4b:0f:19:ed:3f:c3:d6:6c:54:ae:b8:64:20:
e3:a7:b0:b4:63:88:a6:28:95:28:6f:fd:d0:27:94:
30:ba:fb:93:97:b5:af:09:0b:ef:5e:39:75:6b:6b:
ff:68:c2:ee:a2:61:10:ef:f3:44:b8:e3:c3:cc:59:
c6:d7:18:fe:75:05:98:4d:01:86:53:f8:e0:7a:c4:
ea:a9:2f:4e:23:01:04:17:e9:eb:28:f8:21:fd:8f:
6f:bd:17:38:4a:9f:8d:5b:a6:78:3e:2b:6b:77:f3:
b2:ba:3d:2c:34:3a:19:d1:ef:87:68:d8:07:28:5c:
bf:78:4e:9a:52:50:51:33:b6:91:e2:60:0d:39:cd:
2d:c0:bc:8d:b5:e5:b7:2a:4c:b8:5c:87:9a:5b:69:
b9:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:BD:90:40:72:F7:7E:47:65:AD:55:B9:26:E2:70:69:97:C9:96:31
X509v3 Authority Key Identifier:
keyid:2E:45:F8:D6:2C:74:2E:A0:7D:CB:F8:C5:7D:58:CC:F5:D2:8E:3E:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LkX41ix0LqB9y_jFfVjM9dKOPrk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/327742-8156-4fa4-9bd5-2120fd0575ff/1/LkX41ix0LqB9y_jFfVjM9dKOPrk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/327742-8156-4fa4-9bd5-2120fd0575ff/1/LkX41ix0LqB9y_jFfVjM9dKOPrk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:02:8c:b8:27:0a:00:02:df:95:c7:ab:65:ab:66:02:b1:94:
54:01:22:f8:e2:96:3c:e5:32:4f:bf:20:df:77:44:fa:24:0d:
93:50:19:d5:a2:f5:5d:c7:bd:db:af:04:a1:98:fa:9e:d4:a6:
cc:8b:52:a4:9f:62:15:65:a2:70:34:67:89:90:73:ea:3a:eb:
41:5f:e2:53:07:53:12:17:cc:d1:67:41:70:c8:6e:c3:59:3e:
31:17:20:55:d7:1f:59:f3:e4:48:7b:dc:f9:31:b4:0c:1c:0c:
36:a9:7c:0e:fc:aa:dc:12:5e:4e:3c:59:42:3b:6e:7d:11:62:
fa:e2:4f:aa:82:64:26:9b:14:3e:15:27:16:df:ed:5f:6b:a1:
2d:e2:a9:7a:0d:33:ac:71:c6:eb:41:db:a0:0f:1e:a7:d6:91:
f0:7c:2b:2e:e2:73:ee:3d:00:da:0d:6c:21:12:42:64:29:dd:
0e:18:64:51:fa:6d:f6:c3:74:22:c4:d7:91:c1:e9:89:cb:b4:
2f:79:31:d5:a8:ab:54:07:27:bb:fc:e0:89:fd:8b:5c:6e:09:
21:e4:3b:41:80:0e:6b:6c:00:bb:b1:8b:60:f0:f2:00:fb:99:
de:59:f1:7f:86:58:52:55:1f:ca:46:11:cb:0d:ea:3f:75:6a:
75:27:c5:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 16 03:22:16 2026 by rpki-client