Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/327742-8156-4fa4-9bd5-2120fd0575ff/1/LkX41ix0LqB9y_jFfVjM9dKOPrk.mft
File: LkX41ix0LqB9y_jFfVjM9dKOPrk.mft (raw, json)
Hash identifier: 84cJv8j0xzjNtcAiLHC74nGdS8Vd//qAslHfeQNzQQI=
Subject key identifier: 42:6A:DA:1E:AB:98:03:B7:E2:D0:5C:13:CD:A6:8D:A6:1B:AD:1A:C8
Authority key identifier: 2E:45:F8:D6:2C:74:2E:A0:7D:CB:F8:C5:7D:58:CC:F5:D2:8E:3E:B9
Certificate issuer: /CN=2e45f8d62c742ea07dcbf8c57d58ccf5d28e3eb9
Certificate serial: 019DDCFAF873F95BEE2E0B7210390DE5C5C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LkX41ix0LqB9y_jFfVjM9dKOPrk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/327742-8156-4fa4-9bd5-2120fd0575ff/1/LkX41ix0LqB9y_jFfVjM9dKOPrk.mft
Manifest number: 1876
Signing time: Thu 30 Apr 2026 06:02:08 +0000
Manifest this update: Thu 30 Apr 2026 06:02:08 +0000
Manifest next update: Fri 01 May 2026 06:02:08 +0000
Files and hashes: 1: 3F0Eyl_fFWBZccM3jI1k4TCeJvI.roa (hash: 1mvJ1d/O7KfiqZVWH2l7EuJBCJuW/AroLmAMi43n5kw=)
2: LkX41ix0LqB9y_jFfVjM9dKOPrk.crl (hash: 7/T+Cz2OI3tzl5e3sA4Ig6Pe6GxSis2b9e1FdR5uZpc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/327742-8156-4fa4-9bd5-2120fd0575ff/1/LkX41ix0LqB9y_jFfVjM9dKOPrk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/327742-8156-4fa4-9bd5-2120fd0575ff/1/LkX41ix0LqB9y_jFfVjM9dKOPrk.mft
rsync://rpki.ripe.net/repository/DEFAULT/LkX41ix0LqB9y_jFfVjM9dKOPrk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 01 May 2026 06:02:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:dc:fa:f8:73:f9:5b:ee:2e:0b:72:10:39:0d:e5:c5:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e45f8d62c742ea07dcbf8c57d58ccf5d28e3eb9
Validity
Not Before: Apr 30 06:02:08 2026 GMT
Not After : May 1 06:02:08 2026 GMT
Subject: CN=426ada1eab9803b7e2d05c13cda68da61bad1ac8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:e3:86:6c:35:f3:ed:9c:29:b7:8f:c4:79:3f:
c6:d3:ac:45:e4:da:d6:5e:6d:9f:38:78:0a:a8:dd:
84:c1:05:58:c8:9f:e8:75:a0:cf:6c:85:74:6f:33:
41:09:8a:99:1b:83:6c:52:98:ea:41:3d:7a:21:05:
de:8f:94:67:12:1a:2a:69:dd:e0:7b:2e:84:90:2f:
b5:13:9a:12:cb:75:37:2b:aa:02:10:11:3b:9e:a3:
eb:9e:49:83:32:f9:f7:dc:ce:ee:88:e2:88:50:34:
65:a9:39:de:35:50:bc:6b:9f:bd:98:ab:5e:58:0a:
9f:cb:b1:ed:21:d5:2f:7c:eb:7f:8b:46:ee:19:dc:
02:b5:91:64:27:cd:d6:3e:71:e0:40:7f:23:78:5d:
89:e7:1e:53:c8:a2:c1:c2:fb:d0:76:fc:bd:09:f3:
62:20:47:25:a7:91:7a:0a:bb:0e:1a:43:52:d7:24:
06:90:79:c7:49:b9:81:cd:60:4c:11:27:12:94:72:
ad:2c:84:fa:e7:15:0a:02:e9:80:87:96:08:f4:4f:
87:b9:3b:b9:5f:0f:c2:a2:25:a5:a8:f5:a8:c1:61:
da:4f:37:80:4d:96:d0:be:75:a2:a6:29:b8:20:c2:
fd:80:03:5b:b3:19:cf:21:24:d9:7f:27:64:5d:ad:
db:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:6A:DA:1E:AB:98:03:B7:E2:D0:5C:13:CD:A6:8D:A6:1B:AD:1A:C8
X509v3 Authority Key Identifier:
keyid:2E:45:F8:D6:2C:74:2E:A0:7D:CB:F8:C5:7D:58:CC:F5:D2:8E:3E:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LkX41ix0LqB9y_jFfVjM9dKOPrk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/327742-8156-4fa4-9bd5-2120fd0575ff/1/LkX41ix0LqB9y_jFfVjM9dKOPrk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/327742-8156-4fa4-9bd5-2120fd0575ff/1/LkX41ix0LqB9y_jFfVjM9dKOPrk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:dd:06:3e:38:39:b1:51:db:e0:7d:0e:17:97:13:b2:c5:3c:
95:34:e7:c1:18:92:1e:cf:16:e0:14:84:75:e7:91:eb:7c:60:
75:46:1b:03:03:c9:56:58:4b:67:b2:2d:01:b3:b1:5f:9a:d9:
7d:16:eb:43:fb:2e:a1:15:d8:86:18:36:a7:d8:b0:60:f1:96:
75:77:4b:e8:5c:8b:8f:58:e3:41:68:fc:85:85:5f:31:97:61:
19:c9:8f:cc:ae:44:39:49:f1:f1:26:08:50:eb:c0:fa:6c:43:
26:4b:b3:0a:d5:05:b4:c5:15:a4:27:d9:3c:4c:1e:cd:7f:3b:
36:07:5f:93:67:d1:4a:bb:54:58:2e:79:62:b6:bb:f1:c7:2a:
ea:5c:00:e3:fc:6d:aa:8c:0d:e2:93:85:7b:6a:8a:02:c0:08:
4b:af:bc:62:6c:35:47:0c:08:52:0d:f7:4a:56:90:95:c3:ea:
09:3e:44:5d:81:a3:54:1d:fc:af:f2:41:c7:29:cf:53:f2:66:
9e:cd:3c:3b:fd:1c:62:92:db:26:04:eb:9b:d3:47:79:f8:a9:
09:37:8a:90:24:fe:f4:99:31:24:53:93:2b:ff:ba:a5:3e:12:
95:85:d2:57:6a:99:10:da:99:58:7e:d7:78:df:db:bc:47:a8:
18:f2:00:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 30 13:46:22 2026 by rpki-client