Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/687cd5-6345-4f64-be46-ede70c8ed513/1/LKyEzuxXs1-jlTSuIwCa6oICOao.mft
File: LKyEzuxXs1-jlTSuIwCa6oICOao.mft (raw, json)
Hash identifier: 9j08TwNZ9WRPMJ9Nd75bCFbuESnqOcsKUoAwSQcOLgU=
Subject key identifier: 5A:DD:5A:14:BC:14:BF:10:A4:43:8C:72:27:88:10:82:CD:93:77:FA
Authority key identifier: 2C:AC:84:CE:EC:57:B3:5F:A3:95:34:AE:23:00:9A:EA:82:02:39:AA
Certificate issuer: /CN=2cac84ceec57b35fa39534ae23009aea820239aa
Certificate serial: 019D28164CA4B3A836D46A5DAFE6F56BBA94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LKyEzuxXs1-jlTSuIwCa6oICOao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/687cd5-6345-4f64-be46-ede70c8ed513/1/LKyEzuxXs1-jlTSuIwCa6oICOao.mft
Manifest number: 0AAD
Signing time: Thu 26 Mar 2026 03:00:43 +0000
Manifest this update: Thu 26 Mar 2026 03:00:43 +0000
Manifest next update: Fri 27 Mar 2026 03:00:43 +0000
Files and hashes: 1: Aqd9W6cfpHLafzRO-ayl_GNgqe0.roa (hash: F2Adog2BirH6Gouzr8SZxmAWeuEuTARSmlF0Zm/Q4fY=)
2: LKyEzuxXs1-jlTSuIwCa6oICOao.crl (hash: NQzdb4rkDJwurh22hVwl/SKpw4RyZq9RreLnDN6Ojx0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/687cd5-6345-4f64-be46-ede70c8ed513/1/LKyEzuxXs1-jlTSuIwCa6oICOao.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/687cd5-6345-4f64-be46-ede70c8ed513/1/LKyEzuxXs1-jlTSuIwCa6oICOao.mft
rsync://rpki.ripe.net/repository/DEFAULT/LKyEzuxXs1-jlTSuIwCa6oICOao.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:16:4c:a4:b3:a8:36:d4:6a:5d:af:e6:f5:6b:ba:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2cac84ceec57b35fa39534ae23009aea820239aa
Validity
Not Before: Mar 26 03:00:43 2026 GMT
Not After : Mar 27 03:00:43 2026 GMT
Subject: CN=5add5a14bc14bf10a4438c7227881082cd9377fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:b6:b2:13:52:86:ad:b0:05:cf:ba:df:e2:0d:
97:e4:d8:b6:ce:ba:18:03:54:26:96:ff:ed:bb:3b:
23:9b:a7:08:ff:78:32:a4:ae:a6:b0:fb:15:06:87:
40:9e:0a:42:07:b1:ef:12:b3:98:ba:e7:9c:fd:36:
d4:1d:33:a2:a9:95:c7:2d:1f:f4:6e:7a:a4:4b:5a:
93:9f:ff:12:41:e1:a1:33:74:89:d7:c2:68:e3:c9:
b9:0d:67:3f:19:66:a5:87:ed:b6:f9:70:e5:23:7e:
17:25:36:35:ff:0a:bd:e4:2d:37:46:38:4e:41:58:
fe:3c:03:8e:c5:09:f7:1d:5a:aa:79:16:a8:23:bc:
52:af:33:56:8e:fe:b9:71:ea:38:87:4c:d8:73:91:
02:26:f7:bf:94:2a:09:79:7e:8c:de:f2:2a:79:ce:
21:f4:2c:14:f7:a8:cb:c6:c3:36:bc:07:65:15:87:
b8:4a:fe:48:eb:ca:67:ee:1f:27:9e:b2:fa:58:36:
d4:46:19:6c:b7:2b:d7:92:4f:52:da:3f:e0:f7:5f:
b2:26:e4:2c:eb:e8:fc:09:ca:19:38:8e:3f:f1:05:
43:8e:b9:12:df:35:41:e8:b1:ad:c8:fb:84:c3:12:
37:80:c1:bd:3e:8e:6f:84:2f:68:21:a6:c1:bc:e2:
d5:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:DD:5A:14:BC:14:BF:10:A4:43:8C:72:27:88:10:82:CD:93:77:FA
X509v3 Authority Key Identifier:
keyid:2C:AC:84:CE:EC:57:B3:5F:A3:95:34:AE:23:00:9A:EA:82:02:39:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LKyEzuxXs1-jlTSuIwCa6oICOao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/687cd5-6345-4f64-be46-ede70c8ed513/1/LKyEzuxXs1-jlTSuIwCa6oICOao.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/687cd5-6345-4f64-be46-ede70c8ed513/1/LKyEzuxXs1-jlTSuIwCa6oICOao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:d6:76:b7:ce:c6:85:07:69:39:a3:2a:c6:55:9a:e8:18:97:
9a:81:b0:75:c3:e6:53:f0:15:94:52:5d:ec:11:f6:62:35:bd:
4b:42:ed:fd:8d:62:1c:81:3b:20:35:c3:e3:19:64:4f:9e:ea:
b2:a8:f9:86:a5:d7:e6:60:df:af:1a:3c:e4:b2:c5:9a:4c:5c:
08:84:23:88:41:51:f5:c4:a2:83:54:c5:03:21:26:2e:c2:0f:
c1:8b:85:df:62:19:4a:34:51:49:db:a9:d7:6f:26:75:ca:33:
76:7a:88:da:59:3d:99:80:db:0e:75:ac:a3:2c:16:4b:17:d3:
3e:68:b2:36:26:61:a5:7a:b1:00:a3:ac:59:4e:47:1f:64:97:
47:d6:b4:2a:8f:f5:a8:a7:44:15:50:2b:ea:4a:26:14:bb:84:
94:42:da:5d:9a:1d:82:ee:8f:72:48:be:53:ab:dc:e3:af:8b:
03:f4:aa:36:c7:74:ee:71:6f:d2:ed:ac:01:10:ca:dd:f4:5c:
c9:35:9f:f4:8e:9e:39:68:25:57:5a:d2:41:49:a0:45:d4:3c:
f8:ef:11:9a:56:f5:d7:16:33:c2:0f:b3:27:30:af:d0:10:0f:
3f:68:3f:1c:a1:3b:da:62:a8:58:ed:1c:bd:39:69:9a:ed:52:
ae:79:54:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:17:07 2026 by rpki-client